play8oy Privacy Policy for Malaysian Users

1 Introduction

play8oy operates as a Malaysia-focused information and gaming platform accessible through this website. This Privacy Policy describes the types of personal information that may be collected when you visit or use play8oy, the purposes for which that information is processed, the circumstances under which it may be shared and the rights available to you as a user based in Malaysia or elsewhere.

By accessing play8oy or submitting personal information through any available feature, you acknowledge that you have read and understood this Privacy Policy and that processing will occur as described herein. If you do not agree, you should discontinue use of the website and refrain from submitting personal details.

This policy applies to all personal data processed in connection with the play8oy website, including data relating to account registration, identity verification, MYR payment transactions, customer support communications and browsing activity recorded through cookies or similar technologies.

2 Definitions

The following definitions apply throughout this Privacy Policy unless the context clearly requires otherwise.

3 Data We Collect

play8oy may collect personal data in several ways depending on how you interact with the website. The categories below represent the types of information that may be gathered. Not every category will apply to every user.

• Registration and Identity Data: Full name, date of birth, Malaysian identity card or passport number, nationality and residential address, including city references such as Kuala Lumpur, Petaling Jaya, Shah Alam, Penang or Johor Bahru.
• Contact Data: Email address, mobile number and preferred communication language. play8oy uses English as its primary communication language for Malaysian users.
• Financial and Transaction Data: MYR deposit amounts, withdrawal requests, payment method identifiers and transaction history relating to Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong or card payment processes where applicable.
• Verification Documents: Copies of identity documents, proof of address and payment method ownership supplied during know-your-customer checks.
• Technical and Device Data: IP address, browser type, operating system, device identifiers, session duration and pages visited, collected through server logs and cookies.
• Communications Data: Support requests, complaint correspondence, chat transcripts and feedback submitted through any available channel.
• Responsible Gambling Data: Self-imposed limit settings, cooling-off requests, self-exclusion status and related welfare information, processed to support player protection obligations.

4 Data Processing and Lawful Basis

play8oy processes personal data only where a valid lawful basis applies. The primary bases relied upon are: performance of a contract or pre-contractual steps at the user's request; compliance with legal or regulatory obligations; legitimate interests pursued by play8oy or a third party where those interests are not overridden by the user's rights; and, where required, explicit consent provided by the user before processing.

Identity and age verification is carried out to confirm that users are aged 21 and above as required under applicable rules. MYR payment data is processed to administer deposits and withdrawals and to fulfil financial record-keeping obligations. Communications data is processed to manage support queries and resolve disputes.

play8oy may use aggregated and anonymised data derived from user interactions for internal analysis, service development and content improvement. Such data does not identify individual users and is not subject to the same restrictions as personal data.

5 How We Use Your Data

• To create, verify and administer user accounts in accordance with play8oy Terms & Conditions.
• To process MYR deposits and withdrawals and maintain accurate transaction records.
• To verify identity, age and payment ownership as required by applicable know-your-customer standards.
• To detect, investigate and prevent fraud, money laundering, account abuse and security breaches.
• To provide customer support, respond to queries and resolve complaints submitted in English.
• To administer promotions, bonuses and loyalty arrangements where applicable and to verify eligibility.
• To comply with legal obligations, respond to lawful authority requests and enforce play8oy policies.
• To monitor responsible gambling indicators and apply protective measures such as deposit limits or cooling-off periods where warranted.
• To send operational communications including transaction confirmations, security alerts and policy update notices.

6 Sharing and Disclosure of Personal Data

play8oy does not sell, rent or trade personal data. Information may be disclosed to the following categories of recipient where necessary and proportionate.

• Payment Processors and Banking Partners: Financial information may be shared with e-wallet operators, FPX gateway providers and Malaysian banking institutions to facilitate authorised transactions.
• Identity Verification Providers: Document and identity data may be submitted to third-party KYC service providers operating under appropriate security and confidentiality obligations.
• Technology and Hosting Providers: Service providers supporting website hosting, data storage, email delivery and security monitoring may process data on play8oy's behalf under contractual protections.
• Regulatory and Legal Authorities: play8oy may disclose data where required by a court order, regulatory request, law enforcement inquiry or other binding legal obligation applicable to Malaysia or another relevant jurisdiction.
• Professional Advisors: Lawyers, auditors and compliance consultants may receive limited data under professional confidentiality obligations where necessary for play8oy operations.

