8teen Official Data Protection Document

Privacy Policy 8teen — We Protect Your Data As If It Were Our Own

At 8teen, the privacy and security of your personal data is not merely a legal obligation — it is a core commitment we uphold every day. This Privacy Policy clearly explains what data we collect, how it is used, who can access it, and what your rights are as the owner of that data.

Last updated: 1 January 2026
256-bit SSL Data Protected No Data Selling

Industry-Standard Data Protection

Platform 8teen uses multiple layers of security — the same standard employed by Malaysian banking institutions — to protect every bit of your data.

256
SSL Bit Encryption
24/7
Security Monitoring
0
Data Sold to Third Parties
100%
Your Control Over Your Data

The Six Data Protection Principles We Uphold at 8teen

Every decision we make regarding player data at 8teen is guided by these six core principles — not merely to meet legal requirements, but because we genuinely value your trust.

Minimal & Purpose-Driven Data Collection

8teen only collects data that is strictly necessary to provide the platform's services to you. We do not gather excessive or irrelevant information. Every piece of data we request has a clear purpose — whether to verify your identity, process payments or enhance your gaming experience.

Bank-Grade Encryption Across All Layers

All data transmitted between your device and the server 8teen encrypted using the same 256-bit SSL technology employed by Malaysia's major banks, including Maybank and CIMB. Data stored on our servers is also encrypted, ensuring that no unauthorised party can access your information even in the event of a breach.

Full Control in Your Hands

As the owner of your personal data, 8teen puts full control in your hands. You have the right to access, correct, download or request the deletion of your personal data at any time. You may also manage your marketing communication preferences and let us know if you no longer wish to receive any promotional communications from 8teen.

No Sale of Data to Third Parties

8teen has never and will never sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data is not a product we sell. Any data sharing that takes place is strictly limited to legitimate operational needs and is governed by robust contractual safeguards.

24/7 Continuous Security Monitoring

Cybersecurity team 8teen continuously monitors our systems around the clock to detect any suspicious activity, unauthorised access attempts or security threats. Multi-layered protection includes firewalls, intrusion detection systems and multi-factor authentication for administrative accounts.

Full Transparency on Data Usage

Privacy Policy 8teen is written in clear, plain language — not confusing legal jargon. We want you to truly understand what happens with your data, rather than simply clicking "Agree" without knowing what you're consenting to. We are also committed to notifying you promptly should any security incident involving your data occur.

Quick Summary: 8teen collects your personal data only for legitimate purposes — processing your account, verifying your identity, handling payments, and improving your gaming experience. We do not sell your data. You may request access, correction, or deletion of your data at any time through [email protected].

1 Personal Data We Collect

In the course of providing online casino platform services 8teen to you, we collect several categories of personal data. Below is a detailed description of the types of data we collect and how it is collected.

1.1 Data You Provide Directly

When you register an account at 8teen, you provide us with the following information directly:

  • Identity information: Full name as per MyKad or Malaysian passport, date of birth and identification number
  • Contact information: An active Malaysian email address and phone number
  • Account information: Your chosen username and password (stored in encrypted form — we cannot view your password in plain text)
  • Verification information (KYC): A copy of your MyKad or passport, a verification selfie, and proof of current address where required for identity verification
  • Financial information: Details of the payment methods you use for deposits and withdrawals — including account information for Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks)

1.2 Automatically Collected Data

When you use the 8teen, our systems automatically collect certain types of technical and behavioural data:

  • Device & technical data: IP address, device type and model, operating system, browser type, and language settings
  • Log and session data: Login and logout times, session duration, pages visited, and actions taken within the platform
  • Gaming data: Betting records, game results, deposit and withdrawal history, and gameplay statistics
  • Approximate location data: General geographic area based on IP address for compliance and security purposes (we do not collect your precise GPS coordinates)
  • Cookie and tracking data: Information collected through cookies and similar tracking technologies as described in Section 6
Summary of Data Categories Collected
Data Category Example Primary Purpose
Identity Full Name, MyKad, Date of Birth KYC Verification, Account Security
Relationship Email, Phone Number Communications, Notifications, Support
Finance Payment Method, Transaction History Deposit & Withdrawal Process
Games Betting Records, Statistics Responsible Gaming, Audit
Technical IP, Device, Browser Security, Anti-Fraud
Behaviour Pages Visited, Session Duration Platform Improvement

2 How 8teen Uses Your Data

8teen uses personal data collected for legitimate and specific purposes only. We do not use your data for any purpose beyond what is stated here without first obtaining your consent.

