8fafafa Privacy Policy

1. Introduction

8fafafa ("8fafafa", "we", "us", or "our") is the operator of the online gaming platform accessible at https://8fafafa.win (the "Platform"). 8fafafa acts as the data controller in respect of personal data collected through the Platform.

This Privacy Policy applies to all members, visitors, and users who interact with any part of the 8fafafa Platform, including account registration, deposits and withdrawals, gameplay, promotional participation, customer support interactions, and general website browsing.

By using the 8fafafa Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the 8fafafa Terms & Conditions, which govern your overall use of the Platform.

2. Personal Data We Collect

8fafafa collects personal data through several channels, including directly from you during registration and account use, automatically through your use of the Platform, and from third-party payment and identity verification providers.

2.1 Data You Provide Directly

• Full legal name, date of birth, and gender;
• Malaysian MyKad number, passport number, or equivalent government-issued ID number;
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya);
• Email address and phone number;
• Username and encrypted password;
• Payment method details (e.g., Touch n Go eWallet account reference, Boost account reference, Maybank account number, CIMB or FPX banking details) — note: 8fafafa does not store full card numbers or banking passwords;
• Copies of identity and address verification documents submitted during KYC;
• Communications sent to 8fafafa support via live chat or email.

2.2 Data Collected Automatically

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session duration, pages visited, and navigation paths within the Platform;
• Game activity, bet history, win/loss records, and session logs;
• Cookie and tracking technology data (see Section 6).

2.3 Data from Third Parties

8fafafa may receive personal data from third-party identity verification providers, payment processors, fraud prevention services, and, where applicable, responsible gaming organisations — solely for the purposes described in this Policy.

3. How 8fafafa Uses Your Personal Data

8fafafa processes personal data only for specific, legitimate purposes. We do not sell your personal data to third parties. The primary purposes for which 8fafafa uses your personal data are:

• Account Management — Creating, maintaining, and administering your 8fafafa member account;
• Identity Verification (KYC) — Verifying that you meet 8fafafa's 21+ age requirement and confirming your identity as required by our gaming licensing obligations;
• Payment Processing — Processing MYR deposits and withdrawals via your nominated payment method (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, FPX);
• Platform Delivery — Providing you with access to 8fafafa games, sportsbook, promotions, and all Platform features;
• Customer Support — Responding to your enquiries and resolving complaints via live chat and email;
• Security & Fraud Prevention — Detecting, investigating, and preventing fraudulent activity, account compromise, money laundering, and other prohibited conduct;
• Regulatory Compliance — Meeting our obligations under applicable gaming licensing requirements, including transaction reporting and responsible gaming obligations;
• Responsible Gaming — Monitoring gameplay patterns for signs of problem gambling and facilitating member self-exclusion and limit-setting tools;
• Marketing Communications — Sending you promotional offers, bonus alerts, and platform updates where you have consented to receive such communications. You may withdraw marketing consent at any time by contacting 8fafafa support.

4. Legal Basis for Processing

8fafafa processes your personal data on the following legal bases:

• Contractual necessity — Processing required to perform the contract between you and 8fafafa (i.e., providing the Platform services you have registered for);
• Legal obligation — Processing required to comply with applicable gaming licensing regulations, anti-money laundering requirements, and age verification obligations;
• Legitimate interests — Processing for fraud prevention, platform security, and improvement of our services, where those interests are not overridden by your privacy rights;
• Consent — Processing for marketing communications and non-essential cookies, where you have provided explicit consent.

5. Data Sharing & Disclosure

8fafafa does not sell, rent, or trade your personal data. We may share your data with the following categories of third party only where necessary and proportionate:

• Payment Service Providers — Touch n Go, Boost, Maybank, CIMB, Public Bank, and FPX operators, for the sole purpose of processing your transactions;
• Identity Verification Services — Third-party KYC providers who assist 8fafafa in verifying member identities and ages;
• Gaming Software Providers — Game studios that supply content to the 8fafafa Platform may receive minimum necessary session data for game delivery and RNG integrity purposes;
• Regulatory & Law Enforcement Authorities — Where required by law, court order, or our gaming licensing authority;
• Professional Advisers — Legal, accounting, and auditing firms, under confidentiality obligations.

