Privacy Policy
How abn8 Handles Your Data

Introduction

This Privacy Policy ("Policy") sets out how abn8 ("we", "us", "our", "the Platform") collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("you", "User", "Player") who access or use the abn8 platform at https://abn8.cam.

abn8 is committed to protecting the privacy and personal data of all users. This Policy has been prepared with awareness of the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable data protection obligations. We encourage you to read this Policy carefully before using the Platform.

By registering an account on abn8, depositing funds, or otherwise accessing the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, please cease using the Platform and contact us to arrange account closure.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and behavioural data attributable to an individual.
• "Processing" means any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means abn8, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third-party entity that processes personal data on behalf of abn8 under a data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their personal data for a stated purpose.
• "KYC" means Know Your Customer — the identity and document verification process conducted by abn8 to comply with anti-money laundering and regulatory obligations.
• "Platform" means the abn8 website at https://abn8.cam and any associated mobile applications or digital services operated by abn8.

Data We Collect

abn8 collects personal data from you directly when you register an account, complete KYC verification, make financial transactions, or contact our support team. We also collect certain data automatically through your use of the Platform. The categories of data we collect include:

Data Processing & Legal Basis

abn8 processes personal data only where a lawful basis for doing so exists. The legal bases upon which we rely are:

• Contractual Necessity: Processing required to register your account, verify your identity, execute deposits and withdrawals in MYR, and otherwise fulfil our obligations under the Platform's Terms & Conditions.
• Consent: Where we rely on your consent — for example, for marketing communications or the use of non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Legal Obligation: Processing necessary to comply with applicable law, including anti-money laundering (AML) obligations, counter-terrorism financing (CTF) regulations, and KYC requirements.
• Legitimate Interests: Processing necessary for the purpose of abn8's legitimate business interests, including fraud prevention, Platform security, responsible gambling monitoring, and service improvement — provided such interests are not overridden by your fundamental rights and freedoms.

Where processing is based on consent, a clear consent mechanism will be presented at the point of data collection. You are never required to provide consent for processing beyond what is necessary to deliver the core Platform services.

Purposes of Processing

abn8 uses your personal data for the following purposes:

• Account Management: To create, verify, maintain, and manage your abn8 account, including identity verification through KYC and processing changes to your account settings.
• Transaction Processing: To process your deposits and withdrawals in MYR through your selected payment channel (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank), and to maintain accurate financial records.
• Customer Support: To respond to your queries, complaints, and support requests submitted via live chat, WhatsApp, or email to [email protected].
• Regulatory Compliance: To satisfy our legal obligations relating to AML, CTF, sanctions screening, and responsible gambling monitoring — including the detection and reporting of suspicious transactions.
• Platform Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gambling: To monitor gameplay patterns and, where appropriate, flag accounts that may exhibit signs of problem gambling — enabling us to offer self-exclusion tools, deposit limits, or direct outreach to responsible gambling resources.
• Service Improvement: To analyse aggregated, anonymised usage data to improve Platform performance, game selection, payment experience, and overall user satisfaction.
• Marketing (Consent Only): Where you have opted in, to send you promotional offers, bonus notifications, and news relevant to your abn8 account. You may opt out at any time by contacting [email protected].

Data Sharing & Third Parties

abn8 does not sell, rent, or commercially disclose your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following limited circumstances:

• Payment Processors: Your transaction data is shared with regulated payment processors to execute deposits and withdrawals. These processors operate under binding data processing agreements and their own regulatory obligations.
• KYC and Identity Verification Providers: Identity documents and verification data may be shared with licensed third-party KYC providers to complete the identity verification process required by law.
• Game Content Providers: Certain gameplay data may be shared with our game content partners for the purpose of delivering the gaming experience. This data is anonymised or pseudonymised where possible.
• Fraud Prevention and Security Services: Technical and behavioural data may be shared with fraud prevention providers to identify and block suspicious activity on the Platform.
• Legal and Regulatory Authorities: abn8 will disclose personal data to law enforcement agencies, regulators, or courts where required to do so by applicable law, court order, or regulatory instruction. We will notify you of such disclosures where permitted to do so by law.
• Professional Advisers: Lawyers, auditors, and compliance consultants may have access to personal data on a strictly need-to-know basis, subject to professional confidentiality obligations.

