Milion8 takes your privacy very seriously. This Privacy Policy clearly explains how we collect, use, store, and protect your personal data in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA).
Six core principles that guide how milion8 handles the personal data of Malaysian players
All personal data processing at milion8 is carried out in full compliance with the Malaysia Personal Data Protection Act 2010. This means we only collect the data we need, store it securely, and give you control over your own information.
Milion8 does not sell, rent, or disclose players' personal information to any third party for marketing or commercial purposes. Your data belongs to you — we use it solely to provide you with milion8 platform services.
All data transmitted between your device and milion8's servers is encrypted using 256-bit SSL — the same standard adopted by Malaysia's leading banking institutions such as Maybank and CIMB. No one can intercept or read your data in transit.
As a milion8 player, you have the full right to access the personal data we hold about you, request corrections to any inaccurate information, understand how your data is being used, and in certain circumstances, request that your data be deleted from our systems.
Milion8 only collects data that is strictly necessary to deliver platform services. We do not request excessive or irrelevant information. This data minimisation principle has been built into our system architecture from the ground up.
Milion8's data storage and processing systems undergo regular security audits by independent cybersecurity firms. This ensures our data protection practices remain current with the latest threats and aligned with industry standards.
The milion8 team is ready to assist with any enquiries regarding your data.
milion8 ("we", "platform") are fully committed to protecting the privacy and personal data security of every player on our platform. This Privacy Policy is drafted in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and sets out how we collect, process, store, and safeguard your personal information.
This policy applies to all players who register and use the milion8 platform, including use of the milion8.net website, the mobile application (if available), and all related services. By registering a milion8 account, you confirm that you have read, understood, and agreed to how we process your personal data as described in this document.
Milion8 acts as the data controller under Malaysia's PDPA for the personal data we collect from players. This means we are responsible for ensuring your data is processed lawfully, fairly, and transparently at all times. We take this responsibility very seriously, as the trust of our players is milion8's most valuable asset.
Important Note: Any material changes to this Privacy Policy will be communicated to players via in-account notifications or email. The "Updated" date at the top of this page indicates when the latest version was published. Your continued use of the platform after changes are published constitutes your acceptance of the revised privacy terms.
Milion8 only collects data that is genuinely necessary to provide and improve the platform's services. The following are the categories of data we may collect from you:
| Data Category | Examples of Information | Requirements |
|---|---|---|
| Identity Data | Full name, date of birth, Malaysian identity card or passport number | Mandatory KYC |
| Contact Data | Malaysian phone number, email address | Registration Required |
| Financial Data | Payment method details (Touch 'n Go, DuitNow, GrabPay, FPX), deposit and withdrawal history in MYR | Mandatory Transactions |
| Activity Data | Game history, bets, winnings, login records, session duration | Automatic |
| Technical Data | IP address, browser type, operating system, cookie data | Automatic |
| Communication Data | Records of customer support conversations and emails sent to us | Support |
Data Minimisation Principle: milion8 only collects data that serves a clear operational purpose. We do not request information such as a parent's name, marital status, or financial details beyond what is required for payment processing in RM.
Milion8 collects your personal data through various channels as you interact with our platform:
When you register a milion8 account, you provide basic information such as your name and Malaysian phone number. During the identity verification (KYC) process, you may be asked to upload a copy of your identification document. When you contact customer support, conversations are recorded for service quality purposes.
When you use the milion8 platform, our systems automatically record certain technical information such as your device's IP address, browser type, pages visited, session time and duration, and in-game actions. This data is used to ensure account security, detect unusual activity, and improve the overall user experience.
In certain situations, milion8 may receive your personal data from payment service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX — solely for the purpose of verifying and processing your financial transactions. milion8 does not request or store your full bank account or e-wallet details.
Note: milion8 will never ask for sensitive information such as your PIN, online banking password, or e-wallet password. Any party claiming to be milion8 and requesting such information is fraudulent — please contact us immediately at support@milion8.net.
Milion8 uses the personal data collected solely for the following purposes. Each purpose has a distinct lawful basis under the Malaysian PDPA:
Marketing: If you agreed to receive marketing communications during registration, milion8 may send you information about relevant promotions, bonuses, and the latest offers. You may withdraw this consent at any time through your account settings or by contacting our support team.
