BT8 Privacy Policy – Data Protection for Malaysian Players

BT8 collects your personal information through several channels as you use our platform. The types of data collected are as follows:

Account Registration Information:

• Full name as it appears on your Malaysian identity document (MyKad or passport).
• An active Malaysian mobile number for OTP verification.
• A valid and active email address.
• Date of birth for age verification (must be 18 years of age or older).
• Your chosen password (stored as a cryptographic hash — we cannot see your actual password).

Financial & Payment Information:

• Bank account numbers or eWallet details used for deposits and withdrawals — including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks).
• Deposit and withdrawal transaction history in Malaysian Ringgit (MYR).
• Information required for KYC (Know Your Customer) and AML (Anti-Money Laundering) compliance procedures.

Platform Usage Data:

• Gaming history including games played, bets placed, and winnings received.
• IP address, device type, operating system, and web browser used to access BT8.
• Session data including login times, session duration, and pages visited within the platform.
• Technical information collected through cookies and similar tracking technologies.

The personal data we collect is used solely for legitimate purposes directly related to operating the BT8 platform. Below is a specific list of how your data is used:

• Account management — verifying your identity, creating and maintaining your BT8 account, enabling secure login, and managing your profile information.
• Financial transaction processing — processing deposits and withdrawals in RM via available Malaysian payment methods, maintaining accurate transaction records, and complying with financial reporting requirements.
• Fraud prevention and security — detecting and preventing fraudulent activity, multiple account usage, bonus abuse, and any unlawful activity involving the platform.
• Legal compliance — fulfilling AML, KYC, and applicable regulatory reporting obligations.
• Customer service — enabling BT8's support team to assist you with troubleshooting, enquiries, and dispute resolution effectively.
• Service-related communications — used to send account-related notifications, transaction confirmations, security updates, and promotional information (subject to your communication preferences).
• Platform improvements — analyses usage patterns on an aggregated and anonymised basis to improve the design, speed, and features of the BT8 platform.

BT8 does not sell or rent your personal data to any third party. However, in certain situations, we may need to share some information with the parties listed below:

• Payment service providers — required transaction details are shared with providers such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX-participating banks to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements and receive only the data necessary to complete the relevant transaction.
• Game software providers — technical data required to run gaming sessions may be shared with BT8's game providers. They do not receive personally identifiable information such as your name or phone number.
• Regulatory authorities — BT8 complies with all regulatory reporting requirements mandated by law. Where required, we will disclose the necessary information to the relevant authorities.
• Legal investigations — account and transaction information may be disclosed to law enforcement authorities where a valid court order exists or where a financial crime investigation is underway.

In all of the above circumstances, BT8 discloses only the minimum data necessary and maintains a record of every disclosure made. You will be notified of any disclosure involving your data where permitted by applicable law.

BT8 continually invests in security infrastructure to ensure your data is protected at every level. The following are the key security measures we have in place:

• 256-bit SSL Encryption — all communication between your device and BT8's servers is protected with the highest level of encryption. Our SSL certificate is regularly audited by independent third parties.
• Hashed password storage — your password is never stored in plain text. It is converted into a one-way cryptographic hash that cannot be reversed, even by BT8's own technical team.
• Real-time threat monitoring — BT8's security systems monitor login activity, suspicious access attempts, and unusual transaction patterns 24 hours a day, 7 days a week.
• Internal access controls — only specifically authorised BT8 staff may access player data, and every instance of access is recorded in a tamper-proof audit log.
• Regular penetration testing — independent security teams conduct regular penetration testing to identify and patch any vulnerabilities before they can be exploited.
• Environment segregation — player withdrawal data is stored in a server environment isolated from other platform components, reducing the risk of inadvertent exposure.

The BT8 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. The following are the types of cookies we use:

• Session cookies (required) — used to maintain your logged-in status during an active session. Without this cookie, you would be required to log in again each time you navigate between pages. This cookie is deleted automatically when you close your browser.
• Preference cookies (optional) — stores your preferences such as interface language and preferred game level so you do not need to reconfigure them each time you log in.
• Analytics cookies (optional) — collecting aggregated, anonymised usage data to help us understand how users interact with the BT8 platform. This data contains no personally identifiable information.
• Security cookies (essential) — used to detect suspicious login attempts, protect against cross-site request forgery (CSRF) attacks, and ensure the integrity of your session.

