Sport008 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy ("Policy") describes how sport008 collects, uses, discloses, stores and protects the personal information you share with us when using the sport008 platform, whether through our website or mobile application.

Sport008 understands that Malaysians today are increasingly mindful of their personal data privacy. We do not take your trust for granted. Every decision we make about how data is handled comes down to one simple question: is this a reasonable and fair way to treat information that has been entrusted to us? If the answer is no, we don't do it.

This policy applies to all registered sport008 members, visitors to sport008.com, users of the sport008 mobile app, and anyone who interacts with our platform in any capacity. By registering an account or continuing to use sport008's services, you agree to the terms of this Privacy Policy.

Sport008 only collects information that is genuinely necessary to provide the services you request. We do not collect data in excess of what is needed. Below are the categories of information we collect and how they are collected.

Information You Provide Directly

• During registration: Username, Malaysian phone number, encrypted password, date of birth and state of residence in Malaysia.
• During identity verification: A digital copy of your Malaysian identity card (MyKad) or relevant document may be requested for age verification or high-value withdrawal processing. sport008 only requests these documents when genuinely necessary.
• When contacting support: Any information you share through live chat sessions, emails to support@sport008.com or feedback forms.
• During profile updates: Additional information you choose to add to your sport008 account profile, such as game preferences or e-wallet details for withdrawals.

Automatically Collected Information

• Technical data: IP address, browser type and version, operating system, screen resolution, time zone and the language of the device you use to access sport008.
• Gaming data: Sports betting history (football, cricket), poker game history, lottery purchase history, live casino sessions, slots gameplay and all other activity related to your use of the sport008 platform.
• Transaction data: Records of all deposits and withdrawals in MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX through Maybank2u and CIMB Clicks — including timestamp, amount and payment method.
• Activity logs: Login and logout timestamps, pages visited within the platform, features used, and time spent per session.

Sport008 uses your personal information only for legitimate and necessary purposes. We do not use your data in ways you would not reasonably expect or that are not stated in this policy.

• Account setup and management: To create and manage your sport008 account, verify your identity, process deposits and withdrawals in MYR, and provide access to all platform services including Sports Betting, poker, lottery and casino.
• Security and fraud prevention: To detect, investigate and prevent fraudulent activity, collusion, multi-account usage, money laundering and any breach of sport008's Terms & Conditions. This includes monitoring unusual betting patterns and account access logs.
• Customer support: This allows sport008's Malay-speaking support team to assist you effectively and efficiently with any enquiries, technical issues or complaints.
• Responsible Gaming: To monitor gameplay patterns that may indicate signs of problem gambling and to reach out to members with appropriate information and support resources when necessary.
• Relevant marketing (with consent): To send you relevant sport008 promotional information via email or in-platform notifications, subject to your communication preferences. You may withdraw this consent at any time in your account settings.
• Platform improvements: To analyse aggregated and anonymised usage data in order to understand how members use sport008 and to inform better product improvement decisions.
• Legal compliance: To comply with the legal and regulatory obligations applicable to sport008's operations, including anti-money laundering requirements and mandated transaction reporting.

Sport008 does not make any automated decisions that significantly affect you based solely on automated data processing without human review, except in the context of security and fraud prevention where automated actions such as temporary blocking may be necessary to protect the integrity of the platform.

Sport008 does not sell your personal information. We only share data in the limited circumstances described below and only with parties that have equivalent data protection obligations.

• Approved payment providers: To process deposits and withdrawals in MYR, the minimum transaction data required is shared with payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX banks including Maybank2u and CIMB Clicks. These providers maintain their own privacy and security policies and comply with payment industry standards.
• Technology service providers: sport008 works with trusted third-party service providers for functions such as web hosting, email services, platform analytics and technical support. All such providers are bound by strict data processing agreements and are not permitted to use your data for any other purpose.
• Authorities and regulatory bodies: sport008 will disclose required information to Malaysian authorities when mandated by law, court order or valid regulation, including financial crime investigations and anti-money laundering legal requirements.
• Business transfer: In the event of a merger, acquisition, or transfer of sport008 assets, user information may be transferred to the acquiring entity, subject to the same confidentiality obligations and notification to members.

Sport008 continually invests in robust security infrastructure to protect every member's personal data. Below are the key technical and organisational measures we have in place.

