Data Protection

Privacy Policy satu8 — Malaysia Player Data Protection

Your privacy is satu8's top priority. This document transparently explains how we collect, use and protect your personal information — so you can play with peace of mind and full confidence.

Updated: January 2026
satu8 Privacy Commitment
  • 256-bit SSL encryption for all data
  • Data is not sold to third parties
  • Periodic independent security audits
  • Full player rights for data access and deletion
  • Data storage with AES-256 encryption

How satu8 Protecting Your Data

Six layers of data protection to keep your information safe at all times

Banking-Grade Encryption

All data transmitted between your device and satu8 servers is protected with 256-bit SSL encryption — the same technology used by leading banking institutions in Malaysia.

Encrypted Database

Your personal and financial information is stored in an AES-256 encrypted database. Only authorised personnel with a specific need are permitted to access this data.

No Marketing Data Sharing

Satu8 never sells, rents, or shares players' personal data with third parties for marketing purposes. Your information stays exclusively within the satu8 ecosystem.

Secure & Integrated KYC

The identity verification (KYC) process at satu8 uses secure, encrypted channels. Your identification documents are processed in full compliance with international security standards.

Regular Security Audits

Satu8's security infrastructure is regularly assessed by independent third-party audit firms. This ensures our platform consistently meets the latest data protection standards.

Full Control of Your Data, in Your Hands

Satu8 players have the full right to access, amend and request deletion of their personal data at any time through our customer support channels.

Our Commitment: satu8 takes the responsibility of protecting your privacy seriously. This policy clearly explains what we do with your information — no confusing language, no hidden terms.
1

Introduction

This Privacy Policy is published by satu8 ("we", "Platform") and applies to all users who access or use the satu8 platform via satu8.win and related applications. We understand that your trust is our most valuable asset, and we will never take lightly the responsibility you place in us when sharing your personal information.

This document explains the types of data we collect, why it is needed, how it is used, and the concrete steps we take to keep your information safe at all times. We also outline the rights you hold as a satu8 player regarding your personal data.

By registering and using the satu8 platform, you agree to the processing of your personal data as described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

2

Personal Data We Collect

Satu8 only collects data that is genuinely necessary to deliver quality services and meet legal requirements. Below are the categories of data we collect:

Data Categories Example Requirements
Identity Full name, date of birth, MyKad/passport number Mandatory (KYC)
Relationship Phone number, email address Mandatory
Finance Bank account details, payment methods Mandatory (transactions)
Technical IP address, device type, web browser Automatic
Games Gaming history, deposits, withdrawals Automatic
Communication Support chat records, emails When applicable

We does not collect sensitive information such as biometric data, medical records, or credit card details directly — all payments are processed through certified, secure third-party payment gateways.

3

Data Usage Purpose

Every piece of data we collect has a clear and legitimate purpose. satu8 uses your information for the following:

  • Account management — Create and manage your player account, including secure login
  • Identity verification (KYC) — Verify your identity to meet legal compliance requirements
  • Transaction processing — Process deposits, withdrawals, and any other financial transactions
  • Customer service — Respond to enquiries, resolve complaints, and provide technical support
  • Platform security — Detect and prevent fraud, money laundering, and other illegal activities
  • Platform improvements — Analyse usage patterns to improve the user experience
  • Marketing communications — Send promotional information and exclusive offers (only if you opt in)
  • Legal compliance — Fulfil applicable legal and regulatory obligations
Your choices: You can stop receiving marketing communications at any time by updating your notification preferences in your account settings or by contacting the satu8 support team.
4

Data Sharing with Third Parties

Satu8 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, in certain situations, we may need to share your information with the following parties:

  • Payment service provider — Certified payment gateways (Maybank2u, CIMB Clicks, DuitNow, and others) to securely process your transactions
  • KYC service provider — Licensed identity verification platforms that help us validate your identification documents
  • Cloud service provider — Data storage infrastructure compliant with international security standards
  • Legal authorities — Law enforcement agencies or regulatory bodies when required by law
  • Auditors and professional advisors — Independent audit firms for compliance and security review purposes

All third parties we work with are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes. We ensure every partner upholds data protection standards equivalent to those of satu8.

