Plae8 Privacy Policy – Malaysian Member Personal Data Protection

01 Introduction & Scope of This Policy

Plae8 is an online entertainment platform operating in Malaysia via the website plae8.fun. We are committed to protecting the privacy of every individual who interacts with our platform, whether as a casual visitor or a registered member.

This Privacy Policy was drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best-practice data protection standards. It covers all aspects of personal data processing by plae8 across:

• The plae8.fun website and all associated pages.
• The plae8 mobile app for Android and iOS.
• All services and platform features available to members.
• Communications between plae8 and members across all available channels.

By using the plae8 platform in any form, you acknowledge that you have read and understood this Privacy Policy and agree to be bound by its contents. If you do not agree, please stop using the platform and contact us to close your account.

02 Types of Personal Data We Collect

Plae8 only collects data that is strictly necessary to provide our members with a safe, fair, and legally compliant service. Below is a comprehensive overview of the data we process:

We do not collect sensitive data such as your health information, religious beliefs, or political views. All data collected is processed solely for the purposes stated in this policy.

03 Purpose of Data Collection and Processing

Plae8 uses members' personal data responsibly and only for legitimate purposes. The following are the primary purposes for which we collect data:

Account Management & Identity Verification

We require your identity information to create and manage your plae8 account, ensure account security, and carry out the KYC process as required by law. This process helps us verify that you are a legitimate individual and meet the minimum age requirement of 18 years.

Financial Transaction Processing

Your financial data is used to securely process deposits and withdrawals, verify bank account ownership, and detect and prevent any suspicious fraudulent or money laundering activity.

Platform Service Provision

Usage and technical data help us deliver a smooth gaming experience, ensure optimal platform performance, resolve technical issues quickly, and personalise the platform interface to your preferences.

Communication & Customer Support

We use your contact information to send important account notices, keep you informed about the latest promotions and offers (if you have opted in), and provide effective customer support.

Responsible Gaming

Your gaming behaviour data is analysed to detect any concerning patterns and enable us to offer assistance or remind you of the self-control tools available at plae8.

04 Legal Basis for Data Processing

Plae8 processes your personal data on the following legal bases as provided under Malaysia's Personal Data Protection Act 2010:

• Consent: You provide explicit consent when registering an account and agreeing to this Privacy Policy. You may withdraw your consent at any time, though this may limit your ability to use certain platform features.
• Contract Fulfillment: Processing is necessary to fulfill the agreement between you and plae8, including the processing of financial transactions and providing access to the platform.
• Legal Obligation: plae8 is required by law to retain certain records, carry out KYC procedures, and report suspicious activity to the relevant authorities.
• Legitimate Interests: We process certain data based on legitimate business interests, such as fraud prevention, platform security enhancement, and service performance analysis — provided these interests do not override your fundamental rights.

05 Data Sharing with Third Parties

Plae8 does not sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent. However, in certain limited situations, we may share your data with the following parties:

• Payment Service Providers: Transaction information is shared with trusted payment processors to enable deposits and withdrawals to be handled securely. All such providers are bound by strict confidentiality agreements.
• KYC Verification Providers: Identity documents are shared with licensed identity verification partners to carry out KYC checks as required by law.
• Gaming Platform Providers: Minimum technical data is shared with game software providers to ensure a smooth and fair gaming experience.
• Regulatory Authorities: plae8 will disclose required data to law enforcement agencies, regulatory authorities, or courts when mandated by applicable laws in Malaysia.
• Analytics Providers: Anonymised usage data is shared with web analytics providers to help us understand usage patterns and improve platform performance.

All third parties receiving your data from plae8 are required to protect it in accordance with security standards equivalent to or higher than those we uphold ourselves.

06 Data Retention & Security Measures

The security of your personal data is plae8's highest priority. We implement multiple layers of technical and organizational safeguards to keep your data secure at all times.

• 256-bit SSL Encryption: All data transmitted between your device and plae8 servers is protected with industry-grade SSL/TLS encryption, making it unreadable to unauthorized parties during transit.
• Secure Server Storage: Data is stored in data centres equipped with strict physical and digital access controls, including intrusion detection systems and 24-hour monitoring.
• Internal Access Controls: Only plae8 staff who genuinely need access to specific data to perform their duties are permitted to do so — based on the principle of least privilege.
• Periodic Backups: Critical data is regularly backed up to separate locations to ensure service availability and rapid recovery in the event of any unexpected incident.

Data Retention Period

Plae8 retains your personal data for as long as your account is active or as required to provide our services. Following account closure, certain data will be retained for the minimum period prescribed by Malaysian law — typically between 5 and 7 years — for regulatory compliance and fraud prevention purposes. After this period, your data will be securely deleted or anonymised.

07 Use of Cookies and Tracking Technologies

Plae8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform operations such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Save your preferences such as language, display settings, and other options to provide a more personalized experience.
• Analytics Cookies: Helps us understand how members use the platform, which pages are most popular, and where any technical issues occur — all for the purpose of continuous improvement.
• Marketing Cookies: Used to display relevant promotions to you based on your interests and usage behaviour on the plae8 platform.

You can manage or disable cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality of some platform features.

08 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by plae8:

To exercise any of the rights above, please contact our privacy team via support email. We will process your request within 30 business days. In certain situations where legal obligations prevent us from fully fulfilling your request, we will notify you clearly.

09 Child Data Protection

The plae8 platform is exclusively for individuals aged 18 years and above. We do not intentionally collect, process, or store personal data of individuals under the age of 18.

Should we discover that a minor's personal data has been collected without our knowledge — whether through age misrepresentation during registration or any other means — we will immediately:

• Freeze and close the account in question.
• Immediately delete all associated data.
• Return any funds held in that account to the rightful parent or guardian.

If you believe a child has registered an account at plae8, please contact us immediately so that appropriate action can be taken without delay.

10 Changes to the Privacy Policy

Plae8 reserves the right to update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or the latest industry standards. Whenever a material change is made, we will:

• Update the "Last Updated" date shown at the top of this page.
• Display a clear notice on the platform's home page for a minimum of 14 days.
• Send a notification to members via their registered email if the changes directly affect their privacy rights.

It is your responsibility to review this page periodically. Continued use of the plae8 platform after the effective date of any changes will be deemed as your acceptance of the updated Privacy Policy.

11 Contact Our Privacy Team

If you have any questions, concerns, or wish to exercise your rights as a data subject under the Personal Data Protection Act 2010, the plae8 privacy team is ready to assist you.

You can reach us via the in-platform live chat, available 24/7, or through our dedicated privacy email:

Please clearly state the type of request (data access, correction, deletion, etc.) and include your account details so we can process it efficiently. We are committed to responding within 5 business days for general enquiries and 30 business days for formal data rights requests.