Official Document · Effective 1 January 2026

Alpha8 Privacy Policy – Malaysia Personal Data Protection

At Alpha8, your privacy is not merely a legal obligation — it is a core value we hold firmly. This document clearly and transparently explains how we collect, use, store, and protect your personal data in accordance with Personal Data Protection Act 2010 (Malaysia PDPA).

Updated: 1 January 2026 Malay (ms-MY) PDPA 2010 Compliance
256-bit SSL Encryption

All data transmitted between your device and Alpha8's servers is protected with military-grade encryption — no third party can intercept your data.

Data Not Sold to Third Parties

Alpha8 does not sell, rent, or disclose your personal data to any advertiser or third party without your consent.

Malaysia PDPA 2010 Compliance

Our privacy policy is framed in full accordance with the provisions of the Personal Data Protection Act 2010 in force in Malaysia.

Full Control in Your Hands

You have the right to access, correct, or request the deletion of your personal data at any time through your account settings or by contacting us.

Financial Data Not Stored

Your e-wallet information (Touch 'n Go, GrabPay, DuitNow) and banking details are processed directly through licensed payment gateways — Alpha8 does not store your account numbers.

Opt-Out Options

You may withdraw your consent to receive marketing communications at any time without any penalty to your gaming account.

Alpha8's Commitment: We understand that your trust is our most valuable asset. This Privacy Policy is written in plain, straightforward language — not confusing legal jargon — so you know exactly what happens to your personal data when you use the platform Alpha8.

1Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") is issued by Alpha8 ("we", "Company") and applies to all users ("you", "member") who access or use the Alpha8 online casino platform at the domain alpha8.ws, as well as any applications, services, or communication channels associated with Alpha8.

This policy explains how Alpha8 collects, stores, processes, uses, and protects your personal data in accordance with the provisions of Personal Data Protection Act 2010 (Malaysia PDPA). Your continued use of our platform after the effective date of this Policy constitutes your acceptance of all terms stated herein.

This Privacy Policy should be read together with Terms & Conditions us. In the event of any conflict between the two documents on matters of privacy, this Privacy Policy shall prevail.

2Types of Personal Data We Collect

Alpha8 only collects data that is strictly necessary to deliver a safe, seamless, and responsible service. The data we collect is organised into the following categories:

2.1 Identity & Account Data

  • Full name as shown on your official identity document (MyKad)
  • National identity card number (MyKad) for identity verification (KYC) purposes
  • Date of birth to verify that players are 18 years of age or older
  • Mobile phone number registered in Malaysia
  • Email address that is active and communicable
  • Residential address in Malaysia (for verification purposes)

2.2 Financial & Transaction Data

  • Deposit history via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks)
  • Withdrawal and winnings records
  • Betting history and gaming activity (slots, live casino, football, poker, e-sports)
  • Note: Full bank account numbers and card details are not stored by Alpha8

2.3 Technical & Device Data

  • IP address and geographic location data (state/city level only)
  • Device type, phone model, operating system, and browser version
  • Login session data including time, duration, and session activity
  • Cookie data and related tracking technologies (see Section 8)

Alpha8 does not collect sensitive data such as health information, religious beliefs, or political views. We collect only the minimum data necessary for the platform to operate.

3How We Collect Your Personal Data

Alpha8 collects personal data through the following channels:

  • Account Registration: When you register a new account with Alpha8, you provide your basic identity information directly.
  • KYC Process: When you upload identity verification documents (MyKad, utility bills, Malaysian bank statements) to verify your account.
  • Gaming Activity: Data is generated automatically when you play slots, live baccarat, poker, bet on Malaysia Super League or EPL football, and e-sports.
  • Financial Transactions: Transaction information is recorded when you make a deposit or withdrawal via e-wallet or FPX.
  • Communications With Us: When you contact customer support via live chat, email, or WhatsApp.
  • Automated Technologies: Cookies, pixels, and analytics tools automatically collect technical data as you browse our platform.

4Purpose of Personal Data Use

Your personal data is used by Alpha8 solely for legitimate and necessary purposes. Below is a full table of the purposes of use and their corresponding legal bases:

Purpose of Use Legal Basis Opt-Out Available?
Identity verification (KYC) & fraud prevention Legal obligation No — mandatory
Account management & login Contract performance No — mandatory
Processing of deposits & withdrawals (RM) Contract performance No — mandatory
24/7 customer support Legitimate interest Yes — optional
Fraud detection & prevention Legal obligation No — mandatory
Email & promotional notifications Your consent Yes — opt-out available
Analytics & platform improvement Legitimate interest Yes (optional cookies)
Responsible gambling & player protection Legal obligation No — mandatory

Alpha8 will not use your personal data for any purpose beyond those listed above without first obtaining your additional consent.

5Third-Party Data Sharing & Disclosure

Alpha8 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, in the course of operating the platform, we may share data with the following parties on a strictly need-to-know basis:

  • Payment Service Providers: Payment gateways processing Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, and CIMB Clicks transactions receive only the transaction data necessary for processing.
  • Licensed Game Providers: Companies such as Pragmatic Play, Evolution Gaming, and Playtech receive anonymised player IDs for game integrity purposes.
  • Third-Party KYC Services: A licensed identity verification provider that helps us authenticate the validity of your documents.
  • Legal Authorities: We are required to disclose data to the Royal Malaysia Police (PDRM), the Malaysian Anti-Corruption Commission (SPRM), or other regulatory bodies when lawfully directed to do so.
  • Analytics Services: Anonymised statistical data is used for platform usage analytics.

All third parties working with Alpha8 are contractually bound to uphold data protection standards equivalent to or higher than those set out in this Privacy Policy. We do not permit them to use your data for their own purposes.

