Million8 Malaysia Privacy Policy

Your privacy is our priority. Find out how Million8 collects, processes, and protects your personal data as a member of our platform.

Why You Can Trust million8

Six data protection principles we practise every day to keep your personal information safe with us.

256-bit SSL Encryption

All data transmitted between your device and million8 servers is protected by industry-standard 256-bit SSL encryption. Your account information, passwords, and payment details remain inaccessible to third parties.

Secure Data Storage

Member personal data is stored on servers protected by multi-layered firewalls and strict access controls. Only authorised personnel may access this information for legitimate operational purposes.

No Data Selling

Million8 has never and will never sell, rent, or transfer your personal data to third parties for marketing purposes without your explicit consent. Your data belongs to you — not to us as a business commodity.

Full Member Control

You have the right to access, amend, or request deletion of your personal data at any time. Simply submit your request via our support email and we will process it within 7 working days.

Malaysia PDPA Compliance

Our Privacy Policy is in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure every aspect of our data handling meets all applicable local legal requirements.

Data Breach Notification

In the event of any security incident involving your data, we will notify you within 72 hours and take immediate action to contain the issue and protect your account.

Updated: 1 January 2026
Important Note: This Privacy Policy explains how Million8 ("we", "platform") collects, uses, stores, and protects your personal data ("you", "member") when you use our website and services at million8.my. By registering for or using our platform, you agree to this policy.

1. Introduction

Million8 takes the privacy of every member seriously. We recognise that your trust is our most valuable asset, and we are committed to handling your personal data your data with care, responsibility, and security. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and transparently outlines our data handling practices.

This policy applies to all users of the Million8 platform, including registered members, website visitors, and anyone who interacts with our services through any channel. We encourage you to read this policy carefully and to contact us should you have any questions or concerns.

2. Personal Data We Collect

We collect various types of personal data depending on how you interact with the million8 platform. In general, the data we collect includes the following:

Data you provide directly:

  • Full name as stated on a valid Malaysian identification document.
  • National identity card number (MyKad) or passport number for identity verification purposes.
  • Email address and mobile phone number.
  • Date of birth for age verification.
  • Current residential address.
  • Bank account or digital wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) used for deposits and withdrawals.

Automatically collected data:

  • IP address and device information (device type, operating system, web browser).
  • Activity log data including pages visited, session duration, and actions performed.
  • Cookie data and session identifiers.
  • General geolocation data derived from your IP address for regional compliance purposes.

Transaction data:

  • Deposit and withdrawal history, including payment methods used such as FPX via Maybank2u, CIMB Clicks, or other major Malaysian banks.
  • Betting records, slot games, baccarat, and sports betting activities including football and badminton.
  • Account balance and bonus history.

3. How We Use Your Personal Data

The personal data we collect is used solely for legitimate purposes necessary to operate the million8 platform. The primary purposes for which your data is used are as follows:

  • Account management: Creating, verifying, and maintaining your member account.
  • Transaction processing: Processes deposits via Touch 'n Go eWallet, GrabPay, DuitNow, and FPX, as well as withdrawals to your bank account or digital wallet.
  • Identity verification (KYC): Meeting anti-money laundering (AML) legal compliance requirements and verifying member age.
  • Customer support: Helping you resolve any technical issues or account-related enquiries.
  • Platform security: Detecting and preventing fraud, suspicious activity, or usage that violates our terms of service.
  • Service improvement: Analysing usage patterns to improve your gaming experience on our platform.
  • Promotional communications: Sending information about bonuses, promotions, and platform updates — provided you have not objected to receiving such communications.

We will not use your personal data for any other purpose without your prior consent, except as required under applicable Malaysian law.

4. Sharing Data With Third Parties

Million8 does not sell or transfer your personal data to third parties for marketing purposes. However, we may share your data in the following limited circumstances:

  • Payment service providers: Authorised payment processing partners such as FPX gateway, DuitNow, and Malaysian digital wallet operators, for the purpose of processing your financial transactions.
  • Game software provider: Slots, live casino, and baccarat game providers that supply gaming platforms to us — only the minimum necessary data will be shared.
  • Legal authority: When required by a court, law enforcement agency, or Malaysian regulatory body in accordance with valid legal procedures.
  • Auditors and professional advisors: Legal firms, accountants, or auditors bound by strict confidentiality obligations.

All third parties with whom we share data are required to uphold data protection standards equivalent to our own and may only use that data for the permitted purposes.

5. Cookies & Tracking Technologies

The Million8 platform uses cookies and similar tracking technologies to enhance your experience. We use several types of cookies:

  • Essential cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
  • Performance cookies: Collecting information on how you use our website to help us improve platform functionality and speed.
  • Functional cookies: Remembering your preferences such as language and display settings to deliver a more personalised experience.
  • Analytics cookies: Helps us understand traffic patterns and website usage in an aggregated, anonymised form.

You can manage or disable non-essential cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality and usability of our platform.

6. Data Security

We implement comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

  • Data encryption in transit using 256-bit TLS/SSL protocols.
  • Encryption of sensitive data at rest within our database.
  • Strict role-based access control (RBAC) for internal staff.
  • Regular security audits and penetration testing.
  • Round-the-clock threat monitoring by our cybersecurity team.
  • A tested incident response plan to ensure swift action in the event of any security incident.

7. Data Retention Period

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required under Malaysian law. Generally:

Data Types Retention Period
Active account data Throughout active account + 7 years after closure
Financial transaction records 7 years (AML & tax requirements)
Activity & session logs 12 months from the date of activity
Identity verification (KYC) documents 5 years after account closure
Customer support communication data. 3 years from the date of interaction
Non-essential cookie data Up to 13 months or until deactivated

Once the retention period expires, your data will be securely deleted or anonymised in accordance with established procedures.

8. Your Rights

As a million8 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data. Click each section to learn more:

You have the right to request a copy of the personal data we hold about you. Data access requests can be submitted by emailing support@million8.my and we will fulfil your request within 21 calendar days.

If you find that any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Log in to your account or contact our customer support team to update the relevant information.

You may request the deletion of your personal data. However, we may need to retain certain data to fulfil legal obligations such as AML and PDPA requirements. We will inform you of any data that cannot be deleted and the reasons why.

You have the right to object to the processing of your personal data for specific purposes, particularly direct marketing. To opt out of promotional communications, use the unsubscribe link in our emails or contact our support team directly.

You have the right to receive your personal data in a machine-readable format and transfer it to another service provider. Data portability requests will be processed in JSON or CSV format within 14 business days.

9. Children's Data

The million8 platform is strictly prohibited for individuals under 18 years of age. We do not knowingly collect or process personal data from minors. If you believe a child has registered an account on our platform, please contact us immediately via support@million8.my and we will take immediate action to close the account and delete all associated data.

10. Amendments to the Privacy Policy

Million8 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any material amendments will be communicated to you via your registered email address or through a prominent notice on our website at least 14 days before the changes take effect.

The date of the latest update is always displayed at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your data.

11. Contact Us

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, please contact our Data Protection Officer:

  • Email: support@million8.my
  • Live Chat: Available 24/7 via the million8 platform.
  • Response Time: Within 3 business days for general enquiries; 21 days for formal data rights requests.

You may also refer to the FAQ us for answers to frequently asked questions about privacy and account security.

Your Data Is Safe. Start Playing Today!

Create your million8 account with confidence — your privacy is fully protected. Enjoy slots, baccarat, Live Casino, and Sports Betting with easy deposits via Touch 'n Go, DuitNow & FPX.

Bahasa Melayu