Your privacy matters to us. This policy explains exactly what personal data Million8 collects, why we collect it, how we use it, and the rights you hold over your information.
These six principles guide the way Million8 handles all personal data. They are a summary only — the full policy below governs in all circumstances.
We collect only the personal data that is strictly necessary for account management, payment processing, identity verification, and legal compliance. We do not collect data for its own sake.
Million8 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used only for the purposes described in this policy.
All data transmitted between your device and our platform is encrypted using 256-bit SSL technology. Sensitive fields such as payment details and account credentials are encrypted both in transit and at rest.
You retain the right to access, correct, export, and request deletion of your personal data at any time. All data subject requests are handled within 30 calendar days of receipt.
We use cookies and similar technologies only for essential platform functionality, security, and aggregate analytics. No advertising or tracking cookies are placed without disclosure in this policy.
When this Privacy Policy is updated in a material way, you will be notified via a platform notification or email prior to the changes taking effect. Continued use of the platform constitutes acceptance of the revised policy.
This Privacy Policy ("Policy") is issued by Million8 ("Company", "we", "us", "our"), the operator of the online gambling and sports betting platform accessible at https://million8.cam ("Platform"). This Policy applies to all users ("User", "you", "your") who access, register on, or interact with any part of the Platform, including through any associated mobile interface.
Million8 is committed to protecting the privacy and personal data of all Platform users, including players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia. This Policy is designed to be transparent, comprehensible, and consistent with internationally recognised data protection standards.
By creating an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this Policy, you must cease using the Platform immediately.
This Policy should be read together with our Terms & Conditions, which govern your overall use of the Platform. In the event of any conflict between documents, the Terms & Conditions shall prevail with respect to matters of contractual obligation.
For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:
Million8 collects personal data through a number of channels, including directly from Users during registration and account use, automatically through the Platform's technical systems, and from third-party verification providers where applicable.
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, gender, nationality | Registration & KYC |
| Contact Data | Email address, mobile number, residential address | Registration & KYC |
| Identity Documents | MyKad, passport, utility bill (for proof of address) | KYC verification |
| Financial Data | Bank account details, e-wallet identifiers, transaction history | Deposits & withdrawals |
| Account Credentials | Username, hashed password (plaintext never stored) | Registration |
| Support Communications | Live chat transcripts, email correspondence | Customer support interactions |
When you access or use the Platform, our systems automatically collect certain technical and behavioural data, including:
Million8 may receive personal data about you from the following categories of third-party sources:
Million8 processes your personal data only where a valid lawful basis exists. Depending on the specific processing activity, one or more of the following bases will apply:
Million8 uses the personal data we collect for the following specific purposes:
To create and maintain your account, verify your identity and age (21+ requirement), process deposits and withdrawals via your chosen Malaysian payment methods, and deliver the gambling services you have subscribed to on the Platform.
To verify that you meet the minimum age requirement of 21 years and to confirm your identity for anti-money laundering compliance purposes. KYC verification is mandatory prior to withdrawal of funds and may be required at any time at the Company's discretion.
To facilitate deposits and withdrawals through your selected payment methods, which may include DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels. Your financial data is shared with payment processors only to the extent necessary to complete the transaction.
To detect and prevent fraudulent activity, money laundering, account takeover attempts, and other forms of abuse on the Platform. Automated systems analyse betting patterns and transaction behaviour as part of our ongoing security monitoring.
To provide you with assistance through our 24/7 live chat support and email channels. Support communications may be recorded and retained for quality assurance, training, and dispute resolution purposes.
To monitor account activity for indicators of problem gambling behaviour, enforce self-imposed limits and exclusions, and fulfil our obligations under applicable responsible gambling frameworks. Your activity data may be analysed for this purpose without identifying you individually in any external report.
To comply with applicable laws, regulations, court orders, and requests from regulatory or law enforcement authorities. This may include retaining transaction and identity records for prescribed periods mandated by anti-money laundering legislation.
To analyse aggregate, anonymised usage data for the purpose of improving Platform features, performance, user experience, and product offerings. This analysis does not involve decisions that produce legal or similarly significant effects on individual users.
Million8 does not use your personal data for automated profiling that produces legally significant effects, nor do we use your data to target you with third-party advertising outside of the Platform.
Million8 does not sell or commercially transfer your personal data to any third party. We may, however, share your data in the following circumstances and only to the extent necessary for the stated purpose:
Your financial data is shared with payment processors — including operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency payment rails — to the minimum extent required to execute your deposit or withdrawal instruction.
We engage third-party KYC and AML compliance vendors to verify your identity, age, and the legitimacy of funds. These vendors process your identity documents and personal details under strict contractual data processing agreements.
We use third-party cloud infrastructure, database, and security service providers to operate the Platform. These providers process personal data as Data Processors under agreements that restrict use to the services they provide to Million8.