Any third party receiving personal data on play8oy's behalf is required to protect that data in a manner consistent with this Privacy Policy and applicable law.

7 Cookies and Tracking Technologies

play8oy uses cookies and similar client-side technologies to support website functionality, maintain authenticated sessions, prevent fraudulent access and measure aggregate browsing patterns. Cookies do not allow play8oy to access unrelated information stored on your device.

8 Data Retention

play8oy retains personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal, regulatory, audit or dispute-resolution requirements. The following general retention principles apply.

• Account and identity data is retained for the duration of an active account and for a minimum period thereafter as required by financial record-keeping rules.
• Transaction and MYR payment records are kept for the period required under applicable anti-money-laundering and financial regulations.
• Communications and support data is retained to manage ongoing or potential disputes for a reasonable period following resolution.
• Data collected for responsible gambling monitoring is retained for the period necessary to give effect to a limit, cooling-off or self-exclusion period and thereafter as required for compliance.

When personal data is no longer required, play8oy takes reasonable steps to delete, anonymise or securely dispose of it in a manner appropriate to the sensitivity of the information.

9 User Rights

Subject to applicable law and legitimate operational restrictions, users have the following rights in relation to personal data held by play8oy.

• Right of Access: You may request a copy of personal data held about you and information about how it is processed.
• Right of Rectification: You may request correction of inaccurate or incomplete personal data.
• Right of Erasure: You may request deletion of personal data where it is no longer necessary, consent has been withdrawn or processing has no lawful basis, subject to legal retention obligations.
• Right to Restrict Processing: You may ask play8oy to limit processing in certain circumstances, for example while a dispute or accuracy challenge is pending.
• Right to Object: You may object to processing carried out on the basis of legitimate interests where your individual circumstances justify that objection.
• Right to Withdraw Consent: Where processing relies on consent, you may withdraw that consent at any time without affecting the lawfulness of earlier processing.

To exercise any of these rights, please contact play8oy at the address stated in the Contact Us section below. play8oy will respond within a reasonable period and may need to verify your identity before acting on a request.

10 Data Security

play8oy implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures reflect the nature, scope and sensitivity of the data processed and include access controls, encrypted transmission protocols and regular security reviews.

While play8oy takes reasonable steps to protect personal data, no internet transmission or digital storage system is fully secure. Users should protect their own credentials, avoid sharing passwords and immediately report any suspected account compromise to play8oy support.

In the event of a data breach that poses a risk to individuals, play8oy will take appropriate steps in accordance with applicable notification obligations.

11 Children and Minors

play8oy is strictly intended for adults aged 21 and above. The website does not knowingly collect personal data from persons below that age. If play8oy becomes aware that personal data has been submitted by a person who has not reached the required age, that data will be deleted promptly and access will be restricted.

Parents and guardians who believe that a minor may have submitted personal data to play8oy are encouraged to contact us using the details provided in the Contact Us section.

12 Changes to This Privacy Policy

play8oy may update this Privacy Policy from time to time to reflect changes in applicable law, data practices, technology or operational requirements. The effective date at the top of the document will be revised whenever a material change is made.

Continued use of play8oy after a revised Privacy Policy becomes effective constitutes acceptance of the updated provisions. Users who do not accept revised terms should discontinue use and may request deletion of their personal data in accordance with the User Rights section above.

13 Contact Us

If you have questions about this Privacy Policy, wish to exercise a data right or need to report a privacy concern, please contact play8oy using the following details. Do not include passwords, complete payment card numbers or one-time security codes in any correspondence.

Email: [email protected]

play8oy will respond to privacy-related enquiries within a reasonable period. Requests concerning account data may require identity verification before any action is taken. Legal, regulatory or compliance matters may affect the timing or scope of a response.