ATM8 Privacy Policy – Malaysian User Data Protection

1 Introduction

ATM8 ("we", "our platform") is the data controller responsible for personal information collected through our betting platform. We operate in accordance with the Personal Data Protection Act (PDPA) 2010 of Malaysia and relevant international standards for user data protection.

This policy covers all services provided by ATM8, including sports betting, casino games, promotions, and any interaction you have with our support team. If you have any concerns about how we handle your personal data, do not hesitate to contact us.

2 Information We Collect

ATM8 collects your personal information through several means: directly from you, automatically while you use the platform, and through trusted third-party sources. The types of information we collect are as follows:

We only collect information that is strictly necessary for the purposes stated in this policy. We do not collect sensitive information such as biometric data or medical records unless required by law.

3 How We Use Your Data

The information we collect is used for the following purposes, all aimed at delivering the best experience to you as an atm8 member:

• Account Management: Create, verify, and manage your member account, including required KYC processes.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions securely and accurately.
• Service Delivery: Enable you to access all games, sports betting markets, and promotions available on the platform.
• Security & Fraud Prevention: Detect and prevent fraudulent activity, money laundering, and unauthorised access.
• Service Communications: Send important notices relating to your account, transactions, or platform changes.
• Marketing Communications: Notify you about promotions, bonuses, and the latest offers (with your consent).
• Platform Improvement: Analyse usage patterns to improve performance and user experience on atm8.
• Legal Compliance: Fulfil legal and regulatory obligations and requirements from relevant enforcement agencies.

4 Sharing Information with Third Parties

ATM8 does not sell or trade your personal information. However, in certain situations, we may need to share your information with the following parties:

• Payment Service Providers: Financial information required to process deposits and withdrawals is shared with our payment providers, who have undergone rigorous security assessments.
• Game Software Providers: Minimum necessary data shared with gaming platform providers to enable access to casino and sports games.
• KYC Service Providers: Your identity verification documents are shared with a trusted, licensed KYC provider for verification purposes only.
• Law Enforcement Agencies: ATM8 will disclose the required information if directed by a court, regulatory body, or competent law enforcement agency.
• Business Partners: In the event of a merger, acquisition, or business restructuring, your information may be transferred to the succeeding entity, subject to equivalent privacy protections.

All third parties we work with are required to comply with strict confidentiality and security policies. They are only permitted to use your data for agreed purposes and may not use it for their own benefit.

5 Data Security

ATM8 invests seriously in cybersecurity infrastructure to ensure your data remains protected at all times. The technical and organisational measures we employ include:

• 256-bit SSL encryption for all data transmitted between your device and atm8 servers.
• Encryption of data at rest — all sensitive information is stored in encrypted format within our database.
• Multi-layered access control — only authorised staff with a legitimate business need may access user data.
• 24/7 Monitoring by our cybersecurity team to detect and respond to any immediate threats.
• Regular security audits by independent parties to identify and address system vulnerabilities.
• Two-factor authentication (2FA) available on all member accounts to add an extra layer of protection.

6 Cookies & Tracking Technologies

ATM8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Help us understand how users interact with the platform for continuous improvement.
• Functional Cookies: Save your preferences such as language, layout, and display settings for a more convenient experience.
• Analytics Cookies: Used to analyse traffic patterns and platform usage on an aggregated, anonymised basis.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the ATM8 platform. For more information on managing cookies, refer to your web browser's guide.

7 Your Rights Over Personal Data

As an atm8 user in Malaysia, you have the following rights regarding your personal data:

To submit any request related to your privacy rights, please contact the atm8 support team. We will process your request within 14 business days. In complex cases, this period may be extended to 30 days with prior notice to you.

8 Data Retention Period

ATM8 retains your personal data only for as long as necessary to fulfill the purposes stated in this policy or as required by Malaysian law.

• Active Account Data: Retained for as long as your account remains active and for a reasonable period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian accounting and tax legal requirements.
• KYC Records: Retained for a minimum of 5 years after account closure in accordance with anti-money laundering requirements.
• Communication Logs: Retained for 2 years for dispute resolution and service improvement purposes.
• Technical Data: System logs and analytics data are retained for 12 months before being deleted or anonymised.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be personally linked to you.

9 Children's Privacy

The atm8 platform is intended for adults aged 18 years and above only. We do not intentionally collect, use, or store personal information of individuals under the age of 18.

If we discover that we have collected personal information from anyone under the age of 18, we will take immediate steps to delete that information and close the relevant account. Parents or guardians who believe their child has registered on our platform are encouraged to contact us immediately.

10 Links to Third-Party Sites

The atm8 platform may contain references or descriptions relating to third-party services such as game providers or payment providers. This Privacy Policy applies solely to the atm8 platform and does not cover the privacy practices of any third party.

ATM8 is not responsible for the privacy practices or content of third parties. We encourage you to read the privacy policy of each third-party service you use separately.

11 Privacy Policy Amendments

ATM8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technology in use. You will be notified of any significant amendments via:

• A clear notice on the atm8 platform homepage.
• Email to the address registered in your account.
• In-platform or atm8 mobile app notifications.

Your continued use of the atm8 platform after any amendments are published constitutes your acceptance of the updated policy. The "Updated" date at the top of this document indicates the current version in effect.

12 Contact Us About Privacy

If you have any questions, concerns, or requests regarding your privacy and personal data protection, the atm8 team is here to help. We are committed to addressing every inquiry promptly and transparently.

For general questions about the platform, visit our FAQ or check our Terms & Conditions for more information.