mq8 Privacy Policy

1. Introduction

mq8 ("we", "us", "our") is committed to protecting and respecting the privacy of every individual who interacts with the mq8 platform at mq8.app. This Privacy Policy sets out the basis on which any personal data we collect from you — or that you provide to us — will be processed by mq8.

By registering an mq8 account, using any feature of the mq8 platform, or visiting mq8.app, you acknowledge that you have read this Privacy Policy and agree to the collection and use of your information as described herein. This policy should be read alongside the mq8 Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal data is the operator of the mq8 platform. Queries relating to the processing of your personal data should be directed to the mq8 Data Protection contact as set out in Section 16 of this policy.

3. Data We Collect

3.1 Account Registration Data

When you create an mq8 account, we collect: your full legal name, date of birth, nationality, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya), email address, and mobile phone number.

3.2 Identity Verification (KYC) Data

To comply with international gaming authority standards and applicable anti-money laundering (AML) obligations, mq8 may collect copies of government-issued identity documents (such as a Malaysian identity card or passport), proof of residential address, and documentation relating to your source of funds or payment methods.

3.3 Financial Transaction Data

mq8 records all deposits, withdrawals, bonuses, and bet activity associated with your account, including the payment method used (e.g., Touch n Go eWallet, Boost, GrabPay, Maybank FPX, CIMB Clicks, Public Bank), transaction amounts in MYR, and timestamps.

3.4 Technical and Usage Data

We automatically collect certain technical data when you access mq8, including: your IP address, browser type and version, device type and operating system, pages visited, session duration, referral URL, and gameplay logs (bet amounts, game titles, outcomes).

3.5 Communications Data

If you contact mq8 via live chat or email, we retain records of that correspondence, including the content of your messages and any attachments, for customer service and compliance purposes.

4. How We Collect Data

mq8 collects personal data through the following means:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to an mq8 survey or promotion.
• Automatically: through cookies, web beacons, and server-side logging as you browse and use the mq8 platform.
• From third parties: from payment processors (e.g., Touch n Go eWallet, Boost), identity verification service providers, and fraud detection partners, where such sharing is necessary to verify your identity or process your transactions.

5. Legal Basis for Processing

mq8 processes your personal data on the following legal bases:

• Contract performance: processing necessary to provide you with the mq8 platform services under our Terms & Conditions, including account management, bet placement, and payment processing.
• Legal obligation: processing required to comply with anti-money laundering (AML) obligations, KYC requirements mandated by international gaming authorities, and applicable data retention laws.
• Legitimate interests: processing for fraud prevention, platform security, abuse detection, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: processing for optional marketing communications where you have provided explicit, freely given consent that may be withdrawn at any time.

6. How We Use Your Data

mq8 uses the personal data we collect for the following purposes:

• To create, verify, and maintain your mq8 account.
• To process deposits and withdrawals in MYR via your selected payment methods.
• To verify your age and identity in compliance with our 21+ age policy and KYC obligations.
• To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct.
• To provide customer support and resolve disputes relating to your mq8 account.
• To send you account-related communications, including transaction confirmations, security alerts, and policy update notices.
• To enforce our Terms & Conditions and Responsible Gaming Policy, including the application of deposit limits and self-exclusion measures.
• To improve the mq8 platform through analysis of aggregated and anonymised usage data.
• To send promotional communications where you have consented to receive them — you may opt out at any time via your account settings.

7. Data Sharing

mq8 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary:

• Payment processors: Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and other payment infrastructure providers, solely for the purpose of processing your financial transactions.
• Identity verification providers: third-party KYC service providers engaged to assist with the verification of your identity and documentation.
• Fraud and AML screening providers: vendors engaged to assist mq8 in detecting and preventing fraudulent transactions and money laundering activity.
• IT and infrastructure providers: cloud hosting and data storage providers engaged by mq8 under data processing agreements that require them to maintain data security and confidentiality.
• Regulatory and law enforcement authorities: where mq8 is required by law, court order, or regulatory direction to disclose information about a player's account or activity.

8. International Data Transfers

As an online gaming platform operating for Malaysian players, some of the personal data mq8 collects may be processed by service providers located outside Malaysia. Where such international transfers occur, mq8 ensures that appropriate safeguards are in place — including contractual data processing agreements incorporating standard data protection clauses — to ensure that your personal data receives a level of protection equivalent to that provided under applicable Malaysian data protection law.

