How satu8 Collects, Uses and Protects Your Information

Definitions and Data Controller

In this Privacy Policy, “satu8”, “we”, “us” and “our” refer to the entity responsible for determining how personal information is used in connection with the satu8 platform. “You”, “your”, “user” and “player” refer to any individual whose information is processed. “Personal information” means data that identifies, relates to or can reasonably be associated with an individual.

“Processing” includes collecting, recording, organising, storing, reviewing, using, sharing, correcting, restricting and deleting information. “Service provider” means an organisation that processes information to support services such as website hosting, identity verification, fraud prevention, payments, customer support or game operation.

Information We May Collect

The information collected by satu8 depends on how you interact with the platform. Visitors who only read general guidance may provide less information than registered users who make payments or request account support.

satu8 may also process information supplied during KYC or source-of-funds reviews. This can include proof of address, bank records or evidence concerning transaction ownership. Users should provide only the documents requested through an appropriate secure process.

How Information Is Collected

satu8 may collect information directly when you register, update account details, complete verification, make a deposit, request a withdrawal, set a gambling limit or contact support. Information may also be generated automatically when you use the website, including device data, login history, page activity and transaction records.

Data may be received from payment processors, e-wallet providers, banks, game suppliers, identity verification services, fraud prevention systems and other parties involved in delivering or securing satu8 services. For example, a transaction through Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX may generate a payment reference and confirmation status.

satu8 may combine information from these sources when necessary to verify identity, reconcile MYR payments, investigate unusual activity or answer a support request. Any combination will remain subject to the purposes and safeguards described in this Privacy Policy.

Purposes of Data Processing

satu8 may process personal information to:

• create, verify, administer and secure user accounts;
• provide casino, live dealer and sports betting functionality;
• record transactions, settle bets and maintain accurate balances;
• process MYR deposits, withdrawals, refunds and payment enquiries;
• detect fraud, collusion, account takeover and prohibited activity;
• perform age, identity, payment ownership and source-of-funds checks;
• respond to support requests and resolve account complaints;
• manage bonuses, loyalty activity and stated communication preferences;
• apply deposit limits, cooling-off periods and self-exclusion controls;
• improve performance, accessibility and mobile usability; and
• meet record-keeping, legal, compliance and dispute obligations.

Processing may be necessary to provide requested services, comply with a legal obligation, protect legitimate security and operational interests, or act with consent where consent is the appropriate basis. Where satu8 relies on consent, you may withdraw it for future processing, although prior lawful processing remains unaffected.

Payment and Financial Information

satu8 may process information relating to deposits and withdrawals through Malaysian banks such as Maybank, CIMB, Public Bank and Hong Leong Bank, as well as e-wallet or transfer options including Touch 'n Go eWallet, Boost, GrabPay, DuitNow and FPX. Information may include the method, account holder name, masked account details, MYR amount, timestamp, payment reference and transaction outcome.

Payment details may be checked against registered account information to reduce fraud and confirm ownership. satu8 does not need users to disclose online banking passwords, e-wallet PINs or one-time verification codes. Users must never provide those credentials in a support message.

Cookies, Device Data and Similar Technologies

satu8 may use cookies, local storage and similar technologies to keep sessions secure, remember preferences, measure website performance and identify unusual access patterns. Essential technologies may be required for login, navigation, security controls and account functionality.

Analytics information may show which pages are viewed, how long they take to load and the general type of device used. satu8 may use this information to improve mobile access for users in Kuala Lumpur, Penang, Johor Bahru and elsewhere, but analytics should not be used to create misleading claims about individual behaviour.

Browser settings may allow you to block or remove certain cookies. Disabling essential cookies can prevent login or cause some satu8 features to function incorrectly. Cookie choices may not remove transaction records or other information retained for security and legal purposes.

When Information May Be Shared

satu8 does not sell personal information as a routine business activity. Information may be shared where reasonably necessary with vetted providers supporting hosting, cybersecurity, customer service, identity verification, payments, fraud monitoring, game delivery, professional advice or platform maintenance.

