🔒 Personal Data Protection Policy

Privacy Policy mhd8 – Player Data Protection Malaysia

Mhd8 is fully committed to protecting your privacy. This document clearly outlines what data we collect, how we use it, who can access it, and your rights as a player. We operate in compliance with the Malaysia Personal Data Protection Act (PDPA) 2010.

Last updated: 1 January 2026
Language: English (en-MY)
🛡️
PDPA Compliance
This policy is in full compliance with the Malaysian Personal Data Protection Act 2010
🔐
256-bit SSL
All data is transmitted and stored using bank-grade encryption

Mhd8's Privacy Commitment to Malaysian Players

The six core principles that underpin how mhd8 handles your personal data.

🔒
Bank-Grade Encryption
All personal and financial data you submit to mhd8 is protected by 256-bit SSL encryption — the same technology used by Malaysia's major banking institutions such as Maybank and CIMB. This means your data cannot be intercepted or read by unauthorised parties during transmission.
🚫
No Sale of Data to Third Parties
mhd8 has never and will never sell, transfer or rent your personal data to any third party for marketing or commercial purposes without your explicit written consent. Your data is not our product — it is a trust we safeguard.
⚖️
Full Malaysia PDPA Compliance
All of mhd8's data processing practices are in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. We only collect data that is strictly necessary, retain it for a reasonable period, and take every request for data access or deletion seriously.
👁️
Full Transparency on Data Use
mhd8 clearly states the purpose for collecting each type of data, how long it is retained, and which parties — if any — may receive your information. No data is collected in the background for undisclosed purposes. What you read in this policy is a true reflection of how we actually operate.
✋
Your Data, Your Control
As an mhd8 player, you have the right to access your data, correct inaccurate information, request account deactivation and data deletion, and withdraw marketing consent at any time. All such requests are handled at no additional charge within 14 business days.
📍
Data Stored on Secure Servers
All mhd8 player data is stored on servers protected by strict physical and digital security controls. Access to data is granted only to mhd8 employees who require it to carry out their duties, and all access is logged and monitored.
Important Notice
This Privacy Policy explains how mhd8 collects, uses, stores and protects your personal data when you use our platform. By registering an account or continuing to use mhd8, you acknowledge that you have read and understood this policy. If you have any questions, please contact us at support@mhd8.asia.
1 Introduction

Mhd8 ("we", "the mhd8 platform") takes seriously our responsibility to protect the privacy of every player who entrusts their personal data to us. This Privacy Policy is written in clear, straightforward language — not merely to satisfy legal requirements, but because we believe every player has the right to know exactly what happens to their information.

As an online casino platform serving Malaysian players exclusively, mhd8 processes various types of personal data in the course of our daily operations – from verifying the identities of new players and processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX, to settling winning withdrawals to your Malaysian bank account. All such data processing is carried out in strict accordance with PDPA principles.

This Privacy Policy applies to all data collected through the mhd8.asia website, the mhd8 mobile platform, and all communications between you and the mhd8 team, including customer support via live chat, WhatsApp and email.

Policy Based on Malaysia's PDPA
This Privacy Policy is drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (Act 709). Should there be any conflict between this policy and the requirements of the PDPA, the provisions of the PDPA shall prevail.
2 Data We Collect

Mhd8 collects your personal data through various means – from information you provide directly during registration, to data automatically generated as you use the platform. Below is a summary of the data categories we collect:

Data Category Example Information How Collected
Identity Information Full name, date of birth, MyKad number Registration / KYC
Contact Information Malaysian phone number, email address Registration
Financial Information Bank name, account number (partial), e-wallet Payment processing
Usage Data Game history, betting logs, session timestamps Automatic
Technical Data IP address, device type, browser, OS Automatic
Communications Data Live chat records, support emails, complaint tickets Support interactions
Cookie Data Language preference, login status, configuration settings Browser cookies

Mhd8 does not collect data beyond what is necessary. We practise the principle of data minimisation – only data genuinely required for the stated purpose is collected. We do not collect sensitive data such as medical information, religious beliefs or political affiliations.

3 Purpose of Data Collection

Every piece of data collected by mhd8 has a specific and legitimate purpose. We use your personal data for the following:

  • Account management and identity verification – to verify that you meet mhd8 membership eligibility requirements, including the minimum age of 18 and identity verification in accordance with anti-money laundering requirements
  • Financial transaction processing – to process deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, as well as withdrawals of winnings to your Malaysian bank account or e-wallet
  • Provision of gaming services – to ensure a seamless gaming experience, including saving your game preferences, betting history records, and performance statistics
  • Customer Support – to resolve complaints, respond to enquiries and provide effective technical assistance whenever you need support
  • Security & Fraud Prevention – to detect and prevent fraudulent activity, money laundering, and platform abuse that could harm other players
  • Legal compliance – to fulfil the reporting and record-keeping obligations required under applicable Malaysian law
  • Platform Improvements – to analyse aggregated usage patterns in order to improve the user experience and develop features that players need
  • Marketing communications – to send information about promotions, new bonuses, and platform updates, only if you have given consent to receive such communications
Marketing Consent
mhd8 only sends marketing communications to players who have given explicit consent. You may withdraw your marketing consent at any time by contacting support@mhd8.asia or through your account settings.
4 Legal Basis for Data Processing

