score8 Privacy Policy

This Privacy Policy ("Policy") describes how score8 ("score8", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "User") who access or use the score8 platform at score8.org. By registering for or using score8, you acknowledge that you have read and understood this Policy. This Policy forms part of the score8 Terms & Conditions.

1. Introduction

1.1 score8 is committed to protecting the privacy and personal data of all users. This Policy is intended to be transparent, accessible, and written in plain language wherever possible — without sacrificing the legal precision that users and regulators require.

1.2 score8 operates as an online betting and casino platform serving users primarily in Malaysia and processes personal data in connection with the provision of those services, including account management, payment processing, regulatory compliance, fraud prevention, and customer support.

1.3 This Policy should be read alongside the score8 Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

2.1 score8 is the data controller in respect of personal data processed under this Policy. As data controller, score8 determines the purposes and means by which your personal data is processed.

2.2 If you have any questions about how score8 processes your personal data, you may contact our data protection contact at: [email protected]

3. Personal Data We Collect

3.1 score8 collects the following categories of personal data in connection with your use of the platform:

Category	Examples
Identity Data	Full name, date of birth, nationality, government-issued ID number
Contact Data	Email address, mobile phone number, residential address
Account Data	Username, password hash, account ID, account preferences
Financial Data	Payment method details, deposit/withdrawal history, account balance, transaction records
Verification Data	Copies of identity documents, proof of address, payment method proof submitted for KYC
Technical Data	IP address, device type, browser type and version, operating system, session tokens, login timestamps
Usage Data	Pages visited, games played, bets placed, session duration, feature interactions
Communications Data	Live chat transcripts, email correspondence, support ticket content

3.2 You are not required to provide all categories of data to use score8, but failure to provide certain data (particularly Identity, Contact, and Verification Data) may prevent score8 from providing services including account registration, withdrawals, and access to promotions.

4. How We Collect Your Data

4.1 Directly from you — when you register a score8 account, complete KYC verification, make deposits or withdrawals, contact support, or respond to score8 communications.

4.2 Automatically — when you access and interact with the score8 platform, Technical Data and Usage Data are collected automatically via cookies, web beacons, server logs, and similar technologies.

4.3 From third parties — score8 may receive personal data from identity verification service providers, payment processors (including Touch n Go eWallet and Boost), fraud prevention services, and analytics partners.

5. Legal Basis for Processing

5.1 score8 processes your personal data on one or more of the following legal bases:

• Contractual necessity — processing is necessary to perform the contract between you and score8, including account management, payment processing, and service delivery.
• Legal obligation — processing is necessary to comply with anti-money laundering (AML) laws, know-your-customer (KYC) obligations, international gaming licensing requirements, and other applicable legal obligations.
• Legitimate interests — processing is necessary for score8's legitimate business interests, including fraud prevention, platform security, product improvement, and responsible gaming monitoring, provided those interests are not overridden by your rights.
• Consent — where score8 relies on your consent (e.g., for marketing communications), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support.

6. How We Use Your Personal Data

6.1 score8 uses the personal data it collects for the following purposes:

• To create, manage, and authenticate your score8 account
• To process deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other supported payment methods
• To verify your identity and age (21+ requirement) as required by our licensing obligations
• To detect, prevent, and investigate fraud, money laundering, collusion, and other prohibited conduct
• To provide 24/7 customer support and respond to your enquiries
• To comply with anti-money laundering regulations and respond to lawful requests from regulatory authorities
• To monitor for problem gambling indicators and enforce responsible gaming tools
• To personalise your score8 experience and display relevant game recommendations
• To send you account-related notifications, security alerts, and — where you have consented — promotional communications
• To improve the score8 platform through analytics, testing, and product research

7. Sharing Your Personal Data

7.1 score8 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

7.2 score8 may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors — to process deposits and withdrawals (e.g., Touch n Go eWallet, Boost, banking partners)
• Identity verification providers — to conduct KYC verification as required by our licensing obligations
• Fraud prevention and AML screening services — to detect and prevent financial crime
• Game content providers — to facilitate delivery of casino games and record game outcomes
• Cloud infrastructure and hosting providers — to store and process platform data securely
• Analytics providers — in anonymised or pseudonymised form only, to improve platform performance
• Regulatory and law enforcement authorities — where required by applicable law, court order, or our licensing obligations

7.3 All third-party service providers with whom score8 shares personal data are bound by data processing agreements requiring them to handle your data securely and only for the specified purposes.

8. Cookies and Tracking Technologies

8.1 score8 uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies are used:

• Essential cookies — required for core platform functionality including authentication, session management, and security. These cannot be disabled.
• Functional cookies — used to remember your preferences, language settings, and personalisation options.
• Analytics cookies — used in pseudonymised form to understand how users interact with the score8 platform and to identify areas for improvement.

8.2 You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the score8 platform.

9. Data Retention

9.1 score8 retains personal data for the following periods, or longer where required by applicable law or licensing obligations:

• Account and identity data — for the duration of your account and for a minimum of 5 years following account closure, as required by AML regulations.
• Transaction and financial records — for a minimum of 7 years following each transaction.
• Support communications — for 3 years from the date of each interaction.
• Technical and usage data — for 12 months from collection, unless retained longer for security or fraud investigation purposes.

9.2 When data is no longer required for the purposes for which it was collected and no legal obligation requires its retention, score8 will securely delete or anonymise the data.

10. Data Security

10.1 score8 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Measures include:

• 256-bit SSL/TLS encryption for all data in transit
• Encryption of sensitive data fields at rest
• One-way hashing with salt for all stored passwords
• Access controls limiting data access to authorised personnel on a need-to-know basis
• Regular security audits and penetration testing of the score8 platform
• Two-factor authentication available to all score8 account holders

10.2 Notwithstanding the above, no method of transmission over the internet or electronic storage is 100% secure. score8 cannot guarantee absolute security but is committed to maintaining industry-standard protections and responding promptly to any identified threats.

11. Your Data Rights

11.1 Subject to applicable law, you have the following rights in relation to your personal data held by score8:

• Right of access — to request a copy of the personal data score8 holds about you
• Right to rectification — to request correction of inaccurate or incomplete personal data
• Right to erasure — to request deletion of your personal data, subject to legal retention obligations
• Right to restriction — to request that processing of your data be restricted in certain circumstances
• Right to data portability — to receive your personal data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests, including profiling
• Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time

11.2 To exercise any of the above rights, please contact score8 support. Requests will be processed within 30 calendar days. score8 may request verification of your identity before processing a data rights request.

12. International Data Transfers

12.1 score8 may transfer your personal data to countries outside Malaysia in connection with the services provided by our cloud infrastructure, payment, and technology partners. Where such transfers occur, score8 ensures that appropriate safeguards are in place — including contractual protections — to protect your data to a standard equivalent to that described in this Policy.

13. Children's Privacy

13.1 The score8 platform is strictly for users aged 21 and above. score8 does not knowingly collect personal data from individuals under the age of 21. If score8 becomes aware that personal data has been collected from an individual who is under 21, that account will be immediately closed and the data will be deleted. If you believe a minor has registered on score8, please contact support immediately.

14. Changes to This Policy

14.1 score8 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or operational requirements. The date at the top of this page indicates when the Policy was last reviewed. Where changes are material, score8 will notify affected users by email to their registered address before the changes take effect.

14.2 Continued use of the score8 platform after any amendment to this Policy constitutes acceptance of the revised terms.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by score8, please contact us at:

Email: [email protected]
Platform: Live chat available 24/7 via the score8 platform

This Privacy Policy was last reviewed in June 2026. The current version is always available at score8.org/privacy-policy.