Privacy Policy 8fafa
Your Information Protection

1 Introduction and Scope of This Policy

This Privacy Policy ("Policy") is published by 8fafa, an online casino platform operating under international licensing and offering services to users in Malaysia. This Policy explains how we collect, process, store, disclose and protect your personal information as a member or visitor of the 8fafa website.

By registering an account, using the platform or accessing any part of the 8fafa website, you are deemed to have read, understood and agreed to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, you are asked not to use our platform.

This Policy applies to all information we collect through the 8fafa website, mobile applications, email communications, live chat sessions, and any other customer service channels provided by 8fafa. This Policy also applies to information you voluntarily share when dealing with our 24/7 support team.

2 Personal Information We Collect

In order to provide a safe, responsible service that meets international licensing requirements, 8fafa collects several categories of personal information from its users. This collection is done directly from you or automatically through certain technologies.

The categories of information we collect include:

• Identity information: full name, date of birth, identification card number (MyKad) or passport, gender and nationality.
• Contact information: email address, mobile phone number, and current residential address.
• Account details: username, encrypted password, and your communication preferences.
• Financial information: e-wallet details (Touch 'n Go eWallet, Boost, ShopeePay), DuitNow account, FPX online banking information, and cryptocurrency wallet addresses (USDT, BTC, ETH) registered for deposit and withdrawal purposes.
• Activity records: game history, deposits, withdrawals, promotion participation and communications with the support team.
• Technical information: IP address, device type, operating system, browser data and cookies collected while you use the platform.

We only collect information that is genuinely required for the purposes stated in this Policy. You are not required to provide non-mandatory information, though this may limit certain functions within the 8fafa platform.

3 Purpose of Data Collection and Processing

8fafa processes your personal information on one or more valid legal bases, including fulfilment of contract, legal compliance obligations, legitimate platform interests and, in certain circumstances, your explicit consent.

The main purposes for collecting your personal information include:

• Registering and verifying your account, including age verification (21 years and above) and identity verification in accordance with our international licensing requirements.
• Processing deposit and withdrawal transactions securely and in a timely manner.
• Providing 24/7 customer service via live chat and email in Bahasa Melayu and English.
• Sending promotional information, bonuses and relevant service updates — only if you have opted in to receive them.
• Preventing fraud, money laundering and platform abuse through account activity monitoring.
• Complying with legal obligations under the international licensing that governs 8fafa's operations.
• Improving platform quality, enhancing user experience and developing new features based on usage patterns.

4 Sharing and Disclosure of Information to Third Parties

8fafa respects your trust and does not disclose your personal information to third parties except in the circumstances set out below. In all cases, we ensure that the receiving party is subject to equivalent confidentiality and data protection obligations.

Disclosure of information may be made to:

• Payment service providers that process deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX online banking, Boost, ShopeePay and cryptocurrency networks — solely to complete your financial transactions.
• Technology and gaming software providers that support the operation of the 8fafa platform, subject to strict confidentiality agreements.
• Regulatory authorities and law enforcement bodies when required by law or a valid court order.
• Analytics and security service providers that help us detect fraudulent activity, provided that data is anonymised or aggregated where possible.
• In situations of merger, acquisition or business asset transfer, where the potential buyer is subject to an equivalent or stricter privacy policy.

We never sell or rent your personal information to advertisers, third-party marketing companies or any entity not directly related to the operation of the 8fafa platform.

5 Data Security and Technical Protection Measures

8fafa continuously invests in security infrastructure to ensure that members' personal and financial information remains protected. The technical and organisational measures we implement cover several layers of protection.

All communications between your device and 8fafa's servers are protected with Transport Layer Security (TLS) encryption protocols. Personal data stored in our systems is encrypted using industry-standard algorithms. Member passwords are never stored in plain text — they are processed through a one-way hash function that cannot be reversed.

Our systems are protected by layered firewalls, real-time intrusion detection (IDS/IPS), and round-the-clock security monitoring. We conduct penetration testing regularly to identify and address any vulnerabilities before they can be exploited.

Administrative access to member personal data is subject to role-based access control (RBAC), multi-factor authentication (MFA) and comprehensive audit logs. Only staff who genuinely require access to carry out their duties will be granted that permission.

6 Cookies and Tracking Technologies

8fafa uses cookies and similar tracking technologies to improve the platform experience, maintain your login session and collect analytics information that helps us understand how members use our services.

The types of cookies we use:

• Essential session cookies: required for basic platform functions such as login authentication and game session maintenance. These cookies cannot be disabled without affecting platform functionality.
• Preference cookies: store your choices such as display language and display settings to provide a more personalised experience.
• Analytics cookies: collect aggregated information about how users interact with the platform to help us improve our services.
• Security cookies: help us detect suspicious activity and protect your account from unauthorised access attempts.

You can manage cookie settings through your browser. Please note that disabling certain cookies may affect the functionality or accessibility of some parts of the 8fafa platform.

7 Your Rights as a User

As an 8fafa member, you have certain rights regarding your personal information. We are committed to respecting and facilitating the exercise of these rights within a reasonable timeframe.

• Right of access: you have the right to request a copy of the personal information we hold about you.
• Right of rectification: you may request correction of any information that is inaccurate or incomplete.
• Right of erasure: in certain circumstances, you may request the deletion of your personal information, subject to legal obligations that require us to retain certain records.
• Right to object: you may object to the processing of your personal information for direct marketing purposes at any time.
• Right to data portability: you may request your data in a machine-readable format for transfer to another platform.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the validity of processing carried out before the withdrawal.

To exercise any of the above rights, please contact the 8fafa customer support team via 24/7 live chat or by emailing us at [email protected]. We will process your request within the timeframe set by our international licence.

8 Data Retention Period

8fafa retains your personal information only for as long as necessary to fulfil the purposes stated in this Policy, or as required to comply with applicable legal and regulatory obligations under our international licence.

Financial transaction records and account activity history are retained to meet anti-money laundering (AML) requirements and know-your-customer (KYC) regulations. Once the prescribed retention period has ended and there are no remaining legal or business requirements, your personal information will be securely deleted or anonymised.

If you close your 8fafa account, we will process your data deletion request in accordance with established procedures, subject to mandatory retention periods under applicable law.

9 Cross-Border Data Transfers

As 8fafa operates under an international licence, your personal information may be processed or stored on servers located outside Malaysia. In such cases, we ensure that those data transfers are subject to protections equivalent to or stricter than those required by Malaysia's Personal Data Protection Act 2010 (PDPA).

We use internationally recognised safeguard mechanisms such as standard contractual clauses, data protection impact assessments, and data processing agreements with every third-party service provider that receives our members' personal data.

10 Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or the way 8fafa handles your personal information, please contact us through the following channels:

• Email: [email protected]
• 24/7 live chat is available in Malay and English on the 8fafa website.

Our customer support team is ready to help you understand your privacy rights and address any concerns promptly. We are committed to responding within a reasonable timeframe for every enquiry received.