Data Retention

abn8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an individual. Anonymised or aggregated data may be retained indefinitely for statistical or analytical purposes.

Data Security

abn8 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit Transport Layer Security (TLS) encryption for all data in transit between your device and the Platform.
• Encryption at rest for all sensitive personal data stored on abn8 infrastructure.
• Two-factor authentication (2FA) available for all user accounts and enforced for administrative access to data systems.
• Access controls ensuring that personal data is accessible only to staff and processors who require it to perform their specific functions.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• An incident response plan providing for prompt identification, containment, and notification in the event of a personal data breach.

While abn8 applies industry-standard security practices, no digital system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or interests, abn8 will notify you without undue delay and in accordance with applicable notification obligations.

Cookies & Tracking Technologies

abn8 uses cookies and similar tracking technologies on the Platform to ensure functionality, maintain your session, and where you have consented, to improve your experience and analyse Platform usage. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable core features such as account login, session management, and security controls. They cannot be disabled.
• Functional Cookies: Allow the Platform to remember your preferences, language settings, and personalised configurations to provide a more consistent experience across sessions.
• Analytics Cookies (Consent Required): Used to collect anonymised data on how users interact with the Platform, including pages visited, session duration, and navigation paths. This data helps us identify areas for improvement. These cookies are only activated with your explicit consent.
• Security and Fraud Detection Cookies: Help identify and prevent fraudulent access attempts, bot activity, and other security threats in real time.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the Platform. Consent for analytics cookies can be withdrawn at any time without affecting your access to core services.

Minors & Age Restriction

The abn8 Platform is strictly for individuals who are 21 years of age or older. abn8 does not knowingly collect personal data from anyone under the age of 21. Age is verified as part of the mandatory KYC process and is enforced without exception.

If abn8 discovers or is credibly informed that personal data has been collected from an individual below the age of 21, the associated account will be suspended immediately, all personal data will be deleted to the extent permitted by legal retention obligations, and any funds in the account will be returned after applicable verification.

User Rights

Subject to applicable law and any overriding legal obligations (such as mandatory data retention for AML compliance), you have the following rights in relation to your personal data held by abn8:

To exercise any of these rights, please contact abn8's support team at [email protected]. Requests will be acknowledged within 24 hours and actioned within 30 calendar days. Where a request cannot be fulfilled — for example, due to a conflicting legal obligation — we will explain the basis for the refusal in writing.

Cross-Border Data Transfers

abn8 primarily stores and processes personal data within infrastructure accessible from Malaysia. However, certain third-party service providers engaged by abn8 — including KYC verification providers, fraud detection services, and game content platforms — may process personal data from locations outside Malaysia.

Where personal data is transferred outside Malaysia to jurisdictions that may not provide the same level of data protection as Malaysian law, abn8 ensures that appropriate safeguards are in place, including contractual obligations equivalent to applicable data protection standards, before any such transfer takes place.

You consent to the cross-border transfer of your personal data as described in this clause by using the abn8 Platform. If you have concerns regarding specific transfers, please contact us at [email protected] for further information.

Policy Amendments

abn8 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform services. Where amendments are material, registered users will be notified by email or in-platform notification at least fourteen (14) days before the revised Policy takes effect.

Non-material amendments — such as typographic corrections, formatting adjustments, or clarifications that do not alter the substance of any clause — may be made without advance notice. The "Last Updated" date at the top of this document will be revised following any amendment.

Your continued use of the abn8 Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, please cease using the Platform and contact us to arrange closure of your account.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a potential data protection concern, please contact abn8 through the following channels:

• Email: [email protected] — plain text, not a clickable link.
• Live Chat: Available on the Platform, 24 hours a day, 7 days a week.
• Languages Supported: English, Bahasa Melayu, and Mandarin.
• Response Commitment: All privacy-related requests acknowledged within 24 hours; substantive responses within 30 calendar days.

Where a complaint cannot be resolved directly with abn8 to your satisfaction, you may have the right to escalate the matter to the relevant regulatory authority in your jurisdiction. abn8 will cooperate fully with any such process.