Official ap8my Documents

Privacy Policy ap8my – Personal Data Protection for Malaysian Users

Your privacy is ap8my's top priority. This document clearly explains how we collect, use, store and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026  |  Compliant with Malaysia's PDPA 2010

Ap8my's Six Data Protection Principles

This is the foundation of how ap8my handles your personal data — clear, transparent, and accountable.

256-bit SSL Encryption

All data transmitted between your device and ap8my servers is protected by 256-bit SSL encryption — the same level of security used by leading banking institutions.

Compliant with Malaysia's PDPA

Ap8my operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Your rights as a data subject are recognised and respected at all times.

No Sale of Data to Third Parties

Ap8my has never and will never sell, rent, or trade your personal data to any third party for marketing purposes without your consent.

Minimum Data Retention

We only collect data that is genuinely necessary to manage accounts, process payments, and meet regulatory requirements. No excess data is collected.

Full Transparency

Ap8my clearly discloses the purpose of each data category collected, the retention period, and who may access it — no hidden agendas.

Data Control in Your Hands

You have the right to access, correct, delete, or transfer your personal data at any time. We provide easy channels to manage all these rights.

Introduction

This Privacy Policy ("Policy") describes how ap8my ("we", "Platform") collects, uses, discloses, and protects personal data through the website https://ap8my.win and the official ap8my mobile app. We understand that your trust in how we handle your personal information is the foundation of our relationship.

Ap8my is committed to protecting user privacy and operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using the ap8my Platform, you agree to the collection and use of your personal data as described in this Policy.

If you do not agree with any part of this Policy, you are advised not to use the ap8my Platform. Privacy-related enquiries can be directed to our customer support team via 24/7 live chat.

Note: This Privacy Policy should be read together with ap8my Terms and Conditions for a full understanding of your rights and responsibilities as a Platform user.

Personal Data We Collect

Ap8my collects personal data in three main categories based on how you interact with the Platform. Below is a summary of the types of data collected:

Data Category Type of Information Collection Method
Identity Data Full name, MyKad/passport number, date of birth, gender Account registration & KYC checks
Contact Data Email address, phone number, residential address Registration & profile updates
Financial Data Bank account number, deposit & withdrawal transaction records Payment processing
Technical Data IP address, device type, operating system, web browser Automatic access log
Game Data Betting records, game history, wins, VIP level Activity on the Platform
Support Data Conversation records with the customer support team Customer service interactions

We do not collect special categories of sensitive data such as health information, religious beliefs, or political views, except where specifically required by law and with your explicit consent.

Purpose of Data Collection & Use

Ap8my uses your personal data solely for legitimate and transparent purposes. We do not use your data for any purposes other than those stated below:

  • Creating and managing your user account on the ap8my Platform
  • Conducting identity verification (KYC) checks in accordance with regulatory requirements
  • Processing deposits, withdrawals and other financial transactions
  • Providing the gaming and entertainment services you request
  • Managing the VIP program and calculating your membership benefits
  • Detecting and preventing fraud, money laundering and other illegal activities
  • Providing customer support and resolving your complaints
  • Sending important account-related communications such as withdrawal and security notifications
  • Meeting legal and regulatory obligations applicable to ap8my
  • Improving the Platform, games and overall user experience

For marketing communications such as promotional information and the latest bonuses, we only send these to users who have given their consent. You may withdraw this consent at any time through your account settings.

Legal basis: All data processing by ap8my has a clear legal basis — whether grounded in your consent, contractual necessity, legal obligation or ap8my's legitimate interests as recognised under PDPA 2010.

Data Sharing with Third Parties

Ap8my does not sell your personal data. Data sharing only occurs in the following limited and controlled situations, solely to enable the Platform to function properly:

  • Payment providers: Required financial data is shared with licensed payment providers to process your deposits and withdrawals via FPX, DuitNow, and other payment methods.
  • Game developers: Basic game data is shared with developers such as Pragmatic Play and PG Soft to enable gameplay and ensure game fairness.
  • Technology service providers: Cloud infrastructure and security service providers directly involved in operating the ap8my Platform.
  • Competent authorities: When required by law, court order, or a legitimate investigation by an enforcement agency.

All third parties that receive ap8my user data are bound by strict confidentiality and data protection agreements. They are prohibited from using that data for any purpose other than the services they provide to ap8my.

