Uea8 Privacy Policy – Personal Data Protection for Malaysian Players

Uea8 is an online betting platform operating to serve players in Malaysia. As the platform operator, uea8 acts as the data controller, bearing full responsibility for the processing of personal data collected through our platform — including the website, mobile application, and all communication channels used to interact with players.

This Privacy Policy applies to all individuals who register a uea8 account, use our services even without full registration, contact our customer support, or interact with our platform in any way. It covers all personal data we collect directly from you as well as data collected automatically through your use of the platform.

We are committed to ensuring that your personal data is processed lawfully, fairly, transparently, and in compliance with applicable data protection laws in Malaysia. Your privacy is not merely a legal obligation to us — it is a core value we uphold in every aspect of uea8's platform operations.

Uea8 collects personal data from you in two primary ways: directly when you provide information during registration or platform use, and automatically through background technologies that operate while you use our services.

Uea8 uses collected personal data for legitimate and specific purposes only. We do not use your data for any purpose beyond what is stated here without first obtaining your additional consent.

• Account Management: Creating and maintaining your account, verifying your identity, processing logins, and ensuring ongoing account security.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as managing winning withdrawals accurately and promptly.
• Legal Compliance: Meeting anti-money laundering (AML) compliance obligations, the Know Your Customer (KYC) process, and other applicable statutory reporting requirements.
• Customer Support: Handling your enquiries, complaints and support requests more efficiently when we have a history of your interactions with the platform.
• Platform Improvements: Analysing usage patterns on an aggregated, non-personal basis to understand the most useful features and identify areas for improvement.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, bonus abuse, money laundering, and other security threats to the platform and player community.
• Service Communications: Sending important account-related notifications such as deposit confirmations, withdrawal updates, password changes, and security alerts.
• Responsible Gaming: Monitoring betting activity patterns to identify early signs of problem gambling and offer appropriate support to players who may need assistance.

Every instance of personal data processing carried out by uea8 has a valid legal basis. This means we do not process your data arbitrarily – every use of data is legally justified. The primary legal bases we rely on are as follows:

• Consent: For marketing communications and any data processing that is not required for the platform's core functions. You provide this consent voluntarily and may withdraw it at any time.
• Contract Performance: Processing necessary to provide uea8's services to you — including account management, transaction processing, and customer support. Without this processing, we are unable to provide the services you have requested.
• Legal Obligations: Compliance with Malaysian laws that require us to collect, retain or disclose certain data – including applicable AML, KYC and tax reporting requirements.
• Legitimate Interests: Processing for platform security, fraud prevention, service improvement, and reasonable business risk management — without compromising your fundamental right to privacy.

Uea8 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Data sharing only occurs in limited situations with valid justification. The following are circumstances under which data may be shared:

• Payment Service Providers: E-wallet and internet banking providers such as Touch 'n Go eWallet, GrabPay, DuitNow, and Malaysian banks via FPX receive the transaction data necessary to process your deposits and withdrawals. These providers are governed by their own privacy policies and industry security standards.
• Platform Technology Providers: Third parties that assist us in managing the technical aspects of the platform — such as cloud service providers, fraud detection systems, and gaming software providers — may process certain data under uea8's instruction. All such third parties are bound by strict data processing agreements.
• Legal Authorities: uea8 may disclose data where required by court order, law enforcement investigation or applicable regulatory compliance requirements in Malaysia.
• Business Transfers: In the event of a merger, acquisition, or sale of business assets, player data may be transferred to the new entity — however, players will be notified in advance and their data rights will be upheld.

Uea8 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure. Data security is not something we take lightly — it is an ongoing investment that we actively prioritise.

• Data Transmission Encryption: All communication between your device and uea8's servers is encrypted using the Transport Layer Security (TLS) protocol with a 256-bit SSL certificate. This ensures that data transmitted — including passwords, payment details, and personal information — cannot be read by anyone who may intercept network traffic.
• Stored Data Encryption: Data stored on uea8 servers is encrypted using the Advanced Encryption Standard 256-bit (AES-256). This means that even if someone were to gain physical access to our data storage, the data cannot be read without the correct encryption key.
• Internal Access Controls: Access to player data within the uea8 organisation is restricted on a need-to-know basis. Only staff who require it to carry out their job responsibilities are permitted to access specific data, and all access is logged and audited.
• Continuous Threat Monitoring: uea8's security monitoring system operates 24 hours a day, 7 days a week to detect suspicious activity, intrusion attempts, and anomalies in data access patterns that may indicate a security threat.
• Regular Security Audits: uea8 conducts regular internal and external security audits to identify and address vulnerabilities before they can be exploited. Penetration testing is also carried out periodically.

