Time8 Privacy Policy – Personal Data Protection for Malaysian Players

1 Introduction

Welcome to the time8 Privacy Policy. This document is time8's official statement of our commitment to protecting the privacy and personal data of every player using our platform in Malaysia.

Time8 ("we", "the Company", or "the Platform") is an online betting platform operating in Malaysia, offering a wide range of services including slots, Live Casino, poker, football betting, virtual sports, and e-sports. In the course of our operations, we collect and process players' personal information to ensure a secure, efficient, and personalised experience.

This Privacy Policy explains in detail:

• The types of personal data we collect from you.
• The purposes for which we use your data and how it is used.
• The parties who may be granted access to your data.
• The security measures we take to protect your data.
• Your rights as a data subject under PDPA 2010.

2 Personal Data We Collect

Time8 collects various types of personal data depending on how you interact with our platform. Below is a summary of the data we collect:

We only collect data that is necessary for legitimate and specific purposes. Time8 does not collect sensitive data such as players' medical information, religious beliefs, or political affiliations.

3 How We Use Your Personal Data

Time8 uses the personal data collected for the following legitimate purposes. We ensure that all data usage is proportionate to its intended purpose and does not exceed what is reasonably necessary:

• Account Management: Creating, verifying, and managing your player account on the time8 platform.
• Transaction Processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks, and securely manages withdrawals in MYR.
• Identity Verification (KYC): Verifying your identity to meet anti-money laundering (AML) compliance requirements and to prevent fraud.
• Service Delivery: Gives you access to all games and features on the time8 platform, including slots, Live Casino, Poker, Malaysia Super League and EPL Sports Betting, and virtual sports.
• Customer Support: Responding to your enquiries, complaints, and support requests via live chat, email, or WhatsApp in Bahasa Melayu.
• Platform Security: Detecting and preventing fraud, collusion, bonus abuse, and cybersecurity threats.
• Personalise Your Experience: Delivering game recommendations, promotions, and relevant content based on your preferences and gaming habits.
• Marketing Communications: Sending information about time8 promotions, bonuses, and exclusive offers – only with your consent, and you may unsubscribe at any time.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate support.
• Legal Compliance: Fulfilling the legal and regulatory obligations applicable to time8's operations in Malaysia.

4 Data Sharing With Third Parties

Time8 does not sell, rent, or trade player personal data to any third party for marketing purposes. However, we may share your data with selected parties in the following circumstances:

• Payment Service Providers: Transaction information is shared with e-wallet and banking providers such as Touch 'n Go, GrabPay, and banks under FPX to process deposits and withdrawals in MYR.
• Game Providers: Game session data is shared with our game software providers to deliver a seamless gaming experience and ensure game integrity.
• Identity Verification Services: KYC data is shared with authorised third-party identity verification service providers to meet AML/KYC compliance requirements.
• Legal Authorities: We may be required to disclose player data to Malaysian authorities such as the police, courts, or regulatory bodies where mandated by law or court order.
• Analytics Services: Anonymised technical data may be shared with analytics service providers to help us understand usage patterns and improve the platform.

All third parties that receive time8 player data are bound by strict data protection agreements and are required to handle that data to the same or higher security standards that we apply.

5 Data Security

Protecting your personal data is a top priority at time8. We implement multiple layers of technical and organisational security to prevent unauthorised access, loss, or misuse of your data:

• 256-bit SSL Encryption: All communications between your browser and the time8 servers are encrypted using industry-standard TLS/SSL protocols – the same standard used by major Malaysian banking institutions.
• Stored Data Encryption: Sensitive data such as payment details and identity information is stored in encrypted form within our secured databases.
• Access Control: Access to player data within time8's internal systems is restricted to staff who require it to carry out their duties, governed by strict role-based access controls (RBAC).
• Two-Factor Authentication (2FA): We encourage and support the use of 2FA on all player accounts to add an extra layer of security.
• 24/7 Monitoring: Our security systems continuously monitor platform activity to detect and respond to security threats in a timely manner.
• Regular Security Audits: We conduct regular penetration testing and security audits through independent third-party specialists.

While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. If you suspect your account has been compromised, please contact us immediately at support@time8.my.

6 Cookies & Tracking Technologies

Time8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

• Essential Cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
• Performance Cookies: Collects anonymised data on how players use the platform to help us improve our services. This includes information on pages visited and time spent.
• Functional Cookies: Saves your preferences such as language, display settings, and game choices to provide a more personalised experience.
• Analytics Cookies: Helps us understand aggregated platform usage patterns for the purpose of continuous improvement.

You can manage your cookie settings through your web browser. Disabling certain cookies may affect the functionality of the time8 platform. For more information on how to manage cookies, refer to your web browser's documentation.

7 Player Rights Under PDPA 2010

As a time8 player whose personal data we process, you hold certain rights under Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to making it easy for you to exercise these rights:

8 Data Retention Period

Time8 retains player personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law:

• Active Account Data: Retained for as long as your account remains active on the time8 platform.
• Financial Transaction Data: Retained for a minimum of 7 years from the transaction date, in line with Malaysian financial and tax regulatory requirements.
• KYC Records: Retained for a minimum of 6 years after account closure to meet AML compliance requirements.
• System Log Data: Retained for 12 months for security and investigation purposes.
• Support Communications: Retained for 2 years for reference and service improvement purposes.

When data is no longer needed and there is no legal requirement to retain it, we will securely delete or anonymise it using industry-recognised methods.

9 Links to Third-Party Websites

The time8 platform may contain links to third-party websites or services. This Privacy Policy applies solely to the time8 platform and does not cover the privacy practices of any third-party websites.

We are not responsible for the content, privacy policies, or practices of any third-party websites you may access through links on our platform. We encourage you to read the privacy policy of every website you visit.

10 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way we handle your personal data, please contact our Data Protection Officer through the following channels:

• Email: support@time8.my (subject: "Privacy Policy Enquiry")
• Live Chat: Available 24/7 on the time8 platform
• Response Time: Within 3 business days for privacy-related enquiries

If you are unsatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection under the Ministry of Communications and Digital Malaysia.

Time8 reserves the right to amend this Privacy Policy from time to time to reflect changes in our services, legal requirements, or industry practices. Any material changes will be communicated to you via email or in-platform notification at least 7 days before taking effect.