Privacy Policy ph8 – Data Protection & Security

1Privacy Policy Introduction & Scope

This Privacy Policy is issued by ph8 ("ph8", "we", "Platform") and applies to all players, visitors, and users who access the ph8 platform via the website ph8.ng, mobile app, or any of our other official digital channels.

We understand that you trust us with your most valuable personal information. That trust is not something we take lightly. This Privacy Policy is written in clear, plain language so you know exactly what happens to your data — not lost in confusing legal jargon.

This policy covers:

• The types of personal information we collect during registration and platform use.
• The purposes and ways in which we use that information.
• The parties that may receive your information and under what circumstances.
• Your rights as a data owner and how to exercise them.
• The technical and organisational measures we take to protect your data.

2Information We Collect

Ph8 only collects information that is strictly necessary to provide a safe, legitimate, and high-quality service. We do not collect irrelevant or excessive data.

2.1 Information You Provide Directly

• Registration information: Full name, date of birth, email address, phone number, password (stored in hashed form).
• KYC documents: MyKad/passport copy, proof of address, identity verification selfie.
• Financial information: Bank account details, e-wallet numbers, deposit and withdrawal transaction information.
• Communications: Any messages, complaints, or feedback you send to the ph8 support team.

2.2 Information Collected Automatically

• IP address, device type, operating system, and browser version.
• Session data: login times, session duration, pages visited.
• Gaming data: wagering history, game results, usage patterns.
• Cookie data and similar tracking technologies (as described in Section 5).

3How We Use Your Data

Ph8 uses your personal data for various legitimate and clearly stated purposes. We do not use your data for any purpose not listed here without first obtaining your renewed consent.

• Account management: Creating, verifying and managing your player account on the ph8 platform.
• Payment processing: Processing deposits, withdrawals and other financial transactions securely and accurately.
• KYC & AML Compliance: Fulfilling legal obligations related to identity verification and anti-money laundering.
• Platform security: Detecting, investigating and preventing fraud, collusion and suspicious activity.
• Customer support: Answering enquiries, resolving complaints and providing the technical assistance you need.
• Personalise your experience: Offering relevant promotions, bonuses and game recommendations based on your usage patterns.
• Analytics & improvement: Understanding how players use the platform to improve features, design and performance.
• Responsible gaming: Monitoring gameplay patterns to identify players who may need responsible gaming support.

4Sharing Information With Third Parties

Ph8 do not sell players' personal data to any third party. However, there are limited situations where we need to share certain information with trusted partners to ensure the platform operates smoothly and securely.

Third Parties That May Receive Data

• Integrated payment processors: FPX, Touch 'n Go eWallet, GrabPay, Boost, and crypto processors – only data required to complete transactions is shared.
• Identity verification providers: Third-party services assisting with the KYC process – subject to strict confidentiality agreements.
• Game software providers: Casino and sports game providers may receive minimal session data necessary to enable gameplay.
• Legal authorities: ph8 is legally required to disclose certain information to the relevant authorities when lawfully requested.
• Internal analytics services: Analytics tools operated under the name and control of ph8 – not independent third parties.

5Cookies & Tracking Technologies

Ph8 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how players interact with our platform.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Helping us understand which pages are most visited and where players encounter issues, so we can improve the platform.
• Functional Cookies: Saving your preferences such as language, display settings and game choices for a more personalised experience.
• Analytics Cookies: Collecting aggregated and anonymised data on usage patterns for ongoing platform improvement.

You can manage cookie settings through your browser. Please note that disabling essential cookies may affect platform functionality. For more information on managing cookies, refer to your browser's documentation.

6Data Security & Protection Measures

Ph8 continuously invests in the latest security infrastructure to ensure your personal data is always protected against cyber threats, unauthorised access, and data breaches.

Technical Security Measures

• 256-bit SSL/TLS encryption for all communications between clients and servers.
• Database-level data encryption using AES-256 for sensitive information.
• Two-factor authentication (2FA) available for all player accounts.
• 24/7 security monitoring with real-time intrusion detection systems (IDS).
• Regular penetration testing conducted by independent security experts.
• Role-based access control (RBAC) to ensure only authorised staff can access player data.

Organisational Measures

• Mandatory cybersecurity training for all ph8 staff every quarter.
• Non-disclosure agreements (NDAs) signed by all staff and contractors.
• Thoroughly tested and documented incident response procedures.
• Monthly internal security reviews and annual compliance audits.

7Data Storage & Deletion

Ph8 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

Data Retention Period

• Active account data: Retained for the duration your account is active and for 5 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for 7 years from the transaction date in accordance with Malaysia's financial regulatory requirements.
• KYC documents: Retained for 5 years after verification or account closure, whichever is later.
• Support communication logs: Retained for 2 years for quality control and dispute resolution purposes.
• Analytics and cookie data: Retained for a maximum of 13 months from the date of collection.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered, or fully anonymised so it can no longer be associated with you.

8Your Rights as a Data Owner

As a Malaysia-based ph8 player, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). ph8 fully respects and supports the exercise of these rights.

9International Data Transfers

In the course of operating the ph8 platform, your personal data may be processed or stored outside Malaysia, particularly through cloud service providers and international technology partners we engage.

Ph8 ensures that any cross-border data transfers are carried out with protections equivalent to or exceeding the standards required by Malaysia's PDPA. The safeguards we apply include:

• Standard contractual clauses approved for international data transfers.
• Detailed security assessments of all partners that receive data outside Malaysia.
• Legally binding data processing agreements with every international partner.
• Data encryption prior to transfer for an additional layer of protection.

10Changes to This Privacy Policy

Ph8 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons.

When significant changes occur, we will:

• Displaying clear notices on the ph8 home page and login page.
• Sending notification emails to all registered players at least 14 days before the changes take effect.
• Updating the "Last Updated" date at the top of this page.
• Providing a summary of key changes in plain, easy-to-understand language.

Continued use of the ph8 platform after the effective date of any amendment constitutes your acceptance of the updated terms. If you do not agree with the changes, please contact us to close your account and retrieve your remaining balance.

11Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how ph8 handles your personal data, our Data Protection Officer (DPO) team is ready to assist you.

You can reach us through the following channels:

• Privacy Email: [email protected] (please state the subject: "Data Privacy Inquiry")
• Live Support: Via the live chat system within the ph8 platform — available 24/7.
• Response Time: All data-related requests are processed within 14 business days.