Msk8 Privacy Policy — Personal Data Protection for Malaysian Members

1 Introduction

MSK8 ("we", "platform") is fully committed to protecting the privacy and personal data of every Malaysian member who uses our services. This Privacy Policy is prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and sets out our data handling practices in a detailed and transparent manner.

As an online entertainment platform dedicated to the Malaysian market, msk8 understands that member trust is our most valuable asset. That trust is built on responsible data management, transparent communication, and respect for the privacy of every individual who entrusts us with their personal information.

This policy outlines what data we collect, why we need it, how we protect it, and your rights as the data subject. We encourage you to read this document in full and reach out to us if any part is unclear.

2 Personal Data We Collect

MSK8 collects members' personal data through several methods depending on the type of interaction with the platform. Below is a summary of the data collected:

Msk8 does not collect sensitive data such as health information, religious beliefs, or political affiliations unless you voluntarily disclose it in communications with us — and in such cases, it will not be recorded or used.

3 Purpose of Data Collection & Use

MSK8 uses collected personal data solely for the following purposes:

• Account Management: Creating, verifying, and managing your MSK8 account, including the KYC (Know Your Customer) process as required by regulations.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as managing fund withdrawals to your Malaysian account.
• Platform Security: Detecting and preventing fraud, money laundering, account abuse, and other illegal activities that could harm other members.
• Legal Compliance: Fulfilling Malaysian legal obligations, including anti-money laundering (AML) requirements and identity verification.
• Customer Support: Providing technical support and resolving enquiries or complaints submitted by members via Live Chat or email.
• Service Improvement: Analysing aggregated (not individual) usage patterns to improve platform quality, slots, football betting, and the overall msk8 experience.
• Marketing Communications: Sending information about MSK8 promotions, bonuses, and special offers — only to members who have consented to receive such communications.

4 Legal Basis for Data Processing

MSK8 processes members' personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA). Depending on the context, the legal bases applied are:

• Contractual Performance: Data processing necessary to fulfil the contractual obligations between MSK8 and its members, such as processing deposits and withdrawals in RM and managing accounts.
• Legal Compliance: Processing required under Malaysian law, including AML regulations and identity verification requirements under the Anti-Money Laundering Act 2001.
• Legitimate Interests: Processing for the purposes of platform security, fraud prevention, and service improvement, which constitute the legitimate interests of msk8 and its members.
• Consent: For marketing communications and the use of non-essential cookies, MSK8 relies on consent that you provide voluntarily and may withdraw at any time.

5 Data Sharing & Disclosure

Msk8 does not sell, rent, or trade members' personal data to any third party for their own commercial purposes. Personal data may be shared only in the following limited circumstances:

• Trusted Service Providers: Technical service providers such as payment processors (DuitNow, FPX, Touch 'n Go eWallet), cloud hosting, and analytics vendors, all of whom are bound by strict confidentiality agreements with MSK8.
• Legal Compliance: When required by a Malaysian court, regulatory authority, or law enforcement agency with lawful authority to obtain such information.
• Protection of MSK8's Rights: Where necessary to protect the legal rights, property, or safety of MSK8, its members, or the public from fraudulent or unlawful activity.
• Business Transfer: In the event of a merger, acquisition, or sale of MSK8 assets, members' personal data may be transferred to the successor entity, provided that the recipient continues to uphold protections equivalent to those under this policy.

In all of the data sharing situations described above, MSK8 ensures that all recipient parties are bound by data protection obligations equivalent to the standards we uphold ourselves.

6 Data Security

MSK8 implements comprehensive technical and organisational security measures to protect members' personal data from unauthorised access, loss, destruction, or disclosure. These measures include:

• 256-bit SSL Encryption: All data transmitted between your device and msk8's servers is protected with industry-standard SSL/TLS encryption, ensuring sensitive information cannot be intercepted in transit.
• Database Security: Personal data is stored in databases protected by layered access controls, storage-level encryption, and regular secure backups.
• Two-Factor Authentication (2FA): MSK8 staff access to systems containing member data requires two-factor authentication and is granted only to personnel who need it to carry out their responsibilities.
• Continuous Monitoring: MSK8's security system monitors platform activity 24/7 to detect suspicious access attempts or data breaches in real time.
• Regular Security Audits: MSK8 conducts regular security audits and penetration testing by independent security experts to ensure data protection measures remain current and effective.

While MSK8 takes all reasonable steps to protect your data, no security system is entirely foolproof. In the event of a material data breach, MSK8 will notify affected members within the timeframe required under applicable Malaysian law.

7 Cookies & Tracking Technologies

The MSK8 platform uses cookies and similar tracking technologies to enhance user experience and ensure the platform functions properly. There are three categories of cookies in use:

• Essential Cookies: These cookies are required for core MSK8 platform functions, such as maintaining your login session and securing transactions. Disabling them will affect the overall functionality of the platform.
• Performance Cookies: Used to collect aggregated, anonymised information about how members use the MSK8 platform, helping us understand which pages are visited most and improve the navigation experience.
• Functional Cookies: Allowing the msk8 platform to remember your preferences — such as language, region, and display settings — to deliver a more personalised experience during your sessions.

You can manage or disable non-essential cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the MSK8 platform. For guidance on managing cookies in your specific browser, refer to that browser's support documentation.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by MSK8:

To exercise any of the rights above, submit a written request to support@msk8.my stating the type of right you wish to exercise and your identity verification details. msk8 will respond within 21 working days from the date of receipt of a complete request.

9 Data Retention Period

Msk8 retains members' personal data only for as long as necessary to fulfil the original purpose of collection, or as required by Malaysian law. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account remains active on the msk8 platform.
• Financial Transaction Records: Retained for a minimum of seven (7) years following the transaction date, in compliance with Malaysian legal requirements on financial records and AML obligations.
• KYC Data (Identity Verification): Retained for five (5) years after account closure or the date of the last transaction, whichever is later, in accordance with the Anti-Money Laundering Act 2001.
• Communication Logs: Records of interactions with MSK8 customer support are retained for two (2) years for reference and dispute resolution purposes.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications from MSK8.

Once the retention period expires, personal data will be securely deleted or anonymised so it can no longer be linked to the individual concerned. Anonymised data may be retained for MSK8's internal statistical and analytical purposes.

10 Children's Privacy

The MSK8 platform is intended solely for individuals aged 18 years and above only. MSK8 does not knowingly collect or process personal data from individuals under the age of 18 under any circumstances.

Should msk8 discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child may have used the msk8 platform are urged to contact us immediately at support@msk8.my.

11 Privacy Policy Amendments

MSK8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable Malaysian legal requirements, or platform service improvements. Members will be notified of any material changes via:

• A prominent notice on the msk8 platform homepage at least 14 days before the changes take effect.
• Email notifications sent to the address registered with your MSK8 account.
• A pop-up notification will appear upon your next login to the MSK8 platform after any changes have been made.

The "Last Updated" date at the top of this page will be updated whenever changes are made to msk8's Privacy Policy. Continued use of the msk8 platform after the amendment's effective date constitutes your acceptance of the updated policy.

12 Contact Us

If you have any questions, concerns, or complaints regarding msk8's Privacy Policy or how we handle your personal data, please contact the msk8 Data Protection Officer (DPO) through the following channels:

• Email: support@msk8.my — for privacy enquiries and data rights requests
• Live Chat: Available 24 hours a day, 7 days a week via the MSK8 platform
• Response Time: msk8 aims to respond to all privacy-related enquiries within 3 business days

If you believe MSK8 has not adequately addressed your privacy concerns, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPA) under the Ministry of Communications and Digital.