eight789 is committed to protecting the privacy and personal data of every Member. This Privacy Policy explains what information we collect, how we use it, who we may share it with, and the rights available to you as a data subject. Please read this document in full before using the Platform.
eight789 ("the Company", "we", "us", or "our") operates the online gaming and sports betting platform accessible at https://eight789.casa (the "Platform"). This Privacy Policy describes how eight789 collects, processes, stores, and protects personal data provided by or relating to individuals ("Users", "Members", or "you") who access or use the Platform.
eight789 takes its obligations as a data controller seriously. We are committed to handling personal information responsibly, transparently, and in compliance with applicable data protection legislation, including the requirements of the Personal Data Protection Act 2010 (PDPA) of Malaysia and any other applicable international data protection frameworks relevant to our operations.
By registering an account on the Platform, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this policy, you should not access or use the Platform.
For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:
eight789 collects personal data through several channels: directly from you when you register, deposit, or contact us; automatically through your use of the Platform; and, where applicable, from third-party identity verification and payment service providers. The categories of data we collect are set out in the table below.
| Category | Examples of Data Collected | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad / Passport / Driver's Licence number, selfie photograph | Registration form; KYC submission |
| Contact Data | Email address, Malaysian mobile number, residential address (city, postcode) | Registration form; account updates |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), DuitNow registered number, transaction history, deposit and withdrawal records in MYR | Payment processing; transaction logs |
| Gaming Activity Data | Wager history, game session durations, bet amounts, win/loss records, sportsbook selections (e.g. Liga Super Malaysia, EPL, UFC) | Platform activity logs |
| Technical Data | IP address, device type and operating system, browser type and version, time zone, session timestamps, referral URL | Automated collection via cookies and server logs |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, in-app notification interactions | Customer support interactions |
| Responsible Gambling Data | Deposit limits set, self-exclusion elections, cooling-off periods activated, session duration preferences | Account settings; responsible gambling controls |
3.1 Data You Are Not Required to Provide
Certain fields in account registration are optional. Providing optional data (such as a preferred display name or marketing communication preferences) will not affect your access to core Platform services. You may update or remove optional data at any time through your account settings.
eight789 processes personal data only for clearly defined, legitimate purposes. We do not process personal data in ways that are incompatible with the purposes stated below:
eight789 relies on the following legal bases when processing your personal data:
eight789 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share personal data with selected categories of recipients strictly as necessary for the purposes described in Section 04 above:
6.1 Payment Service Providers
We share transaction-related data with payment processors operating the Malaysian payment channels listed on the Platform (including FPX network operators and e-wallet service providers) solely for the purpose of executing deposit and withdrawal instructions. These providers are bound by their own data protection obligations and applicable Malaysian financial regulations.
6.2 Identity Verification Partners
To fulfil KYC obligations, identity documents and related verification data may be transmitted to certified third-party identity verification service providers under strict data processing agreements. These providers do not retain your data beyond the period required to complete verification.
6.3 Game Studio Providers
Certain anonymised or pseudonymised gaming activity data may be shared with our licensed game studio partners for RTP auditing, fair play certification, and technical support purposes. No directly identifiable personal data is shared for game delivery purposes beyond what is technically necessary to authenticate your session.
6.4 Legal & Regulatory Authorities
eight789 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, to investigate suspected fraud or criminal activity, or to protect the legal rights of the Company or its Members.
6.5 Corporate Transactions
In the event of a merger, acquisition, restructuring, or sale of assets involving eight789, personal data held on the Platform may be transferred to the relevant successor entity, subject to equivalent data protection obligations being maintained.
eight789 uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help us deliver a functional, personalised, and secure user experience. The following categories of cookies are used:
You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use certain Platform features. eight789 does not use third-party advertising networks for cookie-based behavioural advertising.
eight789 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:
Following the expiration of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
eight789 implements a layered information security programme designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:
Subject to applicable data protection legislation and any exemptions that may apply (including those related to regulatory compliance and legal proceedings), Members have the following rights in respect of their personal data held by eight789:
Request a copy of the personal data we hold about you, along with information about how it is processed.
Request correction of inaccurate or incomplete personal data without undue delay.
Request deletion of your personal data where processing is no longer necessary or lawful, subject to retention obligations.
Request that we limit how we use your data in certain circumstances, such as while a dispute is being resolved.
Receive a structured, machine-readable copy of personal data you have provided to us, where technically feasible.
Object to processing based on legitimate interests or for direct marketing purposes at any time.
Withdraw consent for consent-based processing (e.g. marketing emails) at any time without affecting prior lawful processing.
Lodge a complaint with the relevant data protection supervisory authority if you believe your rights have not been upheld.
To exercise any of the above rights, please submit a written request to the eight789 Data Protection team via the contact details provided in Section 14. We will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days, or notify you of any extension where the complexity of the request requires additional time.
The eight789 Platform is primarily designed for users in Malaysia. However, certain service providers engaged by eight789 — including cloud infrastructure providers, identity verification partners, and game studio technology operators — may be located in or process data in jurisdictions outside Malaysia.
Where personal data is transferred internationally, eight789 ensures that appropriate safeguards are in place, including contractual clauses that impose data protection obligations equivalent to those applicable in the originating jurisdiction. We do not transfer personal data to territories that we have assessed as providing inadequate levels of data protection without implementing compensating measures.
The eight789 Platform is strictly intended for individuals who are 21 years of age or older. eight789 does not knowingly collect, store, or process personal data from persons under the age of 21.
If we become aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, securely delete all personal data relating to that individual, and return any deposited funds to the originating payment method following an appropriate investigation.
Parents and guardians who believe that a minor may have registered on the Platform are requested to contact the Support team immediately via the contact details in Section 14.
eight789 reserves the right to amend this Privacy Policy at any time. Material changes — including changes to the categories of data collected, the purposes of processing, or the rights available to Members — will be communicated via in-platform notification or by email to the address associated with your account. The updated Privacy Policy will display a revised "Last Updated" date at the top of the document.
Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the updated terms, you should cease using the Platform and contact the Support team to arrange account closure and withdrawal of any remaining balance.
We recommend reviewing this Privacy Policy periodically to remain informed of how eight789 handles your personal data.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by eight789, please contact our Data Protection team through the following channels:
We aim to acknowledge all privacy-related enquiries within five (5) business days. Formal data subject access requests will be processed within thirty (30) calendar days, with notification provided if additional time is required.
Members in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia may contact the Support team in English at any time. Our peak support hours align with Malaysian Time (MYT, UTC+8).
A plain-language overview of our core data protection commitments to every Member.
All data transmitted between your device and the Platform is protected with TLS encryption. Sensitive data at rest — including KYC documents and financial records — is encrypted using industry-standard algorithms.
eight789 will never sell, rent, or trade your personal data to any third party for commercial gain. Your information is shared only with service providers who require it to deliver Platform services to you.
Access, correct, delete, or export your data at any time. Opt out of marketing communications in one click. Withdraw consent for non-essential processing without losing access to core gaming services.
We do not keep your data indefinitely. Retention periods are tied to specific legal and regulatory requirements — typically 5–7 years for financial and KYC records — after which data is securely deleted or anonymised.
Non-essential cookies — including analytics and marketing cookies — are only activated with your explicit consent. Manage your cookie preferences at any time through the Platform's cookie preference centre.
Our Support team handles data protection enquiries 24/7 via in-platform live chat. Formal data subject access requests receive a written response within 30 calendar days. English-language support across all Malaysia time zones.
Play with confidence knowing your personal information is protected under our strict privacy standards. Explore the Platform or review our FAQ for more information. 21+ only. Play responsibly.