6Data Security Measures

Alpha8 invests seriously in data security. Below are the layers of protection we employ to safeguard your personal data:

256-bit SSL/TLS Encryption
All data in transit is protected with military-grade encryption protocols.
Data-at-Rest Encryption
Sensitive data stored in our databases is encrypted using AES-256.
Two-Factor Authentication (2FA)
2FA is available on all accounts for an added layer of login protection.
24/7 Monitoring
An active threat monitoring system detects any suspicious activity around the clock.
Regular Security Audits
Independent security audits are conducted quarterly by accredited cybersecurity firms.
Strict Access Controls
Only authorised personnel may access personal data, based on a strict need-to-know principle.

While we take all reasonable precautions, no digital system can be guaranteed 100% free from threats. In the event of a data security incident that affects you, Alpha8 will notify you within 72 hours in accordance with applicable regulatory requirements.

7Data Retention Period

Alpha8 retains your personal data for as long as necessary to fulfil the purposes set out in this Policy, or as required by Malaysian law. In general:

  • Active Account Data: Retained for the duration your account is active, plus 7 years after account closure (anti-money laundering legal requirement).
  • Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysia's Financial Services Act 2013.
  • Log & Technical Data: Retained for 12 months, then anonymised or deleted.
  • Customer Support Communications: Retained for 3 years for reference and dispute resolution.
  • Marketing Data (if you have consented): Retained until you withdraw your consent.

Once the retention period expires, your personal data will be securely deleted or anonymised so it can no longer be linked to your identity. Early deletion requests are subject to statutory retention obligations that cannot be waived.

8Cookies & Tracking Technologies

The Alpha8 platform uses cookies and similar tracking technologies to enhance your experience, maintain security, and analyse how the platform is used. The cookies we use fall into four categories:

  • Essential Cookies: Required for core platform functions such as login verification, session security, and language preferences. These cookies cannot be disabled.
  • Performance Cookies: Collects anonymised data on how you navigate the platform to help us improve the user experience. Can be disabled.
  • Functional Cookies: Stores your preferences such as display settings and login convenience. Can be disabled.
  • Analytics Cookies: Used by analytics tools to understand platform usage patterns in aggregate. Can be disabled via cookie settings.

You can manage your cookie preferences through your browser settings or the cookie panel available when you first visit the Alpha8 platform. Please note that disabling certain cookies may affect the functionality of the platform.

9Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Alpha8:

Right of Access
Request a copy of the personal data we hold about you. Requests are processed within 21 business days.
Right to Rectification
Correct personal data that is inaccurate or incomplete.
Right to Erasure
Requesting the deletion of your personal data (subject to statutory retention obligations).
Right to Withdraw Consent
Withdraw consent for processing for marketing purposes at any time.
Right to Object
Object to the processing of your data for specific purposes on legitimate grounds.
Right to Lodge a Complaint
Lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you are not satisfied.

To exercise any of the above rights, submit a written request to privacy@alpha8.ws stating your full name, account number, and details of your request. We will acknowledge receipt within 3 business days and resolve the request within 21 business days.

10Cross-Border Data Transfers

In the course of operating the platform, your personal data may be transferred to and stored on servers located outside Malaysia. This occurs primarily in connection with international game providers such as Evolution Gaming or Pragmatic Play, which operate across multiple countries.

Alpha8 ensures that all cross-border data transfers are carried out with adequate safeguards in place, including data transfer agreements that comply with international standards. Destination countries may include Malta, Gibraltar, Isle of Man, and Singapore — all of which operate recognised data protection frameworks.

11Child Protection

The Alpha8 platform is strictly for individuals aged 18 and above. Alpha8 does not knowingly collect personal data from anyone under the age of 18. Should we become aware that a minor's personal data has been collected without parental or guardian knowledge, we will take immediate action to delete that data and close the account in question.

Parents or guardians who suspect their child may have registered on Alpha8 should contact us immediately at privacy@alpha8.ws.

12Amendments to the Privacy Policy

Alpha8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operations, regulatory requirements, or new technologies. Any material amendments will be communicated to you via:

  • In-platform notification on Alpha8 upon your next login
  • An email to your registered address at least 14 days before the amendment takes effect
  • Updated on the "Last Updated" date shown at the top of this document

Your continued use of the Alpha8 platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you have the right to close your account before the amendments come into effect.

13Contact Alpha8's Privacy Officer

For any enquiries, concerns, or requests relating to your privacy and personal data protection, please contact Alpha8's Data Protection Officer (DPO):

  • Privacy Email: privacy@alpha8.ws (response within 3 business days)
  • General Support Email: support@alpha8.ws
  • Live Chat: Available 24/7 within the Alpha8 platform for general enquiries
  • Formal Complaints: complaints@alpha8.ws with the subject line "Privacy Complaint" and your account number

If you are not satisfied with Alpha8's response, you have the right to lodge a complaint with Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010. Contact details for the Commissioner are available on the official website of the Department of Personal Data Protection Malaysia.

Alpha8 is committed to handling all privacy enquiries with the utmost seriousness and professionalism. Every report or concern will be thoroughly investigated and a comprehensive response provided. Your privacy is our priority.

🔒

Your Data Is Safe, Your Game Is Fun

When you play at Alpha8, you can focus entirely on the game — slots, live baccarat, poker, Super League football, or e-sports — without worrying about the security of your personal data. We handle that for you, carefully and responsibly.

Data protected by 256-bit SSL
Malaysia PDPA Compliance
Not sold to third parties

*18+ age limit. Subject to Terms & Conditions. Play Responsibly.

Bahasa Melayu