At AP8MY, we take the privacy and security of your personal data seriously. This Privacy Policy explains what information we collect from you as a player on the ap8my platform, how we use and store that information, who we may share it with, and what rights you hold over your own data. Please read this document carefully before registering an account or submitting any personal information through our platform.
This Privacy Policy ("Policy") is issued by AP8MY ("the Platform", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at ap8my.cam. This Policy applies to all personal data collected from individuals who visit, register on, or interact with the AP8MY platform, regardless of the device or method of access used.
AP8MY operates under international gaming licensing and is committed to processing personal data in a responsible, transparent, and secure manner. We recognise the sensitivity of personal information shared by our players — particularly financial data, identity documents, and betting history — and have put in place robust technical and organisational measures to protect it.
This Policy is incorporated into and forms part of the AP8MY Terms & Conditions. By creating an account on the ap8my platform, you acknowledge that you have read, understood, and consented to the collection and processing of your personal data as described in this Policy.
AP8MY serves players primarily from Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other cities across the peninsula and East Malaysia. This Policy is written in English and governs data processing activities relating to all registered players on the ap8my platform.
For the purpose of this Privacy Policy, the following terms shall bear the meanings set out below:
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or could be used to identify a living natural person, directly or indirectly — including name, identification number, contact details, and online identifiers. |
| Processing | Any operation performed on personal data, including collection, storage, use, disclosure, transfer, alteration, or deletion. |
| Data Controller | AP8MY, the entity that determines the purposes and means of personal data processing under this Policy. |
| Data Subject | Any registered or prospective player whose personal data is collected and processed by AP8MY. |
| Sensitive Data | A subset of personal data requiring heightened protection — including identification document numbers, financial account details, and health-related information where applicable. |
| KYC Data | Identity and age verification documentation submitted by players as part of the Know Your Customer process, including MyKad copies, passport scans, and proof of address documents. |
| Cookies | Small text files placed on your device by the ap8my platform for the purposes of session management, preference storage, analytics, and fraud prevention. |
| Third-Party Processor | An external service provider engaged by AP8MY to process personal data on our behalf under documented data processing agreements — such as payment gateway operators and identity verification services. |
AP8MY collects the following categories of personal data from players and prospective players:
AP8MY collects personal data through the following means:
AP8MY processes your personal data only for the specific, legitimate purposes set out below. We do not process your data for any purpose beyond those identified here without your prior consent or a valid legal basis.
| Processing Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your registered Account on the ap8my platform, including authentication, password management, and account preferences. |
| Age & Identity Verification | Confirming that all registered players meet the mandatory minimum age requirement of 21 years and that all submitted identity information is accurate and authentic. |
| Payment Processing | Facilitating secure deposit and withdrawal transactions via Malaysian payment channels including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, and supported cryptocurrencies. |
| Regulatory Compliance | Meeting obligations under our international gaming licence, including anti-money laundering (AML) procedures, counter-terrorism financing (CTF) obligations, and responsible gambling requirements. |
| Fraud Prevention | Detecting, investigating, and preventing fraudulent activity, account abuse, bonus exploitation, and other prohibited conduct on the platform. |
| Customer Support | Responding to enquiries, resolving disputes, processing complaints, and providing account-related assistance in English, Bahasa Melayu, and Mandarin. |
| Service Improvement | Analysing platform usage patterns, betting behaviour, and technical performance data to improve the quality, reliability, and user experience of the ap8my platform. |
| Responsible Gambling | Monitoring gaming activity for indicators of problem gambling behaviour and administering self-imposed limits, cooling-off periods, and self-exclusion requests in accordance with our Responsible Gambling programme. |
| Marketing Communications | Sending promotional offers, bonus notifications, and platform updates to players who have opted in to marketing communications. Players may withdraw consent at any time. |
AP8MY processes your personal data on the following legal bases as applicable under internationally recognised data protection principles:
AP8MY does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We may share your personal data with the following categories of recipients only where strictly necessary and under appropriate contractual safeguards:
All third-party processors engaged by AP8MY are required to handle personal data in accordance with applicable data protection standards. AP8MY remains responsible for the appropriate use of your data by any processor acting on our behalf.
AP8MY retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, licensing, and audit obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of account + 5 years after closure | Regulatory & licensing compliance |
| KYC & Identity Documents | Duration of account + 5 years after closure | AML/CTF regulatory obligation |
| Financial Transaction Records | Duration of account + 7 years after last transaction | Financial audit & regulatory requirement |
| Gaming & Betting Logs | Duration of account + 3 years after closure | Dispute resolution & licensing requirement |
| Customer Support Records | 3 years from date of last interaction | Legitimate interest — dispute resolution |
| Marketing Consent Records | Until consent withdrawn + 1 year | Consent record-keeping compliance |
| Technical & Device Logs | Up to 12 months from collection | Fraud prevention & security |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
AP8MY implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
While AP8MY takes all reasonable steps to secure your personal data, no internet transmission or electronic storage system is completely immune from risk. You are responsible for keeping your account credentials secure and for notifying us immediately if you suspect any unauthorised access to your Account.
