Privacy Policy

This Privacy Policy ("Policy") is issued by plea8 ("we", "us", "our", or "the Company") and applies to all personal data collected from individuals ("you", "the Player", or "the User") who access, register on, or otherwise interact with the online gaming platform available at https://plea8.cam (the "Platform").

plea8 is committed to protecting the privacy and personal data of all users in accordance with internationally recognised data protection principles. This Policy sets out the categories of personal data we collect, the purposes and legal bases for processing, how we share data with third parties, the security measures we employ, and the rights available to you as a data subject.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must refrain from using the Platform.

The following terms carry the meanings assigned to them below throughout this Policy:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, email address, identification number, device identifiers, and financial information.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, use, disclosure, deletion, or any combination thereof.
• "Data Controller" — plea8, as the entity that determines the purposes and means of processing personal data.
• "Data Processor" — Any third party that processes personal data on behalf of plea8 pursuant to a written data processing agreement.
• "Consent" — Freely given, specific, informed, and unambiguous agreement to the processing of personal data for a stated purpose.
• "Cookies" — Small text files placed on your device by the Platform to store preferences, session information, and analytics data.
• "KYC Data" — Identity and address verification documents submitted by Players to satisfy Know Your Customer obligations.
• "Sensitive Data" — A subset of personal data requiring heightened protection, including financial data, identification documents, and transaction records.

plea8 collects the following categories of personal data in the course of operating the Platform:

plea8 does not knowingly collect data from individuals under 21 years of age. If we become aware that personal data has been collected from a person under this age threshold, it will be deleted without delay.

Personal data is collected through the following methods:

• Direct Submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or completing any on-Platform form.
• Automated Collection: Technical and behavioural data collected automatically through cookies, session tracking, and server logs each time you access the Platform.
• Third-Party Sources: In certain circumstances, plea8 may receive identity or fraud-risk data from third-party identity verification providers, payment processors (including DuitNow, FPX, Touch 'n Go eWallet), or anti-fraud service providers acting as our Data Processors.
• KYC Verification Services: Where plea8 uses an external identity verification service, that service may process your identity documents on our behalf and return a verification result to us.

plea8 processes personal data only for the following specific, documented purposes:

plea8 does not use personal data for automated decision-making that produces solely automated legal or similarly significant effects on Players, without human review, unless required to do so by regulatory obligation.

plea8 processes personal data on the following legal bases, in accordance with internationally recognised data protection frameworks:

• Contractual Necessity: Processing required to perform the contract with you — account creation, payment processing, game provision, and withdrawal execution are all necessary to deliver the Services you have contracted for.
• Legal Obligation: Processing required to comply with applicable law — including KYC verification, AML record-keeping, age verification, and regulatory reporting obligations under our international licence.
• Legitimate Interests: Processing necessary for plea8's legitimate operational interests — fraud detection, platform security, responsible gambling monitoring, and analytics — provided those interests are not overridden by your rights and freedoms.
• Consent: Where we rely on consent as a legal basis (e.g., for optional marketing communications), you have the right to withdraw that consent at any time by contacting our support team or updating your Account preferences.

plea8 does not sell or trade personal data. We share personal data with third parties only in the following circumstances and under strict contractual controls:

• Payment Processors: Malaysian payment providers including DuitNow, Touch 'n Go eWallet, FPX, Maybank, CIMB, and others receive the minimum personal data required to process your deposit or withdrawal transaction. These processors operate under their own regulatory frameworks and are not permitted to use your data for any purpose other than transaction execution.
• Identity Verification Services: Third-party KYC and identity verification providers process your identity documents on our behalf under strict data processing agreements.
• Fraud Prevention Services: We may share anonymised or pseudonymised technical data with fraud detection services to identify suspicious activity patterns.
• Legal and Regulatory Authorities: plea8 may disclose personal data to law enforcement, regulatory bodies, or courts where required by applicable law, a valid legal order, or our international licensing obligations.
• Service Continuity: In the event of a merger, acquisition, or transfer of all or part of plea8's business, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

As an internationally operating platform, plea8 may process and store personal data on servers located outside of Malaysia. Where personal data is transferred internationally, plea8 implements appropriate safeguards to ensure an equivalent level of protection to that described in this Policy.

Safeguards used for international transfers include:

• Contractual clauses aligned with internationally recognised data protection standards between plea8 and receiving entities;
• Transfer only to processors operating in jurisdictions with adequate data protection frameworks;
• Data processing agreements that bind receiving entities to confidentiality and security obligations equivalent to those in this Policy.

Malaysian players should be aware that data protection laws outside Malaysia may differ from local frameworks. However, plea8's contractual protections apply regardless of the jurisdiction in which data is processed.

plea8 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to applicable legal and regulatory retention requirements. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data (from which it is not possible to identify an individual) may be retained indefinitely for aggregate analytics purposes.

plea8 implements a layered technical and organisational security programme to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using TLS 1.3 or equivalent.
• Encryption at Rest: Stored personal data, including financial information and KYC documents, is encrypted using AES-256.
• Access Controls: Personal data is accessible only to authorised personnel with a documented business need. Role-based access controls are enforced throughout our systems.
• Two-Factor Authentication: plea8 offers two-factor authentication (2FA) to all account holders. We strongly recommend enabling this feature.
• Vulnerability Management: Regular penetration testing and security audits are conducted on Platform infrastructure.
• Incident Response: plea8 maintains a documented data breach response procedure. In the event of a breach that affects your personal data, we will notify you in accordance with applicable legal obligations.

plea8 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us operate the Platform efficiently and improve your experience.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for basic Platform functionality — session management, authentication, and security. These cannot be disabled without affecting core Platform operation.
• Functional Cookies: Store your preferences such as language settings, display options, and session state to personalise your experience.
• Analytical Cookies: Collect aggregated, anonymised data about how users interact with the Platform to help us improve performance and identify technical issues.
• Security Cookies: Used to detect fraudulent activity, unusual login patterns, and potential account compromise.

plea8 does not use third-party advertising cookies or behavioural tracking technologies for cross-site advertising purposes.

You may configure your browser to reject or delete cookies; however, disabling strictly necessary cookies may impair your ability to log into and use the Platform. Most browsers allow you to manage cookie preferences through their settings menus.

Subject to applicable law and regulatory limitations, you have the following rights in relation to your personal data held by plea8:

To exercise any of the above rights, please contact plea8's support team via the channels listed in Section 15. We will respond to verifiable requests within 30 calendar days. In cases of complex or multiple requests, we may extend this period by a further 30 days, with prior notice.

The plea8 Platform is strictly intended for persons aged 21 years and above. plea8 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

If we become aware or reasonably suspect that an Account has been registered by or on behalf of a person under 21, we will:

• Immediately suspend the Account pending investigation;
• Void all gaming transactions associated with the Account;
• Securely delete all personal data associated with the Account, subject to any legal obligation to retain records of the incident;
• Refund deposited funds (net of any bonus amounts claimed) to the originating payment method, following completion of identity checks.

plea8 reserves the right to revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The updated Policy will be published at https://plea8.cam/privacy-policy with a revised "Last Updated" date.

For material changes — those that substantially affect how we process your personal data or your rights as a data subject — plea8 will provide advance notice via Platform notification or email where technically feasible.

Continued use of the Platform following the posting of a revised Policy constitutes your acknowledgement and acceptance of the changes. You are encouraged to review this Policy periodically.

For any questions, concerns, or requests relating to this Privacy Policy or plea8's data processing practices, please contact us through the following channels:

• Support Email: [email protected]
  For privacy-related enquiries, please use the subject line: "Privacy Policy Request – [Your Account Username]"
• Live Chat: Available 24/7 via the in-site live chat widget on the Platform. For formal privacy requests, please follow up in writing via email.

plea8 will acknowledge privacy requests within 5 business days and will aim to resolve substantive requests within 30 calendar days.

For concerns related to responsible gambling or self-exclusion, please visit our Responsible Gambling page.