Personal Data Protection

Privacy Policy tr8 — Your Data Rights and Security

Tr8 takes the protection of every member's personal information seriously. This document clearly explains how we collect, use, store, and protect your data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last Updated: 1 January 2026 Compliant with PDPA 2010

Important Note: By registering and using the tr8 platform, you consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.
1 Types of Personal Data We Collect

Tr8 collects various types of personal information necessary to provide a safe, efficient, and personalized experience to every member. Data collection is carried out directly through the registration process, platform usage, and interactions with our support team.

1.1 Identity Information

Information we collect during registration and the identity verification (KYC) process includes full name, identification card number (MyKad), date of birth, gender, and uploaded images of identity documents for verification purposes. This information is required to fulfil legal obligations related to anti-money laundering (AML) prevention and to protect all members from account misuse.

1.2 Contact Information

This includes your registered mobile number, active email address, and, where applicable, your residential address. Contact information is used for account verification, transaction notifications, customer support communications, and delivery of promotional materials you have consented to receive.

1.3 Financial Information

Tr8 retains records of the bank account numbers you register for withdrawal purposes, the account holder's name, and the banking institution's name. We does not store full credit or debit card details — all card transactions are processed directly by PCI-DSS certified third-party payment processors.

1.4 Technical Information & Activity

While you use the tr8 platform, we automatically record your IP address, web browser type, device operating system, screen resolution, pages visited, session duration, game history, transaction history, and account activity logs. This technical data is used for security purposes, fraud detection, platform improvements, and performance analysis.

Please Note: tr8 will never request your account password via email, chat, or phone. If anyone claims to be a tr8 staff member and asks for your sensitive information, please report it to our security team immediately.
2 Purpose of Your Personal Data Usage

Every piece of information tr8 collects has a clear and lawful purpose. We do not collect data beyond what is required for platform operations. The following are the primary purposes for which your personal data is used:

Data Type Purpose of Use Legal Basis
Identity Information KYC verification, fraud prevention, AML compliance Legal obligation
Contact Information Account communications, OTP, transaction notifications Contract performance
Financial Information Processing deposits and withdrawals Contract performance
Technical Data Account security, fraud detection, audit Legitimate interests
Game Records Dispute resolution, responsible gaming analysis Contract performance
Marketing Preferences Personalised promotions, exclusive member offers User consent

Should tr8 need to use your data for any purpose not stated above, we will inform you in advance and, where necessary, seek fresh consent from you.

3 Data Security Measures at tr8

The personal data security of tr8 members is our absolute top priority. We continuously invest in the latest security infrastructure to ensure your information is always protected against unauthorized access, data breaches, or misuse.

3.1 Data Encryption

All data transmitted between your device and tr8's servers is protected with encryption SSL/TLS 256-bit — the same technology used by leading banking and financial institutions. Data stored on our servers is further protected with AES-256 grade encryption for an additional layer of security.

3.2 Internal Access Controls

Access to member personal data within the tr8 organisation is strictly limited to staff who require it to perform their duties. All access is automatically logged and audited. tr8 staff who violate internal data access policies will be subject to appropriate disciplinary action.

3.3 Two-Factor Authentication (2FA)

Tr8 supports and encourages the use of two-factor authentication (2FA) for all member accounts. With 2FA enabled, even if your password becomes known to an unauthorized party, they will not be able to access your account without the verification code sent to your device.

3.4 Regular Security Audits

The tr8 security infrastructure undergoes regular independent audits by internationally accredited cybersecurity firms. Audit findings are used to identify and patch vulnerabilities before they can be exploited by malicious parties.

Incident Response Plan: In the event of any security incident involving member data, tr8 is committed to notifying affected members within 72 hours after the incident is identified, in line with international data protection best practices.
4 Data Sharing with Third Parties

Tr8 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, in the course of platform operations, there are limited situations where data sharing is necessary:

4.1 Integrated Service Providers

Tr8 works with trusted third-party service providers to carry out platform operations, including payment processors, game providers, cloud infrastructure providers, and identity verification services. All such providers are bound by strict data confidentiality agreements and are only permitted to use your data for the specified service purposes.

4.2 Legal Requirements & Authorities

Tr8 will disclose member personal data to the relevant authorities when required by Malaysian law, court order, or to support legitimate criminal investigations such as money laundering or fraud cases. In such instances, tr8 will comply with all applicable legal requirements.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of tr8 assets, members' personal data may be transferred as part of that business transaction. In such cases, members will be notified in advance and the same or stricter privacy policy will continue to apply.

Warning: tr8 will never share your personal data with advertising companies, data brokers, or any party without a legitimate operational need. Any communication claiming otherwise is false.
5 Your Rights as a tr8 User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by tr8. tr8 respects and facilitates the exercise of these rights:

Right of Access

You may request a copy of the personal data we hold about you at any time via live chat or support email.

Right to Rectification

If your personal data is inaccurate or outdated, you have the right to request a correction and we will update it within 5 business days.

Right to Erasure

You may request the deletion of your personal data, subject to legal record-keeping obligations related to financial operations.

