Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how 8winrm ("we", "us", "our") collects, processes, stores, and shares personal data relating to users ("you", "Player", "Data Subject") who access or use the online gaming and sports betting services available at https://8winrm.cam and any associated mobile applications or subdomains (collectively, the "Platform").

This Policy is incorporated by reference into the 8winrm Terms and Conditions and should be read in conjunction with those terms. By registering an account on 8winrm, making a deposit, or otherwise using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

We are committed to handling your personal data in accordance with our international licensing obligations, applicable data protection frameworks, and the Personal Data Protection Act 2010 (Malaysia) ("PDPA") to the extent it applies to our operations.

Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

Data Controller

8winrm is the Data Controller for all personal data collected through the Platform. As Data Controller, we are responsible for determining the purposes and means by which your personal data is processed, and for ensuring that such processing is carried out lawfully, fairly, and transparently.

For matters relating to this Policy or your personal data, please contact our Privacy team using the details set out in Section 16 (Contact Us) of this document. We aim to respond to all privacy-related enquiries within five (5) business days.

Personal Data We Collect

We collect personal data in two principal ways: data you provide to us directly, and data collected automatically through your use of the Platform. The categories of data collected are set out in the table below.

Legal Basis for Processing

We process your personal data on the following legal grounds, depending on the specific purpose of processing:

How We Use Your Personal Data

We use your personal data for the following purposes:

• Account Management: Creating, verifying, and maintaining your 8winrm player account, including resetting credentials and updating account settings.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, bank transfers (Maybank, CIMB, Public Bank, RHB, Hong Leong), and cryptocurrency; and processing withdrawal requests to your registered payment methods.
• Identity & Age Verification: Verifying that you meet the minimum age requirement of 21 years and confirming your identity in accordance with our KYC obligations.
• Fraud Prevention & Security: Monitoring account activity to detect and prevent fraudulent transactions, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
• Customer Support: Responding to enquiries, resolving disputes, and following up on complaints submitted through live chat, email, or other support channels.
• Responsible Gambling: Operating deposit limits, loss limits, self-exclusion programmes, and other responsible gambling tools; monitoring for indicators of problem gambling behaviour.
• Legal & Regulatory Compliance: Retaining records as required under our international gaming licence, AML regulations, and any applicable Malaysian legislation including the PDPA.
• Platform Improvement: Analysing usage patterns, game performance, and withdrawal processing data to improve the quality and reliability of our services.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may opt out at any time.

Data Sharing & Third Parties

8winrm does not sell, rent, or trade your personal data to third parties for their independent commercial purposes. We share personal data with third parties only in the circumstances and to the extent described in this section.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with AML and licensing record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following the completion of the verification or the closure of the account, whichever is later.
• Transaction Records: Deposit, withdrawal, and betting history retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Records: Live chat transcripts and email correspondence retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Retained for the period during which you hold an account, plus one (1) year following account closure or consent withdrawal.
• Technical & Log Data: Server logs and IP address records retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an individual.

Data Security

8winrm implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or alteration. These measures include, but are not limited to:

• Encryption: All data transmitted between your device and our Platform is encrypted using TLS/SSL (256-bit) encryption protocols.
• Access Controls: Personal data is accessible only to authorised 8winrm staff who have a legitimate need to process it for the purposes described in this Policy. Access is governed by role-based permissions and regularly audited.
• Two-Factor Authentication (2FA): 2FA is available for player accounts and is strongly recommended to protect against unauthorised login.
• Payment Security: Financial data relating to bank accounts and e-wallet IDs is handled in accordance with applicable payment security standards. We do not store complete payment card numbers on our servers.
• Incident Response: We maintain documented data breach response procedures and will notify affected players and relevant authorities of any data breach in accordance with applicable obligations.

Cookies & Tracking Technologies

8winrm uses cookies and similar tracking technologies (including pixel tags and local storage) to enhance your experience on the Platform, maintain session state, and collect anonymous analytics data. The types of cookies we use are described below.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookie categories may affect your ability to use specific features of the Platform. Cookies are not used by 8winrm to serve third-party advertising targeted to individual user profiles.

Your Data Rights

Subject to applicable data protection law and our legitimate legal obligations, you have the following rights in relation to your personal data held by 8winrm:

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We may require verification of your identity before processing your request. There is no fee for exercising your rights under this Policy, except in cases of manifestly unfounded or excessive requests.

International Data Transfers

8winrm's operations involve the use of technology and service partners located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside of Malaysia. These may include countries where data protection laws differ from those applicable in Malaysia.

Where personal data is transferred to third-party service providers in other jurisdictions, we ensure that appropriate safeguards are in place — including contractual data processing agreements that require recipients to handle your data in accordance with standards equivalent to those described in this Policy. We do not transfer personal data to jurisdictions that have been assessed as providing inadequate data protection without implementing additional protective measures.

Minors & Age Restriction

The 8winrm Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you are prohibited from registering an account or using any service on the Platform.

If 8winrm becomes aware or reasonably suspects that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the personal data collected, return any deposits in accordance with our Terms and Conditions, and report the matter as required by our licensing obligations.

If you believe that a person under 21 in your household has accessed or registered on the Platform, please contact us immediately at [email protected] so that we can take prompt action.

Malaysian Personal Data Protection Act (PDPA)

The Personal Data Protection Act 2010 (PDPA) of Malaysia governs the processing of personal data in commercial transactions involving data subjects in Malaysia. To the extent that the PDPA applies to 8winrm's processing of your personal data, we observe the following PDPA principles:

• General Principle: We process personal data only with your consent or on another lawful ground as specified in the PDPA.
• Notice & Choice Principle: We inform you of the purposes for which your personal data is collected (as set out in this Policy) and provide you with a choice in relation to uses that are not necessary for the provision of our services.
• Disclosure Principle: We do not disclose your personal data to third parties for purposes other than those stated in this Policy without your consent, except as required by law.
• Security Principle: We implement technical and organisational measures to protect your personal data from loss, misuse, and unauthorised access as described in Section 9 of this Policy.
• Retention Principle: We retain personal data only for as long as necessary for the stated purpose or as required by law, as described in Section 8 of this Policy.
• Data Integrity Principle: We take reasonable steps to ensure that personal data we hold is accurate, complete, and up to date.
• Access Principle: You have the right to access and correct your personal data as described in Section 11 of this Policy.

Changes to This Policy

8winrm reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or operational requirements. Where changes are material, we will notify you via the Platform or by email to your registered address at least seven (7) days before the changes take effect.

The "Last Updated" date displayed at the top of this document reflects the date of the most recent revision. Minor clarifications that do not affect your rights or our data processing practices may be made without advance notice.

Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the Platform and contact us to close your account.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 8winrm, please contact our Privacy team using the details below. These contact details are provided as plain text for reference — they are not clickable links.

We will acknowledge your privacy-related enquiry or data rights request within two (2) business days and provide a substantive response within thirty (30) calendar days. For complex or voluminous requests, we may extend this period by a further thirty (30) days with notification.