Privacy Policy — How AW8Pro Handles Your Personal Data

AW8Pro ("we", "us", "our", or "the Platform") operates the online gaming platform accessible at https://aw8pro.cam and is committed to protecting the privacy and personal data of all users ("you", "Player", or "User") who interact with our Services. This Privacy Policy describes the nature, scope, and purpose of our personal data processing activities in connection with your use of the AW8Pro platform.

This Privacy Policy applies to all personal data collected through the AW8Pro website, mobile platform, customer support channels, KYC verification process, and any other interaction you have with AW8Pro as an organisation. It should be read alongside our Terms & Conditions, which govern the overall relationship between you and AW8Pro.

By registering an account on AW8Pro or by continuing to use our Services following notification of any updates to this Policy, you acknowledge that you have read, understood, and consented to the data practices described herein. If you do not agree with this Privacy Policy, you should discontinue use of the platform and contact support to close your account.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned to them below:

AW8Pro collects personal data across several categories, depending on your level of interaction with the platform. The following describes the types of data we may hold about you:

• Full legal name as it appears on your government-issued identity document
• Date of birth (required to verify that you meet the minimum age requirement of 21 years)
• Residential address in Malaysia (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Email address and mobile phone number
• Username and encrypted password hash
• Account preferences and communication settings

• Copies of government-issued photo identification — Malaysian MyKad (IC), Passport, or Driver's License
• Proof of residential address documents — utility bills, bank statements, or official correspondence dated within three months
• Verification selfie images submitted as part of the KYC process
• Document authenticity and verification status records

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method used (e.g., Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank)
• Payment method identifiers — masked card numbers, e-wallet account references, bank account numbers (partially masked for security)
• Transaction dispute and chargeback records where applicable
• Cryptocurrency wallet addresses where BTC/USDT deposits or withdrawals are made

• Betting history, game session records, wager amounts, and outcomes across all platform products (sports betting, live casino, slots, crash games)
• Bonus and promotion participation records
• Session duration, login frequency, and platform navigation patterns
• Responsible gambling tool usage (deposit limits set, self-exclusion requests)

• IP address and approximate geographic location derived from IP data
• Device type, operating system, browser type and version
• Session identifiers, cookie data, and similar technical tracking identifiers
• Connection timestamps and access logs

• Records of live chat, email, and WhatsApp support conversations
• Formal complaints and their resolutions
• Survey responses and feedback submissions where provided voluntarily

AW8Pro collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to surveys.
• Automatically through platform use: Technical data such as IP address, device identifiers, session data, and gameplay records are collected automatically as you use the platform.
• Via cookies and similar technologies: As detailed in Section 9 of this Policy, we use cookies to maintain session state, analyse usage patterns, and improve platform performance.
• From third-party service providers: KYC verification partners and payment processors may provide us with verification status results and transaction confirmation data in connection with their services to AW8Pro.

AW8Pro processes personal data for the specific, legitimate purposes described in the table below. Data is not processed for any purpose incompatible with those listed without prior notice and, where required, your explicit consent.

AW8Pro processes personal data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and AW8Pro — including account registration, service delivery, payment processing, and KYC verification — is conducted on the basis of contractual necessity. Without this processing, AW8Pro cannot provide its Services to you.
• Legal Obligation: Certain processing activities — including anti-money laundering checks, identity verification, and retention of transaction records — are required by applicable law and are processed on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and general platform improvement is conducted on the basis of AW8Pro's legitimate interests, balanced against your rights and interests.
• Consent: Where processing is not required by contract or law — including marketing email communications and non-essential cookies — AW8Pro processes data only with your explicit, freely given, and withdrawable consent.

AW8Pro does not sell, rent, or trade your personal data to third parties for their independent marketing or commercial purposes. We may share your personal data with the following categories of recipients, strictly for the purposes described:

To process deposits and withdrawals in MYR, AW8Pro shares necessary financial data with our payment processing partners, including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks, and cryptocurrency exchange intermediaries. These processors are contractually bound to use your data only for transaction processing purposes.

AW8Pro uses third-party KYC verification service providers to assist with document authentication and identity verification. These providers process your submitted identity documents under data processing agreements with AW8Pro and are prohibited from using your data for any independent purpose.

AW8Pro uses third-party cloud hosting, content delivery, and platform infrastructure providers. These providers may process technical data (including IP addresses and log data) as part of their service delivery, under appropriate data processing safeguards.

AW8Pro will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities when required to do so by applicable law, court order, or lawful regulatory request. AW8Pro will, where legally permissible, notify you of such disclosure.

