🔒 Data Protection

Privacy Policy — 8fafafa

8fafafa is committed to protecting the personal data of every player who uses our platform. This Privacy Policy explains what information we collect, why we collect it, how it is processed and stored, who it may be shared with, and what rights you hold as a data subject. Please read this document carefully before registering an account or using any service on the 8fafafa Platform.

Last Updated: 1 January 2026 | Effective: 1 January 2026

1Introduction

8fafafa (hereinafter referred to as "8fafafa", "the Platform", "we", "us", or "our") operates the online gaming and sports betting platform accessible at https://8fafafa.cam. We are committed to handling all personal data in a responsible, transparent, and lawful manner. This Privacy Policy (the "Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed.

This Policy applies to all users of the 8fafafa Platform, including registered Members, visitors, and any individual whose personal data is processed in connection with use of our services. It covers data collected via the Platform website, mobile interface, live chat, email correspondence, and any other channel through which you interact with 8fafafa.

By accessing the 8fafafa Platform or registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must cease using the Platform immediately.

                Your Privacy Matters: 8fafafa does not sell, trade, or rent your personal data to unaffiliated third parties for their own marketing purposes. Your data is used solely to operate, improve, and protect the 8fafafa Platform and to comply with our legal obligations.
              

2Definitions

In this Privacy Policy, the following terms shall carry the meanings set out below:

"Personal Data" Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, IP address, location data, or any other factor specific to the identity of that person.

"Processing" Any operation or set of operations performed on personal data, including collection, storage, use, disclosure, erasure, or destruction, whether or not by automated means.

"Data Controller" 8fafafa, in its capacity as the entity that determines the purposes and means of processing personal data collected through the Platform.

"Data Processor" A third-party service provider that processes personal data on behalf of 8fafafa under a contractual arrangement and in accordance with this Policy.

"Data Subject" The individual to whom the personal data relates — in this context, the registered Member or visitor to the 8fafafa Platform.

"Consent" A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for a stated purpose.

"KYC Data" Identity and verification documents provided by a Member during the Know Your Customer process, including government-issued identification and proof of address.

"Platform" The 8fafafa website at https://8fafafa.cam and all associated pages, interfaces, mobile versions, and services.

3Data We Collect

8fafafa collects personal data through multiple channels during your interaction with the Platform. The categories of data collected are set out in the table below:

Data Category	Examples	Collection Method
Identity Data	Full legal name, date of birth, gender, nationality, MyKad / passport number	Registration form, KYC submission
Contact Data	Email address, mobile number, residential address (including Malaysian city and postcode)	Registration form, support correspondence
Financial Data	Payment method details (e.g., Touch 'n Go eWallet account reference, Maybank / CIMB / Public Bank account details for FPX / DuitNow), deposit and withdrawal transaction history	Payment processing, transaction records
Technical Data	IP address, device type, operating system, browser type, session timestamps, geolocation (country/region level)	Automatic collection via Platform access
Usage Data	Games played, bets placed, wager amounts, session duration, feature usage, promotional participation	Platform activity logging
Communications Data	Live chat transcripts, email correspondence content, support ticket records	Customer support interactions
KYC Documents	Copies of government-issued ID, proof of address documents, payment method verification screenshots	KYC verification process
Preference Data	Communication preferences, marketing opt-in / opt-out status, language and display settings	Account settings, consent records

Note on Sensitive Data: 8fafafa does not intentionally collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, health data, or biometric data except where expressly required by law or regulatory compliance obligations. KYC documents containing such incidental information are handled with additional access restrictions.

4Legal Basis for Processing

8fafafa processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

◆ Contractual Necessity: Processing required to perform the contract we have with you as a registered Member, including account management, processing deposits and withdrawals through verified Malaysian payment channels (Maybank, CIMB, Touch 'n Go eWallet, DuitNow, FPX, etc.), and providing access to games and services.
◆ Legal Obligation: Processing required to comply with applicable legal requirements, including anti-money laundering obligations, identity verification, fraud prevention, responsible gambling compliance, and regulatory reporting.
◆ Legitimate Interests: Processing conducted for the legitimate business interests of 8fafafa, including platform security monitoring, fraud detection, improving user experience, and internal analytics — provided such interests are not overridden by your fundamental rights and freedoms.
◆ Consent: Where you have provided explicit, informed consent for specific processing activities — such as receiving marketing communications or non-essential cookies. You may withdraw such consent at any time without affecting the lawfulness of processing prior to withdrawal.

