Privacy Policy

1 Introduction

This Privacy Policy (hereinafter referred to as "this Policy" or "the Privacy Policy") is published by mohd8 (hereinafter referred to as "mohd8", "we", "us", or "the Company") and applies to all personal data collected from users (hereinafter referred to as "you", "the Player", or "the User") who access, register on, or interact with the mohd8 online gaming platform accessible at https://mohd8.cam (hereinafter referred to as "the Platform" or "the Website").

mohd8 is committed to handling your personal data with transparency, integrity, and in accordance with applicable data protection principles. This Policy describes in detail what personal data we collect, the purposes for which we process it, the legal bases upon which we rely, who we share it with, how long we retain it, and the rights you hold as a data subject.

This Privacy Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, each of which forms part of the overall agreement governing your use of the Platform.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and online identifiers.
• "Data Subject" means the individual to whom Personal Data relates — in most cases, the registered player or Platform visitor.
• "Data Controller" means mohd8, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of mohd8, under a binding data processing agreement.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by the Data Subject to the processing of their Personal Data.
• "KYC" means Know Your Customer — the identity verification process required by mohd8 to confirm the identity, age, and address of registered players.
• "Cookies" means small text files placed on your device by the Platform to store preference data, session information, and analytics identifiers.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia, which governs the processing of personal data in commercial transactions in Malaysia.

3 Personal Data We Collect

mohd8 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

4 How We Collect Your Data

mohd8 collects personal data through the following mechanisms:

5 Data Processing & Use

mohd8 processes your personal data only for specified, explicit, and legitimate purposes. The primary purposes for which we process personal data are as follows:

• Account Management: Creating, maintaining, verifying, and where applicable closing your player account on the Platform.
• KYC & Identity Verification: Confirming your identity, age (minimum 21 years), and address as required for responsible gambling compliance and anti-money laundering obligations.
• Payment Processing: Facilitating deposits and withdrawals via verified Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, and Hong Leong Bank, as well as cryptocurrency transactions.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, and other forms of financial crime.
• Regulatory Compliance: Meeting obligations under applicable anti-money laundering, counter-terrorism financing, and data protection regulations.
• Responsible Gambling: Monitoring gameplay patterns to identify potential problem gambling behaviour and applying responsible gambling tools such as deposit limits and self-exclusion where appropriate.
• Customer Support: Responding to your queries, complaints, and requests via live chat, email, and other support channels.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the performance, design, and features of the Platform.
• Marketing Communications: Sending you promotional offers, bonus notifications, and seasonal promotions (including Deepavali, Hari Raya, and Chinese New Year specials) where you have provided explicit consent to receive such communications.
• Legal Proceedings: Establishing, exercising, or defending legal claims where necessary.

6 Legal Basis for Processing

In accordance with applicable data protection legislation, including the Malaysian Personal Data Protection Act 2010 (PDPA), mohd8 relies on one or more of the following legal bases when processing your personal data:

• Contractual Necessity: Processing required to perform the contract between you and mohd8 — primarily, the provision of account services, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC obligations, AML reporting duties, and age verification mandates.
• Legitimate Interests: Processing necessary for mohd8's legitimate business interests, including fraud prevention, platform security, and service improvement, provided such interests are not overridden by your data protection rights.
• Consent: Processing carried out on the basis of your freely given, informed, and specific consent — primarily in relation to marketing communications and the use of non-essential cookies. You may withdraw consent at any time without detriment to your account.

7 Data Sharing & Third Parties

mohd8 does not sell, rent, or trade your personal data to any third party. We share personal data with third parties only where necessary for the purposes described in this Policy and only under the conditions described below:

• Payment Service Providers: Data required to process your deposits and withdrawals is shared with verified payment processors including DuitNow, FPX operators, e-wallet providers (Touch 'n Go, Boost, GrabPay), and Malaysian banks (Maybank, CIMB, Public Bank, RHB, Hong Leong). These providers act as data processors under contractual data protection obligations.
• Identity Verification Providers: KYC document data may be shared with third-party identity verification service providers engaged to assist with account verification and fraud screening.
• Fraud Prevention Agencies: Where fraud is suspected, relevant data may be shared with specialist fraud prevention and financial crime investigation agencies.
• Regulatory Authorities: mohd8 may disclose personal data to law enforcement agencies, financial regulators, tax authorities, or other competent authorities where required by law, court order, or regulatory directive.
• Technology Service Providers: Data may be shared with cloud hosting, IT infrastructure, analytics, and customer support platform providers, all of whom are bound by contractual data protection obligations.
• Legal Advisors: In the event of a legal dispute or regulatory investigation, data may be disclosed to our legal counsel on a strictly need-to-know basis.