Uea8 retains personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. Once data is no longer needed, it will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

• Active Account Data: For as long as your account remains active on the uea8 platform, core account data — including registration details, transaction history, and betting activity — will be retained to allow us to deliver a consistent service.
• Data After Account Closure: Upon account closure, certain data — particularly financial and transaction records — may need to be retained for a period stipulated by Malaysia's tax laws and AML compliance requirements, typically between 5 and 7 years.
• Technical Log Data: Technical logs and session data are typically retained for no more than 12 months, unless required for an ongoing security investigation or legal proceeding.
• Support Communication Data: Customer support conversation records are retained for 2 years from the date of interaction to allow for reference in the event of a dispute or follow-up complaint.

Uea8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you access our website or app. They help the platform run more efficiently and allow us to understand how the platform is being used.

• Session Cookies: Temporary cookies that are deleted when you close your browser. Used to maintain your login session as you navigate the uea8 platform and to ensure session security.
• Preference Cookies: Cookies that save your preferences such as language, display currency, and interface settings so you do not need to reconfigure them each time you access the platform.
• Analytics Cookies: Used to understand how players interact with our platform at an aggregate level — which features are used most frequently, common navigation paths, and any technical issues encountered. This data helps us enhance the overall user experience.
• Security Cookies: Helps identify suspicious activity and protect your account from unauthorised access or cyberattacks such as Cross-Site Request Forgery (CSRF).

You can manage your cookie settings through your browser — most modern browsers allow you to view, delete, and block cookies. Please note, however, that blocking certain cookies, particularly session and security cookies, may affect the functionality of the uea8 platform and your overall experience.

As an individual whose personal data is processed by uea8, you are entitled to certain protected rights. uea8 fully respects these rights and provides straightforward mechanisms for you to exercise them. Your rights are as follows:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Such requests will be fulfilled within 30 days of receipt.
• Right to Rectification: If your personal data held by uea8 is inaccurate or incomplete, you have the right to request a correction. You may also update basic information such as your phone number and email address directly through your account settings.
• Right to Erasure: Under certain circumstances, you have the right to request that uea8 delete your personal data. This right is subject to our legal obligations to retain certain data — we are unable to delete data required for legal compliance, such as financial records.
• Right to Restrict Processing: You may request that we restrict the processing of your data under certain circumstances, such as while a dispute regarding the accuracy of your data is being resolved.
• Data Portability Rights: You may request your data in a machine-readable format for transfer to another service provider, to the extent that this is technically feasible.
• Right to Object: You may object to the processing of your data for specific purposes, particularly direct marketing. Objections to marketing will be honoured immediately and without question.

To exercise any of the above rights, please contact us by email at support@uea8.run by stating the right you wish to exercise along with sufficient information for us to verify your identity. We will respond within 30 calendar days.

The uea8 platform is exclusively for individuals aged 18 and above. uea8 strictly prohibits any individual under the age of 18 from registering an account, accessing its services or interacting with the platform in any capacity.

Uea8 does not knowingly collect any personal data from children or minors. Should we discover that data has been collected from a minor without proper verification, we will take immediate action to delete that data and close the account in question.

If you are a parent or guardian and discover that your child under the age of 18 has registered or attempted to access the uea8 platform, please contact us immediately at support@uea8.run so that we can take the appropriate action promptly.

Uea8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, evolving legal requirements or improvements to how we protect your privacy. All amendments will be published on this page with a revised "Last Updated" date.

For material amendments — changes that significantly affect how we use your data or your rights — we will notify all registered members by email or in-platform notification at least 14 days before the amendment takes effect. This gives you sufficient time to review the changes and make an informed decision.

If you have any questions, concerns, or requests regarding this Privacy Policy or how uea8 handles your personal data, we encourage you to reach out to us directly. Our team is ready to assist and will provide a clear, helpful response.

For general privacy enquiries or to exercise your data subject rights, you may contact us via:

• Email: support@uea8.run – Please include "Privacy Enquiry" or "Data Subject Rights" in the subject line to ensure your enquiry is directed to the right team.
• Live Chat: Available 24 hours a day within the uea8 platform — ideal for immediate and general privacy-related enquiries.

We are committed to responding to all privacy-related enquiries within 30 calendar days of receipt. For more complex requests requiring thorough investigation, we will acknowledge receipt of your request within 7 days and provide a realistic estimated resolution timeframe.