2.1 Platform Service Provision

The primary purpose for using your data at 8teen is to provide and manage the online casino platform for you. This includes:

  • Creating and managing your account 8teen your
  • Processing deposits and withdrawals via your preferred payment method
  • Maintaining accurate game records and transaction history
  • Providing effective customer support when you reach out to us
  • Sending important account-related notifications such as transaction confirmations and security updates

2.2 Identity Verification & Legal Compliance

The KYC verification process we carry out is an essential compliance obligation in the online gambling industry. Your identity data is used to confirm that you meet the age requirement (21 years and above), verify that you are the legitimate owner of the payment method used, and help prevent fraud and money laundering. This not only protects the platform 8teen, but also to protect you and all other members from unlawful activity.

2.3 Security & Fraud Prevention

Technical and behavioural data such as IP addresses, login patterns, and gaming activity are continuously analysed by the security systems 8teen to detect and prevent fraudulent activity. This includes identifying unauthorised access attempts, flagging suspicious gameplay patterns, and ensuring the platform's integrity remains intact for all legitimate users.

2.4 User Experience Improvement

We use platform behavioural and usage data in aggregate form (without identifying specific individuals) to understand how players use the platform 8teen, identify areas for improvement, and make data-driven decisions about new features to develop. The goal is to make your experience at 8teen better over time.

2.5 Marketing Communications (With Consent)

With your consent, 8teen may send marketing communications such as information on new promotions, special bonuses, newly launched games and exclusive member offers. You may opt out of these marketing communications at any time by clicking the "Unsubscribe" link in any email or by contacting our support team at [email protected]. Important note: even if you opt out of marketing emails, you will continue to receive important transactional emails related to your account.


3 Data Sharing & Disclosure

8teen does not sell your personal data to any third party. However, there are limited situations where we may need to share your data with certain parties to keep the platform running properly.

3.1 Trusted Service Providers

We work with a number of third-party service providers who help us operate the platform 8teen. These providers may process your data on our behalf, including:

  • Cloud computing infrastructure providers: For secure data storage and platform operations
  • Payment gateway providers: To process deposit and withdrawal transactions via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX
  • Identity verification service providers: To assist with a faster and more secure KYC process
  • Live casino game providers: To provide live streaming games such as Live Big Small, Oracle Roulette and Oasis Poker
  • Email and communications service providers: To send verification emails, notifications, and account-related communications

All third-party service providers are bound by strict data protection agreements and are only permitted to use your data for the specific agreed purposes. They are not authorised to use your data for any other purpose or to share it with any other party.

3.2 Legal Requirements

8teen may be required to disclose your data to the relevant authorities where mandated by applicable Malaysian law, such as in response to a valid court order, a disclosure order from a regulatory body, or in the context of a financial crime investigation conducted by a competent authority. In such cases, we will endeavour to notify you (where legally permitted) prior to disclosing the relevant data.

3.3 Business Transfer

In circumstances where 8teen involved in any merger, acquisition or sale of business assets, user data may be transferred as part of that transaction. In such circumstances, members will be notified via a clear notice before any data transfer takes place, and the new entity will be bound to comply with this Privacy Policy or an equivalent one.


4 Data Security at 8teen

8teen invests seriously in security infrastructure to protect your data from unauthorised access, loss, alteration or disclosure. Below is an overview of the security measures we have implemented.

