Privacy Policy ST8 — Data Protection & Information Security

1ST8 Introduction & Privacy Commitment

St8 (hereinafter referred to as "we", "Platform", or "st8") regards every member's privacy as a serious responsibility, not merely a legal formality. This Privacy Policy transparently outlines how we handle your personal information from the moment of registration through every interaction you have with the st8 platform.

As an online betting platform serving Malaysian users, we understand that your trust depends on how we manage your data. To that end, st8 has built a data protection system that adheres to industry best practices, employing advanced encryption technology and rigorous security procedures to ensure your information never falls into the wrong hands.

By registering and using the ST8 platform, you agree to the data collection and usage practices described in this Privacy Policy. If you disagree with any part of this policy, we encourage you to contact our support team before continuing to use the platform.

2Information We Collect

St8 collects your personal information through various channels throughout your use of the platform. It is important that you understand the types of data we collect and the reasons for doing so. The following are the main categories of information we process:

We only collect data that is strictly necessary for the stated purposes. ST8 does not collect sensitive information such as your medical data, religious beliefs, or political views. All information you provide is stored securely and accessed only by authorised personnel for specific purposes.

3How We Use Your Information

Every piece of information we collect from you is used for specific, legitimate purposes. st8 never uses your data arbitrarily or for purposes unrelated to platform operations. The following are the primary purposes for which your data is used:

• Account Management: Processes registration, verifies identity, manages account settings, and ensures the security of your login at all times.
• Transaction Processing: Settles deposits, processes withdrawal requests, and maintains accurate financial transaction records for your reference.
• Legal Compliance: Fulfils KYC requirements, reports suspicious transactions to the relevant authorities, and ensures compliance with anti-money laundering (AML) regulations.
• Platform Improvements: Analyses usage patterns to improve the user experience, introduce new features, and maintain optimal platform performance.
• Service Communications: Sends important account notifications, relevant promotions (based on your preferences), and policy or terms of use updates.
• Security & Fraud Detection: Monitors account activity to detect any unauthorised access attempts, identity fraud, or platform policy violations.
• Customer Support: Enables our ST8 support team to provide accurate and effective assistance when you reach out, based on your interaction history with the platform.

4Data Sharing & Disclosure

St8 understands that data sharing is among the top concerns of online users today. We want to state clearly that we do not sell or rent your personal data to any third party for marketing or commercial purposes.

However, there are limited situations in which st8 may need to share your information with other parties. These situations are as follows:

• Payment Service Providers: Information required to process deposits and withdrawals is shared with payment gateway providers integrated with our platform, such as FPX, DuitNow, and recognised e-wallet providers. Such sharing is minimal and limited strictly to the information required.
• Legal Requirements: When required by court order, regulatory investigation, or applicable legal obligation, ST8 may be required to disclose certain information. In such cases, we will notify you (unless prohibited from doing so by law).
• Technology Providers: Technical partners who assist in operating our platform, security systems, and IT infrastructure have limited access only to the data necessary for their specific functions, and are bound by strict confidentiality agreements.
• Fraud Investigation: In cases of fraud or serious security breaches, relevant information may be shared with the appropriate authorities or financial institutions for investigation and recovery purposes.

All third parties who receive your data from st8 are bound by data protection agreements that require them to handle your information in accordance with the security standards set by st8 and applicable laws.

5Encryption & Technical Security Measures

Your data security is more than just words — it is an ongoing investment that ST8 makes in our infrastructure and technical procedures. Here are the security layers protecting your data:

• 256-Bit SSL/TLS Encryption: All communications between your browser or app and st8's servers are protected with 256-bit SSL/TLS encryption protocols. This means your data cannot be intercepted or read during transmission.
• Two-Factor Authentication (2FA): st8 provides 2FA for all member accounts. We strongly recommend all members enable this feature to add an extra layer of security to their account.
• 24/7 Security Monitoring: Our systems are monitored around the clock to detect any suspicious activity or intrusion attempts. Our security team responds promptly to any alerts detected.
• Encrypted Password Storage: Your password is never stored in plain text. We use strong hashing algorithms with salt to ensure passwords cannot be recovered even in the event of a data breach.
• Environment Segregation: The production environment is separated from development and testing environments. Access to the production database is strictly restricted and carefully logged.
• Regular Data Backups: Data is automatically backed up at regular intervals and stored in separate, secure locations to ensure rapid data recovery in the event of any unexpected technical disruption.

