Privacy Policy AP8 — User Personal Data Protection

1Introduction

Welcome to ap8's Privacy Policy page. This document explains in detail how the ap8 platform, operating under the domain ap8.best collects, stores, uses, and protects your personal information every time you use our services.

At ap8, we take privacy protection extremely seriously. The trust you place in us when you register an account is a responsibility we uphold with the utmost integrity. Every decision involving the handling of personal data is made with the interests and safety of our users as the top priority.

This Privacy Policy applies to all ap8 platform users regardless of access method — whether via a web browser on a computer, mobile phone, or mobile app. By continuing to use our platform after reading this policy, you agree to the data handling practices described in this document.

2Personal Data We Collect

To provide you with a safe, seamless, and personalised experience, ap8 collects several categories of personal information. Below is a full list of the data we may collect:

A. Information You Provide Directly

• Identity Information: Full name, date of birth, gender and identification number (MyKad or passport) collected during the registration and KYC verification process.
• Contact Information: Email address, Malaysian mobile number, and, where applicable, your residential address.
• Financial Information: Bank account numbers, e-wallet details (Touch 'n Go eWallet, GrabPay) and transaction records for deposits and withdrawals.
• Security Information: Passwords stored in hashed form, security questions and two-factor authentication (2FA) options.

B. Information Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, games played, session duration, clicks and interactions within the platform.
• Location Data: General geographic location derived from your IP address for regional verification and regulatory enforcement purposes.
• Cookie Data: Information collected through session cookies, persistent cookies and similar tracking technologies.

3How We Use Your Data

Every piece of information we collect has a clear and lawful purpose. ap8 uses your personal data for the following purposes:

We will not use your data for any purpose other than those listed above without first obtaining your renewed consent. All data processing is carried out responsibly and in accordance with the principle of data minimisation — meaning we only collect what is strictly necessary.

4Data Sharing With Third Parties

Ap8 does not sell, rent, or transfer your personal data to third parties for marketing or commercial purposes. However, there are limited situations where we may need to share your information with certain parties:

• Payment Service Providers: Authorised payment gateways and e-wallet providers (such as FPX, Touch 'n Go eWallet, GrabPay) receive only the transaction information necessary to process your deposits and withdrawals.
• Game Software Providers: Third-party game developers within the ap8 lobby may receive anonymised user identifiers for game functionality purposes only.
• Technical Service Providers: Companies providing server infrastructure, cybersecurity, and technical support services, all bound by strict confidentiality agreements.
• Authorised Authorities: Law enforcement agencies or regulatory bodies issuing lawful orders under applicable laws in Malaysia.
• Independent Audit Body: Certified auditors who periodically assess the fairness of games and the operational compliance of ap8.

5Data Security

Protecting your personal information from unauthorised access, misuse or data breaches is ap8's highest priority. We implement a comprehensive range of technical and administrative security measures:

• 256-bit SSL Encryption: All data transmitted between your browser and ap8's servers is protected by industry-standard TLS/SSL encryption, the same technology used by major banks.
• Secure Password Storage: Your password is never stored in plain text. We use the robust bcrypt hashing algorithm with a unique salt for each user.
• Two-Factor Authentication (2FA): An additional security layer is available on all accounts to prevent unauthorised access even if your password has been compromised.
• 24/7 Monitoring: Our security monitoring systems operate around the clock to detect and prevent any suspicious activity or intrusion attempts in real time.
• Internal Access Controls: Only ap8 staff with a legitimate work requirement are permitted to access user data, and all access is logged and audited on a regular basis.
• Secure Data Centres: Your data is stored in data centres with strict physical controls, automated backup systems, and a comprehensive disaster recovery plan.

6Cookies & Tracking Technologies

Ap8 uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and understand aggregate usage patterns. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled as they are essential to platform operations.
• Performance Cookies: Collects information about how you use the platform — which pages you visit most frequently and how you interact with games — to help us continually improve the overall user experience.
• Functionality Cookies: Allows the platform to remember your preferences such as your preferred language, display settings and other personal configurations.
• Analytics Cookies: Used to analyse platform traffic in aggregate and anonymously for internal service improvement purposes.

You can manage cookie settings through your web browser. Most modern browsers allow you to view, manage, and delete cookies via the settings menu. Please note that disabling essential cookies may affect the functionality of the ap8 platform.

7Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by ap8:

To exercise any of the above rights, please contact our data protection team by email at [email protected]. We will process your request within 30 business days. For complex requests, we may require an additional 60 days and will notify you of the extension.

8Data Retention Period

Ap8 retains your personal data only for as long as it is needed for the original purpose of collection or as required by applicable law. The following are our data retention period guidelines:

• Active Account Data: Retained for the duration your account is active and for any additional period required after account closure to fulfil legal obligations.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's taxation and anti-money laundering (AML) legal requirements.
• Security Logs: Retained for 12 months for fraud activity tracking and security investigation purposes.
• Support Communication Records: Retained for 2 years after case resolution for quality control and reference purposes.
• Marketing Data: Retained until you withdraw consent or request deletion.
• KYC Data: Retained for a minimum of 5 years after the end of the business relationship in accordance with AML/KYC compliance requirements.

Upon expiry of the retention period, your personal data will be securely deleted or permanently anonymised so that it can no longer be linked to you as an individual.

9Third-Party Website Links

The ap8 platform may contain links to third-party websites or services — for example, game provider sites or payment solution providers. Please note that:

• Ap8 is not responsible for the privacy practices or content of those third-party websites.
• This Privacy Policy applies solely to the ap8 platform and does not cover any external websites or services.
• We encourage you to read the privacy policy of every third-party website you visit before providing them with any personal information.

10Minors & Age Restrictions

Ap8 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect or process any personal information from individuals under the age of 18.

If you are a parent or guardian and discover that your minor child has registered or provided personal information to ap8, please contact us immediately at [email protected]. We will take immediate action to delete that information from our systems and close the relevant account without delay.

11Privacy Policy Amendments

Ap8 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technological developments. When we make significant amendments:

• The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent amendment.
• We will notify you via your registered email or through in-platform notifications before any amendments take effect.
• Material changes will take effect no earlier than 14 days after notice has been given to users.
• Continued use of the ap8 platform after the effective date of any amendment constitutes your acceptance of the updated policy.

We encourage you to review this page regularly to stay informed about how we protect your information. A version history of the Privacy Policy is available upon request.

12Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or how ap8 handles your personal data, please do not hesitate to contact us:

Our Data Protection Officer (DPO) is available to assist you with any privacy rights requests. For requests related to data rights under PDPA 2010, please include "PDPA Rights Request" in your email subject line so we can process your request more quickly and efficiently.