Alpha8 Privacy Policy – We Take Your Data Seriously

Welcome to the alpha8 Privacy Policy. This document is written in plain language because we believe you deserve to know exactly what happens to your personal information when you use our platform.

Alpha8 ("we", "Platform", or "Company") is the data controller responsible for all personal information collected through the alpha8.fun website, our mobile app, and all related communication channels such as support email and live chat.

This Privacy Policy applies to all users who access or use the alpha8 platform, including visitors without an account, registered members, and prospective members currently in the registration process. By continuing to use our platform after reading this policy, you give your consent to the practices described herein.

Alpha8 only collects data that is genuinely necessary to provide you with a safe, fair, and quality service. We do not collect excessive or irrelevant information. The following are the categories of data we collect:

Every piece of information we collect has a clear and legitimate purpose. alpha8 uses your data for the following purposes:

• Account management: Creating and maintaining your account, processing registration, and ensuring the security of your login access at all times.
• Transaction processing: Handling all deposits, withdrawals and other financial activities accurately, promptly and securely through trusted payment channels.
• Legal compliance: Meeting applicable legal and regulatory requirements, including anti-money laundering (AML) obligations and mandatory KYC processes.
• Service improvement: Analysing usage patterns in aggregate and anonymised form to improve platform features, technical performance and the overall user experience.
• Communications and support: Sending important account-related notifications, security updates, support query responses and promotional information to members who have consented to receive them.
• Responsible gaming: Monitoring wagering patterns to identify early signs of problem gambling and provide appropriate support in accordance with our responsible gaming policy.
• Fraud prevention: Detecting and preventing fraudulent activity, money laundering, bonus abuse or security breaches that could affect the platform and other members.

Alpha8 does not sell, rent, or transfer your personal data to any third party for their own commercial purposes. However, there are limited situations where data sharing is necessary to operate our platform effectively:

• Payment providers: Transaction details required to process your payments are shared solely with authorised payment providers such as FPX, DuitNow, Touch 'n Go, GrabPay and Boost.
• Technical service providers: Companies that help us manage the platform's technical infrastructure, analytics, and security are bound by strict confidentiality agreements and may only use your data in accordance with our instructions.
• Legal authorities: We will disclose the necessary information to the relevant authorities when required by law, court order, or valid legal process.
• Identity verification services: Information required for the KYC process is shared with licensed and recognised identity verification service providers.

The security of your data is alpha8's highest technical priority. We continuously invest in the latest security infrastructure to ensure your information is always protected:

• Encryption in transit: All data transmitted between your device and alpha8 servers is encrypted using TLS 1.3 protocol with a valid 256-bit SSL certificate.
• Encryption at rest: Sensitive data such as financial information and identity documents are encrypted at rest using AES-256 standards.
• Access controls: Access to user data is restricted to authorised alpha8 staff only, in accordance with the least privilege principle.
• Regular security audits: The alpha8 platform undergoes regular penetration testing and independent security audits conducted by third-party cybersecurity experts.
• Retention period: Active account data is retained for as long as your account remains active. Following account closure, data will be kept for a minimum of 5 years in accordance with Malaysian legal requirements before being securely deleted.

Alpha8 uses cookies and similar tracking technologies to enhance your user experience and ensure the platform functions properly. The following are the types of cookies we use:

• Essential cookies: Required for core platform operations such as login session authentication, security, and navigation. These cookies cannot be disabled as they are critical to platform functionality.
• Functional cookies: Saving your preferences such as language, display settings and game preferences so you do not need to reset them each time you visit.
• Analytics cookies: Helping us understand how users interact with the platform so we can improve the overall experience. All analytics data is processed anonymously and in aggregate.
• Preference cookies: Enabling us to show you more relevant content and offers based on your preferences and usage history on the alpha8 platform.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect certain features of the alpha8 platform.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have rights that you should be aware of, and alpha8 is fully committed to respecting them:

To exercise any of the above rights, contact our support team via live chat or email. We will process your request within 30 working days in accordance with PDPA requirements.

As a responsible gaming platform, alpha8 is required to comply with Anti-Money Laundering (AML) laws and Know Your Customer (KYC) requirements enforced in Malaysia.

• KYC Purpose: The KYC process is conducted solely to verify your identity, confirm you meet the minimum age requirement, and prevent the platform from being misused for illegal activities.
• Required documents: MyKad (for Malaysian citizens) or a valid passport (for non-citizens) along with a verification selfie for the standard KYC process.
• KYC document retention: Submitted identity documents are stored in encrypted form and are accessible only to authorised compliance personnel.
• Transaction monitoring: Our system automatically monitors transaction activity to identify unusual patterns in line with AML requirements. This is a protective measure for all members.
• Mandatory reporting: In accordance with Malaysian legal requirements, alpha8 is obligated to report suspicious transactions to the relevant authorities without prior notification to the individuals involved.

Alpha8 reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, technical requirements, or improvements to our privacy practices.

When we make significant changes, we will notify you through one of the following methods: a pop-up notification when you log in to the platform, an email to the address registered to your account, or an in-app notification on the alpha8 mobile app.

The date of the last update will always be displayed at the top of this page. We recommend checking this page at least once every three months to stay informed about how we handle your personal data.

If you have any questions, concerns, or wish to exercise your privacy rights, the dedicated alpha8 data privacy team is ready to assist you. There are several ways to reach us:

• Live Chat 24/7: The fastest way — click the live chat icon at the bottom of the alpha8 platform screen to connect directly with our agents.
• Privacy Email: Send your privacy-related enquiries to [email protected] with the subject line "Data Privacy Enquiry".
• Response time: We are committed to responding to all privacy enquiries within 5 business days, and data rights requests within 30 business days.

For complaints that cannot be resolved through our support channels, you may refer to the Department of Personal Data Protection Malaysia (JPDP), which is the PDPA regulatory authority in the country.