• Encryption in transit: All communications between your device and sport008's servers are encrypted using TLS 1.3 with a 256-bit SSL certificate. This ensures your data cannot be intercepted during transmission over the internet.
• Storage encryption: Sensitive data stored in sport008's databases — including passwords and identity verification information — is encrypted using robust industry-standard encryption algorithms. Passwords are stored as one-way hashes and cannot be decrypted, even by sport008 staff.
• Internal access controls: Access to user data within the sport008 system is restricted to staff who require it to perform their duties. All access is logged, monitored and reviewed on a regular basis.
• Regular security audits: sport008 conducts regular penetration testing and security audits by independent third parties to identify and address security vulnerabilities before they can be exploited.
• Incident response plan: sport008 has a clear security incident response procedure in place. In the event of a data breach that could affect the rights and freedoms of members, we are committed to notifying affected members within a reasonable timeframe.
• 24/7 Monitoring: sport008's security systems continuously monitor our infrastructure to detect suspicious activity, intrusion attempts and anomalies that may indicate a security threat.

Sport008 does not retain your personal data for longer than is necessary for the stated purposes or as required by law. Our retention policy is as follows.

• Active account data: For the duration of your active sport008 account plus the period stipulated by legal requirements following account closure.
• Financial transaction records: Minimum 7 years from the transaction date, in accordance with applicable accounting and anti-money laundering legal requirements in Malaysia.
• Customer support communication logs: Up to 3 years from the date of last interaction, for quality control and dispute resolution purposes.
• Technical data and access logs: Up to 12 months from the date of generation, unless a longer period is required for ongoing security investigations.
• Marketing data (with consent): Until you withdraw your consent, after which this data is disposed of within 30 days.
• Identity verification documents: Up to 5 years from the date of submission or account closure, whichever is later, in line with compliance requirements.

Once the retention period expires, personal data is securely disposed of using methods that ensure it cannot be recovered. This includes secure deletion from databases and the destruction of any physical copies where applicable.

Sport008 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use.

• Essential Cookies (cannot be disabled): These cookies are required for the core functionality of the sport008 platform — including maintaining your login session, remembering your security preferences and enabling deposit and withdrawal transactions to work correctly. Without these cookies, the platform will not function.
• Performance & Analytics Cookies: These cookies help us understand how members use sport008 — which pages are visited most often, which features are most popular, and where users run into difficulties. This information is collected in aggregate and anonymised form, helping us make meaningful improvements to the platform.
• Functional Cookies: These cookies remember your preferences within the platform — such as your display language, odds format preferences in Sports Betting, and table settings in poker games. They improve your experience but are not required for core functionality.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling essential cookies will affect the functionality of the sport008 platform and may prevent you from logging in or completing transactions.

As a data subject and sport008 member, you hold the following rights regarding the personal information we hold about you. We are committed to making it easy for you to exercise these rights.

Sport008 enforces a strict age policy. Our platform is intended solely for individuals aged 18 and above, with no exceptions. We do not knowingly collect any personal information from minors.

If you believe that a minor has registered for or accessed a sport008 account through deceptive means, please notify us immediately at support@sport008.com. sport008 will investigate the matter, suspend the account in question immediately, and promptly dispose of any personal data collected from that minor.

Parents and guardians concerned about the use of online gambling platforms by underage family members are welcome to contact us for information on the parental control tools available. sport008 also supports broader industry-level efforts to protect minors.

Sport008 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or to improve transparency for our members.

• Any material amendments — meaning those that significantly change how we collect, use or share your personal data — will be communicated to you via in-platform notification or email at least 14 days before the changes take effect.
• Minor amendments that are clarificatory in nature or involve updates to contact information may take effect immediately upon update of this page.
• The date this document was last updated is always shown in the hero section of this page.
• Your continued use of the sport008 platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy.

We recommend checking this page from time to time to stay informed about how sport008 handles your personal information. If you disagree with any amendments, you have the right to close your sport008 account.

If you have any questions, concerns or complaints about how sport008 handles your personal data, or if you wish to exercise any of your data rights, here is how to get in touch with us.

• Live Chat: The fastest way to get an immediate privacy-related response. Access 24/7 live chat within your sport008 account and let us know your enquiry is privacy-related so we can route it to the right team.
• Email: For formal requests related to data rights, send an email to support@sport008.com with the subject line "Privacy Data Rights Request" and include your account username. We aim to respond within 5 business days and process requests within 14 business days.

Sport008 takes all privacy concerns seriously. If you are dissatisfied with the way sport008 has handled your privacy complaint, you have the right to lodge a complaint with the relevant data protection authority.