5How We Use Your Data

8fafafa uses the personal data collected from you for the following purposes:

5.1 Account Management & Platform Operation

◆Creating, maintaining, and administering your registered 8fafafa account
◆Processing deposits and withdrawals via your nominated Malaysian payment method
◆Verifying your identity and age (21+) through the KYC process
◆Communicating account-related notifications including transaction confirmations and security alerts

5.2 Compliance & Risk Management

◆Detecting, investigating, and preventing fraud, money laundering, and other financial crimes
◆Complying with anti-money laundering (AML) and Know Your Customer (KYC) regulatory obligations
◆Enforcing our Terms & Conditions, including investigating suspected breaches
◆Responding to requests from law enforcement or competent regulatory authorities where legally required

5.3 Responsible Gambling Obligations

◆Monitoring player activity for indicators of problem gambling behaviour in accordance with our responsible gambling commitments
◆Administering self-exclusion requests, deposit limits, and other responsible gambling tools selected by Members
◆Preventing access to the Platform by excluded or suspended Members

5.4 Platform Improvement & Analytics

◆Analysing aggregated, anonymised usage patterns to improve Platform features, game selection, and user experience
◆Conducting internal performance monitoring and quality assurance of customer support interactions
◆Troubleshooting technical issues and optimising Platform performance for Malaysian mobile and desktop users

5.5 Marketing Communications (Consent-Based)

Where you have explicitly consented to receive marketing communications, 8fafafa may contact you by email regarding promotions, bonuses, new game releases, and other platform updates. You may withdraw your marketing consent at any time by updating your account notification preferences. Withdrawal of marketing consent does not affect operational and transactional communications which are sent on the basis of contractual necessity.

6Data Sharing & Disclosure

8fafafa does not sell your personal data. We may share your data with carefully selected third parties in the following circumstances:

◆ Payment Service Providers: We share transaction data with verified Malaysian payment processing partners — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow network participants, FPX-connected banks (Maybank, CIMB, Public Bank, RHB, Hong Leong Bank), and other licensed payment service providers — to process deposits and withdrawals. These providers act as Data Processors under contractual obligations consistent with this Policy.
◆ Identity Verification Providers: KYC Data may be shared with licensed identity verification service providers engaged to validate government-issued identification documents and perform anti-fraud screening.
◆ Game & Technology Suppliers: Usage Data related to game sessions may be processed by our game software suppliers and platform technology providers for the purpose of game operation, result validation, and RNG certification. All such suppliers operate under data processing agreements with 8fafafa.
◆ Regulatory & Law Enforcement Authorities: We may disclose personal data to competent regulatory bodies, law enforcement agencies, courts, or other government authorities where required or permitted by applicable law, including in response to legally valid requests or as required for AML reporting.
◆ Professional Advisers: We may share limited personal data with our legal, accounting, or compliance advisers on a strictly need-to-know basis for the purpose of obtaining professional advice.
◆ Business Transfers: In the event of a merger, acquisition, or sale of assets involving 8fafafa, personal data held by the Platform may be transferred to the successor entity, subject to equivalent data protection obligations being maintained.

⚠ No Unauthorised Third-Party Marketing: 8fafafa will not share, sell, or rent your personal data to unaffiliated third parties for their independent marketing purposes without your explicit prior consent.

7Cookies & Tracking Technologies

The 8fafafa Platform uses cookies and similar tracking technologies to ensure proper Platform functionality, enhance your user experience, and support our security and analytics operations. Cookies are small text files placed on your device when you access the Platform.

7.1 Types of Cookies Used

◆Strictly Necessary Cookies: Essential for the operation of the Platform, including maintaining your login session, processing transactions, and enforcing security controls. These cookies cannot be disabled without impairing your ability to use the Platform.
◆Performance & Analytics Cookies: Used to collect anonymised data about how users interact with the Platform — including pages visited, session duration, and navigation paths — to help us improve Platform performance and user experience.
◆Functionality Cookies: Used to remember your preferences such as language settings, notification preferences, and display configurations to provide a more personalised experience across sessions.
◆Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and account takeover attempts by analysing device and session behaviour patterns.

7.2 Managing Cookies

You may configure your browser settings to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies will impair the functionality of the 8fafafa Platform and may prevent you from accessing certain features or completing transactions. For instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

8Data Retention

8fafafa retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following retention principles apply:

◆Active Account Data: Retained for the duration of your active membership plus a post-closure period as required for legal, compliance, and dispute resolution purposes.
◆Financial Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction in accordance with standard financial recordkeeping and AML compliance requirements.
◆KYC Documentation: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later.
◆Customer Support Records: Live chat and email correspondence records retained for a period of three (3) years from the date of the interaction.
◆Technical & Log Data: Server and access log data retained for up to twelve (12) months for security and fraud investigation purposes.
◆Self-Exclusion Records: Retained indefinitely to prevent re-registration by self-excluded individuals and to honour ongoing self-exclusion arrangements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

9Data Security

8fafafa implements a multi-layered security framework to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

◆256-bit Transport Layer Security (TLS) encryption for all data transmitted between your device and the 8fafafa Platform
◆Encryption at rest for sensitive stored data including KYC documents and financial records
◆Role-based access controls restricting access to personal data to authorised personnel on a strict need-to-know basis
◆Multi-factor authentication for internal system access by 8fafafa personnel
◆Continuous monitoring of Platform infrastructure for intrusion attempts, anomalous access patterns, and security incidents
◆Regular security assessments and vulnerability testing of Platform systems
◆Contractual data security obligations imposed on all third-party Data Processors engaged by 8fafafa

Data Breach Notification: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 8fafafa will notify affected Members without undue delay in accordance with applicable data protection requirements. You will be informed of the nature of the breach, the data affected, the likely consequences, and the measures taken to address it.