8 Data Retention

mohd8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Account Data: Retained for the duration of your active account relationship with mohd8, and for a period of five (5) years following account closure, to meet AML record-keeping obligations and to facilitate the resolution of any outstanding legal claims.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, in accordance with applicable anti-money laundering regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, for financial compliance and audit purposes.
• Support Communications: Retained for three (3) years from the date of the last interaction, for service quality, dispute resolution, and compliance purposes.
• Marketing Preferences & Consent Records: Retained for the duration of your account relationship, and for three (3) years thereafter as evidence of consent or withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures. Where technical limitations prevent immediate deletion, data is isolated from active processing systems pending secure disposal.

9 Cookies & Tracking Technologies

mohd8 uses cookies and similar technologies (including local storage, session storage, and web beacons) on the Platform. These technologies allow us to recognise your device, remember your preferences, maintain your login session, and collect aggregated analytics data to improve the Platform.

The categories of cookies we deploy include:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session management cookies, authentication tokens, and security cookies. These cookies cannot be disabled without affecting core Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, display options, and previously viewed game categories. Disabling these cookies may affect your user experience.
• Analytics Cookies: Used to collect aggregated and anonymised data about how visitors interact with the Platform — such as pages visited, time on site, and referral source. This data helps us improve Platform performance and content.
• Marketing Cookies: Used, with your consent, to personalise promotional content displayed on the Platform based on your browsing behaviour and engagement history. These cookies are only activated where you have provided explicit consent.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect your ability to log in and use certain Platform features. For marketing and analytics cookies, you may withdraw consent at any time.

10 Data Security

mohd8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the Platform
• Encrypted storage of all personal and financial data on secured servers
• Two-factor authentication (2FA) options for player account access
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Regular security audits and penetration testing by qualified third-party cybersecurity professionals
• Ongoing monitoring of Platform systems for anomalous activity and potential security incidents
• Incident response procedures ensuring prompt notification and remediation in the event of a data breach

While mohd8 takes all reasonable precautions to safeguard your personal data, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. We encourage you to use strong, unique passwords for your account, enable two-factor authentication, and to contact our support team immediately if you suspect any unauthorised activity on your account.

11 Your Rights as a Data Subject

Subject to applicable data protection law, including the Malaysian Personal Data Protection Act 2010, you hold the following rights in relation to the personal data mohd8 processes about you:

To exercise any of the above rights, please contact our Data Protection team via the contact details provided in Section 15 of this Policy. We will respond to all verified data subject requests within thirty (30) days. Where a request is complex or numerous, we may extend this period by a further sixty (60) days, in which case we will inform you of the extension and the reasons for it within the initial thirty-day period.

12 Minors & Age Policy

The mohd8 Platform is strictly intended for use by individuals who are 21 years of age or older. mohd8 does not knowingly collect personal data from persons under the age of 21, and we enforce mandatory age verification as part of the KYC process for all registered accounts.

If mohd8 becomes aware that personal data has been submitted by or on behalf of a person under the age of 21, we will take immediate steps to close the associated account, void any balance held therein, and securely delete all personal data collected from that individual in accordance with our data disposal procedures.

13 Cross-Border Data Transfers

In the course of providing our services, your personal data may be transferred to and processed in jurisdictions outside of Malaysia where our technology service providers, cloud hosting infrastructure, or operational support teams are located. Such transfers may include countries whose data protection frameworks differ from those applicable in Malaysia.

Where personal data is transferred outside Malaysia, mohd8 ensures that appropriate safeguards are in place to protect the data, including:

• Binding contractual clauses requiring recipient parties to apply data protection standards equivalent to those applicable under the Malaysian PDPA
• Data processing agreements with all third-party processors that specify the purposes, scope, and security requirements applicable to the data transferred
• Regular reviews of third-party data processors to ensure ongoing compliance with contractual data protection obligations

14 Amendments to This Policy

mohd8 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in applicable data protection law, regulatory requirements, or our data processing practices. The date of the most recent revision is indicated at the top of this document and in the sidebar table of contents.

Where a material change is made to this Policy, mohd8 will take reasonable steps to notify registered players via the email address associated with their account, or by displaying a prominent notice on the Platform. Continued use of the Platform following publication of a revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms.

We encourage you to review this Privacy Policy periodically to remain informed about how we protect and process your personal data.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mohd8, please contact us through the following channels:

When submitting a data subject request, please provide sufficient information to verify your identity — including your registered username and the email address associated with your account — so that we can locate your data accurately and prevent unauthorised disclosure.