Mohd8 Privacy Policy – Protecting Your Personal Data

1 Information We Collect

Mohd8 collects various types of information to enable us to provide a high-quality, secure, and personalized service to every member. The information collected falls into two main categories:

Information You Provide Directly:

• Full name as stated on a valid identification document.
• Date of birth for age verification purposes (18 years and above).
• An active mobile phone number for account verification.
• A valid email address for account communications and notifications.
• Bank account or e-wallet details for deposit and withdrawal purposes.
• KYC documents such as a copy of MyKad or passport for identity verification.

Automatically Collected Information:

• IP address and device information used to access the platform.
• Game session data including time, game type, and wagering value.
• Deposit and withdrawal transaction history within the platform.
• General geolocation data for compliance and security purposes.
• Account activity logs including login and logout timestamps.

2 How We Collect Data

Mohd8 collects members' personal information through several lawful and transparent channels. We never collect data without your knowledge through unethical or unlawful means.

3 Use of Personal Information

The personal data we collect is used solely for legitimate, pre-defined purposes. mohd8 does not use your data for any purpose other than those stated below without first obtaining your consent.

• Account Management: Creates, maintains and protects your member account on the mohd8 platform.
• Transaction Processing: Processes deposits, withdrawals and any financial transactions within your account.
• Identity Verification: Conducts KYC checks to ensure account security and legal compliance.
• Service Communications: Sends important notifications related to your account, transactions and platform updates.
• Fraud Prevention: Detects and prevents fraudulent activity, money laundering and platform abuse.
• Personalise Your Experience: Personalises game recommendations and promotions based on your preferences.
• Customer Support: Helps resolve enquiries and complaints more efficiently.
• Legal Compliance: Fulfils reporting and compliance obligations required by the relevant authorities.

4 Data Sharing with Third Parties

Mohd8 does not sell, rent, or disclose members' personal data to third parties for commercial marketing purposes. However, there are limited circumstances where we need to share certain information with trusted parties:

• Payment Providers: Transaction data is shared with authorised payment processors such as FPX, Touch 'n Go and GrabPay solely for the purpose of processing your financial transactions.
• Game Providers: Basic game session data is shared with integrated game software providers to ensure a smooth gaming experience.
• Authorities: mohd8 will disclose required information to law enforcement authorities when lawfully compelled by a court order or official investigation.
• KYC Processing Partner: Identity verification documents are submitted to third-party KYC services that hold relevant data security certifications.

All third parties we work with are required to comply with data protection standards equal to or higher than those set out in this Privacy Policy. Data sharing is conducted strictly on a minimum-necessity basis.

5 Cookies and Tracking Technology

The mohd8 platform uses cookies and similar technologies to enhance the user experience, maintain session security and understand how members use our platform. There are three types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled.
• Preference Cookies: Saves your settings and preferences such as preferred language and display configuration to streamline your platform experience.
• Analytics Cookies: Helps us understand how users interact with the platform for improvement purposes. Data collected is in aggregate form and cannot be used to identify individuals.

You can control or delete cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the mohd8 platform. For more information on managing cookies, refer to your web browser's help documentation.

6 Data Security

Mohd8 continuously invests in the latest security infrastructure to protect members' personal data from unauthorized access, loss, misuse, or accidental disclosure. Key security measures we implement include:

• Personal data is encrypted using 256-bit SSL/TLS protocols during transmission.
• Sensitive personal data in the database is encrypted using AES-256 standards.
• Role-based access control (RBAC) ensuring only authorised personnel can access specific data.
• 24/7 security monitoring by a dedicated cybersecurity team.
• Regular security audits by independent third parties to identify and address vulnerabilities.
• Two-factor authentication (2FA) is available for all mohd8 member accounts.
• A comprehensive incident response plan to address any data breaches promptly.

7 Your Rights as a Member

As a mohd8 member, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). mohd8 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, contact the mohd8 customer support team via the platform's live chat. We will process your request within 14 business days.

8 Children's Data Protection

The mohd8 platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18. Should we discover that a child's data has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

Parents and guardians who discover that their child has registered on the mohd8 platform without permission are advised to contact our customer support team immediately so that appropriate action can be taken.

9 International Data Transfer

In the daily operations of mohd8, member personal data may be processed or stored on servers located outside Malaysia for platform reliability and performance purposes. Any international data transfer is carried out only to countries or entities with adequate data protection standards.

Mohd8 ensures that all such data transfers are governed by appropriate data protection agreements and that recipients are bound by confidentiality and security obligations equivalent to this Privacy Policy. We do not transfer personal data to countries without adequate data protection laws unless additional safeguards are in place.

10 Data Retention Period

Mohd8 retains members' personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable law. The following are our data retention guidelines:

• Active Account Data: Retained for the duration of the active account and for 5 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysia's financial reporting and tax law requirements.
• KYC Documents: Retained for the period required by applicable anti-money laundering laws, typically no less than 5 years after account closure.
• Communication Logs: Retained for 2 years for dispute resolution and service improvement purposes.
• Cookie and Analytics Data: Deleted or anonymised within 13 months of collection.

When personal data is no longer required, it will be securely deleted or anonymised using procedures that ensure it cannot be recovered or re-linked to you.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding the mohd8 Privacy Policy or how we handle your personal data, we encourage you to contact us directly. Our privacy team is ready to assist in both English and Bahasa Melayu.

You can reach us via:

• Live Chat: Available 24/7 via the chat icon at the corner of the mohd8 platform — the fastest way to get an immediate response.
• Privacy Email: [email protected] — for more detailed written inquiries or formal data-related requests.
• FAQ Page: Visit FAQ page us for quick answers to common questions about privacy and account security.

We are committed to responding to every privacy inquiry within 3 business days. For formal requests relating to personal data rights, the processing period is up to 14 business days depending on the complexity of the request.