Under Malaysia's PDPA, mhd8 only processes your personal data where a valid and legitimate legal basis exists. We rely on the following processing bases depending on the nature of the processing involved:

  • Performance of contract – processing required to deliver the services you have requested, including account management, payment processing, and game provision. This is the primary basis for the majority of mhd8's data processing.
  • Legal obligation – processing required to comply with applicable Malaysian laws, including anti-money laundering requirements, financial record retention and other reporting obligations.
  • Legitimate interests – processing for the purposes of platform security, fraud prevention and service improvement, where our interest in running a safe business operation is balanced against your privacy rights.
  • Consent – for the processing of marketing communications and certain other optional data categories where we explicitly request your consent.

Mhd8 never processes your data on an unlawful basis or for purposes not stated in this policy. Should the purpose of processing change, we will inform you and obtain fresh consent where required.

5 Data Sharing

Mhd8 does not sell your personal data. However, in the course of operating the platform, we may need to share data with a limited set of specific parties. Below is a full explanation of who may receive your data and the reasons for doing so:

  • Payment service providers – the necessary transaction details are shared with Malaysian payment processors (such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay providers) solely for the purpose of processing your deposits and withdrawals
  • Game providers – minimum account information is shared with licensed game providers (such as Evolution Gaming and Pragmatic Play Live) for game control and table management purposes
  • Security services – technical data may be shared with cybersecurity and anti-fraud service providers to protect the platform from threats and players from fraud
  • Relevant Authorities – mhd8 will disclose data to Malaysian law enforcement agencies or regulatory bodies when required by law or pursuant to a valid court order

All third parties that receive data from mhd8 are required to maintain the confidentiality of that data and use it only for the stated purpose. mhd8 is not responsible for the privacy practices of third parties whose links may appear within the mhd8 platform, but we select partners that uphold high security standards.

International Data Transfers
Some game providers and technical service partners working with mhd8 may operate outside Malaysia. In such cases, we ensure that data transfers are carried out with adequate safeguards, including binding data processing agreements.
6 Data Retention Periods

Mhd8 does not retain your personal data longer than necessary. Retention periods vary depending on the type of data and the purpose for which it was processed:

Data Type Retention Period Purpose
Active account data For the duration of the active account Required for account management
Financial transaction records 7 years after the transaction AMLA legal requirements
Game records 5 years Dispute resolution
Support communication logs 3 years References and quality audits
Performance cookie data 12 months Platform usage analytics
Account data upon termination 5 years after account closure Legal compliance requirements

Once the applicable retention period has expired, your data will be securely deleted or anonymised from mhd8's systems. Deletion is carried out on a regular schedule as determined by our data security team.

7 Your Rights as a Data Subject

As an mhd8 player subject to Malaysia's PDPA, you have the following important rights regarding your personal data. mhd8 is committed to respecting and facilitating the exercise of all these rights:

🔍
Right to Access
You have the right to request a copy of all personal data mhd8 holds about you. Requests are processed within 14 business days and are free of charge for the first request within any 12-month period.
✏️
Right to Rectification
If any personal data held by mhd8 is inaccurate or out of date, you have the right to request prompt correction. Log in to your account or contact support to update your information.
🗑️
Right to Erasure
You may request the deletion of your personal data when it is no longer required for the purpose it was originally collected. Such requests will be processed subject to any data retention obligations imposed by law.
🚫
Right to Object
You may object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on mhd8's legitimate interests in certain circumstances.
📦
Right to Data Portability
You have the right to receive your personal data in a machine-readable format and to have it transferred to another service provider, for data processed on the basis of consent or contract.
⏸️
Right to Restriction of Processing
In certain circumstances, you may request that mhd8 restrict the processing of your data — for example, while you are contesting the accuracy of that data or while a dispute is being investigated by our team.

To exercise any of the rights above, submit a written request to support@mhd8.asia with the subject line "PDPA Data Rights Request". Please include your account number and a clear description of your request. Our privacy team will acknowledge receipt within 3 business days and resolve the request within 14 business days.

8 Data Security

Mhd8 invests heavily in both technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. Key security measures we employ include:

  • 256-bit SSL/TLS Encryption for all data transmitted between your device and mhd8's servers
  • Data encryption at rest for all sensitive data stored in mhd8's databases
  • Role-based access control – only mhd8 employees who require access to specific data to perform their duties may access it, and all access is logged
  • Two-factor authentication for all internal access to mhd8 systems containing player data
  • Regular security audits by independent third parties to identify and address vulnerabilities before they can be exploited
  • 24/7 Threat Monitoring by mhd8's cybersecurity team, who monitor around the clock to detect suspicious activity
  • Security patch management to ensure all systems are kept up to date with the latest security patches

While mhd8 takes all reasonable security measures, no system can be guaranteed 100% secure. In the event of a data security breach that affects you, mhd8 will notify you within the timeframe required by applicable law.

