Y8games Privacy Policy – Our Commitment to Protecting Malaysian Players' Data

1Introduction & Scope of This Policy

This Privacy Policy ("Policy") is published by y8games ("we", "y8games" or "Platform") and applies to all users who access or use the y8games.best website and all related services. This Policy sets out exactly how y8games collects, uses, stores, protects and, in certain circumstances, discloses your personal information as a member or visitor of our platform.

We understand that privacy is a fundamental right. When you register a y8games account, make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow or any other method, or simply browse our platform, you are entrusting us with your personal information. That trust is not something we take lightly — every decision relating to data processing at y8games is made with our members' interests and privacy as the priority.

This policy should be read together with Terms & Conditions y8games and our Responsible Gaming Policy. By using the y8games platform, you agree to the data collection and usage practices described in this Policy.

2Personal Data We Collect

Y8games collects several categories of information from members and visitors to the platform. Below is a full breakdown of the data we may collect:

3How y8games Uses Your Data

The data we collect is used solely for the purposes listed below. We will not use your data for any other purpose beyond what is stated here without first obtaining your explicit consent:

• Account management: Creating and maintaining your y8games account, verifying your identity at login, and processing deposit and withdrawal transactions.
• Service delivery: Enabling you to access and play all games on y8games — slots, live casino, baccarat, roulette, badminton betting, football and more.
• Security and fraud prevention: Identifying and preventing fraudulent activity, money laundering, duplicate registrations, and any other misuse of the y8games platform.
• Legal compliance: Fulfilling legal obligations under Malaysia's PDPA, anti-money laundering (AML) requirements and other applicable regulations.
• Customer support: Responding to enquiries, resolving complaints and providing technical assistance to y8games members via live chat and email.
• Platform improvements: Analysing aggregated, non-identifiable usage data to understand how members use the y8games platform and to improve the overall user experience.
• Marketing communications: Sending information about bonus offers, new promotions and platform updates — only to members who have opted in to receive such communications.
• Responsible gambling: Monitoring gameplay patterns to identify early signs of gambling problems and reaching out to the relevant members with helpful support information.

4Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), y8games only processes your personal data where a valid legal basis exists. The bases we rely on are as follows:

• Contract performance: Processing required to fulfil the agreement between you and y8games — including account management, payment processing and the provision of gaming services.
• Compliance with legal obligations: Processing required to comply with applicable Malaysian laws, including identity verification requirements and transaction reporting to the relevant authorities.
• Legitimate interests: Processing carried out for the purposes of fraud prevention, system security and service improvement, in a manner that does not prejudice your fundamental rights and freedoms.
• Consent: For processing that falls outside the categories above — such as marketing communications or the use of non-essential cookies — y8games will obtain your explicit consent beforehand. You have the right to withdraw this consent at any time.

5Data Sharing & Disclosure to Third Parties

Y8games does not sell or rent members' personal data to any party. However, under limited and controlled circumstances, we may share data with the following parties:

• Payment service provider: Payment gateways processing Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX transactions receive only the minimum information required to process your transaction. All such providers are bound by strict confidentiality agreements.
• Gaming software providers: Game studios supplying live dealer games and slots to y8games may receive session data required for the technical operation of those games. Full identity information is not shared with these providers.
• Legal authorities: y8games will disclose data to Malaysian government authorities or law enforcement bodies when required by law, court order or valid legal process. We will not disclose data beyond what is required by the relevant legal request.
• Auditors and professional advisors: Audit firms, lawyers and professional advisors who support y8games in its business operations are bound by strict professional confidentiality obligations.

6Cookies & Tracking Technologies

Y8games uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential cookies (required): Required for core platform functions such as maintaining your login session and remembering your account settings. These cookies cannot be disabled without affecting the functionality of the y8games platform.
• Performance cookies: Collects anonymous information about how you use the y8games platform — pages visited, time spent, and errors encountered. This helps us identify and resolve technical issues more quickly.
• Preference cookies: Saving your preferences such as interface language, display settings and game preferences so you do not have to reconfigure them every time you log in to y8games.
• Security cookies: Used to identify suspicious login attempts, detect bot activity and protect your account from unauthorised access.

You can manage your cookie settings through your browser. Please note that disabling certain cookies may affect your experience on the y8games platform, including login functionality and account settings.