Right to Withdraw Consent

You may withdraw consent for data processing at any time, particularly for marketing communications, without affecting any prior processing.

Right to Data Portability

You may request an export of your account data in a machine-readable format for personal use or transfer to another platform.

Right to Object to Processing

You have the right to object to the processing of your data for specific purposes such as direct marketing and automated profiling.

How to Submit a Request: To exercise any of the above rights, contact the tr8 privacy team via the in-platform live chat. We will process your request within 14 working days after identity verification.
6 Cookies, Tracking and Similar Technologies

The tr8 platform uses cookies and similar tracking technologies to enhance the user experience, ensure session security, and understand how members interact with our platform.

6.1 Types of Cookies Used

  • Essential Cookies: Required for core platform functions such as login, session verification, and account security. These cookies cannot be disabled.
  • Performance Cookies: Collects information on how the platform is used to help us improve the user experience. All data is collected anonymously.
  • Functional Cookies: Stores user preferences such as language, display theme, and personal settings to provide a more comfortable experience.
  • Analytics Cookies: Helps tr8 understand overall platform usage patterns for continuous improvement purposes.

6.2 Managing Cookies

You may manage or disable non-essential cookies through your web browser settings at any time. However, disabling essential cookies may affect platform functionality and your login experience.

6.3 Cross-Device Tracking

Tr8 uses secure device identifiers to detect multiple account access attempts and fraudulent activity across different devices. This information is used solely for security and compliance purposes, not for advertising.

7 Data Retention and Deletion

Tr8 does not retain your personal data for longer than is necessary for the purpose for which it was collected, or as required by applicable law.

7.1 Financial Records & Transactions

In compliance with Malaysian legal requirements relating to financial institutions and anti-money laundering, financial transaction records are retained for a minimum of 7 years from the transaction date, even after account closure.

7.2 Active Account Data

As long as your account remains active with tr8, we retain all data necessary for its operation. Your data is updated whenever you submit new information through the KYC process or profile updates.

7.3 Data After Account Closure

Upon account closure, tr8 will delete or anonymize personal data that is no longer required within 90 days, except for data required to be retained under applicable law. Retained data will be kept securely and accessed only for legal compliance purposes.

7 Years
Financial Transaction Records
90 Days
Post-Closure Data Deletion
72 Hours
Security Incident Notification
14 Days
Data Rights Request Response
8 Amendments to This Privacy Policy

Tr8 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or platform improvements. All amendments will be published on this page with the latest update date.

8.1 Notification of Material Changes

Should there be any significant changes to how we process your personal data — particularly those affecting your rights — tr8 will send a direct notification via email or in-platform notification at least 14 days before the changes take effect.

8.2 Continued Use as Consent

Continued use of the tr8 platform after the effective date of any amendment constitutes your acceptance of the revised policy. If you do not agree with the amendments, you have the right to close your account and request data deletion by contacting our support team.

8.3 Archive of Previous Versions

Previous versions of this Privacy Policy are available for reference by contacting the tr8 support team. We maintain records of all versions of the privacy policy that have been in effect as part of our commitment to transparency with our members.

Contact the tr8 Data Privacy Officer: If you have any questions, concerns, or complaints regarding your data privacy, the tr8 privacy team can be reached via 24/7 in-platform live chat or through our support email.

How tr8 Protecting Your Data

Every piece of data you entrust to us passes through a rigorous protection cycle — from collection through to final deletion.

1
Minimum Collection

Tr8 only collects data that is genuinely necessary for platform operations and legal compliance — nothing more.

2
Instant Encryption

Data is encrypted immediately during transmission and storage using military-grade encryption standards.

3
Restricted & Logged Access

Only authorised staff may access data, and every access is recorded in an immutable audit log.

4
Regular Independent Audits

An independent security firm evaluates our systems every quarter to identify and address any vulnerabilities.

5
Scheduled Deletion

Data that is no longer required is automatically deleted or anonymised according to the established retention schedule.

Why Your Privacy is Safe at tr8

Full PDPA Compliance

Tr8 operates in compliance with Malaysia's Personal Data Protection Act 2010, ensuring your legal rights are fully respected at all times.

No Data Sales

Your personal data has never been and will never be sold to advertisers or data brokers under any circumstances. Your privacy is not our product.

256-bit SSL Encryption

All communications between your device and the tr8 platform are secured with internationally recognized 256-bit SSL encryption.

2FA for Account Security

Two-factor authentication is available for all accounts, providing an additional layer of protection against unauthorized access.

Anonymisation of Outdated Data

Data that is no longer required is not simply deleted — it is anonymised to ensure no identifiable information remains in the system.

24/7 Privacy Support

The tr8 support team is always ready to assist you with any data privacy queries at any time, including data access and deletion requests.


Your Data Is Safe. Your Experience, Guaranteed.

Tr8 builds a platform that is not only entertaining, but also safe and transparent. Register today and enjoy a responsible online gaming experience backed by full privacy protection.

18+ For adults aged 18 and above. Bet responsibly. Responsible Gaming

Bahasa Melayu