Privacy Policy AW8 — Your Personal Data Protection

01Introduction and Scope of Privacy Policy

AW8 ("we", "our platform") respects the privacy of all users who access the website aw8.sx and all related services including the mobile app, online games, and customer support systems. This Privacy Policy is formulated in accordance with the principles of Malaysia's Personal Data Protection Act (PDPA) to ensure that every piece of data you entrust to us is handled responsibly.

We understand that your trust is the most valuable asset we hold. AW8 is therefore committed to never selling, renting, or disclosing your personal data to third parties for marketing or commercial gain. Every piece of information we collect has a clear and legitimate purpose, and we ensure that data is protected at every stage of its management.

This Policy applies to all AW8 platform users regardless of location, including new visitors, registered members, and AW8 mobile app users. In the event of any conflict between this Privacy Policy and any specific agreement you have entered into with AW8, the terms of that specific agreement shall take precedence.

02Types of Personal Data We Collect

AW8 only collects data that is strictly necessary to provide you with a quality and secure service. Data is collected through three main channels: information you voluntarily provide, data automatically generated during your use of the platform, and information received from legitimate business partners.

03How We Use Your Personal Data

Every piece of data we collect is used solely for legitimate purposes directly related to the provision of aw8 services. The following are the primary purposes for which your personal data is used:

• Create and manage your member account, including the registration process, login, and identity verification.
• Process all financial transactions, including deposits, withdrawals, and bonus payments, securely and accurately.
• Provide effective customer support and respond to your enquiries and complaints within a reasonable timeframe.
• Send important account-related notifications such as transaction confirmations, security alerts, and policy updates.
• Detect and prevent fraud, money laundering, and any suspicious or unlawful activity.
• Fulfil legal compliance obligations and reporting requirements to the relevant authorities.
• Improve the user experience through aggregated and anonymised analysis of platform usage behaviour.
• Support responsible gaming programmes by identifying gameplay patterns that may require attention.

04Data Sharing and Disclosure

AW8 does not sell, rent, or disclose your personal data to any third party for marketing or commercial gain. However, in certain limited situations, we may need to share your data with the following parties:

• Technical Service Providers — Technology partners who help us operate the platform, such as cloud service providers, payment processors, and cybersecurity providers. They are bound by strict confidentiality agreements.
• Game Providers — Licensed game providers that supply games on the aw8 platform. They receive only the minimum data necessary to ensure the games function properly.
• Legal Authorities — Where required by law, court order, or a lawful request from law enforcement agencies, aw8 will comply with such obligations.
• Business Transfer — Should aw8 be involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction, subject to notice being given to affected users.

05Data Security & Protection

AW8 continuously invests in industry-grade security infrastructure to ensure your personal data is always protected against unauthorised access, loss, misuse, or unauthorised disclosure.

• All communications between your device and aw8 servers are protected with 256-bit SSL/TLS encryption which represents the highest standard in the industry.
• Your password is stored as a cryptographic hash that cannot be reversed — not even AW8 staff can view your password.
• Our databases are protected by a multi-layered firewall system and an intrusion detection system (IDS) operating 24/7.
• Access to user data by AW8 staff is restricted to those with a legitimate job requirement and is fully recorded.
• We conduct regular penetration testing and security audits carried out by independent third parties.
• Redundant data backup systems ensure your data is never lost, even in the event of a system failure.

06Cookies, Tracking and Similar Technologies

AW8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit our website.

• Essential Cookies — Required for core platform functionality such as login session verification and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies — Collects information on how you use our platform to help us improve overall performance and user experience.
• Functional Cookies — Remembers your preferences and settings, such as your preferred language and display settings, to provide a more personalised experience.
• Analytical Cookies — Helps us understand platform usage patterns on an aggregated and anonymised basis for continuous improvement purposes.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of some sections of the AW8 platform.

07Your Privacy Rights as an AW8 Member

As an aw8 member and an individual whose personal data we hold, you have the following rights, which we fully respect:

08Data Retention Period

AW8 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law and international compliance regulations.

• Active account data is retained for the entire duration that your account remains active.
• Following account closure, financial transaction records and KYC documents are retained for a minimum of 5 years to fulfil anti-money laundering (AML) legal requirements.
• Customer support communication logs are retained for 2 years for reference and dispute resolution purposes.
• Anonymised analytics data may be retained for a longer period for platform improvement purposes.
• Upon expiry of the designated retention period, data will be securely deleted using methods that meet recognised information security standards.

09Children's Privacy

The aw8 platform is exclusively for individuals aged 18 and above only. We do not intentionally collect any personal data from individuals under the age of 18. Should we discover that a child's personal data has been collected without adequate age verification, we will immediately delete that data and close the relevant account.

10Amendments to the Privacy Policy

AW8 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. You will be notified of any significant changes through:

• A prominent notice on the aw8 website homepage for at least 7 days before the changes take effect.
• Notification email to all registered members using the email address on file in their account profile.
• An in-platform pop-up notification upon your first login after the amendment takes effect.

Continued use of the aw8 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. The "Updated" date at the top of this document indicates when the last amendment was made.

11Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how aw8 handles your personal data, our team is ready to assist. You may reach us through the following channels:

• Live chat within the aw8 platform — available 24 hours a day, 7 days a week.
• Support email: [email protected] (displayed as plain text, not a clickable link).
• Refer to FAQ page for answers to frequently asked questions about privacy and account security.

AW8 is committed to responding to all privacy-related inquiries within 5 business days. For more complex requests involving data access or deletion, the processing period is up to 30 business days.