Privacy Policy Mahkota 8 — Malaysia Personal Data Protection

Mahkota 8 collects various categories of personal data depending on the nature of your interaction with our platform. The categories we collect are as follows:

Your personal data is collected through the following means:

A. Directly from You

• During the new account registration process at Mahkota 8
• When you update your profile information or account settings
• When you make a deposit or withdrawal request via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX (Maybank2u / CIMB Clicks)
• When you contact our customer support via live chat, email or WhatsApp
• When you participate in promotions, lucky draws or rewards programmes
• During the KYC verification process when required

B. Automatically

• Through cookies and tracking technologies used on our platform
• Server logs recording IP addresses, device types and usage patterns
• Game and betting activity data recorded automatically by our system

C. From Third Parties

• Identity verification service providers for the KYC process
• Authorised Malaysian payment gateway providers
• Fraud prevention and anti-money laundering agencies

Mahkota 8 uses your personal data for the following purposes, all of which are lawful under PDPA 2010:

• Service provision: Creating and managing your member account, enabling access to all games and platform features.
• Transaction processing: Processing deposits and withdrawals via accepted Malaysian payment methods.
• Identity verification (KYC): Meeting legal compliance obligations under anti-money laundering (AML) and counter-terrorism financing (CFT) regulations.
• Security and fraud prevention: Identifying, investigating, and preventing fraudulent activity, money laundering, and platform abuse.
• Customer support: Responding to enquiries, resolving complaints, and providing technical assistance to members.
• Service improvement: Analysing usage patterns to improve the platform, introduce new features, and personalise the user experience.
• Marketing communications: Sending information about mahkota 8 promotions, bonuses, and new offers to members who have given their consent.
• Legal compliance: Meeting reporting obligations to relevant regulatory authorities in Malaysia.

You may withdraw your consent to marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting our customer support team.

Mahkota 8 does not sell, rent or trade your personal data to third parties for their own marketing purposes. However, we may share your personal data in the following limited circumstances:

• Accountable service providers: Third-party companies that assist us in delivering our services, such as payment processing (DuitNow and FPX gateways), identity verification, server hosting and technical support. All such providers are bound by strict confidentiality agreements.
• Legal requirement: When required by a Malaysian court, tribunal, or regulatory authority through a valid order or directive.
• Financial crime prevention: To bodies such as Bank Negara Malaysia or the Royal Malaysia Police (PDRM) in cases of suspected money laundering or financial fraud.
• Protection of vital interests: In emergency situations to protect your safety or the safety of others.

Mahkota 8 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

Technical Security

• Data encryption in transit using 256-bit SSL/TLS protocols
• Data encryption at rest using AES-256 standard
• Multi-layered firewall and intrusion detection systems (IDS/IPS)
• 24/7 security monitoring by our cybersecurity team
• Two-factor authentication (2FA) for system admin access
• Regular vulnerability scanning and penetration testing

Organisational Security

• Minimum access principle — staff are granted access only to the data necessary for their role
• Data protection training for all staff who handle personal data
• Strict computer and mobile device usage policy
• Regular security assessments of all third-party providers

Mahkota 8 uses cookies and similar tracking technologies to enhance your experience on our platform. We use several types of cookies:

You can manage cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the Mahkota 8 platform and your gaming experience. We do not use third-party advertising cookies or ad networks on our platform.

Your personal data is primarily stored and processed within Malaysia. However, in certain circumstances, data may need to be transferred to servers located outside Malaysia — for example, for data backup purposes or the use of cloud computing services.

Any transfer of personal data outside Malaysia is carried out in accordance with Section 129 of the PDPA 2010, which requires:

• The destination country has a level of data protection equivalent to Malaysia
• Or where adequate contractual safeguards are in place with the data recipient
• Or you have given your consent to such a transfer

Mahkota 8 retains your personal data for as long as necessary for the purpose of processing, or as required by law. Our data retention guidelines are as follows:

Once the retention period expires, your personal data will be securely deleted using methods that meet industry security standards, or anonymised where the data is needed for statistical or internal research purposes.

As a Mahkota 8 member and data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal data:

For any enquiries, concerns or requests relating to this Privacy Policy or your personal data, please contact the Mahkota 8 Data Protection Officer (DPO) through the following channels:

If you are dissatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body responsible for enforcing PDPA 2010.

Mahkota 8 reserves the right to update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or the technologies we use. The latest version of this policy is always available on this page with a clearly marked update date.

For material and significant amendments, we will provide advance notice via:

• Notification banner on the Mahkota 8 homepage
• Email to the registered address of affected members
• In-account notice upon next login

Continued use of the mahkota 8 platform after the effective date of any amendment will be deemed acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.