Privacy Policy AP8MY –
Personal Data Protection for Malaysia Users

This Privacy Policy ("Policy") is published by AP8MY ("we", "ap8my", or "Platform") and applies to all users who register, access, or use the services provided through ap8my.pro and our official mobile app.

We understand that privacy matters to you. That is why we take reasonable steps to ensure your personal data is collected, used, and protected in a responsible, transparent manner that complies with applicable laws in Malaysia, in particular the Personal Data Protection Act 2010 (PDPA).

This Policy should be read alongside the ap8my Terms and Conditions, which is a separate document. Any conflict between these documents will be resolved in favour of the interpretation that best protects your interests as a user.

AP8MY only collects personal data that is strictly necessary to provide services to you. The following are the categories of data we collect:

Identity Data:

• Full name as shown on your official identification document.
• Date of birth for age verification purposes (18 years and above).
• Identity card number (MyKad) or passport for the KYC process.
• Residential Address currently valid in Malaysia.
• Email Address active for account communications.
• Mobile phone number for two-factor authentication (2FA) and notifications.

Financial Data:

• Bank name and bank account number for deposit and withdrawal processing.
• Transaction records including deposit history, withdrawals, and wagering.
• E-wallet information such as Touch 'n Go and GrabPay where applicable.

Technical Usage Data:

• IP Address and device information used to access the platform.
• Login records including time, location, and device.
• Gaming activity data including games played and session duration.
• Browser information and operating system for technical and security purposes.

The personal data we collect is used solely for the following legitimate and stated purposes. We will not use your data for any other purpose without notifying you in advance:

• Account management: Creates, verifies, and maintains your ap8my account, including the login process, two-factor authentication, and account recovery.
• Transaction processing: Processes deposits, verifies payments, and securely transfers withdrawal funds to your bank account or e-wallet.
• KYC verification: Verifies your identity to meet anti-money laundering (AML) requirements and applicable legal obligations.
• Gaming service provision: Enables you to access all games, bonuses, and promotions available on the ap8my platform.
• Customer support: Resolves complaints, answers enquiries, and provides technical assistance to you.
• Platform security: Detects and prevents fraud, money laundering, account abuse, and suspicious activity.
• Platform enhancements: Analyses usage patterns in aggregate (without identifying individuals) to improve the user experience.
• Important communications: Sends notifications about changes to terms, security updates, and important account information.
• Marketing (with consent): Sends promotions, bonus offers, and the latest ap8my news where you have agreed to receive such communications.

AP8MY does not sell or rent your personal data to any third party. However, in the course of operating the platform, we may share data with the following categories of parties for legitimate reasons:

• Payment service providers: Financial institutions and payment processors required to handle your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Game providers: Third-party game providers may receive the technical data required to run games. No sensitive financial information is shared unless necessary.
• Identity verification services: KYC and document verification service providers that help us verify user identities to meet legal compliance requirements.
• Legal authorities: Government agencies, law enforcement bodies, or courts when required to do so by applicable Malaysian law, court order, or valid legal process.
• Audit and compliance: Independent auditors and certification bodies that review ap8my's security practices and game fairness.

In all data sharing cases, ap8my ensures that the receiving party is subject to data protection obligations equivalent to the level of protection we provide to you.

AP8MY continuously invests in security infrastructure to keep your personal data safe. The following are the key security measures we maintain:

• 256-bit SSL encryption: All communications between your device and ap8my servers are secured by 256-bit SSL (Secure Socket Layer) encryption, the highest industry security standard.
• Two-factor authentication (2FA): You can enable 2FA to add an extra layer of protection to your account, preventing unauthorized access even if your password is compromised.
• 24/7 security monitoring: ap8my's cybersecurity team monitors the platform around the clock to detect suspicious activity and respond to threats promptly.
• Role-based access control: ap8my staff only have access to the data they need to perform their duties. Access to sensitive data is restricted to authorised personnel only.
• Encryption of data at rest: Personal data stored in the ap8my database is encrypted to ensure it remains unreadable even if physical access to the servers is obtained by unauthorized parties.
• Periodic security audits: AP8MY conducts regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities.

The ap8my platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential cookies: These cookies are required for core platform functions such as login session authentication, security, and language preferences. Without them, the ap8my platform will not function properly.
• Performance cookies: Used to gather aggregate information about how users interact with the ap8my platform without identifying individuals. This data helps us improve the user experience.
• Functional cookies: Saves your preferences such as language, display settings, and game choices so you do not need to reconfigure them each time you log in.
• Security cookies: Helps detect suspicious activity, prevent unauthorised access, and protect your account from cyber threats.

You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect some functionality within the ap8my platform.

As an ap8my user in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010. All requests will be processed within 14 business days:

AP8MY retains your personal data only for as long as necessary for the purposes stated in this Policy, or as required by applicable law:

• Active account data: Retained for the duration your account is active and for a reasonable period after the account is closed.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date to comply with Malaysian financial legal requirements.
• KYC records: Retained for a minimum of 5 years after the business relationship ends, in line with anti-money laundering requirements.
• Security logs: Retained for a period of 2 years for incident investigation and platform security purposes.
• Support communication data: Retained for 3 years to allow for historical reference and dispute resolution.

When data is no longer needed and there is no legal obligation to retain it, ap8my will securely delete or anonymize that data using industry-recognized methods.

AP8MY reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data.

For any material changes to this Policy, we will notify you via an in-platform notification on ap8my or by registered email at least 14 days before the changes take effect. This gives you ample time to review them and decide whether you wish to continue using our platform.

Continued use of the ap8my platform after the effective date of any Privacy Policy changes constitutes your acceptance of the updated Policy. The latest revision date is always shown at the top of this document.

If you have any questions, concerns, or complaints about how we handle your personal data, or wish to exercise any of the rights set out in this Policy, please contact the ap8my privacy team:

• In-platform Live Chat: Available 24 hours a day, 7 days a week — the fastest way to get an immediate response.
• Privacy email: [email protected] – for written enquiries that require documentation.
• Response time: Privacy-related enquiries will receive a response within 2 business days. Formal data rights requests will be processed within 14 business days.

AP8MY is committed to addressing all privacy-related inquiries and complaints seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP).