Privacy Policy mtown8 –
Protection of Your Personal Data

1Introduction and Scope of This Policy

Mtown8 ("we", "Platform") respects the privacy of every user and member who uses our services at mtown8.app. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection regulations.

This policy describes the types of personal information we collect, the purposes for collecting it, how we store and protect your data, and your rights regarding the personal data we hold. This policy applies to all users accessing the mtown8 platform via web browser or mobile app.

By registering as a mtown8 member or continuing to use our platform after this Policy is updated, you confirm that you have read, understood, and agreed to the terms stated here.

2Personal Information We Collect

We collect your personal information through several methods — directly when you register or interact with the platform, automatically through tracking technologies, and occasionally from trusted third-party sources for verification purposes.

Information you provide directly:

• Full name as shown on your official identification document.
• Date of birth for age verification purposes.
• Active email address and Malaysia mobile number.
• Bank account or e-wallet details for processing deposits and withdrawals.
• Copy of identification document (KYC) such as MyKad or passport.
• Residential address for compliance purposes.

Information collected automatically:

• IP address and device information (device type, operating system, web browser).
• Access log data including dates, times, and pages visited.
• General location information based on IP address.
• Gaming activity history and financial transaction records within the platform.
• Cookies and session identifiers to keep you logged in.

3How We Use Your Information

Every piece of information we collect has a clear and legitimate purpose. We do not use your data for purposes unrelated to the provision of mtown8 services without first obtaining your consent.

• Processing account registration and verifying your identity through the KYC process.
• Securely processing deposits, withdrawals, and other financial transactions.
• Providing a personalised gaming experience based on your preferences.
• Sending important notifications related to your account, security, and promotions.
• Detecting and preventing fraud, money laundering, and unlawful activities.
• Complying with legal obligations and regulatory body requirements.
• Enhancing service quality and user experience through data analytics.
• Implementing responsible gaming programmes and monitoring for risky gaming patterns.

4Information Sharing and Disclosure

Mtown8 does not broadly share your personal information. However, there are certain situations where data sharing is necessary to enable the platform to function properly and comply with the law:

• Payment service providers: Required financial information is shared with authorised payment processors such as FPX and e-wallet providers to process your transactions.
• Identity verification service providers: KYC data is shared with licensed third-party verification providers to meet compliance requirements.
• Technical service providers: Minimal technical information is shared with cloud infrastructure and cybersecurity providers that help operate our platform.
• Legal authorities: We will disclose information when required by a court order, law, or direction from a legitimate regulatory authority.
• Business transfers: If mtown8 is involved in any merger or acquisition, user information may be transferred as part of the business assets, subject to the same privacy protections.

All third parties we work with are bound by strict data protection agreements and are not permitted to use your information for any purpose beyond what has been agreed.

5Data Security Measures

We continuously invest in security infrastructure to ensure your personal data remains protected at all times. The technical and organisational measures we implement include:

• Data encryption using 256-bit SSL/TLS protocols for all communications between your device and our servers.
• Encryption of sensitive data in databases using the AES-256 algorithm.
• Two-factor authentication (2FA) is available for all member accounts for an additional layer of security.
• 24/7 system monitoring to detect suspicious activity or intrusion attempts.
• Internal network segregation with multi-layer firewalls.
• Periodic security audits by independent third parties to identify and address vulnerabilities.
• Role-based access control — staff can only access data required for their specific responsibilities.

6Cookies and Tracking Technology

The mtown8 platform uses cookies and similar tracking technologies to enhance user experience and ensure account security. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance cookies: Collecting anonymised data on how users interact with the platform to help us improve our services.
• Functional cookies: Saving your preferences such as language, display settings, and gaming preferences.
• Security cookies: Helping detect suspicious login attempts and protecting your account from unauthorised access.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality and your experience on the mtown8 platform.

7Your Rights Regarding Personal Data

Under Malaysia's PDPA and data protection best practices, you have several rights regarding the personal information we hold. We respect these rights and will respond to your requests within a reasonable timeframe.

To exercise any of the rights above, please contact our privacy team via email or live chat. We will process your request within 30 calendar days. For complex requests, this period may be extended by up to 60 days, with notification to you.

8Data Retention Period

Mtown8 retains your personal information only for as long as it is necessary for the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

• Active account data is retained for as long as your account remains active on the platform.
• Financial transaction records are retained for a minimum of 7 years in line with anti-money laundering (AML) requirements.
• KYC documents are retained for 5 years after account termination.
• Security and access logs are retained for 12 months for investigation purposes.
• After account closure, personal data will be deleted or anonymised within 90 days, subject to the retention obligations stated above.

9International Data Transfers

Some of the technology infrastructure providers we use may process data outside Malaysia. In such cases, we ensure that data transfers are protected by data processing agreements that comply with privacy protection standards equivalent to or higher than those set out under Malaysia's PDPA.

We also ensure that all third parties outside Malaysia who receive your data are contractually bound to protect that information to a security standard equivalent to the mtown8 platform.

10Children's Privacy

The mtown8 platform is exclusively for adult users aged 18 and above. We do not knowingly collect personal information from individuals under 18 years of age.

If we discover that personal information from a minor has been collected without our knowledge, we will take immediate action to delete that information and terminate the account in question. Parents or guardians who suspect their child has registered on our platform are encouraged to contact us immediately.

11Changes to This Privacy Policy

Mtown8 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or technological developments. Any changes will be published on this page with a new update date.

For significant changes, we will notify members via email notification or in-platform announcement at least 7 days before the changes take effect. Continued use of the mtown8 platform after changes are published will be considered your acceptance of the updated Policy.

12Contact Our Privacy Officer

If you have any questions, concerns, or wish to exercise your privacy rights, please contact the mtown8 privacy team. We are committed to responding to all enquiries within 3 business days.

• Privacy Email: [email protected]
• Live Support: 24/7 live chat via the mtown8 platform
• Reference: Please include your account number and enquiry details for faster processing