5

Data Security Measures

Player data security is a top investment at satu8. We implement multiple layers of technical and organisational protection to ensure your information is safeguarded at all times:

  • 256-bit SSL encryption for all communications between your browser and satu8 servers
  • Password storage with bcrypt hashing — your password is not stored in readable form
  • Two-factor authentication (2FA) available to all player accounts
  • Account activity monitoring 24/7 to detect any suspicious access
  • Role-based access control — staff can only access data required for their specific duties
  • Incident response plan that has been thoroughly tested and documented
Security reminder: satu8 will never ask for your account password via email, chat, or phone. If you receive such a request, please report it to our security team immediately.

While we take all reasonable steps to protect your data, no system is 100% breach-proof. In the event of a data breach affecting your information, we will notify you within the timeframe required by applicable law.

6

Cookies and Tracking Technologies

Satu8 uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies we use:

  • Essential cookies — Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
  • Performance cookies — Collect information on how you use the platform to help us improve our services (anonymised data).
  • Functional cookies — Store your preferences such as language, theme, and other settings for your convenience.
  • Analytical cookies — Helps us understand aggregate platform usage patterns for continuous improvement.

You can manage cookie settings through your web browser at any time. However, disabling certain cookies may affect platform functionality. We do not use cookies to track your activity on other websites.

Session Cookies Aggregate Analytics User Preferences Security
7

Your Rights as a satu8 Player

As a satu8 player, you hold the following rights regarding your personal data. We fully respect and facilitate the exercise of these rights:

Right of Access

You have the right to request a copy of all personal data we hold about you. This request will be processed within 30 business days.

Right to Rectification

If any of your data is inaccurate or out of date, you have the right to ask us to update or correct it promptly.

Right to Erasure ("Right to be Forgotten")

You may request the deletion of your personal data, subject to legal data retention obligations that may prevent the immediate removal of certain records.

Right to Object to Processing

You can object to the processing of your data for specific purposes such as direct marketing, and we will honour that objection.

Right to Data Portability

You can request your data in a machine-readable format for transfer to another platform of your choice.

To exercise any of the above rights, contact the satu8 privacy team via live chat or our support email. We will process your request within the designated timeframe and keep you informed of the actions taken.

8

Data Retention Period

Satu8 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by law:

  • Active account data — Retained for as long as your account remains active
  • KYC and transaction records — Retained for a minimum of 5 years after account closure for anti-money laundering compliance
  • Support communication logs — Retained for 2 years for reference and dispute resolution
  • Anonymous analytics data — Can be retained indefinitely as no personally identifiable information is involved
  • Marketing data — Deleted within 30 days of consent withdrawal

Once the retention period expires, your data will be securely deleted or anonymised in accordance with data deletion procedures certified by an independent third party.

9

Cross-Border Data Transfers

In some cases, your personal data may be transferred to or stored on servers located outside Malaysia. This occurs when we use cloud service providers or international technology partners to support platform operations.

When your data is transferred outside Malaysia, satu8 ensures that:

  • The recipient country maintains an equivalent or higher level of data protection
  • A legally binding data transfer agreement has been executed with the data recipient
  • Technical protection measures such as end-to-end encryption are applied during transfers
  • Any transfer complies with applicable Malaysian data protection legislation
10

Changes to the Privacy Policy

Satu8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data practices, legal requirements, or our platform services. Any material changes will be communicated to you via:

  • In-platform notification on satu8 upon your next login
  • Email to your registered address at least 7 days before changes take effect
  • Clear notification banner on the satu8.win homepage

The "Updated" date at the top of this document will always reflect the latest version. We encourage you to review this Privacy Policy periodically. Continued use of the platform after any amendment's effective date constitutes acceptance of the revised terms.

11

Contact Our Privacy Team

If you have any questions, concerns, or requests regarding your privacy and personal data protection, our team is ready to assist:

  • Live Chat: Available 24/7 on the satu8 platform — response within 5 minutes
  • Privacy Email: [email protected] — response within 2 business days
  • FAQ: Visit page FAQ us for an immediate response

For more complex privacy matters or data rights requests, please contact us by email, including your account number and a brief description of your request. We are committed to addressing every enquiry thoroughly and within the designated timeframe.

This Privacy Policy is the latest version and is effective from January 2026. For more information about your rights and responsibilities, please also read Terms and Conditions and Responsible Gaming Policy satu8.

Play with Peace of Mind — Your Data is Safe with satu8

Your privacy is fully protected. Register now and enjoy a safe, fair and exciting gaming experience on the satu8 platform.

Document Relevant

Bahasa Melayu