AP8MY uses cookies and similar technologies to enable core platform functionality, improve user experience, and support fraud prevention. The following categories of cookies may be used on the ap8my platform:
You may manage your cookie preferences through your browser settings. Disabling certain categories of cookies may impact your experience on the ap8my platform. We do not use cookies to serve third-party advertising or sell data to advertising networks.
As a player whose personal data is processed by AP8MY, you hold the following rights in relation to your personal information. To exercise any of these rights, please contact us via the details in Section 16.
You have the right to request a copy of the personal data AP8MY holds about you. We will respond to verified access requests within a reasonable timeframe, typically within 30 days.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Contact our support team with the relevant details and supporting documentation.
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to AP8MY's overriding legal and regulatory retention obligations (see Section 8).
You may request that we restrict processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, or where processing is unlawful but you do not wish it to be deleted.
Where processing is based on your consent or on a contractual basis, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
You have the right to object to processing carried out on the basis of AP8MY's legitimate interests. You also have an absolute right to object to processing for direct marketing purposes at any time, which we will action without delay.
Where processing is based on your consent, you may withdraw that consent at any time by contacting our support team or updating your account communication preferences. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
AP8MY will not charge a fee for exercising any of the above rights in ordinary circumstances. We may ask for reasonable evidence of your identity before processing a data subject request to prevent unauthorised disclosure.
The AP8MY platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. All registration attempts are subject to age verification procedures, and accounts found to have been opened by individuals below the minimum age will be immediately closed and any funds held will be dealt with in accordance with our legal obligations.
If you have reason to believe that a person under the age of 21 has registered an Account or submitted personal data to AP8MY without authorisation, please contact us immediately at [email protected] (plain text — do not click as a link). We will investigate and take appropriate action, including data deletion where required.
As an internationally licensed gaming platform, AP8MY may store and process personal data on infrastructure located outside Malaysia. Where personal data is transferred to servers or service providers located in other jurisdictions, we take steps to ensure that appropriate safeguards are in place — including contractual data protection clauses with all processors and sub-processors operating outside the primary jurisdiction.
We do not transfer personal data to jurisdictions that do not provide an adequate level of protection for personal data without first implementing appropriate safeguards. Players who have concerns about international data transfers may contact us for further information.
The AP8MY platform may reference or interact with third-party services including payment gateways, game providers, and fraud prevention systems. AP8MY is not responsible for the privacy practices of any third-party service provider beyond those with whom we have formal data processing agreements.
Where required by our licensing obligations, all third-party processors engaged by AP8MY are required to handle personal data securely and in accordance with applicable data protection standards. Players are encouraged to review the privacy policies of any third-party services they interact with independently of the ap8my platform.
AP8MY reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our international licensing requirements. Material changes to this Policy will be communicated to registered players via email to their registered address and/or through a prominent notice on the ap8my platform prior to the change taking effect.
The effective date at the top of this page indicates when the current version of this Policy came into force. Your continued use of the ap8my platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically.
For any questions, concerns, or requests relating to this Privacy Policy or to the personal data AP8MY holds about you, please contact us through the following channels. All data-related enquiries will be handled by our dedicated data protection team.
Data protection is not a box-ticking exercise for us. These are the practical commitments we uphold for every player on the ap8my platform.
Personal data — including KYC documents and financial records — is encrypted both in storage and during transmission using 256-bit SSL/TLS. Your data is never transmitted in plain text over the internet.
AP8MY does not sell, license, or rent your personal data to any third party for commercial, advertising, or marketing purposes. Your information belongs to you.
Access, correct, delete, restrict, or export your personal data at any time. We respond to verified data requests promptly and without unnecessary bureaucracy.
We collect only the personal data that is genuinely necessary for account management, payment processing, regulatory compliance, and player safety. Nothing is collected speculatively.
Every category of data has a defined maximum retention period. Data that is no longer required for its original purpose is securely deleted or anonymised in full.
All third-party processors — from KYC providers to payment gateway operators like DuitNow and FPX — are bound by documented data processing agreements and security requirements.
Our support team is available around the clock to handle any privacy-related concerns. If you would like to exercise any of your data rights, submit a request via Live Chat or email with the subject line "Privacy / Data Request" — we will handle it within five working days.
AP8MY is committed to the responsible, transparent, and secure handling of your personal data.