You also play an important role in protecting your own data. Make sure your mhd8 account password is strong and unique, enable two-factor authentication on your account, and never share your login credentials with anyone – including anyone claiming to be an mhd8 representative.

9 Cookies & Tracking Technologies

Mhd8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit a website. The following are the types of cookies used by mhd8:

You can manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of the mhd8 platform. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

10 Changes to the Privacy Policy

Mhd8 reserves the right to update or amend this Privacy Policy from time to time in line with changes to our business operations, new legal requirements, or improvements to our data protection practices.

When there are material changes to this policy, mhd8 will notify you via:

  • An in-platform notification on mhd8 upon your next login
  • Email to the address registered on your account (for material changes)
  • An announcement in the notifications section of the mhd8 platform

The "Last Updated" date at the top of this page will always be updated to reflect the latest version of the policy. We encourage you to review this page periodically to stay informed about how we protect your data.

Your continued use of the mhd8 platform after any policy changes are published will be considered your acceptance of the updated policy. If you do not agree with the changes made, please contact us to discuss your options or to close your account.

11 Contact Our Privacy Officer

If you have any questions, concerns or requests relating to this Privacy Policy or the way mhd8 handles your personal data, we strongly encourage you to reach out to us directly.

The mhd8 privacy team can be reached through:

  • Privacy Email: support@mhd8.asia (use the subject line "Privacy Policy Enquiry" or "PDPA Request")
  • Live Chat: Available 24/7 within the mhd8 platform – please indicate that your enquiry relates to data privacy
  • Response time: Acknowledgement confirmed within 3 business days; resolution completed within 14 business days

We are committed to treating every privacy enquiry with the seriousness it deserves and within the stipulated timeframe. mhd8 believes that open communication about our privacy practices is the foundation of the trust we have built with our Malaysian players since we first launched.

mhd8 Privacy Commitment
mhd8 never rejects a valid PDPA request without sound justification. Every request is reviewed individually, and players will receive a clear written explanation of whether the request has been approved or declined, along with the reasons.

FAQ – mhd8 Privacy Policy

Answers to the most frequently asked questions from players about data protection at mhd8.

No, absolutely not. mhd8 has never sold, transferred, or rented players' personal data to any third party for marketing or commercial purposes. Your data is shared only with the technical service providers necessary to operate the platform — such as Malaysian payment processors (DuitNow, FPX, Touch 'n Go, etc.) and licensed game providers — and only the minimum required information is shared. All such third parties are contractually obligated to maintain the confidentiality of your data.

Yes, you have the right to request deletion of your personal data under Malaysia's PDPA. Submit a written request to support@mhd8.asia. Please note, however, that certain data may need to be retained by mhd8 to fulfil legal obligations – for example, financial transaction records must be kept for 7 years under Malaysia's anti-money laundering laws. Data not subject to such legal retention requirements will be deleted within 30 days of the request being received.

mhd8 does not store your full bank card number or e-wallet password in our systems. All payment processing is handled directly by licensed Malaysian payment providers — including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX — using their own security infrastructure. mhd8 receives only transaction confirmation; your sensitive payment details are never passed to us. This means that even in the event of a security incident affecting mhd8's systems, your payment information remains protected.

Yes, mhd8 records gameplay activity data, including betting history, session logs and game outcomes. This monitoring is conducted for several legitimate reasons: to ensure game integrity and detect fraud attempts, to provide data for resolving any disputes relating to game results, to support players using responsible gambling tools such as deposit limits and time reminders, and to meet audit and legal compliance requirements. Gameplay activity data is not shared with third parties except in the cases set out in Section 5 of this policy.

To unsubscribe from mhd8 promotional emails, you have several options: click the "Unsubscribe" link at the bottom of any promotional email you receive; log in to your mhd8 account and go to the Profile Settings section to update your communication preferences; or contact the mhd8 support team via live chat or email at support@mhd8.asia to request the deactivation of marketing communications. Requests will be processed within 5 business days. Please note that opting out of promotional emails does not affect the receipt of important account-related communications such as transaction confirmations and security notices.
🔒 A Platform You Can Trust

Your Data Is Safe with mhd8

Mhd8 protects your privacy with 256-bit SSL encryption, full Malaysia PDPA compliance, and a strict no-data-sale policy. Register now and start your gaming journey with complete confidence that your data is in safe hands.

Full Malaysia PDPA Compliance Bank-grade 256-bit SSL Your data is never sold Data control in your hands
Bahasa Melayu