Plea8 Privacy Policy – Malaysian User Data Protection

When you register and use the plea8 platform, we collect several categories of information to ensure your gaming experience runs smoothly, securely, and in compliance with applicable legal requirements in Malaysia.

The following are the types of data we collect from plea8 platform users:

We only collect information that is strictly necessary to provide our services. Sensitive information such as passwords is stored in encrypted form and cannot be accessed by anyone, including plea8 staff.

Plea8 uses your personal data only for legitimate and transparent purposes. We will never use your information beyond the scope stated in this policy without first obtaining your additional consent.

• Create and manage your plea8 account, including the registration process and identity verification
• Process financial transactions including deposits, withdrawals and any bonus-related payments
• Verify the age and identity of users to meet KYC requirements and Malaysian law
• Detect and prevent fraud, money laundering and other illegal activities
• Provide effective customer support and resolve your complaints or enquiries
• Send important communications related to your account, security and policy changes
• Improve platform performance and develop new features based on usage patterns
• Comply with legal obligations and the requirements of relevant regulatory bodies

Plea8 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, there are specific situations where we need to share information to keep our services running properly:

• Payment Providers — FPX, TNG eWallet, GrabPay, Boost, and other providers only receive the data necessary to process your transaction
• Game Providers — game session information is shared with content providers to ensure fairness and game integrity
• KYC Services — verified third-party identity authentication providers to process your identification documents
• Legal Authorities — we will disclose information if required by a court order, law, or legitimate regulatory authority
• Fraud Prevention — limited sharing with industry security networks to detect and prevent cross-platform fraudulent activity

All third parties we work with are bound by strict data protection agreements. They are only permitted to use your data for specified purposes and may not process that information for their own ends.

The plea8 platform uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance and ensure the security of your login sessions. The following are the types of cookies we use:

You can manage your cookie settings through your internet browser at any time. Please note that disabling essential cookies may affect the functionality of the plea8 platform and your overall gaming experience.

Your personal data security is plea8's highest priority. We continuously invest in cutting-edge security infrastructure and apply a multi-layered defence approach to protect your information from all cyber threats.

• 256-bit SSL/TLS encryption for all data transmission between your device and plea8 servers
• AES-256 encryption for data stored in our databases, including financial information
• Two-factor authentication (2FA) is available and encouraged for all user accounts
• 24/7 security monitoring with real-time threat detection systems
• Periodic penetration testing by independent third-party security experts
• Automatic data backups with tested disaster recovery procedures
• Mandatory cybersecurity training for all staff who handle user data

Plea8 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or for the period required by Malaysian law. The following are general guidelines for data retention periods:

• Active account data — retained for as long as your account is active and for 7 years after account closure for legal compliance purposes
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements
• Support communication logs — retained for 3 years from the date of last interaction
• Analytics and usage data — stored in anonymised form for a maximum of 2 years
• KYC Documents — retained for 5 years after the business relationship ends

Once the retention period expires or the data is no longer needed, plea8 will securely delete or destroy it using industry-recognised methods to ensure it cannot be recovered.

As a registered plea8 user, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). We fully respect these rights and make it easy for you to exercise them:

To exercise any of the rights above, please contact the plea8 privacy team through the official support channel on the platform. We will process your request within 14 business days at no charge for reasonable requests.

The plea8 platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Should we become aware that we have collected data from a person under 18, we will take immediate action to delete that information and close the relevant account.

Plea8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Each new version will be published on this page with the latest "Updated" date.

For amendments considered significant or material, we will notify you via a prominent notice on the plea8 platform or by registered email at least 7 days before the changes take effect. Continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, the plea8 Data Protection Officer (DPO) team is available to assist you at any time.