7y8games Data Security Measures

Member data security is an absolute priority at y8games. We continually invest in our security infrastructure to ensure your data is protected at every level:

• Transit encryption: All communications between your device and y8games servers are protected by TLS 1.3 — the latest generation of SSL encryption, offering the strongest available protection against data interception in transit.
• Storage encryption: Sensitive data stored in y8games databases is encrypted using the AES-256 algorithm — the same encryption standard used by government agencies and leading financial institutions.
• Access controls: Access to member data at y8games is governed by a need-to-know principle — only staff who require access to carry out their duties are granted permission, and all access is logged and audited on a regular basis.
• Regular security testing: y8games conducts regular penetration testing and security audits by independent cybersecurity firms to identify and address vulnerabilities before they can be exploited.
• Real-time threat detection: Our security monitoring system operates around the clock and alerts the y8games security team the moment any suspicious activity is detected.

8Data Retention Period

Y8games retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law:

• Active account data: Retained for as long as your y8games account remains active and for 7 years after account closure — in line with record-keeping requirements under Malaysian law.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in line with Malaysia's accounting and anti-money laundering legal requirements.
• Game records: Retained for 3 years for dispute resolution purposes and responsible gaming analysis.
• Support communication records: Retained for 2 years from the date of communication for quality control and dispute resolution purposes.
• Cookie data: Session cookies expire when you close your browser. Persistent cookies are stored for the duration specified in the relevant cookie settings — typically between 30 and 365 days.

Once the specified retention period has elapsed, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity.

9Your Rights Under PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by y8games:

• Right of access: You have the right to request a copy of the personal data we hold about you. y8games will process this request within 21 business days.
• Right to rectification: If any data we hold about you is inaccurate or out of date, you have the right to request a correction. For data you can update yourself — such as your phone number or email address — you can do so directly in your y8games account settings.
• Right to erasure: In certain circumstances, you have the right to request deletion of your personal data. Please note that this right is not absolute — y8games may need to retain some data to meet legal obligations even after a deletion request has been made.
• Right to object: You have the right to object to the processing of your data for direct marketing purposes. Objections relating to marketing will be actioned immediately.
• Right to withdraw consent: For processing that relies on your consent — such as marketing emails — you may withdraw that consent at any time through your account settings or by contacting the y8games team.
• Data portability right: You may request your personal data in a machine-readable format for transfer to another party.

To exercise any of the rights above, contact the y8games privacy team by email at support@y8games.best with the subject line "Privacy Data Rights Request", or via live chat within the platform.

10Cross-Border Data Transfers

Y8games operations require the use of cloud computing infrastructure and third-party services that may store or process data at data centres located outside Malaysia. In such cases:

• Y8games only works with service providers that meet data protection standards equal to or exceeding Malaysia's PDPA requirements.
• All agreements with third-party service providers include data protection clauses that bind them to handle y8games member data to the required standard.
• Full member identity data is never transferred to any party without a legitimate need to access it, regardless of that party's geographical location.

11Child Protection

The y8games platform is strictly for individuals aged 18 and above. y8games does not knowingly collect or process personal data from anyone under the age of 18. Should we discover that a minor's data has been collected without our knowledge, we will promptly delete that data and close the account in question.

If you are a parent or guardian and suspect that your child has registered a y8games account, please contact us immediately at support@y8games.best with supporting evidence. We will take prompt action to resolve the matter.

12Privacy Policy Amendments

Y8games reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. When material changes are made to this Policy:

• A clear notice will be published on the y8games homepage at least 14 days before any changes take effect
• A notification email will be sent to the registered email address of all active y8games members
• The "Updated" date at the top of this Policy will be revised to reflect the date of the latest amendment
• For materially significant changes — such as changes to how we use your data or who we share it with — we will obtain your fresh consent before those changes take effect

We encourage you to review this Privacy Policy periodically. Continued use of the y8games platform after any changes take effect will be considered acceptance of the updated Policy.

13Contact y8games Privacy Officer

For any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data by y8games, please reach out to us through the following channels:

• Privacy Email: support@y8games.best — please include "Data Privacy Enquiry" in the subject line
• Live Chat: Available 24/7 directly within the y8games platform, with an average response time of under 3 minutes
• FAQ: Visit the Frequently Asked Questions for immediate answers to general privacy queries

Y8games aims to respond to all privacy-related enquiries within 5 business days. For formal requests such as data access or deletion, processing will be completed within 21 business days as required under Malaysia's PDPA.

If you are dissatisfied with how y8games handles your privacy requests or complaints, you have the right to file a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Digital.