Providers should receive only information relevant to their role and must handle it under appropriate contractual and security requirements. Payment providers may receive details needed to complete or investigate a transaction. Game or sports suppliers may receive account identifiers and activity records required for settlement or dispute review.

satu8 may also disclose information when legally required, to protect users or the platform, to investigate suspected crime, or in connection with a legitimate corporate reorganisation. Where permitted, reasonable steps will be taken to assess the necessity and scope of the disclosure.

International Data Transfers

Some satu8 systems, service providers or operational teams may be located outside Malaysia. As a result, personal information may be transferred to or accessed from another jurisdiction with different data protection rules.

When international processing occurs, satu8 aims to use reasonable contractual, organisational and technical safeguards appropriate to the information and associated risk. These may include confidentiality duties, restricted access, encryption and requirements governing further disclosure.

Data Retention

satu8 retains personal information for as long as reasonably necessary to provide services, maintain account and transaction records, prevent fraud, enforce agreements, resolve complaints and meet applicable legal or compliance requirements. Different categories may have different retention periods.

Closing an account does not always result in immediate deletion. Identity, payment, responsible gambling and dispute records may need to remain available after closure. For example, self-exclusion data may be retained so that satu8 can continue recognising and applying the exclusion.

When information is no longer reasonably required, satu8 may delete it, anonymise it or securely restrict further processing. Anonymised information that can no longer identify a user may be retained for statistical, security or service improvement purposes.

Information Security

satu8 uses reasonable administrative, technical and organisational measures intended to protect personal information against loss, unauthorised access, alteration, disclosure and destruction. Measures may include SSL encryption, access controls, monitoring, account verification, secure backups and staff confidentiality requirements.

No online system can guarantee absolute security. Users also have an important role: create a unique password, secure the registered mobile device, sign out from shared devices and never disclose a password or one-time code. If you suspect unauthorised access, contact satu8 and change affected credentials promptly.

satu8 may investigate suspected data incidents, restrict account access and notify affected persons or relevant authorities when notification is required and appropriate.

Responsible Gambling Information

satu8 may process deposit patterns, time spent, betting frequency, losses, limit changes, support interactions and self-exclusion requests to administer responsible gambling measures. This information may be used to identify indicators of potential harm, apply requested controls or initiate a welfare-related account review.

A self-exclusion record may be retained even when other account information is no longer active. This helps satu8 prevent prohibited re-registration and honour the user’s request. Responsible gambling information is treated as sensitive operational data and access should be limited to personnel or providers who require it.

Automated indicators may support a review, but significant decisions should include appropriate human consideration where reasonably possible. Users can review available safer-play information through the Responsible Gambling page.

User Rights and Requests

Depending on the applicable legal framework and circumstances, you may have rights to request access to personal information, correction of inaccurate information, deletion, restriction, objection, portability or withdrawal of consent. Not every right applies in every case.

satu8 may request proof of identity before acting on a privacy request. This protects account information from unauthorised disclosure. A request may be limited or refused where retention is required for fraud prevention, responsible gambling, legal claims, transaction records or other lawful reasons.

Requests should describe the information or action concerned and include a safe way to identify the relevant account. Do not provide a password, e-wallet PIN or one-time verification code.

Age Restriction and Underage Data

satu8 gambling services are intended only for adults aged 21 and above. satu8 does not knowingly permit a person under 21 to open or use a gambling account. Age verification may be requested during registration, payment review or at any other appropriate time.

If satu8 identifies an underage account, access may be suspended while the circumstances are investigated. Personal information may be retained where necessary to prevent repeat registration, handle transactions, protect the person concerned or meet legal obligations.

Changes to This Privacy Policy

satu8 may update this Privacy Policy when services, technologies, security practices or legal requirements change. The effective date at the top of the page will be revised when an updated policy is published.

Material changes may also be highlighted through the website or account interface where appropriate. Users should review this page periodically. Continued use after an updated policy becomes effective acknowledges the revised processing description, although fresh consent will be requested where required.

Contact Us

Questions or requests concerning this Privacy Policy may be directed to the satu8 support team. Include a clear description of the issue and enough account information for the request to be located safely. Additional identity verification may be required before personal information is disclosed or changed.

Website email: [email protected]. This address is displayed as plain text and is not a clickable link. Malaysia service hours are 24 hours daily, including weekends and public holidays.