Milion8 does not sell or rent players' personal data to any third party for their own purposes. However, there are limited circumstances where we may need to share your data with certain parties in order to deliver our services:
Milion8 works with selected third-party service providers that help us operate the platform — including technology infrastructure providers, payment service providers (Touch 'n Go, GrabPay, DuitNow, FPX, and others), game providers, and customer support platforms. These providers are only permitted to use your data for purposes we specify and are bound by strict confidentiality agreements.
Milion8 may be required to disclose your personal data to Malaysian government authorities or law enforcement bodies when mandated by law, court order, or direction from a competent authority. In such situations, milion8 will notify you of the disclosure where permitted to do so.
Milion8 implements comprehensive technical and organisational measures to protect players' personal data from unauthorised access, disclosure, alteration, or destruction. The key security measures we have in place include:
Server Location: milion8 player data is stored in data centres that meet international security standards. milion8 ensures that any cross-border data transfers (where applicable) comply with all relevant Malaysian legal requirements.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a milion8 player have specific rights regarding your personal data. milion8 respects and facilitates the exercise of these rights:
You have the right to know what personal data we hold about you and to request a copy. Send your request to support@milion8.net — we will respond within 21 days.
If any of your personal data is inaccurate or out of date, you have the right to request a correction. Corrections can be requested through your account settings or via customer support.
You have the right to request that we stop processing your data for specific purposes — such as marketing — without affecting your ability to use milion8's core services.
In certain circumstances, you may request the deletion of your personal data. Please note that some data may need to be retained for legal compliance or contractual obligations.
You have the right to receive your personal data in a machine-readable format for transfer to another service provider, subject to reasonable technical limitations.
For processing that relies on your consent (such as marketing), you may withdraw that consent at any time through your milion8 account settings.
You have the right to clearly know the purpose for which your data is being processed, the lawful basis used, and how long that data will be retained in milion8's systems.
If you are not satisfied with how milion8 has handled your data, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner.
How to Exercise Your Rights: To exercise any of the above rights, contact the milion8 team at support@milion8.net with the subject line "Personal Data Rights Request", along with your full name and registered phone number. We will verify your identity before processing the request. Response time is 21 working days.
The milion8 platform uses cookies and similar technologies to enhance your experience, maintain account security, and help us understand how the platform is used. Below are the types of cookies we use:
You can manage your cookie settings through your internet browser. Please note, however, that disabling essential cookies may affect your ability to use certain milion8 platform features fully.
The milion8 platform is not suitable and not permitted for individuals under 18 years of age. milion8 does not knowingly collect or process any personal data from individuals under the age of 18.
If we become aware that personal data from an individual under the age of 18 has been collected, we will take immediate steps to delete that data from our systems and close the relevant account. Any winnings generated by an underage account will be voided in accordance with milion8's Terms & Conditions.
Parents and guardians: If you believe a minor has registered a milion8 account without your knowledge, please contact us immediately at support@milion8.net. We will investigate and take appropriate action within 24 hours.
In operating the milion8 platform, there are situations where your personal data may be processed or stored outside Malaysia — for example, when we use cloud computing services or work with international service providers.
Any cross-border data transfers carried out by milion8 comply with applicable Malaysian legal requirements. We ensure that all such transfers are safeguarded by appropriate protection mechanisms, including binding data processing agreements with recipients outside Malaysia.
International game service providers that partner with milion8 are also bound by strict data protection terms within our cooperation agreements. They are not permitted to use milion8 player data for their own purposes.
Milion8 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law. The following is a general guide to data retention periods by category:
Once the relevant retention period has expired, milion8 will delete or anonymise your personal data in a secure and irreversible manner, unless retention is required to fulfil ongoing legal obligations.
If you have any questions, concerns, or requests regarding this Privacy Policy or how milion8 handles your personal data, we encourage you to reach out to us directly. Our team responsible for data protection matters can be contacted through the following channels:
We are committed to responding to all privacy-related requests within 21 working days. For complex requests or those requiring thorough identity verification, we may need additional information before we can process your request. milion8 will not charge any fee for reasonable data rights requests.
Personal Data Protection Commissioner of Malaysia: If you are not satisfied with how milion8 has handled your privacy request after contacting us, you have the right to lodge a formal complaint with the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010 (PDPA). Further information is available on the official website of the Department of Personal Data Protection Malaysia.