We may disclose your personal data where required or permitted by applicable law, including to regulatory bodies, law enforcement agencies, or in response to valid legal process such as court orders or subpoenas. We will endeavour to notify you of such disclosures where permitted by law.
In the event of a merger, acquisition, restructuring, or sale of all or a portion of the Company's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices that will apply going forward.
Million8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations.
As a general principle, account and transaction records are retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations. Identity verification documents are retained for the period prescribed by applicable legislation in the operating jurisdiction.
Customer support communications are retained for a period of two (2) years from the date of the interaction. Technical and server log data is retained for up to twelve (12) months for security and performance monitoring purposes.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data subject's identity. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical purposes.
If you request deletion of your account, Million8 will delete or anonymise your personal data subject to any overriding legal retention obligations. You will be informed of any data that must be retained and the reason for retention before deletion is completed.
Million8 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
Notwithstanding the foregoing, no method of electronic transmission or storage is completely secure. While we take all reasonable precautions, Million8 cannot guarantee the absolute security of your personal data. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.
Million8 uses cookies and similar technologies (including local storage and session tokens) to operate the Platform, maintain session state, enhance security, and understand aggregate usage patterns. We do not use cookies to track your activity across unrelated third-party websites.
Most web browsers allow you to control cookies through their settings. You may choose to block or delete non-essential cookies; however, disabling essential cookies will impair your ability to log in and use the Platform's core features. Instructions for managing cookies are available in your browser's help documentation.
The personal data you provide to Million8 may be stored and processed in countries outside of Malaysia, including the jurisdiction in which the Company holds its operating licence and where its technology infrastructure is hosted. These countries may not have data protection laws equivalent in scope to those of Malaysia.
Where personal data is transferred internationally, Million8 takes appropriate steps to ensure that it is protected to a standard at least equivalent to the protections applicable in the source jurisdiction. These steps include contractual clauses requiring recipient entities to adhere to applicable data protection standards, and, where relevant, the use of certified cloud infrastructure providers operating under recognised compliance frameworks.
By using the Platform, you acknowledge and consent to the transfer of your personal data to countries outside of Malaysia for the purposes described in this Policy.
Subject to applicable law, you hold the following rights with respect to your personal data processed by Million8. To exercise any of these rights, please contact us using the details in Section 15.
Request a copy of the personal data we hold about you and information about how it is processed.
Request correction of inaccurate or incomplete personal data held in your account record.
Request deletion of your personal data where retention is no longer necessary, subject to overriding legal obligations.
Request that we restrict the processing of your personal data in certain circumstances while a dispute or objection is being resolved.
Request a machine-readable export of your personal data for the purpose of transferring it to another service provider where technically feasible.
Object to the processing of your personal data where we rely on legitimate interests as the lawful basis. We will assess whether our interests override your rights.
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Request human review of any decision made solely by automated means that produces a significant effect on your account or access to services.
All data subject requests will be acknowledged within 72 hours and responded to substantively within 30 calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further 30 days and will notify you accordingly.
We may request proof of identity before processing a data subject request to ensure that personal data is not disclosed to an unauthorised third party.
The Million8 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use this Platform or provide any personal data to us.
If Million8 becomes aware that personal data has been collected from a person under the age of 21 — whether through failure of the age verification process or any other means — the account will be immediately suspended, all associated data will be reviewed, and the matter will be handled in accordance with our legal obligations and responsible gambling policies.
If you are a parent or guardian and believe that a minor has provided personal data to Million8 without your knowledge, please contact us immediately at the details provided in Section 15 so that we can take appropriate action.
The Platform may contain references to third-party services, including payment providers and game content suppliers. Where you interact with a third-party service, that service's own privacy policy will apply to any personal data you provide to them directly. Million8 is not responsible for the privacy practices of third-party services that are outside our direct control.
For Malaysian players using local payment methods such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or Hong Leong, please refer to the respective privacy policies of those payment service providers for information about how they process your data in the course of the transaction.
Million8 reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will provide advance notice to registered users via platform notification or email prior to the new policy taking effect. The "Last Updated" date shown at the top of this page will be revised with each update.
We encourage you to review this Policy periodically to stay informed about how we are protecting your data. Continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must cease using the Platform and contact us to arrange account closure.
If you have any questions, concerns, or requests relating to this Privacy Policy, or wish to exercise any of your data subject rights, please contact Million8 through the following channels:
For players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia — our support team handles all account, payment, and privacy queries in English and is equipped to assist with the full range of data subject requests described in this Policy.
When submitting a data subject request by email, please include your registered account username and a brief description of your request. We will request proof of identity before processing any request to access, export, or delete account data.
Privacy and security are built into every layer of the Million8 platform — from the moment you register to the moment your withdrawal lands in your Touch 'n Go eWallet or Maybank account. Join thousands of Malaysian players who trust Million8 to handle their data responsibly.
🔞 For players aged 21 and above only. Gambling involves financial risk — please play responsibly and within your means.