Data Security & Technical Protection

Ap8my continuously invests in security infrastructure to ensure your personal data is protected against unauthorised access, accidental disclosure, alteration, or destruction. The technical and organisational measures we implement include:

  • 256-bit SSL encryption for all data communications between your device and ap8my servers
  • Encrypted database for storing sensitive user information
  • Two-factor authentication (2FA) available for additional account security
  • Role-based access control (RBAC) to restrict employee access to user data
  • Regular security audits by independent parties to identify and address vulnerabilities
  • 24/7 suspicious activity monitoring by automated fraud detection systems
  • Comprehensive incident response plan to address any data breaches

While ap8my takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against all cyber threats. You are also responsible for keeping your account password safe and not sharing it with anyone.

Security notice: ap8my will never ask for your password, OTP, or bank account information via email, WhatsApp, or any external channel. If you receive such a request, it is a scam — please report it to our customer support immediately.

Cookies & Tracking Technology

Ap8my uses cookies and similar tracking technologies to enhance Platform functionality and user experience. Cookies are small text files stored on your device when you visit the Platform.

Types of cookies used by ap8my:

  • Essential cookies: Required for core Platform functions such as login session management and security. Cannot be disabled.
  • Performance cookies: Collecting information on how users interact with the Platform to help us improve it. Data is collected in aggregate and cannot identify individuals.
  • Functional cookies: Saving your preferences such as language, display theme and other settings to personalise your experience.

You can manage cookie usage through your web browser settings. Please note that disabling essential cookies may affect the functionality of the ap8my Platform.

Data Retention & Deletion Period

Ap8my retains your personal data for as long as necessary to fulfil the purposes stated in this Policy, or as required by applicable Malaysian law. The following is a general guide to retention periods:

  • Active account data: Retained for the duration your account is active plus 7 years after account closure, in accordance with legal requirements
  • Financial transaction records: Minimum 7 years in accordance with financial reporting and anti-money laundering requirements
  • Customer support communication data: 3 years from the date of last interaction
  • Technical access log: 12 months for fraud detection and security purposes
  • Marketing data (with consent): Until you withdraw your consent

When data is no longer needed, ap8my deletes or anonymises it using secure deletion procedures. Anonymised data (where individuals cannot be identified) may be retained for analytics and Platform improvement purposes.

Your Rights as a Data Owner

Under Malaysia's PDPA and international privacy best practices, you have the following rights regarding your personal data held by ap8my:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide it within 30 business days.

Right to Rectification

You may request correction of inaccurate or incomplete data via your profile settings or customer support.

Right to Erasure

You may request deletion of your data when it is no longer needed, subject to legal record-keeping obligations.

Right to Object

You may object to data processing for direct marketing purposes at any time without penalty.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another service provider.

Right to Restriction of Processing

You may request a temporary restriction on the processing of your data while we handle your correction or objection request.

To submit any request regarding your privacy rights, contact the ap8my customer support team via 24/7 live chat. We will process your request within 30 business days from the date of receipt.

Child Protection

Ap8my is a digital entertainment platform dedicated to users aged 18 and above. We do not intentionally collect any personal data from individuals under the age of 18.

Should we discover that personal data of a minor has been collected without our knowledge, that data will be deleted immediately and the associated account will be terminated. ap8my employs an age verification system during registration and KYC checks to enforce this age restriction.

If you are a parent or guardian and suspect that a child under your care has registered an ap8my account, please contact our customer support immediately for prompt action.

Privacy Policy Amendments

Ap8my reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or how we operate the Platform. All amendments will take effect as follows:

  • In-Platform notification on ap8my at least 14 days before amendments take effect
  • Email notifications to registered users for material amendments that affect privacy rights
  • The "Updated" date at the top of this document will be updated to reflect the latest amendments

Continued use of the Platform after the effective date of any amendments constitutes your acceptance of the revised policy. If you do not agree with the amendments, you have the right to close your account and request data deletion in accordance with the procedures outlined in the user rights section above.

Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how ap8my handles your personal data, our team is ready to assist through the following channels:

  • Live chat 24/7 directly within the ap8my Platform — the fastest way to get a response
  • Email our privacy team at [email protected] — response within 48 business hours

For complaints that cannot be resolved through ap8my's internal channels, you have the right to refer the matter to the Department of Personal Data Protection (JPDP) Malaysia, the relevant authority under PDPA 2010.

Our commitment: ap8my is committed to resolving all privacy inquiries within 30 business days from the date of receipt. For cases requiring more in-depth investigation, we will keep you regularly updated on the latest status.

Play with Peace of Mind at ap8my

With full SSL encryption, Malaysia PDPA compliance, and a transparent privacy policy, your personal data is always safe with ap8my. Focus on the game — we handle your security.

For users aged 18 and above only. Play responsibly.

Bahasa Melayu