Privacy Policy

1. Introduction

fafafa8 ("we," "us," "our") is committed to protecting the privacy and personal data of all individuals who interact with the fafafa8 platform accessible at fafafa8.net ("Platform"). This Privacy Policy describes our practices with respect to the collection, use, disclosure, storage, and protection of personal data in accordance with applicable data protection laws.

This Privacy Policy applies to all fafafa8 registered players ("Players"), visitors to the Platform, and any individual whose personal data is processed in connection with the fafafa8 service offering. It applies to personal data collected through the Platform, via customer support interactions, and through any other means by which you engage with fafafa8.

Malaysian players should note that fafafa8 takes the Personal Data Protection Act 2010 (PDPA) into account as a guiding reference for data handling practices affecting Malaysian residents, alongside fafafa8's international licensing jurisdiction data protection obligations.

2. Data Controller

fafafa8 acts as the data controller in respect of personal data collected through the Platform. As data controller, fafafa8 determines the purposes and means by which your personal data is processed. For any data protection enquiries, Players may contact fafafa8 using the details set out in Section 15 of this Policy.

Where fafafa8 engages third-party service providers to process personal data on its behalf (for example, payment processors and identity verification providers), those providers act as data processors under written agreements that require them to process your data only on fafafa8's documented instructions and to implement appropriate security measures.

3. Data We Collect

3.1 Registration and Account Data

When you register a fafafa8 account, we collect the following information:

• Full legal name;
• Date of birth (to verify age eligibility — strictly 21+);
• Email address;
• Mobile phone number;
• Residential address (including city, state, and postcode);
• Preferred currency (MYR);
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

Prior to processing your first withdrawal, fafafa8 is required under its licensing obligations to verify your identity. This requires the collection of:

• Government-issued photo identification (e.g., Malaysian MyKad, passport);
• Proof of address (e.g., utility bill, bank statement issued within the past three months);
• Where applicable, source of funds documentation.

3.3 Transaction Data

fafafa8 records all financial transactions conducted through your account, including deposit amounts, withdrawal requests, bonus credits, wager histories, and balances. This data is retained for regulatory compliance and anti-money laundering purposes.

3.4 Technical and Usage Data

When you access fafafa8, we automatically collect certain technical information, including:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session duration and page interaction data;
• Cookie identifiers and session tokens.

3.5 Communications Data

Records of your communications with fafafa8's customer support team (including live chat transcripts and email correspondence) are retained for quality assurance and dispute resolution purposes.

4. How We Use Your Data

fafafa8 uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your fafafa8 account, process transactions, and provide customer support;
• Regulatory compliance: To satisfy Know Your Customer (KYC), Anti-Money Laundering (AML), and age verification obligations under fafafa8's gaming licence;
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised access, and other security incidents;
• Responsible gaming: To monitor gaming behaviour patterns, enforce responsible gaming tools, and intervene where problem gambling indicators are detected;
• Platform improvement: To analyse usage patterns and improve the functionality, performance, and user experience of fafafa8;
• Communications: To send you account-related notifications, transaction confirmations, and promotional communications (where you have consented to receive them);
• Legal and regulatory purposes: To respond to lawful requests from regulatory authorities, law enforcement, or judicial bodies.

5. Legal Basis for Processing

fafafa8 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the fafafa8 Terms & Conditions (e.g., account management, transaction processing);
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements (e.g., KYC, AML, age verification);
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, and platform improvement, where these interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing and certain analytical activities, where you have provided explicit consent that you may withdraw at any time.

6. Sharing Your Data

fafafa8 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients:

• Payment processors: Touch n Go, Boost, Maybank, CIMB, Public Bank, Visa/Mastercard processing partners — to facilitate deposits and withdrawals;
• Identity verification providers: Third-party KYC and AML service providers engaged to verify player identity and conduct sanctions screening;
• Technology providers: Cloud hosting, platform infrastructure, and analytics service providers operating under data processing agreements;
• Gaming software providers: Game suppliers who may receive limited session data necessary to operate their games within the fafafa8 environment;
• Regulatory and law enforcement authorities: Where required by law, court order, or our gaming licence obligations, fafafa8 will disclose personal data to the relevant authorities;
• Professional advisers: Legal counsel, accountants, and auditors who are bound by professional confidentiality obligations.

