Million8 Privacy Policy – Personal Data Protection for Malaysian Users

1 Introduction and Scope of the Privacy Policy

Welcome to the Privacy Policy page Million8. This document explains how Million8 ("we", "platform", "Company") collect, use, store, and protect your personal information when you use the million8.net website and all related services.

We at Million8 understand that privacy is more than just a word — it is a fundamental right of every user. That is why we have crafted this policy with care and are committed to handling your personal data with full responsibility, transparency, and integrity.

This Privacy Policy applies to all users of the Million8, including website visitors, registered members, and anyone who interacts with our platform through any channel — whether via the website, mobile app, or customer support channels.

2 Types of Personal Data We Collect

Million8 only collects data necessary to provide a quality and secure service to our members. The following are the categories of data we collect:

Million8 does not collect sensitive data such as medical information, religious beliefs, or political affiliations. All data is collected directly from you during the registration process, platform usage, or through interactions with our support team.

3 How We Use Your Data

Million8 uses collected personal data solely for lawful, stated purposes. The following are the primary purposes for which your data is used:

• Account Management: Creating and managing your member account, and securely processing registrations and logins.
• Transaction Processing: Processing deposits and withdrawals using Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
• Identity Verification (KYC): Verifying member identity to meet legal requirements and prevent fraud.
• Platform Security: Detecting and preventing unauthorised access, fraud, money laundering, and other suspicious activity.
• Service Improvement: Analysing usage patterns to improve the platform, introduce new games, and enhance the member experience.
• Communications: Sending important account notifications, security updates, and promotional information (with your consent).
• Responsible Gaming: Monitoring betting patterns to identify members who may need Responsible Gaming support.
• Legal Compliance: Fulfilling legal obligations under applicable Malaysian law.

4 Sharing Data with Third Parties

Million8 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, in certain circumstances, we may need to share your data with the following parties:

• Payment Service Providers: Digital wallet providers and banking platforms (Touch 'n Go, GrabPay, DuitNow, FPX) for processing your financial transactions in Malaysian Ringgit (RM). These providers are bound by strict confidentiality agreements.
• Technology Providers: Companies that provide the technical infrastructure, gaming platforms, and cloud services used by Million8. All these providers are subject to the same data protection requirements.
• Regulatory Authorities: Malaysian government agencies or law enforcement authorities when we are required to do so by law.
• Identity Verification Services: Third-party KYC service providers who assist us in verifying member identities for compliance purposes.

Every third party that receives your data from Million8 are required to comply with data protection standards equivalent to or higher than those we uphold ourselves.

5 Data Security & Protection Measures

Million8 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or accidental disclosure.

Key security measures we have in place:

• 256-bit SSL Encryption: All communications between your browser and the Million8 protected with bank-grade encryption.
• Two-Factor Authentication (2FA): An additional security option to protect your account from unauthorised access.
• 24/7 Monitoring: An automated monitoring system operates around the clock to detect suspicious activity or anomalies in member accounts.
• Secure Data Storage: Personal data is stored on secured servers with strict access controls and regular backup systems.
• Staff Training: All staff Million8 who handle personal data receive regular data protection training.
• Security Audits: Independent security assessments are conducted periodically to identify and address potential system vulnerabilities.

While we take all reasonable steps to protect your data, no system can guarantee 100% security. In the event of a data breach that affects your rights and freedoms, Million8 will notify you and the relevant authorities as required by law within the stipulated timeframe.

6 Use of Cookies and Tracking Technologies

Million8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. Cannot be disabled.
• Performance Cookies: Helping us understand how users interact with the platform for continuous improvement.
• Functional Cookies: Saving your preferences such as language, display settings, and personal preferences.
• Analytics Cookies: Used to analyse website traffic and usage patterns on an aggregated, anonymised basis.

You can control or delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the platform Million8 and your overall user experience.

7 Data Retention Period

Million8 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or to comply with applicable legal requirements.

• Active Account Data: Retained for the duration of your active account plus 7 years after account closure for anti-money laundering compliance purposes.
• Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements.
• Communication Records: Retained for 3 years from the date of communication.
• Technical Log Data: Retained for 90 days for security and technical troubleshooting purposes.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked back to you personally.

8 Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Million8:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or outdated data.
• Right to Erasure: Request the deletion of your personal data under certain circumstances.
• Right to Withdraw Consent: Withdraw your consent to data processing at any time.
• Right to Object: Object to the processing of your data for direct marketing purposes.

To exercise any of the above rights, please contact us by email at support@million8.net. We will process your request within 21 business days of receipt.

9 Children's Privacy

Platform Million8 is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

If we discover that we have collected personal data from anyone under the age of 18 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the account in question.

If you believe a minor has registered on Million8, please contact us immediately at support@million8.net so we can take the appropriate action.

10 Privacy Policy Updates

Million8 reserves the right to update or modify this Privacy Policy at any time. You will be notified of any significant changes through:

• A prominent notice on the website's main page Million8.
• Email notifications sent to the email address registered to your account.
• A notification in your account upon your next login.

The "Updated" date at the top of this page will always reflect the date of the latest version of the Privacy Policy Million8. Continued use of the platform after changes take effect will be considered acceptance of the latest version.