You can manage or delete cookies through your browser settings at any time. However, deleting required cookies may affect core BT8 platform functions such as keeping you logged in. For optional cookies, you may decline them without affecting the platform's primary functions.

As a BT8 user, you hold the following rights regarding your personal data, and we are committed to respecting and facilitating the exercise of these rights:

• Right to access — you may request a complete copy of all personal data we hold about you. This request will be fulfilled within 30 business days.
• Right to rectification — if any of your personal data is inaccurate or out of date, you have the right to request a correction. For basic account information, you can update it directly through your BT8 account panel.
• Right to erasure — you may request the deletion of your personal data when it is no longer required for the stated purposes, subject to any legal retention obligations that may require us to keep certain records for a specified period.
• Right to restrict processing — you may request that we restrict the processing of your data in certain situations, such as while you are disputing the accuracy of that data.
• Right to object — you may object to the processing of your data for specific purposes such as marketing communications, and we are obliged to honour that objection.
• Right to data portability — you may request your data in a structured, machine-readable format (such as CSV or JSON) for transfer to another service, where this is technically feasible.

To exercise any of the rights above, contact the BT8 privacy team at support@bt8.in stating the type of request and your account information for identity verification. We may require additional identity verification before processing requests that involve the disclosure or deletion of sensitive data.

BT8 is an adult entertainment platform that strictly prohibits use by anyone under the age of 18. This policy is absolute and has no exceptions.

• BT8 does not knowingly collect personal data from anyone under the age of 18.
• If we discover that data belonging to a person under the age of 18 has been collected inadvertently, that data will be deleted immediately and the relevant account will be closed without delay.
• Parents or guardians who become aware that a minor under their care has registered on BT8 are requested to contact us at support@bt8.in immediately so that account closure and data deletion can be carried out without delay.

BT8 applies age verification checks during registration and KYC procedures to ensure compliance with this policy. However, technology alone cannot replace the responsibility of parents in monitoring their children's online activities.

BT8 retains your personal data for as long as necessary to fulfil the stated purposes of collection, subject to legal requirements that may mandate retention for a longer period. Our specific retention policy is as follows:

• Active account data — retained for as long as your account remains active on BT8. You may request account closure and data deletion at any time.
• Financial transaction records — retained for a minimum of seven (7) years from the date of the transaction to meet Malaysian legal and financial regulatory compliance requirements.
• KYC records and identity verification — retained for a minimum of five (5) years following account closure to comply with international AML requirements.
• Security and audit logs — retained for two (2) years for security investigation and dispute resolution purposes.
• Marketing and communications data — retained until you withdraw your consent to receive such communications.

Once the retention period has expired or upon your request for deletion (subject to legal obligations), your data will be securely deleted using methods that ensure it cannot be recovered.

BT8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear in-platform notification when you next log in, if the changes materially affect how we handle your data.
• Sending an email to your registered address at least seven (7) days before any significant changes take effect.

Your continued use of the BT8 platform after any amendments take effect will be considered acceptance of the updated policy. If you do not agree with the changes, please stop using the platform and contact us to close your account. All previous versions of this Privacy Policy are available upon request at support@bt8.in for reference.

If you have any questions, concerns, or requests regarding BT8's Privacy Policy or how we handle your personal data, we encourage you to reach out to us through the following channels:

• Email: support@bt8.in — for written privacy inquiries, data access requests, or data deletion requests. We aim to respond within 48 working hours.
• Live Chat: available within the BT8 platform 24 hours a day, 7 days a week in Bahasa Melayu — for immediate enquiries related to your privacy or account security.

BT8's privacy team consists of staff specifically trained in data handling and privacy protection. All privacy enquiries are handled with full confidentiality and professionalism. We are committed to providing meaningful responses — not automated replies — to every enquiry concerning your personal data.