Privacy Policy c8vip – How We Protect Your Data

C8vip ("we", "the platform" or "c8vip") takes data protection seriously. This Privacy Policy has been prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international standards for information security.

This policy applies to all personal information collected from you when you register a c8vip account, use the platform for Sports Betting, Live Casino, virtual sports, or any other games, make deposits or withdrawals in MYR, or contact our customer support team.

The term "personal data" in the context of this Policy refers to any information that can identify you, directly or indirectly, as an individual — including your name, phone number, email address, MyKad number, financial information, and platform usage data. c8vip acts as the Data Controller as defined under Malaysia's PDPA for all member personal data collected through our platform.

Continued use of the c8vip platform after any changes to this Privacy Policy are published will be considered acceptance of the updated terms. We recommend reviewing this page periodically to stay informed about how we protect your privacy.

C8vip collects several categories of information to deliver a secure, seamless, and personalised experience to our Malaysian members. Here is a breakdown of the data we collect:

C8vip not store your credit card number, debit card number, or e-wallet password directly. All payment processing via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks) is handled by payment service providers holding the relevant security certifications.

The information you provide to us must be accurate, complete, and up to date. If any of your details change, please update your c8vip account or contact our customer support team promptly.

Every piece of data collected by c8vip has a clear and legitimate purpose. We use your information solely for the following:

• Account management: Creating, verifying, and maintaining your c8vip account, including the KYC process required under our compliance obligations.
• Transaction processing: Processing deposits in RM, withdrawals to Malaysian bank accounts and e-wallets, and settling your betting winnings accurately and securely.
• Provision of gaming services: Providing access to Sports Betting (Malaysia Super League football, EPL, badminton), Live Casino, virtual sports, blackjack, and all other games available on c8vip.
• Security and fraud prevention: Detecting and preventing fraud, money laundering, multiple account usage, and any activity that violates c8vip's Terms & Conditions.
• Customer support: Handling enquiries, complaints, and support requests submitted via live chat, email, or Telegram in Bahasa Melayu.
• Service communications: Sending important account notifications, security alerts, terms updates, and promotional information (where you have opted in to receive them).
• Platform improvements: Analysing aggregate usage patterns (not individual behaviour) to improve platform performance, refine the user interface, and develop better new features.
• Legal compliance: Meeting reporting obligations to relevant Malaysian authorities as required by law, including Anti-Money Laundering (AML) and Counter Financing of Terrorism (CFT) requirements.

C8vip does not sell, rent, or transfer your personal data to any third party for their own marketing or business purposes. We only share information in limited, necessary circumstances as outlined below:

• Payment service providers: Information required to process deposit and withdrawal transactions is shared with our payment providers: FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay. All these providers are bound by strict confidentiality agreements and comply with Malaysia's financial industry data security standards.
• Licensed game providers: Minimum session data required for technical functionality is shared with licensed live casino providers such as Evolution Gaming, Ezugi, and SA Gaming. This data does not include your financial details or full identity information.
• Malaysian government authorities: c8vip is required to disclose information to the relevant authorities upon lawful request — including Bank Negara Malaysia, the Royal Malaysia Police, and the Inland Revenue Board — in the context of financial crime investigations, money laundering, or terrorism financing.
• Identity verification services: Only the minimum data required for KYC and age verification is shared with approved identity verification service providers, who operate under strict compliance requirements.

In all data-sharing arrangements, c8vip ensures that recipients are contractually bound to protect your information and use it solely for the stated purpose. c8vip is not responsible for the privacy practices of third parties operating under their own separate privacy policies.

C8vip employs multiple layers of technical and organisational security controls to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All communications between your browser and c8vip's servers are encrypted using 256-bit SSL/TLS — the same level of security used by leading banking institutions in Malaysia.
• Secure password storage: Your password is never stored in plain text. We use a strong one-way hashing algorithm with a unique salt for each user.
• Role-based access controls: Access to member data is strictly limited to c8vip staff who require it to perform their specific duties. All access is logged and continuously monitored.
• Regular security audits: c8vip conducts regular security testing and third-party audits to identify and address technical vulnerabilities before they can be exploited.
• 24/7 Monitoring: Automated monitoring systems operate around the clock to detect unusual activity, suspicious login attempts, and any potential security threats.
• Two-factor authentication (2FA): Members are encouraged to enable two-factor authentication on their c8vip account for an additional layer of security.

C8vip uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. We use three categories of cookies:

To manage or delete c8vip cookies, you can use the privacy settings in your web browser (Chrome, Firefox, Safari, Edge) or mobile app. Please note that deleting essential cookies will require you to log in again and may affect certain platform functions.

C8vip retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. Our data retention guidelines are as follows:

Once the retention period expires, or after an account is closed and all compliance obligations have been met, your personal data will be securely deleted or irreversibly anonymised. c8vip follows industry-standard data deletion procedures to ensure that deleted data cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by c8vip. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, contact the c8vip data protection team by email at support@c8vip.best by clearly stating your request. We will process valid requests within a reasonable timeframe and notify you of any limitations or exemptions that may apply.

The c8vip platform is exclusively for users aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

All account registrations require age verification via a valid Malaysian MyKad number. Our KYC process is designed to detect and prevent registration attempts by underage individuals. Should we determine that collected data belongs to a person under 18 years of age, we will take the following immediate action:

• Immediately closing the account in question without prior notice.
• Deleting all personal data associated with the account within a reasonable timeframe, subject to any mandatory reporting obligations.
• Withholding any remaining balance in the account while an investigation is ongoing, pending a final decision on whether the funds will be returned or forfeited.

Parents or guardians who suspect that their child or dependent has registered a c8vip account without authorisation should contact us immediately via support@c8vip.best for immediate action to be taken.

C8vip reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, Malaysian legal requirements, or relevant technological developments. When significant changes are made, we will:

• Updating the "Updated" date at the top of this page.
• Posting an in-platform notification on c8vip or sending an email to members affected by material changes.
• In the event of highly material changes, we will seek your renewed consent before those changes take effect.

It is your responsibility to review this Privacy Policy page periodically. Continued use of the c8vip platform after any changes are published will be considered acceptance of the revised terms. If you do not agree with any amendments, please stop using the platform and contact us to close your account.

For any inquiries, concerns, or requests relating to this Privacy Policy or the handling of your personal data by c8vip, please contact us through the following channels:

• Email: support@c8vip.best — please include "Privacy Inquiry" in your email subject line
• Live Chat: Available 24 hours a day, 7 days a week via the c8vip website or app in Bahasa Melayu
• Target response time: Privacy inquiries — within 3 business days; urgent cases — within 24 hours

We are committed to handling all privacy inquiries with transparency and due care. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) under the Ministry of Communications Malaysia, which is responsible for enforcing the PDPA 2010.