Privacy Policy Star 8 — Malaysian Personal Data Protection

Star 8 ("we", "platform", "Star 8") takes the privacy and personal data protection of every member seriously. This Privacy Policy explains in detail how we collect, store, use, share, and protect your personal information when you use the Star 8 platform — whether through our website, mobile app, or any other channel.

This document has been prepared in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA), and we are committed to complying with all applicable data protection regulations in Malaysia. As a digital entertainment platform serving hundreds of thousands of Malaysian players, we understand how important your trust is when it comes to managing the personal data you provide us.

By using the Star 8 platform, registering an account, making deposits via Touch 'n Go, DuitNow, GrabPay, or any other method, or using any of our services, you consent to the collection and use of your personal data as described in this Privacy Policy.

Star 8 collects only the data necessary to provide, improve, and protect our services. The following are the categories of data we collect:

Your personal data is collected through the following channels when you interact with Star 8:

• Account registration — information you fill in on the Star 8 registration form
• KYC (Know Your Customer) Process — identity verification documents you have submitted
• Financial transactions — data generated from deposits and withdrawals via Malaysian payment methods
• Platform usage — automated activity data such as game logs, clicks, and session duration
• Customer support interactions — live chat conversations, emails, and WhatsApp exchanges with our team
• Cookies and tracking technologies — data collected automatically through your browser or app (see Section 7)
• Promotions and contests — information you provide when participating in Star 8 promotions

Star 8 uses your personal data only for the following legitimate and stated purposes:

• Verifying your identity and preventing fraud and money laundering
• Processing account registrations, deposits, and withdrawals in Malaysian Ringgit (MYR)
• Offering gaming and Sports Betting services covering Malaysia Super League, EPL, badminton, e-sports, and more
• Managing the VIP programme and calculating daily automatic cashback
• Sending important account-related communications (security notifications, transaction confirmations)
• Sending Star 8 promotional information and offers (with your consent only)
• Improving the platform, identifying technical issues, and optimising the user experience
• Complying with legal requirements, regulatory obligations, and court orders
• Implementing responsible gaming measures, including detection of concerning gameplay patterns

Star 8 may share your personal data with selected third parties only in the following situations and under the following conditions:

• Payment providers — Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX to process your financial transactions
• Technology service provider — companies that assist in operating Star 8's technical infrastructure under strict confidentiality agreements
• Game providers — gaming software companies that provide slots, Live Casino, and other games on the Star 8 platform
• Legal authorities — law enforcement agencies, regulatory bodies, or courts when required under Malaysian law

• Star 8 does not sell your personal data to any party
• Star 8 does not share your data with advertisers for marketing purposes
• Star 8 does not permit third parties using your data beyond the scope specified

Star 8 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL encryption for all data transmitted between you and Star 8's servers
• Encryption of sensitive data stored in our databases
• Role-based access control — only authorised staff may access your personal data
• Two-factor authentication (2FA) for platform administrator accounts
• Regular security audits by independent third parties
• 24/7 monitoring for suspicious activity across our systems
• Well-defined and tested security incident response procedures

Star 8 uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

You can manage or disable optional cookies through your browser settings. However, disabling essential cookies may affect the functionality of the star 8 platform.

As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by Star 8:

Star 8 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by Malaysian law. The following are our data retention guidelines:

• Active account data — retained for the duration your account remains active on star 8
• Financial transaction records — retained for 7 years in accordance with Malaysian financial regulatory requirements
• KYC and identity verification data — retained for 7 years from the date of account closure
• Customer support communication logs — retained for 3 years
• Analytics data and technical logs — retained for 12 months, then anonymised
• Marketing data — retained until you withdraw consent

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you personally.

In operating the Star 8 platform, your personal data may be transferred to and processed in countries outside Malaysia. This may occur in connection with the use of cloud services or international gaming software providers.

In all cases of cross-border data transfers, star 8 ensures that:

• Transfers are only made to countries or organisations that provide adequate data protection
• Binding data processing agreements are signed with all recipients of data outside Malaysia
• The same or higher security standards are applied to all parties that handle your data

Star 8 strictly does not provide services to individuals under the age of 18. Our platform does not knowingly collect, process, or store personal data of children or minors.

Should we discover that personal data of a minor has been collected without valid knowledge or consent, we will:

• Immediately close the account in question
• Immediate deletion of all related data
• Notify the relevant authorities where required by law

Star 8 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or developments in the services we offer. Any material changes will be communicated to members via:

• In-platform notifications on star 8 upon next login
• Email to the address registered to your account
• Prominent notice on the star8.click homepage

The "Last Updated" date at the top of this document will always reflect the latest version of the Privacy Policy. Your continued use of the Star 8 platform after any changes take effect will be considered acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the Star 8 Data Privacy Officer (DPO):

• Privacy-specific email: privacy@star8.click
• General support: support@star8.click
• Live Chat on the Star 8 platform (24/7)

We are committed to responding to all privacy-related enquiries within 21 working days. For more complex complaints, we will keep you informed of the expected resolution timeline.