All third-party service providers engaged by 8fafafa are contractually bound to process personal data only as instructed and to maintain appropriate security standards.

6. Cookies & Tracking Technologies

8fafafa uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. The types of cookies used by 8fafafa include:

• Strictly Necessary Cookies — Required for Platform functionality, including maintaining your logged-in session and security token. These cannot be disabled.
• Performance & Analytics Cookies — Used to understand how members use the Platform, which pages are most visited, and where technical errors occur. Data collected is aggregated and anonymised where possible.
• Functional Cookies — Used to remember your preferences (e.g., language, game lobby layout) to personalise your Platform experience.

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect Platform functionality. A full cookie notice is displayed on your first visit to the 8fafafa Platform.

7. Data Retention

8fafafa retains your personal data for as long as is necessary for the purposes described in this Policy, or as required by applicable law and our gaming licensing obligations. As a general guide:

• Account data is retained for the duration of your membership and for a minimum of five (5) years following account closure, as required by anti-money laundering regulations;
• Transaction records (deposits, withdrawals, bet history) are retained for a minimum of five (5) years;
• KYC documents are retained for the period mandated by our gaming licensing authority;
• Support communications are retained for a minimum of two (2) years.

Upon expiry of the applicable retention period, 8fafafa will securely delete or anonymise your personal data.

8. Your Data Rights

Depending on applicable law, you may have the following rights in respect of your personal data held by 8fafafa:

• Right of Access — Request a copy of the personal data 8fafafa holds about you;
• Right to Rectification — Request correction of inaccurate or incomplete personal data;
• Right to Erasure — Request deletion of your personal data, subject to legal retention obligations;
• Right to Restrict Processing — Request that 8fafafa limits how it uses your data in certain circumstances;
• Right to Data Portability — Request a machine-readable copy of data you have provided to 8fafafa;
• Right to Object — Object to processing based on legitimate interests, including for direct marketing purposes;
• Right to Withdraw Consent — Withdraw consent for marketing communications at any time without affecting prior processing.

To exercise any of these rights, contact the 8fafafa Data Privacy team at [email protected]. 8fafafa will respond to verified requests within thirty (30) calendar days.

9. Data Security

8fafafa implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 8fafafa Platform;
• Encrypted storage of passwords using industry-standard one-way hashing algorithms;
• Access controls limiting personal data access to authorised 8fafafa personnel on a need-to-know basis;
• Regular penetration testing and security audits of the Platform;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

Notwithstanding these measures, no method of transmission over the internet or electronic storage is completely secure. You are responsible for maintaining the security of your 8fafafa login credentials and must notify 8fafafa immediately if you suspect any unauthorised access to your account.

10. Children's Privacy

The 8fafafa Platform is strictly prohibited for persons under the age of 21. 8fafafa does not knowingly collect personal data from individuals below this age. If 8fafafa becomes aware that personal data has been submitted by a person under 21, the account will be immediately suspended, all data will be deleted, and any funds will be returned to the originating payment method where legally and technically feasible. If you believe a minor has submitted data to 8fafafa, please contact us immediately at [email protected].

11. Third-Party Links

The 8fafafa Platform may contain links to third-party websites or services for reference purposes. 8fafafa is not responsible for the privacy practices or content of those third-party sites. This Privacy Policy applies solely to data collected by 8fafafa through the Platform. We encourage you to review the privacy policies of any third-party services you access.

12. Changes to This Privacy Policy

8fafafa reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered members via their account email address and/or through a prominent notice on the Platform. The revised Policy will indicate the updated "Last Updated" date at the top of the document. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the changes.

13. Contact & Data Privacy Enquiries

For any questions, requests, or complaints regarding this Privacy Policy or 8fafafa's data processing practices, please contact us through the following channels:

If you are not satisfied with 8fafafa's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.