4.1 Technical Security

  • 256-bit SSL/TLS Encryption: All communication between your browser or app and the server 8teen encrypted using the latest SSL/TLS protocols
  • Encryption of data at rest: Sensitive data stored in our databases is encrypted using robust encryption algorithms
  • Multi-factor authentication (MFA): Available for user accounts and mandatory for all internal administrator accounts 8teen
  • Firewalls and intrusion detection systems: Multiple network protection layers to detect and block cyber threats
  • Regular security testing: Penetration testing and security audits are conducted regularly by independent third parties

4.2 Operational Security

In addition to technical measures, 8teen also enforces strict operational controls, including the principle of "least privilege" — meaning only staff who genuinely require access to specific data are granted permission to do so. All personnel undergo regular data security training and are bound by strict confidentiality agreements.

4.3 Security Incident Response

Despite all the protective measures in place, no system can be guaranteed 100% secure against every cyber threat. In the event of a security incident involving user data, 8teen is committed to notifying affected users within a reasonable timeframe and in accordance with applicable legal requirements. Notifications will include details about the type of data potentially affected and steps you can take to protect yourself.

Shared Responsibility: The security of your account at 8teen is a shared responsibility. We provide secure infrastructure, but you also need to keep your password safe, never share your login credentials with anyone, and contact us immediately if you suspect your account has been accessed without authorisation.


5 Your Rights Over Personal Data

As the owner of your personal data, you have certain rights regarding the information we hold about you on the 8teen. We respect these rights and provide straightforward ways for you to exercise them.

Right of Access

Request a copy of the personal data we hold about you

Right to Rectification

Correct inaccurate or incomplete data

Right to Erasure

Request deletion of your data in certain circumstances

Right to Restriction

Restrict the processing of your data in certain circumstances

Right to Portability

Download your data in a machine-readable format

Right to Object

Object to the processing of your data for direct marketing

To exercise any of the rights above, you may contact us by email at [email protected] with the subject line "Personal Data Rights Request". We will process your request within 14 business days. Note: in certain situations, we may need to retain specific data despite a deletion request, where that data is required for legal compliance, dispute resolution, or contract enforcement.


6 Cookies, Tracking & Similar Technologies

Platform 8teen uses cookies and similar tracking technologies to enable essential platform functionality and to enhance your experience.

6.1 Types of Cookies We Use

  • Essential Cookies (Required): Cookies that are necessary for the platform to function correctly — including login session cookies, language preferences and security settings. These cookies cannot be disabled as they are critical to the platform's core operations 8teen.
  • Analytics Cookies: We use analytics cookies to understand how players interact with the platform 8teen — which pages are most visited, where players encounter difficulties, and how the navigation flow can be improved. This data is collected in aggregate and is not used to identify any specific individual.
  • Functional Cookies: Cookies that remember your preferences — such as interface language, display settings, and game preferences — to deliver a more personalised experience each time you use the platform.

6.2 Cookie Management

You can manage your cookie settings through your web browser preferences. Most browsers allow you to view, delete and block cookies from specific websites. Please note, however, that blocking essential cookies may affect the functionality of the platform 8teen and your gaming experience. For more information on how to manage cookies in your browser, please refer to your browser's help documentation.


7 Data Retention Period

8teen retains your personal data only for as long as it is needed for the purpose it was collected, or as required by applicable law. Below is a general guide to our data retention periods:

  • Active account data: For as long as your account remains active and for a reasonable period following inactivity
  • Financial transaction records: Minimum 7 years, as required by applicable financial compliance and anti-money laundering regulations in Malaysia
  • Log and security data: Typically 12 to 24 months for security audit and incident investigation purposes
  • KYC verification data: For the duration required by applicable regulatory obligations
  • Support communication records: Typically 3 years for service reference and improvement purposes

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you personally. Anonymised data may be retained indefinitely for analytics and platform improvement purposes, as it can no longer be used to identify you.


