Privacy Policy bt8 – Protection of Your Personal Data

01 Introduction and Scope of This Policy

Bt8 ("we", "Platform") is fully committed to protecting the privacy and security of all users' personal data on our platform. This Privacy Policy explains in detail our practices regarding the collection, processing, storage, and protection of your personal information.

This policy applies to all users of the bt8 platform, including those accessing via bt8.ng, the bt8 mobile app for Android and iOS, and any other official bt8 channels. By using the bt8 platform, you agree to the practices described in this Privacy Policy.

Bt8 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection laws. We regularly review and update this policy to ensure it remains relevant and aligned with the latest legal and technological developments.

02 Personal Data We Collect

Bt8 collects your personal data through several means — directly from you during registration and platform use, automatically through tracking technologies, and occasionally from trusted third-party sources. Below are the categories of data we collect.

Bt8 never collects sensitive data such as health information, political views, or religious beliefs unless specifically required by applicable law. We only collect data that is truly necessary for the stated purpose — data minimisation is core to how we operate.

03 How Your Personal Data Is Used

Every piece of data we collect has a clear and legitimate purpose. bt8 does not use your data for any purpose unrelated to operating the platform and serving you.

• Account Management: Creating and maintaining your bt8 account, processing registration, verifying identity and enabling secure access to the platform.
• Transaction Processing: Processing all deposits and withdrawals securely, verifying payments and resolving any financial disputes that may arise.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, terrorism financing and any other illegal activities on the platform.
• Legal Compliance: Fulfilling legal and regulatory obligations, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
• Service Improvement: Analysing usage patterns to improve the user experience, develop new features and personalise platform content according to your preferences.
• Important Communications: Sending account-related notices, security updates, transaction confirmations and promotional information (subject to your preferences).
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need responsible gaming support and to enforce limits set by the player.

04 Data Sharing and Disclosure

Bt8 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data is only shared in the following limited circumstances.

• Trusted Service Providers: We work with carefully selected third-party service providers for payment processing, identity verification, technical support, and analytics. All such providers are bound by strict confidentiality agreements and may only process your data in accordance with bt8's instructions.
• Legal Requirements: bt8 may disclose your data to regulatory authorities, law enforcement agencies, or courts when required to do so under Malaysian law or a valid court order.
• Protection of Interests: In certain circumstances, bt8 may disclose data to protect the legal rights, property, or safety of bt8, our users, or the public, in accordance with applicable legal requirements.
• Business Transfers: Should bt8 be involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction. You will be notified in advance of any such change in ownership.

05 Data Security and Protection

Bt8 continuously invests in the latest security infrastructure to ensure your personal data is always protected. The following technical and organisational security measures are in place to safeguard your data.

• 256-bit SSL Encryption: All data transmitted between your device and bt8 servers is protected by 256-bit Transport Layer Security (TLS) encryption — the same security standard used by leading banking institutions worldwide.
• Encryption of Stored Data: Sensitive data stored in bt8's databases – including financial information and identity documents – is protected with AES-256 encryption.
• Strict Access Controls: Only authorised bt8 staff who require access for work purposes may view your personal data. All access is logged and continuously monitored.
• Two-Factor Authentication (2FA): bt8 fully supports 2FA for user accounts to ensure unauthorised access cannot occur even if your password is compromised.
• Regular Security Audits: The bt8 platform undergoes periodic independent security audits by certified cybersecurity firms to identify and address any potential vulnerabilities.
• 24/7 Monitoring: The bt8 security team continuously monitors systems to detect and respond to any security threats promptly.

While bt8 takes all reasonable steps to protect your data, no security system can be guaranteed to be perfect. We encourage you to also take your own protective measures, such as using a strong password and enabling 2FA.

06 Cookies and Tracking Technologies

Bt8 uses cookies and similar tracking technologies to enhance your experience on our platform, analyse usage patterns, and maintain the security of your session. Below are the types of cookies we use.

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymous information about how you use the platform – pages visited, time spent and any errors encountered – to help us improve performance and user experience.
• Functional Cookies: Saving your preferences such as language, display theme and other personal settings so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Helping bt8 understand how players interact with the platform as a whole to make better development decisions. All analytics data is processed in aggregate and anonymised form.

07 Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and bt8's policies, you have important rights regarding your personal data held by bt8. We fully respect these rights and will process every request promptly.

To submit any request related to the rights above, contact the bt8 customer support team via live chat on the platform. We will process your request within 30 business days of receipt, in accordance with Malaysia's PDPA requirements.

08 Data Retention Period

Bt8 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. Our general retention policy is as follows.

• Active Account Data: Personal data for active accounts is retained for as long as your account remains active and for a minimum of 7 years after account closure for legal compliance purposes.
• Financial Transaction Records: All financial transaction records are retained for a minimum of 7 years in compliance with Malaysian legal requirements on financial records and anti-money laundering.
• KYC Data: Identity verification documents are retained for 5 years after the business relationship ends, or longer if required by applicable law.
• Technical Logs: Server logs, security logs and other technical data are typically retained for 90 days for troubleshooting and security purposes, unless a longer retention period is required for ongoing investigations.
• Communication Data: Customer support conversation records are retained for 2 years for service quality purposes and to resolve any disputes that may arise.

09 Cross-Border Data Transfers

In the course of its global operations, bt8 may transfer your personal data to servers or service providers located outside Malaysia. In all such cases, bt8 ensures that such data transfers are carried out with adequate safeguards.

• All international data transfers are conducted only to countries or entities that provide a level of data protection equivalent to or higher than Malaysia.
• Bt8 maintains comprehensive data processing agreements with all international service providers to ensure your data is protected to the strictest standards.
• You have the right to obtain information about the safeguards applied to any international data transfers by contacting our privacy team.

10 Children's Privacy

The bt8 platform is strictly for users aged 18 and above. bt8 does not intentionally collect, process, or store personal data from individuals under the age of 18.

If we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. If you believe a child has registered a bt8 account, please contact us immediately via live chat.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how bt8 handles your personal data, or if you wish to exercise any of your privacy rights, our team is ready to assist through the following channels.

• Live Chat 24/7: The fastest way to get help – access live chat directly within the bt8 platform.
• Email: [email protected] – We will respond to privacy enquiries within 2 business days.
• Official Complaints: For formal privacy complaints, submit a written request to the bt8 Data Protection Officer via the email address above.

You also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe that bt8 has violated your privacy rights under PDPA 2010.