8fat Privacy Policy

1 Who We Are

8fat is an online casino and sports betting platform accessible at 8fat.org. The Operator of the 8fat Platform — the entity responsible for the collection and processing of personal data described in this Privacy Policy — operates the platform under an international online gaming licence.

For data protection purposes, the Operator acts as the data controller in respect of personal data collected through the 8fat Platform. "8fat", "we", "us", and "our" in this Policy all refer to the Operator in this capacity.

Questions about this Policy or data protection practices at 8fat should be directed to our support team via the contact details in Section 13.

2 Data We Collect

8fat collects personal data in the following categories, depending on how you interact with the Platform:

2.1 Registration Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (for mandatory age verification — 8fat is strictly 21+ only).
• Email address (primary account contact and communication channel).
• Mobile phone number (used for OTP delivery and two-factor authentication).
• Residential address (required for compliance and responsible gaming regulatory purposes).

2.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification — Malaysian MyKAD, passport, or other accepted document.
• Proof of payment method ownership where required by our KYC process.
• Source of funds documentation in cases where transaction volumes trigger enhanced due diligence requirements.

2.3 Transactional Data

• Deposit amounts, timestamps, and payment method identifiers (e.g., partially masked TnG eWallet account reference).
• Withdrawal requests, amounts, processing status, and destination payment method references.
• Bet history across all product verticals — sportsbook, slots, live casino, esports.
• Bonus activations, rollover progress, and promotional participation records.

2.4 Technical and Behavioural Data

• IP address at time of login and during active sessions.
• Device type, operating system, and browser information.
• Session duration and navigation patterns within the Platform.
• Game session data including bet amounts, game titles played, and session durations (used for responsible gaming monitoring).

3 How We Use Your Data

8fat uses the personal data collected for the following purposes:

• Account creation and management: Registering your account, maintaining your profile, and enabling access to Platform services.
• Age and identity verification: Confirming that all Members are aged 21 or above and that the identity provided is genuine, as required by our licensing obligations.
• Transaction processing: Processing deposits, withdrawals, and recording accurate transaction histories for your account wallet.
• Responsible gaming monitoring: Using gameplay and transaction data to identify patterns that may indicate problem gambling behaviour and, where applicable, proactively contacting Members or applying protective measures.
• Anti-fraud and AML compliance: Monitoring account activity for indicators of fraud, money laundering, or other prohibited conduct as required by our gaming licence obligations.
• Customer support: Using your account data and communication history to resolve support queries efficiently.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game selection, platform performance, and user experience features.
• Marketing communications: Sending promotional emails and in-platform notifications about bonuses, new games, and seasonal campaigns — only where you have opted in to receive such communications.

4 Legal Basis for Processing

8fat processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the services described in our Terms and Conditions — account registration, transaction processing, game access, and withdrawal handling.
• Legal obligation: Processing required by our gaming licence, applicable anti-money laundering regulations, and other statutory obligations — including KYC verification and transaction monitoring.
• Legitimate interests: Processing for fraud prevention, responsible gaming monitoring, platform security, and aggregated analytics — where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where you have explicitly opted in. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.

5 Data Sharing with Third Parties

8fat shares your personal data with third parties only in the following limited circumstances:

• Payment service providers: Your payment method references and transaction amounts are shared with the relevant payment processor (e.g., Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank) to execute deposit and withdrawal instructions. These providers process your data as independent data controllers under their own privacy policies.
• Game software providers: Game studios supply the software that powers 8fat's casino and slot titles. During active game sessions, technical session data (e.g., bet amounts, game round identifiers) is processed by the relevant game provider. This data does not include your name or contact information.
• KYC verification providers: Where automated identity verification services are used, relevant identity document data and selfie images may be processed by a certified third-party KYC provider. These providers are contractually bound to data protection standards consistent with this Policy.
• Regulatory and legal authorities: 8fat will disclose personal data to competent regulatory, law enforcement, or judicial authorities where required by applicable law, court order, or our gaming licence obligations.

8fat does not share your data with advertising networks, data brokers, or any third party for the purpose of cross-site tracking or targeted advertising.