6Cookies & Tracking Technologies

The st8 platform uses cookies and similar tracking technologies to enhance your user experience. Cookies are small text files stored on your device when you visit our platform. The following are the types of cookies we use:

• Session Cookies (Required): Required for basic platform functions such as maintaining your login status throughout a session. These cookies are automatically deleted when you close your browser.
• Preference Cookies (Functional): Saves your preferences such as language, currency, and display settings to deliver a more personalised experience on your next visit.
• Analytics Cookies: Helps us understand how users interact with the platform through anonymised statistical data. This information is used solely for platform improvement.
• Security Cookies: Used to detect suspicious login attempts, monitor unusual activity, and protect your account from unauthorised access.

You can control or delete cookies through your browser settings at any time. Please note, however, that blocking essential cookies may affect certain functions of the ST8 platform.

7Your Rights as a Data Subject

St8 respects your right to know, control, and protect your personal information. As an st8 member, you have the following rights, which you may exercise at any time by contacting our support team:

• Right of Access: You have the right to request a copy of the personal information we hold about you. We will process this request within 14 working days.
• Right to Rectification: If any information we hold is inaccurate or outdated, you have the right to request immediate correction. You may also update basic information directly through your account settings.
• Right to Erasure: Under certain circumstances, you have the right to request that we delete your personal data. Please note that this right is subject to record-keeping obligations required by law, such as AML requirements.
• Right to Restriction of Processing: You may request that we restrict how we process your data in certain situations, for example while you are disputing the accuracy of the data we hold.
• Right to Object: You have the right to object to the use of your data for direct marketing purposes. We will honour this objection promptly and without question.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for the purpose of transferring it to another platform, subject to technical eligibility.

To exercise any of the above rights, please contact the st8 support team via live chat or email us at [email protected]. We are committed to responding within the stipulated timeframe.

8Data Retention Period

St8 does not retain your personal data longer than necessary. Data retention periods vary according to category and applicable legal requirements:

• Active Account Data: Retained for the duration your account is active and for any additional period required after account closure for compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable anti-money laundering (AML) legal requirements in Malaysia.
• KYC Documents: Retained for the period required by the relevant authorities, typically a minimum of 5 years after account closure.
• Security Logs: Retained for 12 months for security investigation and audit purposes.
• Cookie Data: Session cookies are deleted when you close your browser; preference cookies are stored for no more than 12 months.

Once the specified retention period has elapsed, your data will be securely deleted or anonymized so that it can no longer be linked to your identity.

9Responsible Gaming & Sensitive Data Protection

St8 recognizes that information relating to gambling habits is sensitive data that must be handled with care. Your betting activity data is used internally for the following purposes, which are solely aimed at safeguarding your well-being:

• Detects betting patterns that may indicate compulsive gambling issues
• Allows your deposit limit and wagering limit settings to function effectively
• Supports the self-exclusion programme should you apply to be excluded from the platform
• Ensures compliance with the responsible gaming policies practised by ST8

Your wagering activity data will not be shared with third parties for marketing or commercial analytics purposes. For more information on how ST8 supports responsible gambling, visit the Responsible Gaming us.

10Policy Amendments & Contact Us

St8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological advancements. Any material changes will be communicated to you via:

• Notification email sent to your registered address
• Prominent notification on the ST8 platform homepage
• Update the "Last Updated" date at the top of this document

Continued use of the ST8 platform after any amendments take effect will be considered your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us via:

• Live Chat: Available 24/7 directly within the st8 platform for immediate response
• Email: [email protected] — response within 1–2 business days
• Telegram: st8's official Telegram channel for general inquiries