8 Contact Us & Policy Updates

8.1 How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how 8teen handling your personal data, please contact us via:

  • Email: [email protected] (Subject: "Data Privacy Enquiry")
  • Live Chat: Via the Live Chat icon within the platform 8teen — available 24/7

We are committed to responding to all privacy-related enquiries within 3 business days. For more complex data rights requests, a response may take up to 14 business days. We will keep you informed if additional time is needed and provide an estimated resolution timeline.

8.2 Changes to This Privacy Policy

8teen reserves the right to update this Privacy Policy from time to time in line with changes to regulations, technology, or our business practices. Any material changes to how we handle your data will be communicated via your registered email or a prominent in-platform notification at least 14 days before the changes take effect. We encourage you to review this page periodically to stay informed of our latest data protection practices. The "Last Updated" date at the top of this page indicates when this Privacy Policy was most recently revised.

Our Commitment: Your privacy is a priority at 8teen. We do not sell your data, do not share it without a legitimate purpose, and give you full control over it. If you believe your data has been handled in a manner inconsistent with this Privacy Policy, please contact us immediately at [email protected] and we will investigate and take immediate action.

Key Privacy Facts
Data Encryption 256-bit SSL
Data Sold? Not At All
Security Monitoring 24/7 Continuous
Request Response Time Within 14 Days
Transaction Records Retained Min. 7 Years
Change Notifications 14 Days Early

Your Rights at a Glance

Access a copy of your data
Correct inaccurate data
Request deletion of your data
Download your data (portability)
Opt out of marketing emails
Restrict the processing of your data

To exercise any of these rights, email us at [email protected]

Related Documents

Questions About Privacy?

Our support team 8teen is available to assist you 24 hours a day, 7 days a week in Bahasa Melayu.

Live Chat — Within the 8teen Platform

Frequently Asked Questions About Data Privacy at 8teen

We've compiled the most frequently asked questions from our members 8teen regarding data protection and privacy on our platform.

No, 8teen has never and will never sell, rent, or trade your personal data to any third party for marketing, advertising, or other commercial purposes. Your data is not our revenue stream — our online casino platform services are. The only circumstances under which data may be shared are with service providers who support platform operations (such as payment gateways for processing your Touch 'n Go or GrabPay transactions), and even then, strictly under contractual safeguards.

You may request a copy of your personal data by emailing [email protected] with the subject line "Personal Data Access Request". Please include your full name and the email address registered to your account 8teen in that email. Our team will first verify your identity before processing the request, then provide a readable data report within 14 business days. This is your right as a data owner, and no charges apply for reasonable requests.

When you close your account 8teen your account, some of your data will be deleted while certain data may need to be retained for a specified period in accordance with legal requirements. Financial transaction records, for example, must be kept for a minimum of 7 years under financial compliance obligations. Basic account information and login data will be anonymised or deleted within a reasonable period after account closure. If you would like to know exactly which data will be retained and for how long, you may contact us at [email protected] before closing your account.

8teen does not store your bank card numbers or full e-wallet account details directly in our systems. Financial transactions are processed through available third-party payment gateways (such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow or FPX processors), each of which maintains its own stringent financial security standards. The information that 8teen stores are transaction records (amount, date, method used) for account record-keeping purposes — not your full card or account details.

In the event of a security incident involving user data, 8teen has a clear incident response plan in place. We will promptly detect and contain any incident, assess its scope and impact, notify affected users in a timely manner (typically within 72 hours for serious incidents), provide guidance on steps you can take to protect yourself, and report to the relevant authorities where required. Transparency in such situations is our commitment to all members 8teen.

Other Important Pages You Should Know About

This Privacy Policy should be read alongside other policy documents that form the agreement between you and 8teen.

Your Data Is Protected — Ready to Play at 8teen?

Now you know how 8teen protects your personal data. Register now and begin a safe, fair, and enjoyable online casino experience — with the peace of mind that your privacy is always secure.

Touch 'n Go eWallet GrabPay Boost ShopeePay FPX / DuitNow

This platform is intended for users aged 21 and above. Please play responsibly. Contact us at [email protected]

Bahasa Melayu