Privacy Policy ATM8 –
Player Personal Data Protection

1. Introduction & Policy Scope

ATM8 ("we", "Platform") is committed to protecting the privacy of every individual who uses our services. This Privacy Policy explains in detail how we collect, use, disclose and protect your personal information when you register, log in or use any feature on the ATM8 platform.

This policy applies to all registered players, website visitors and ATM8 mobile app users. Please read this document carefully in its entirety so you fully understand your rights and how we handle your personal data.

2. Types of Data We Collect

To deliver the best gaming experience and ensure your account security, atm8 collects several categories of personal information as follows:

Data Categories	Sample Information	Purpose of Collection
Identity Information	Full name, national ID number, date of birth	KYC verification and legal compliance
Contact Information	Phone number, email address	Account communications and notifications
Financial Information	Bank account number, bank name, e-wallet details	Deposit and withdrawal processing
Usage Data	IP address, device type, gaming activity records	Account security and platform analytics
Cookie Data	Session cookies, preference cookies, analytics cookies	User experience and website performance

3. How We Use Your Information

Personal information collected by atm8 is used responsibly for the following purposes only:

• Account management – to create, verify, and maintain your player account.
• Transaction processing – to process deposits, withdrawals, and any financial transactions in your account.
• Identity verification (KYC) – to comply with anti-money laundering regulations and player age verification requirements.
• Customer Support – to provide technical assistance and resolve your enquiries or complaints quickly and effectively.
• Platform security – to detect and prevent fraud, account breaches, and other suspicious activities.
• Service improvements – to analyse usage patterns and continuously improve the features and performance of the atm8 platform.
• Promotional communications – to send you the latest offers and promotions, only if you have given consent to receive such communications.

4. Disclosure of Information to Third Parties

ATM8 does not sell or rent players' personal information to any third party. However, in certain situations, we may need to share your information with selected parties as follows:

• Payment providers – banks, e-wallet operators, and payment processors required to complete your financial transactions.
• Technology service providers – companies that assist us in managing platform infrastructure, cybersecurity, and customer support, bound by strict confidentiality agreements.
• Statutory authorities – law enforcement agencies, courts, or regulatory bodies when we are required to do so under Malaysian law.

All third parties with access to atm8 player data are bound by data protection agreements that comply with PDPA 2010 and are not permitted to use that information for any other purpose.

5. Data Storage & Retention Period

ATM8 retains players' personal information for as long as necessary to fulfill the original purpose of collection and to comply with legal obligations. In general, our data retention policy is as follows:

• Active account data is retained for the duration the account remains active plus 7 years after account closure, for financial records and audit purposes.
• Financial transaction records are retained for a minimum of 7 years in accordance with Malaysia's legal requirements for financial reporting.
• Security activity logs are retained for 2 years for investigation purposes in the event of a dispute or complaint.
• Session cookie data is automatically deleted when you close your browser.

6. Data Security & Protection

ATM8 continuously invests in the latest security technologies and procedures to ensure players' personal data is always protected from unauthorized access, loss or damage. The security measures we implement include:

• 256-bit SSL Encryption for all data transmitted between your browser and atm8 servers.
• Two-factor authentication (2FA) available for all accounts as an added layer of security.
• Automated security scanning running around the clock to detect any cyber threats or intrusion attempts.
• Restricted access – only authorised and relevant atm8 staff may access player data, and every access is logged and monitored.
• Independent security audits conducted periodically by accredited third-party cybersecurity firms.

While we take all reasonable steps to protect your data, no security system in the world can guarantee 100% absolute protection. We encourage players to also take precautions such as using a strong password and never sharing your login credentials with anyone.

7. Cookie Policy

The atm8 platform uses cookies to enhance your experience while browsing our website and app. The following are the types of cookies we use:

• Session cookies – required to maintain your login session and enable smooth navigation within the platform.
• Preference cookies – to store your preferences such as language, time zone, and display settings.
• Analytics cookies – helps us understand how players use the platform so we can continuously improve our services.
• Security cookies – used to identify suspicious login attempts and protect your account.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the ATM8 platform.

8. Player Rights Regarding Personal Data

As a registered atm8 player in Malaysia, you are entitled to the following rights under the Personal Data Protection Act 2010:

9. Links to Third-Party Websites

The atm8 platform may contain links to third-party websites or services in certain contexts, such as payment providers or game provider partners. atm8 is not responsible for the privacy practices of those third-party websites. We encourage you to read the privacy policy of each third-party website you visit separately.

10. Changes to the Privacy Policy

ATM8 reserves the right to amend or update this Privacy Policy at any time in line with changes in law, technology or our business practices. Players will be notified of any material changes via an in-account notification or your registered email at least 14 days before the changes take effect.

Your continued use of the atm8 platform after the effective date of any changes will be considered your acceptance of the updated Privacy Policy.

11. Contact ATM8 Privacy Officer

If you have any questions, concerns or complaints regarding how ATM8 handles your personal data, please contact our support team via in-app live chat available 24 hours a day, 7 days a week. We are committed to addressing all privacy-related inquiries within 5 business days.

For more information about your rights as a player, please also refer to the Terms and Conditions and Responsible Gaming ATM8.