In the event of a merger, acquisition, or sale of all or a substantial portion of AW8Pro's assets, personal data held by AW8Pro may be transferred as part of that transaction. You will be notified of any such transfer and the identity of any new data controller prior to the transfer taking effect.

AW8Pro retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable legal, regulatory, or tax obligations. The following retention schedules generally apply:

• Account and KYC Data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) to seven (7) years following the date of the transaction, as required by applicable financial regulations.
• Customer Support Communications: Support interaction records are retained for up to three (3) years following the resolution of the relevant query or complaint.
• Gameplay Data: Betting and gameplay history is retained for the life of the account and for a minimum of two (2) years following account closure.
• Marketing Preferences: Retained until you withdraw consent for marketing communications, plus a reasonable period for implementing opt-out requests.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents identification. Where anonymisation is used rather than deletion, the anonymised data may be retained indefinitely for statistical and analytical purposes.

AW8Pro uses cookies and similar tracking technologies on the platform for the purposes described below. A cookie is a small text file placed on your device by the AW8Pro platform when you visit our website. Cookies do not contain executable code and cannot be used to access other data on your device.

• Strictly Necessary Cookies: Essential for the platform to function — including session management, authentication state, and security tokens. These cannot be disabled as they are required for basic platform operation.
• Analytical / Performance Cookies: Used to understand how players interact with the platform — including pages visited, time spent, and navigation paths. Data is aggregated and anonymised. These are used with your consent.
• Functionality Cookies: Remember your preferences such as language selection, currency display (MYR), and layout choices to provide a personalised experience.
• Security Cookies: Used to detect fraud, prevent account hijacking, and verify the integrity of user sessions.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in or using the platform. Disabling analytical cookies will not affect platform functionality but will limit our ability to improve the user experience based on usage data.

AW8Pro implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security programme includes:

• Transport Layer Encryption: All data transmitted between your device and the AW8Pro platform is encrypted using industry-standard TLS (Transport Layer Security) protocols.
• Data Encryption at Rest: Sensitive personal data — including KYC document data and payment credentials — is encrypted in storage using current encryption standards.
• Access Controls: Access to personal data is restricted to AW8Pro personnel and processors with a legitimate operational need, on a strict need-to-know basis.
• Password Security: Account passwords are stored as salted cryptographic hashes — AW8Pro does not store passwords in readable form and cannot retrieve your password (only reset it through verified identity confirmation).
• Security Monitoring: AW8Pro operates continuous security monitoring to detect and respond to potential threats, unauthorised access attempts, and anomalous account activity.

While AW8Pro takes all reasonable steps to protect your personal data, no electronic transmission or storage system is entirely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, AW8Pro will notify affected users and relevant authorities in accordance with applicable data breach notification obligations.

Subject to applicable law and certain limited exceptions (including where data processing is required by legal obligation or to prevent fraud), you have the following rights in respect of your personal data held by AW8Pro:

To exercise any of the rights above, please contact AW8Pro's support team via email at [email protected] with the subject line "Data Subject Request — [Your Username]". We will verify your identity before processing any rights request and respond within the applicable statutory timeframe (typically 30 days). Rights requests are provided free of charge unless manifestly unfounded or excessive.

Age verification is conducted as part of the KYC process required for all registered accounts. AW8Pro may additionally conduct age estimation checks at the point of registration using technical signals. If you have reason to believe that a person under the age of 21 has registered an account on AW8Pro, please notify us immediately at [email protected].

AW8Pro reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Material changes — defined as changes that materially affect your rights as a data subject — will be communicated to registered users via email to the address on file, at least seven (7) days before the revised Policy takes effect.

Non-material clarifications and corrections may be made without advance notice. The version of this Privacy Policy published on this page at any given time is the operative version. We recommend checking this page periodically. The "Last Updated" date at the top of this page reflects when the most recent revision was made.

If you have questions, concerns, or complaints regarding this Privacy Policy or AW8Pro's personal data handling practices, or if you wish to exercise any of your data subject rights as described in Section 11, please contact us through the following channels:

• Email (Privacy Queries): [email protected] — Subject line: "Privacy Query" or "Data Subject Request — [Username]"
• Live Chat: Available 24 hours a day, 7 days a week via the AW8Pro platform. Average response time: 3–5 minutes.
• Support Languages: English, Bahasa Melayu, 中文

AW8Pro will acknowledge privacy-related enquiries within 48 hours and provide a substantive response within 30 days. Complex data subject access requests may take up to an additional 60 days; we will notify you if an extension is required and explain the reason for the delay.

If you are not satisfied with AW8Pro's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or supervisory body in your jurisdiction.