mplay8 Privacy Policy

This Privacy Policy (hereinafter "Policy") describes how mplay8 (hereinafter "mplay8", "we", "us", or "the Platform") collects, processes, stores, and protects the personal data of users (hereinafter "you", "the Player", or "the Data Subject") who access or use the mplay8 online gaming platform at mplay8.cam.

mplay8 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We process personal data only for legitimate, specified purposes and retain it no longer than necessary to fulfil those purposes or satisfy our legal obligations.

By registering an account on the mplay8 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which govern your use of the platform generally.

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data": Any information relating to an identified or identifiable natural person — including but not limited to name, email address, phone number, payment details, IP address, or device identifiers.
• "Processing": Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller": mplay8, the entity that determines the purposes and means of processing your personal data.
• "Data Processor": A third party engaged by mplay8 to process personal data on our behalf and under our instructions.
• "Consent": A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data.
• "KYC" (Know Your Customer): The identity and age verification process required under anti-money laundering regulations and our own account eligibility standards.
• "Cookie": A small text file stored on your device by a website to retain session information, preferences, or anonymised analytics data.
• "Sensitive Personal Data": Categories of personal data warranting higher protection, including identification document numbers and financial account details.

mplay8 collects personal data through several channels — directly from you during registration and use of the platform, automatically via your device and browser, and occasionally from regulated third-party verification services. The categories of personal data we may collect are as follows:

mplay8 processes personal data only where a valid legal basis exists. The applicable legal bases for our data processing activities are:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account management, processing deposits and withdrawals, verifying identity, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, responsible gambling regulations, and financial reporting duties.
• Legitimate Interests: Processing necessary for mplay8's legitimate business interests, including platform security, fraud prevention, technical maintenance, and aggregate analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit, freely given consent — including marketing communications and optional analytics features. You may withdraw consent at any time by updating your account preferences or contacting our support team.

mplay8 uses collected personal data for the following specific and documented purposes:

5.1 Account Creation and Management

To create, authenticate, and manage your player account; to verify your identity and age (21+ policy enforcement); to communicate account-related notifications including deposit confirmations, withdrawal status, and security alerts.

5.2 Payment Processing

To process deposits and withdrawals via your selected Malaysian payment method — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, BTC, and USDT. Financial transaction records are also retained for legal and regulatory compliance purposes.

5.3 KYC and Fraud Prevention

To conduct mandatory Know Your Customer verification; to detect and prevent fraud, money laundering, account takeover, and other forms of financial crime. This includes automated screening of transactions against risk indicators and manual review where suspicious activity is flagged.

5.4 Platform Operation and Improvement

To deliver and improve gaming services; to diagnose technical faults; to conduct aggregate analysis of user behaviour to inform product development and platform improvements.

5.5 Responsible Gambling Monitoring

To monitor gaming activity for signs of problem gambling; to implement deposit limits, session alerts, and self-exclusion measures; to comply with responsible gambling obligations. See our Responsible Gambling page for more information on the tools available to you.

5.6 Marketing Communications (Consent-Based)

To send promotional offers, bonus notifications, and platform updates — exclusively where you have opted in. You may unsubscribe from marketing communications at any time through your account settings.

5.7 Legal and Regulatory Compliance

To fulfil our obligations under applicable laws, respond to lawful requests from regulatory authorities, and to assert or defend legal claims.

mplay8 does not sell, rent, or trade your personal data to third parties for commercial purposes. Data may be disclosed to the following categories of recipients solely to the extent necessary for the stated purpose:

• Payment Processors and Financial Institutions: Malaysian payment service providers (including DuitNow operators, FPX network participants, and e-wallet providers) and cryptocurrency exchange partners — for the sole purpose of processing financial transactions.
• Identity Verification Services: Regulated third-party KYC and anti-money laundering screening providers engaged to verify player identity and age, and to screen against sanctions and politically exposed person (PEP) databases.
• Technology and Infrastructure Providers: Cloud hosting, database, and cybersecurity service providers engaged under strict data processing agreements requiring them to maintain appropriate technical and organisational security measures.
• Regulatory and Law Enforcement Authorities: Where required by law or a valid court order, mplay8 may disclose personal data to competent governmental or regulatory authorities. We will notify affected players where legally permitted to do so.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged under strict confidentiality obligations.