9. Data Retention

mq8 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy applicable legal, regulatory, audit, and gaming authority requirements. In practice, this means:

• Account registration and KYC data is retained for a minimum of five years following account closure, in line with standard AML record-keeping requirements.
• Transaction records (deposits, withdrawals, bet history) are retained for a minimum of five years.
• Customer support communications are retained for two years from the date of the interaction.
• Technical log data (IP addresses, session data) is retained for up to 12 months, after which it is aggregated or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with mq8's data deletion procedures.

10. Cookies & Tracking Technologies

10.1 What We Use

mq8 uses the following types of cookies and similar tracking technologies on mq8.app:

• Essential cookies: required for the operation of the mq8 platform, including session management, login state, and security token validation. These cookies cannot be disabled without affecting platform functionality.
• Analytics cookies: used by mq8 to understand how players navigate and use the platform, in order to improve usability and identify technical issues. Analytics data is aggregated and does not identify individual players.
• Preference cookies: used to remember your language, regional, and display preferences across sessions.

10.2 What We Do Not Use

mq8 does not deploy third-party advertising or retargeting cookies on mq8.app. Your browsing activity on mq8 is not shared with advertising networks or data brokers.

10.3 Managing Cookies

You may adjust your browser settings to block or delete cookies at any time. Please note that disabling essential cookies may impair your ability to log in to or use certain features of the mq8 platform.

11. Your Rights

Subject to applicable law and regulation, mq8 account holders have the following rights in relation to their personal data:

• Right of access: you may request a copy of the personal data mq8 holds about you.
• Right to rectification: you may request correction of inaccurate or incomplete personal data held by mq8.
• Right to erasure: you may request deletion of your personal data, subject to mq8's legal and regulatory retention obligations (for example, AML record-keeping requirements may prevent immediate deletion of transaction records).
• Right to restrict processing: you may request that mq8 restricts the processing of your data in certain circumstances, for example while a correction request is pending.
• Right to data portability: where processing is based on your consent or a contract, you may request a machine-readable copy of the personal data you provided to mq8.
• Right to withdraw consent: where mq8 processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time via your mq8 account settings, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact the mq8 support team as described in Section 16. mq8 will respond to all valid requests within 30 days, subject to any extensions permitted by applicable law.

12. Children & Minors

The mq8 platform is strictly restricted to individuals aged 21 years and above. mq8 does not knowingly collect personal data from individuals below the age of 21. If mq8 becomes aware that personal data has been provided by a person under the age of 21, that account will be immediately suspended, all associated data will be reviewed, and the relevant personal data will be deleted to the extent permitted by applicable law. If you have reason to believe that a minor has registered an mq8 account, please contact mq8 support immediately.

13. Security Measures

mq8 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your device and mq8 servers.
• AES-256 encryption for personal data stored in mq8 databases.
• Multi-factor authentication requirements for access to mq8 administrative systems.
• Regular independent penetration testing of the mq8 platform and infrastructure.
• Role-based access controls ensuring that mq8 staff can access personal data only to the extent required for their specific functions.
• Continuous monitoring for suspicious activity and automated fraud detection systems.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely secure. mq8 cannot guarantee the absolute security of data transmitted to or from the platform, and any such transmission is at your own risk. Where mq8 becomes aware of a data security incident that is likely to result in a risk to your rights, we will notify you and the relevant regulatory authority in accordance with applicable breach notification obligations.

14. Third-Party Services

The mq8 platform may reference or integrate third-party services — including payment gateways such as Touch n Go eWallet and Boost — which are governed by their own privacy policies. mq8 is not responsible for the data practices of third-party services, and we encourage you to review the privacy policies of any third-party service you use in connection with your mq8 account. All links to third-party services are for functional platform purposes only — mq8 does not endorse any third-party privacy practice.

15. Changes to This Privacy Policy

mq8 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or the mq8 platform's data processing activities. When we make material changes to this policy, we will update the effective date shown at the top of this page and, where appropriate, notify registered mq8 players via email or an in-platform notification. Your continued use of the mq8 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

16. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about mq8's data processing practices, please contact the mq8 Data Protection team through the following channels:

• Live Chat: Available 24/7 via mq8.app
• Email: [email protected]

mq8 will acknowledge all data-related enquiries within 5 business days and endeavour to fully resolve them within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.