8fat Privacy Policy

1. Introduction

8fat ("8fat", "we", "us", "the Company") is the data controller responsible for the personal data of players who use the 8fat Platform. We are committed to protecting the privacy and security of your personal information and to handling it in a transparent, fair, and lawful manner consistent with applicable international data protection principles and the requirements of our licensing authority.

This Privacy Policy applies to all personal data collected through your use of the 8fat Platform, including the Sportsbook, Live Casino, video slots, lottery, arcade, rewards programme, and any other features or services offered on the Platform. It applies to all players regardless of their country or territory of residence, including players based in Malaysia and across Southeast Asia.

2. Personal Data We Collect

8fat collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and copies of government-issued identification documents (such as MyKad, passport, or driving licence) collected during Know Your Customer (KYC) verification;
• Contact Data: Email address, mobile phone number, and country of residence provided at registration or updated via account settings;
• Financial Data: Payment method details (such as eWallet identifiers, bank account numbers, or card numbers in tokenised form), transaction amounts, deposit and withdrawal history, and source of funds documentation where required;
• Account Data: Username, encrypted password, account settings, communication preferences, and self-imposed responsible gaming limits;
• Technical Data: IP address, browser type and version, device type and operating system, time zone, and unique device identifiers collected automatically when you access the Platform;
• Usage Data: Login timestamps, pages visited, games played, wagering history, session duration, and in-platform navigation patterns;
• Communications Data: Records of communications with 8fat support including live chat transcripts, emails, and any documents or information you provide in the course of a support interaction.

3. How We Collect Your Data

8fat collects personal data through the following means:

• Direct provision: Information you provide when registering an account, completing KYC verification, depositing or withdrawing funds, contacting support, or updating your account settings;
• Automated collection: Technical and usage data collected automatically via server logs, session management systems, and cookies when you access and interact with the Platform;
• Third-party providers: Identity verification data from KYC and anti-fraud service providers; payment verification data from payment processors including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank; and fraud risk signals from third-party risk management systems.

4. How We Use Your Data

8fat uses your personal data for the following purposes:

• To create, verify, and manage your 8fat account;
• To process deposits, withdrawals, and other financial transactions and to maintain accurate transaction records;
• To verify your identity and age in compliance with KYC and anti-money laundering (AML) obligations;
• To detect and prevent fraud, money laundering, bonus abuse, multiple-account creation, and other prohibited activities;
• To administer the 8fat loyalty and rewards programme and calculate point accruals and tier status;
• To provide customer support and respond to queries, complaints, and dispute resolution requests;
• To send account-related communications, including transaction confirmations, security alerts, and policy update notifications — these communications are non-promotional and cannot be opted out of while your account is active;
• To send promotional communications about 8fat offers, bonuses, and features — these communications are sent only where you have consented to receive them or where we have a legitimate interest in doing so, and you may opt out at any time via your account settings;
• To comply with applicable legal obligations, regulatory requirements, and licensing conditions, including reporting obligations to our gaming licence authority;
• To improve the Platform and its features through analysis of aggregated and anonymised usage data.

5. Legal Basis for Processing

8fat processes your personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil our obligations to you under the 8fat Terms & Conditions, including account management, transaction processing, and platform access;
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and licensing conditions;
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and direct marketing to existing users where such interests are not overridden by your privacy rights;
• Consent: Processing for optional marketing communications and non-essential cookies, where your consent has been obtained and may be withdrawn at any time.

6. Data Sharing

8fat does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances and only to the extent necessary for the specified purpose:

• Service providers: Third-party vendors who provide services on our behalf, including payment processors, KYC and identity verification providers, fraud detection services, cloud hosting providers, and customer support platform operators. All such providers are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than providing services to 8fat;
• Regulatory and legal authorities: Where required by applicable law, court order, regulatory authority, or licensing obligation, 8fat may disclose personal data to relevant government authorities or law enforcement agencies;
• Business transfers: In the event of a merger, acquisition, or sale of all or a substantial portion of 8fat's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

7. International Data Transfers

As an international online gaming platform, 8fat may transfer your personal data to servers and service providers located outside your country of residence, including outside Malaysia. Where such transfers occur, 8fat ensures that appropriate safeguards are in place to protect your data, including contractual clauses that impose equivalent data protection obligations on the receiving party and compliance with the data transfer requirements of our licensing jurisdiction.

8. Data Retention

8fat retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and licensing obligations. Specifically:

• Account and transaction records are retained for a minimum of five (5) years from the date of account closure or the date of the last transaction, whichever is later, in compliance with AML record-keeping requirements;
• KYC documentation is retained for a minimum of five (5) years from account closure;
• Communications and support records are retained for a minimum of three (3) years from the date of the communication;
• Technical and usage data is retained for up to twenty-four (24) months in identifiable form, after which it is anonymised or deleted.

Where retention beyond these minimum periods is required by a specific legal obligation, 8fat will retain data for the duration of that obligation.

9. Cookies & Tracking Technologies

8fat uses cookies and similar tracking technologies on the Platform. The following categories of cookies may be in use:

• Essential cookies: Required for the Platform to function correctly, including session management, authentication, and security. These cannot be disabled without disrupting Platform functionality;
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and login status;
• Analytical cookies: Used to collect aggregated, anonymised data about how players use the Platform, enabling us to improve performance and user experience. This data does not identify individual users.

8fat does not use advertising or tracking cookies that share your data with third-party advertising networks. You may manage cookie preferences through your browser settings, though disabling essential cookies may affect your ability to use certain Platform features.

10. Your Data Rights

Subject to applicable law and any overriding legal obligations, you have the following rights in relation to your personal data held by 8fat:

• Right of access: You may request a copy of the personal data 8fat holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 8fat's legal retention obligations;
• Right to restriction: You may request that processing of your personal data be restricted in certain circumstances;
• Right to object: You may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact the 8fat support team via the in-platform live chat. 8fat will respond to all verifiable requests within thirty (30) days of receipt.

11. Security Measures

8fat implements technical and organisational security measures commensurate with the sensitivity of the personal data we hold. These include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for data at rest, role-based access controls limiting staff access to personal data on a strict need-to-know basis, regular security audits and penetration testing, and automated anomaly detection systems that monitor for unusual access patterns. Notwithstanding these measures, no data transmission over the internet can be guaranteed to be completely secure, and 8fat cannot guarantee the absolute security of data transmitted to or from the Platform.

12. Minors

13. Changes to This Privacy Policy

8fat reserves the right to amend this Privacy Policy at any time. Where changes are material, 8fat will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect. The "Last updated" date at the top of this Policy will be revised accordingly. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

14. Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 8fat processes your personal data, please contact the 8fat Data Privacy team via:

You also have the right to lodge a complaint with the relevant data protection authority or the dispute resolution body specified by 8fat's licensing authority if you believe your data protection rights have not been adequately addressed by 8fat.