7. International Data Transfers

fafafa8 operates under an international gaming authority licence, and some of our third-party service providers may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, fafafa8 ensures that appropriate safeguards are in place, including contractual protections equivalent to those required under applicable data protection law. If you have questions about international transfer safeguards, please contact us using the details in Section 15.

8. Data Retention

fafafa8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory retention requirements. Specific retention periods include:

• Account and transaction data: Retained for a minimum of five (5) years from the date of account closure, as required under anti-money laundering regulations;
• KYC documentation: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later;
• Customer support records: Retained for a minimum of three (3) years;
• Technical and usage logs: Retained for up to twelve (12) months for security and analytical purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.

9. Cookies & Tracking Technologies

fafafa8 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies used by fafafa8 fall into the following categories:

• Essential cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without affecting platform functionality;
• Analytical cookies: Used to understand how Players interact with the fafafa8 platform, including which pages are visited most frequently and where users encounter difficulties. This data is used in aggregate and anonymised form;
• Preference cookies: Used to remember your settings and preferences across sessions (e.g., language preference, game lobby filter settings).

You may manage or withdraw consent for non-essential cookies via your browser settings or the cookie preference controls available within your fafafa8 account. Note that disabling certain cookies may affect the functionality of some Platform features.

10. Your Data Rights

Subject to applicable law and certain regulatory exceptions, you have the following rights in respect of your personal data held by fafafa8:

• Right of access: To request a copy of the personal data fafafa8 holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data, subject to overriding legal or regulatory retention obligations;
• Right to restriction: To request that processing of your personal data be restricted in certain circumstances;
• Right to data portability: To receive your personal data in a structured, machine-readable format where technically feasible;
• Right to object: To object to processing based on legitimate interests, including for direct marketing purposes;
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact fafafa8 using the details in Section 15. We will respond to your request within a reasonable timeframe and in any event within 30 days, unless an extension is required and communicated to you.

11. Children's Privacy

fafafa8 is strictly for persons aged 21 years and above. fafafa8 does not knowingly collect personal data from persons under the age of 21. If fafafa8 discovers or has reason to believe that an Account has been registered by a person under 21, that Account will be immediately suspended, all funds returned to their source, and the associated personal data deleted or retained only to the extent required by applicable law to prevent recurrence.

If you believe that a minor has registered an Account with fafafa8, please contact us immediately using the details in Section 15.

12. Security Measures

fafafa8 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and fafafa8 servers;
• Encryption of sensitive data at rest, including payment details and identity documents;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing;
• Intrusion detection and real-time monitoring systems;
• Two-factor authentication available for Player Accounts.

Notwithstanding these measures, no method of internet transmission or electronic storage is completely secure. If you become aware of any security vulnerability or suspected unauthorised access to your fafafa8 account, please notify us immediately via live chat support.

13. Marketing Communications

13.1 fafafa8 may send you promotional communications about bonuses, new games, sports betting offers, and platform news where you have provided consent to receive such communications at the time of registration or subsequently via your account preferences.

13.2 You may opt out of marketing communications at any time by updating your notification preferences in the fafafa8 account settings panel, or by contacting customer support. Opting out of marketing will not affect operational communications related to your account (e.g., transaction confirmations, security alerts).

13.3 fafafa8 does not share your contact details with third parties for their own marketing purposes.

14. Changes to This Privacy Policy

fafafa8 may update this Privacy Policy from time to time to reflect changes in law, regulatory requirements, or our data processing practices. Where changes are material, we will notify registered Players by email to their registered address or via a prominent notice on the Platform. The date of the most recent revision is displayed at the top of this page. Continued use of fafafa8 following notification of a material change constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how fafafa8 handles your personal data, please contact us through the following channels:

• Live chat: Available 24/7 at fafafa8.net
• Email: [email protected] (plain text only — not a clickable link)

We aim to acknowledge all data rights requests within 5 business days and to resolve them within 30 days. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days and will notify you accordingly.