6 Cookies and Tracking Technologies

8fat uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for platform functionality — maintaining your login session, remembering your language preference, and enabling secure account access. These cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to understand how Members navigate the Platform — which pages are visited, how long sessions last, and which game categories receive the most engagement. This data is collected in aggregated form and does not identify individual Members.
• Preference cookies: Store your display settings, preferred game categories, and notification preferences to personalise your experience on return visits.

7 Data Security

8fat implements technical and organisational measures appropriate to the risk level of the data we process. Key security measures include:

• 256-bit TLS encryption for all data in transit between your device and 8fat servers.
• Encryption at rest for all stored personal data and KYC documents using industry-standard symmetric encryption.
• Role-based access controls ensuring that KYC documents are accessible only to staff with a verified operational need.
• Automated fraud detection and anomaly monitoring on all account login events and financial transactions.
• Regular security assessments of platform infrastructure, including penetration testing by qualified security professionals.

In the event of a personal data breach that presents a risk to your rights and freedoms, 8fat will notify affected Members promptly and will take immediate remediation steps. Where notification to a supervisory authority is required under applicable law, 8fat will fulfil that obligation within the required timeframe.

8 Data Retention

8fat retains personal data for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by legal or regulatory obligations:

• Active account data: Retained for the duration of your membership and for a period of five years following account closure, in line with standard AML and gaming regulatory record-keeping requirements.
• KYC documentation: Retained for the period required under applicable anti-money laundering regulations, typically five years from the date of the last transaction or account closure, whichever is later.
• Transaction records: Retained for five years from the date of the transaction.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate the lawfulness of prior communications.

Data that is no longer required for any legitimate purpose is securely deleted or anonymised in accordance with 8fat's data destruction procedures.

9 Your Data Rights

As a Member of 8fat, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data that 8fat holds about you at any time.
• Right to rectification: If personal data held by 8fat is inaccurate or incomplete, you may request that it be corrected.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. Note that data subject to legal or regulatory retention requirements cannot be deleted until those obligations have expired.
• Right to restrict processing: You may request that 8fat restrict the processing of your data in certain circumstances — for example, while a data accuracy dispute is resolved.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to 8fat, where technically feasible.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact 8fat's support team via live chat or email. We aim to respond to all data rights requests within 30 days. Complex requests may require an extension, which we will notify you of promptly.

10 Children's Privacy

The 8fat Platform is strictly restricted to individuals aged 21 and above. 8fat does not knowingly collect personal data from individuals under the age of 21. If we become aware that an Account has been registered by or on behalf of a person under 21, the Account will be closed immediately, all bets placed will be voided, and any deposited funds will be returned to the verified source.

If you believe that a person under the age of 21 has registered on the 8fat Platform, please contact our support team immediately.

11 International Data Transfers

8fat's operations involve the transfer of data to servers and service providers that may be located outside Malaysia. Where such transfers occur, 8fat ensures that appropriate safeguards are in place to protect the transferred data, including contractual data processing agreements with service providers that incorporate recognised data protection standards.

By creating and using an 8fat Account, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside your country of residence, subject to the protections described in this Policy.

12 Changes to This Privacy Policy

8fat reserves the right to update this Privacy Policy at any time. When material changes are made, Members will be notified by email to the registered account address and via an in-platform notification visible upon next login.

The "Effective Date" at the top of this Policy reflects the date on which the current version took effect. Continued use of the Platform following notification of changes constitutes acceptance of the updated Policy. If you do not agree to the revised Privacy Policy, you should cease using the Platform and may request account closure.

13 Contact Us

For any questions, requests, or concerns relating to this Privacy Policy or 8fat's data protection practices, please contact us through the following channels:

• Live Chat: Available 24/7 from the account dashboard. Fastest response — typically under 5 minutes for data-related queries.
• Email: [email protected] — please include "Privacy Request" in your subject line along with your registered username for faster routing.

8fat is committed to resolving privacy-related concerns promptly and transparently. All data rights requests are handled by staff with specific training on data protection obligations.