Privacy Policy tt8 – Personal Data Protection for Malaysian Players

1 Introduction and Purpose of This Privacy Policy

This Privacy Policy ("Policy") describes how tt8 ("we", "Platform", or "tt8") collects, uses, discloses, stores, and protects the personal information you provide when registering for and using the tt8 online Sports Betting and casino platform at tt8.life.

Tt8 is a platform operating for players in Malaysia, and we are fully committed to complying with the Personal Data Protection Act (PDPA) 2010 and its applicable regulations. All personal data processing is carried out with the integrity and transparency we have pledged to every member.

The term "personal data" in this Policy refers to any information that can be used to identify you, directly or indirectly — including your name, phone number, email address, payment details, and gaming activity data on the tt8 platform.

2 Personal Data We Collect

Tt8 only collects data that is strictly necessary for the stated purposes. Below are the categories of data we collect along with the reason for collection:

Tt8 does not collect sensitive information such as medical records, biometric data, or political views unless specifically required by law. We also do not request or store your password in readable form — passwords are stored as hashed values that cannot be decrypted by anyone, including tt8 staff.

3 How tt8 Uses Your Data

Every piece of data we collect serves a clear purpose. tt8 uses members' personal data solely for the following purposes and nothing beyond that:

• Account management: Creating and managing your member account, processing registrations, and maintaining the necessary records.
• Financial transaction processing: Processing deposits and withdrawals via your preferred Malaysian payment methods, including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX online banking.
• Identity verification (KYC): To meet anti-money laundering legal requirements and to verify the age and identity of players.
• Platform security: Detecting and preventing fraud, multi-account usage, and any suspicious activity or breaches of our Terms & Conditions.
• Customer support: Responding to enquiries, resolving technical issues, and handling complaints efficiently.
• Responsible gambling: Monitoring gameplay patterns to identify signs of problem gambling and reaching out to members who may need support.
• Promotions and marketing communications: Sending you information about relevant tt8 offers and promotions — only where you have given your consent to receive such communications.
• Product improvement: Analysing usage data in aggregate and anonymised form to understand how the platform is used and to make meaningful improvements.
• Legal compliance: Fulfilling any obligations required under Malaysian law, including responding to court orders or lawful requests from the relevant authorities.

Tt8 does not make decisions that significantly affect members based solely on automated data processing without human involvement, except for immediate security actions such as freezing accounts that show signs of unauthorised access. In all such cases, the affected member will be promptly contacted by our human team.

4 Disclosure of Data to Third Parties

Tt8 does not sell or trade members' personal data. However, in the course of platform operations, there are limited situations where personal data may need to be shared with trusted third parties:

• Licensed payment providers: To process your deposit and withdrawal transactions via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks, and other Malaysian banks), only the information required to complete the transaction is shared.
• Licensed game providers: Usernames and session information are shared with game providers such as Evolution Gaming, Pragmatic Play, and PG Soft for strictly technical purposes in the course of running the games.
• Technical service providers: Companies that assist us in platform operations, such as cloud services, cybersecurity, and analytics — all bound by strict confidentiality agreements.
• Lawful authorities: Where required by Malaysian law, a court order, or a lawful request from law enforcement authorities.

All third parties working with tt8 are required to sign data confidentiality agreements and adhere to security standards equivalent to our own. tt8 does not permit third parties to use member data for their own purposes beyond what has been specifically approved.

5 tt8 Data Security and Protection Measures

Tt8 takes security infrastructure seriously to protect members' personal data. The technical and organisational measures we have implemented include:

• 256-bit SSL encryption for all communications between users and tt8 servers
• Data-at-rest encryption for all sensitive data stored in the database
• Role-based access control — only staff who require it for their specific job functions are permitted to access certain data
• 24/7 security monitoring with an automated intrusion detection system
• Regular security audits by independent third parties to identify vulnerabilities
• A clear incident response procedure in the event of a data breach
• Regular data security training for all tt8 staff with access to internal systems
• Use of two-factor authentication (2FA) for staff access to internal systems

While tt8 takes all reasonable steps to protect your data, no system can guarantee absolute 100% security. We therefore encourage members to take personal responsibility for their own account security by using strong passwords, enabling two-factor authentication where available, and never sharing account information with anyone.

In the event of a significant data breach affecting members' personal information, tt8 is committed to notifying affected members and the relevant authorities within the timeframes required under the PDPA.

6 Data Retention and Deletion Policy

Tt8 only retains personal data for as long as necessary for the purpose it was collected, or as required under Malaysian law. Below is a general guide to data retention periods by category:

• Active account data: Retained for the duration of your active account at tt8 and for a defined period after account closure for audit and compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax regulatory requirements.
• KYC documents: Retained for the period required under Malaysia's anti-money laundering laws.
• Customer support communication logs: Retained for 2 years for dispute resolution and service improvement purposes.
• Technical data and access logs: Retained for 90 days for security purposes and technical troubleshooting.
• Marketing data (where applicable): Retained until you withdraw consent to receive marketing communications.

Once the retention period expires and data is no longer required for any legitimate purpose, tt8 will securely dispose of or anonymise that data in accordance with established procedures. You may contact tt8 support to enquire about the specific data we hold on you.

7 Your Rights Under Malaysia's PDPA

As a data subject under the Malaysia PDPA 2010, you have specific rights regarding your personal data that tt8 is obligated to respect and uphold. Below are your rights and how to exercise them:

To exercise any of the rights above, contact the tt8 support team via live chat or email at support@tt8.life stating your request clearly. tt8 is committed to processing all valid requests within the stipulated timeframe and without imposing unreasonable charges.

8 Cookie Policy and Tracking Technologies

Tt8 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. Below are the types of cookies used on tt8.life:

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect certain features of the tt8 platform, including the ability to log in and carry out transactions. tt8 does not use cookies for third-party advertising or commercial profiling.

9 Minor Player Privacy and Age Restrictions

Tt8 is a platform exclusively for individuals aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. The tt8 registration process requires age verification, and we conduct KYC checks to ensure compliance with this age restriction.

If tt8 discovers that personal data belonging to an underage individual has been collected unintentionally, we will take immediate steps to delete that data and close the associated account. If you become aware that an underage individual has registered an account on tt8, please contact our support team right away so that appropriate action can be taken.

10 Privacy and Responsible Gaming

There is an important link between the privacy policy and tt8's commitment to responsible gaming. To safeguard the wellbeing of members, tt8 is required to process your gaming activity data for the following responsible gaming purposes:

• Monitoring gameplay patterns to detect early signs of problem gambling, such as escalating bet sizes or excessively long sessions
• Enforcing the self-imposed deposit limits, loss limits, and session time limits you have set
• Implementing the account suspension or self-exclusion you have requested
• Maintaining a record of your gaming history that you can access for your own review

This data processing for responsible gambling purposes is a core part of tt8's commitment to member wellbeing. This data will not be used for marketing purposes or shared with third parties except where specifically required by law. For more information on tt8's responsible gambling tools, visit the Responsible Gaming ours.

11 Changes to This Privacy Policy

Tt8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, technological developments, or new legal requirements. Each version of the Privacy Policy will display the date it was last updated at the top of the document.

For significant changes to how we use your personal data, tt8 will provide advance notice via in-platform notifications or email to your registered address. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Continued use of the tt8 platform after any changes to this Privacy Policy are published will be considered acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account and request a withdrawal of your remaining balance in accordance with the established procedures.

12 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how tt8 handles your personal data, please reach out to us through the following channels:

For complaints that cannot be resolved satisfactorily through tt8's own channels, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body under the Ministry of Communications and Digital Malaysia.