All third-party processors are subject to written data processing agreements and are required to implement security measures at least equivalent to those applied by mplay8.

mplay8 uses cookies and similar tracking technologies to operate the platform, maintain session security, and understand how users interact with our services. The cookies we deploy fall into the following categories:

• Strictly Necessary Cookies: Essential for the platform to function — including session authentication tokens and security cookies. These cannot be disabled without significantly impairing platform functionality.
• Functional Cookies: Remember your language preferences, display settings, and other personalisation choices to improve your experience on return visits.
• Analytics Cookies: Collect anonymised data on how visitors navigate the platform — including pages visited, time on page, and error events — to help us identify usability issues and improve the platform.
• Security Cookies: Used for fraud detection, bot prevention, and monitoring for suspicious access patterns that may indicate account takeover attempts.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality and security of the mplay8 platform. mplay8 does not deploy third-party advertising or retargeting cookies.

mplay8 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or to satisfy applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised. Where data must be retained for legal proceedings or regulatory investigations, retention may be extended until the matter is concluded.

mplay8 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit Secure Sockets Layer (SSL) encryption for all data in transit between your device and our servers.
• Encryption at rest for sensitive personal data categories including financial records and identity documents.
• Multi-factor authentication (MFA) options for player accounts to protect against unauthorised access.
• Role-based access controls restricting internal access to personal data on a strict need-to-know basis.
• Continuous monitoring of platform infrastructure for security anomalies, intrusion attempts, and data breach indicators.
• Regular third-party security audits and penetration testing of critical system components.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, mplay8 will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.

As a player and data subject, you hold the following rights in relation to your personal data held by mplay8. These rights may be exercised by contacting our support team through the channels listed in Section 14 below.

mplay8 will respond to substantiated data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days with prior written notice. Some rights are subject to exceptions where data retention is required by law — for example, financial transaction records required for AML compliance cannot be deleted on request during the mandatory retention period.

mplay8 is strictly an adult gaming platform. Access to the mplay8 platform is prohibited for any person under the age of 21 years. We do not knowingly collect or process personal data from individuals under this age.

If mplay8 discovers or has reason to believe that personal data has been submitted by a player who is under 21 years of age, we will immediately suspend the associated account, initiate an investigation, and permanently delete all personal data associated with the underage individual. Any funds deposited by an underage player will be handled in accordance with our underage gambling policy, which may involve return of funds to the original payment source following verification.

If you are a parent or guardian and believe that your child may have created a mplay8 account, please contact our support team immediately via the channels listed in Section 14.

mplay8 operates primarily within Malaysia and endeavours to process personal data within the region wherever possible. However, certain third-party service providers engaged by mplay8 — including cloud infrastructure providers, KYC verification services, and cybersecurity vendors — may process data in jurisdictions outside Malaysia.

Where personal data is transferred to countries that may not provide an equivalent level of data protection, mplay8 ensures that appropriate safeguards are in place, including:

• Binding contractual clauses requiring the recipient to maintain standards equivalent to applicable data protection principles;
• Engagement only with processors that maintain recognised international security certifications (e.g., ISO/IEC 27001);
• Ongoing assessment of transfer risk and adequacy on a periodic basis.

mplay8 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or our services. All updates will be published on this page with a revised effective date. Where changes are material, we will endeavour to notify registered players via email or a prominent in-platform notification prior to the changes taking effect.

We encourage you to review this Policy periodically to remain informed of how we protect your personal data. Continued use of the mplay8 platform following the publication of any amendment constitutes your acceptance of the revised Policy.

For any queries, requests, or complaints relating to this Privacy Policy or the processing of your personal data, please contact mplay8 through the following channels. All privacy-related requests will be handled by our dedicated Data Protection team.

If you are not satisfied with how mplay8 has handled your personal data or a data rights request, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.