Privacy Policy play8oy

1. Introduction and Scope of This Policy

This Privacy Policy ("Policy") is published by play8oy ("we", "our platform") and applies to all players who register, access or use the services offered through the play8oy website. By registering an account or continuing to use this platform, you agree to the collection and use of your personal information as described in this Policy.

The scope of this policy covers all information you provide directly to us, information we collect automatically when you use the platform, and information we receive from legitimate third-party sources. We are committed to managing that data with full transparency and responsibility.

2. Personal Information We Collect

play8oy collects various categories of personal information to ensure a safe, legitimate and satisfactory playing experience. This information includes:

• Registration information: full name, date of birth, identification card number (MyKad), email and mobile phone number.
• Financial information: e-wallet account numbers, deposit and withdrawal transaction details, and records of financial activity within the platform.
• Identity verification information: copies of identification documents required for the Know Your Customer (KYC) process.
• Technical information: IP address, device type, operating system, web browser, and session data collected automatically.
• Behavioural data: game records, betting history, game preferences and platform usage patterns.
• Communications: the content of conversations with our customer support team via live chat or email.

We only collect information that is necessary for legitimate purposes and do not collect excessive data. Age verification is mandatory — players must be 21 years of age or older to use the play8oy platform.

3. Purpose of Using Personal Information

Information collected by play8oy is used specifically for the following purposes:

4. Lawful Basis for Data Processing

play8oy processes your personal information based on one or more of the following legal grounds:

• Performance of Contract — processing necessary to provide online gambling services to you as a registered player.
• Legal Obligation — processing necessary to comply with licensing conditions, anti-money laundering requirements and regulatory reporting obligations.
• Legitimate Interests — processing for platform security, risk analysis and service improvement that does not override your rights.
• Consent — processing for marketing communications and optional cookies, provided you have given clear consent.

5. Sharing and Disclosure of Information

play8oy does not disclose players' personal information to outside parties except in the following limited and controlled situations:

• Trusted Service Providers — we work with payment processing companies, game software providers and technology infrastructure providers who are bound by strict confidentiality agreements. They may only process your data for the purposes we specify.
• Legal Requirements — we may disclose information when required by law, court order, or regulatory authorities under our international licensing conditions.
• Fraud Prevention — in cases involving suspected fraud or illegal activity, we reserve the right to share relevant information with the relevant authorities.
• Business Transfer — in the event of a merger or acquisition, player information may be transferred as part of business assets, provided the receiving party adheres to an equivalent privacy policy.

play8oy does not sell or rent players' personal information to any party for independent marketing purposes.

6. Use of Cookies and Tracking Technologies

The play8oy platform uses cookies and similar tracking technologies to improve the user experience and ensure session security. There are several types of cookies we use:

• Essential Cookies — required for basic platform functions such as login verification and session security. These cookies cannot be disabled.
• Performance Cookies — collect information about how you use the platform to help us improve it. Data collected is in aggregate and anonymous form.
• Functional Cookies — save your preferences such as language and display settings to make using the platform easier in future sessions.
• Marketing Cookies — used to show you relevant promotional content. You can decline these cookies through your browser settings.

7. Data Retention Period

play8oy retains your personal information for as long as necessary to fulfil the purposes stated in this Policy, or for as long as required by law and regulatory requirements. As a general guide:

• Financial transaction records and gambling activity are retained for a minimum of five years after the transaction date, in line with licensing requirements.
• Identity verification information (KYC) is retained for the duration of the active account and for a minimum of five years after the account is closed.
• Technical log data is retained for a maximum of twelve months for security and investigation purposes.
• Customer support communications are retained for three years to assist with the resolution of any future disputes.

When the retention period ends and no legal obligation remains, your data will be securely deleted or anonymised.

8. Technical and Organisational Security Measures

We implement various technical and organisational security measures to protect your personal information from unauthorised access, loss, alteration or disclosure:

• Encryption of data in transit using the latest TLS/SSL protocols.
• Role-based access control (RBAC) to ensure only authorised staff can access player data.
• Continuous system monitoring to detect security threats and suspicious access attempts.
• Regular internal and external audits of data security systems and procedures.
• Regular information security training for all staff who handle personal data.
• Clear incident response procedures in the event of a data breach — including notification to the relevant authorities and affected players within the specified timeframe. ⚠️

9. Changes to This Privacy Policy

play8oy reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, technology, regulatory requirements, or other legitimate reasons. The latest version of this Policy will be published on this page with a clear update date.

If we make significant changes that affect your rights or how we handle your data, we will provide appropriate notice via email to the address registered in your account, or through a prominent notification within the platform. Continued use of the play8oy platform after such notice will be considered acceptance of the updated terms.

10. Contacting Us About Privacy

If you have any questions, concerns, or complaints about how play8oy handles your personal information, or wish to exercise your data protection rights, please contact our team:

• Via in-platform live chat — available 24 hours a day, 7 days a week in Malay and English.
• Via support email: [email protected]

We aim to respond to all privacy-related enquiries thoroughly and within a reasonable time. For more complex complaints, we may require additional information to verify your identity before processing the request.