10Your Data Rights

As a Data Subject, you have the following rights with respect to the personal data that 8fafafa holds about you. To exercise any of these rights, please contact us using the details in Section 14 of this Policy.

📂

Right of Access

You have the right to request a copy of the personal data 8fafafa holds about you and to receive information about how it is being processed.

✏️

Right of Rectification

You have the right to request correction of inaccurate or incomplete personal data held about you, subject to identity verification.

🗑️

Right of Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.

⏸️

Right to Restrict Processing

You may request that 8fafafa limits its processing of your data in certain circumstances, such as while the accuracy of data is being contested.

📤

Right to Data Portability

Where processing is based on consent or contractual necessity, you may request your personal data in a structured, machine-readable format.

🚫

Right to Object

You have the right to object to processing based on our legitimate interests or for direct marketing purposes, including profiling for marketing purposes.

↩️

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

⚖️

Right to Lodge a Complaint

If you believe your data rights have been infringed, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

Requests to exercise your data rights should be directed to our support team at the contact details set out in Section 14. We will respond to verified requests within thirty (30) days. We may require proof of identity before processing a rights request.

11Minors & Age Restriction

The 8fafafa Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect or process personal data from individuals under the age of 21. During the registration process, we require all users to confirm their date of birth, and we conduct age verification as part of our KYC process.

If 8fafafa becomes aware that personal data has been collected from an individual under the age of 21 — whether through registration, KYC review, or any other means — we will promptly suspend the associated account, delete or anonymise all personal data collected in connection with that account, and void any transactions made through it.

⚠ 21+ Policy: If you are a parent or guardian and believe your child has registered on the 8fafafa Platform, please contact our support team immediately at [email protected] so that we can take appropriate action.

12Third-Party Links

The 8fafafa Platform does not contain links to third-party websites. However, certain payment processing flows may redirect you to the secure interfaces of your nominated payment provider — such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, or your chosen FPX / DuitNow banking portal — to authenticate your transaction. These external payment environments are operated by independent entities and are governed by their own privacy policies.

8fafafa has no control over and assumes no responsibility for the content, privacy practices, or data handling of any third-party payment portal or service. We recommend reviewing the privacy policy of any payment provider before completing a transaction through their interface.

13Changes to This Privacy Policy

8fafafa reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, operational procedures, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered Members via email notification or a prominent notice on the Platform, with a minimum of seven (7) days' advance notice before the effective date of the change.

We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this page indicates when the most recent changes were made. Your continued use of the 8fafafa Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. The current version of this Privacy Policy is always available at https://8fafafa.cam/privacy-policy.

14Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 8fafafa, please contact us through the following channels. All email addresses below are provided as plain text references — please compose your own message to these addresses:

Customer Support (24/7)

[email protected]

General enquiries, account issues, data rights requests

Business & Privacy Enquiries

[email protected]

Data protection matters, legal requests, compliance correspondence

Live chat is available 24/7 via the Platform. Email responses are provided within 4 business hours during Malaysian business hours (GMT+8). Data rights requests are processed within 30 days of receipt and identity verification.

Privacy at a Glance

How 8fafafa Protects Your Data

Six practical commitments that define how we handle your personal information on the 8fafafa Platform.

256-Bit SSL Encryption

All data transmitted between your device and 8fafafa is protected by industry-standard 256-bit TLS encryption. Your personal details, transaction data, and login credentials are secured end-to-end.

No Data Sales

8fafafa does not sell, trade, or rent your personal data to unaffiliated third parties for their own marketing purposes. Your data stays within our controlled ecosystem.

Role-Based Access Control

Access to your personal data within 8fafafa is restricted to authorised personnel on a strict need-to-know basis. Internal access logs are monitored continuously.

Right to Erasure

You can request deletion of your personal data when it is no longer necessary for the purposes it was collected, subject to our legal retention obligations as a licensed gaming platform.

KYC & AML Compliance

Identity verification and transaction monitoring protect all 8fafafa Members — not just regulatory boxes to tick. Your funds and account are more secure because of these processes.

Marketing Opt-Out Respected

Unsubscribing from marketing communications takes effect promptly. 8fafafa will continue sending operational messages (transaction confirmations, security alerts) but marketing stops on request.

🔒

Questions About Your Privacy?

If you have questions about how 8fafafa handles your data, or if you would like to exercise any of your data rights, our support team is available 24/7. You can also review our full Terms & Conditions for related platform policies.

Visit Homepage Terms & Conditions Read FAQ

For players aged 21 and above only. Play responsibly. 8fafafa promotes responsible gambling.