st8 User Data Protection

ST8 Privacy Policy – Data Protection & User Privacy

Your privacy is our priority. This document explains how st8 collects, uses, stores, and protects your personal information when you use our platform.

Updated: January 2026
Bahasa Melayu (Malaysia)
PDPA Compliance
st8 Privacy Commitment: st8 complies with the Malaysia Personal Data Protection Act 2010 (PDPA). We do not sell, rent, or disclose your personal data to third parties without your consent, except as stated in this policy.

1. Introduction

St8 ("we", "our platform") takes the privacy protection of every user who accesses our website or mobile app under the st8.wine domain seriously. This Privacy Policy ("Policy") describes in detail how we handle your personal information — from how it is collected, the purposes for its use, who it may be disclosed to, and how you can access or control that data.

This document is drafted in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and reflects industry best practices in user data management. By using the ST8 platform, you agree to the terms set out in this Privacy Policy. If you do not agree, please discontinue use of the platform immediately.

This policy applies to all information collected through the st8.wine website, the ST8 mobile app, and any interaction with our customer support — whether via live chat, email, or other communication channels provided by us.

2. Information We Collect

St8 only collects information that is strictly necessary to provide you with a safe, seamless, and responsible service. The information we collect falls into three main categories:

a) Information You Provide Directly:

  • Full name as shown on a valid identification document.
  • Date of birth and gender for age verification.
  • Active email address and Malaysian mobile number.
  • Current residential address (for KYC compliance).
  • A copy of your identity card (MyKad) or passport for identity verification.
  • Bank account or e-wallet details for processing deposits and withdrawals.
  • Any information you share through communications with our support team.

b) Information Collected Automatically:

  • IP address and device information (device type, operating system, model).
  • Web browser type and version used.
  • Login session data including session time and duration.
  • Game activity records, betting history, and financial transactions.
  • Cookie data and other tracking identifiers (see Section 6).
  • General location information based on IP address (country and state only).

c) Information From Third-Party Sources:

  • Identity verification data from approved KYC service providers.
  • Payment verification information from registered payment processors.
  • Risk assessment data from fraud prevention service providers.

3. How We Use Your Data

Every piece of information we collect is used for a lawful and specific purpose. We do not use your data beyond the stated purposes without notifying you in advance. Below is a summary table of our data usage purposes:

Purpose of Use Data Type Legal Basis
Account Management – registration, login, profile settings Name, email, password, phone number Contract performance
KYC Verification – verifying your identity and age Identity document, date of birth, address Legal Obligations
Payment Processing – deposits, withdrawals, transaction records Banking information, transaction records Contract performance
Platform Security – fraud detection, account protection IP, session data, activity records Legal Basis
Service Communications – account notifications, transaction updates Email, phone number Contract performance
Marketing – promotions, personalised offers (with consent) Game history, user preferences User consent
Legal Compliance – AML reports, internal audits Transaction records, identity information Legal Obligations

We do not use your data to make automated decisions that significantly affect you without human intervention. If you have any questions regarding the specific purposes for which your data is used, please contact our privacy team.

4. Information Sharing

St8 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. However, in the context of legitimate platform operations, your information may be shared with the following parties:

  • Service providers: Technology providers, payment processors, KYC and fraud prevention service providers bound by strict confidentiality agreements with us.
  • Regulatory authorities: Government agencies or authorities requiring such information under applicable law.
  • Gaming business partners: Game providers that operate games within the st8 platform, only to the extent required for game operations.
  • Legal professionals: Lawyers or audit firms appointed by st8 for compliance and litigation purposes where applicable.

All third parties that receive your data are required to comply with data protection standards equivalent to those we uphold. We do not permit them to use your data for any purposes other than those specified in their service agreements with st8.

International Data Transfers: Some of our service providers may operate outside Malaysia. In such cases, we ensure that data transfers are carried out with protections equivalent to Malaysia's PDPA, including the use of recognised standard contractual clauses.

5. Data Encryption & Security

Your data security is our top priority. st8 implements multiple layers of technical and operational safeguards to ensure your personal information is protected from unauthorized access, modification, or disclosure.

The key security measures we employ include:

  • 256-bit SSL/TLS Encryption for all data transmitted between your device and our servers.
  • Database-level data encryption for sensitive information such as payment details and identity documents.
  • Two-Factor Authentication (2FA) as an additional security layer for account login.
  • 24/7 Security Monitoring by our cybersecurity team to detect any suspicious activity.
  • Regular security audits by independent third parties to identify and address system vulnerabilities.
  • Strict internal access controls — only authorised staff may access user data, and every access is logged.

While we take all reasonable steps to protect your data, no system is entirely immune to cyber threats. In the event of a data breach affecting your information, we will notify you within the timeframe required by applicable law and take immediate remedial action.

6. Cookies & Tracking Technologies

St8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website. They help us recognize you on subsequent visits and provide a more personalized and seamless experience.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login and session security. Cannot be disabled.
  • Performance Cookies: Collects anonymized data on how users interact with the platform to help us improve the user experience.
  • Functional Cookies: Stores your preferences such as language, display settings, and login information for a more convenient experience.
  • Marketing Cookies: Used with your consent to display relevant promotional content based on your interests and activity.

You can manage cookie settings through your web browser at any time. However, disabling essential cookies may affect core platform functionality. For more information on managing cookies, refer to your web browser's help documentation.

7. Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and ST8's privacy policy, you have the following rights regarding your personal information:

8. Data Retention & Deletion

St8 retains your personal information only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. Retention periods vary depending on the type of information:

  • Active account information: Retained for as long as your account is active or as long as necessary to provide services to you.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with legal requirements related to anti-money laundering.
  • KYC Documents: Retained for 5 years after account closure date in accordance with regulatory compliance.
  • Customer support communication logs: Retained for 2 years for quality and compliance purposes.
  • Cookie and session data: Duration ranges from session-only to 12 months depending on the cookie type.

Once the retention period expires and there is no legal requirement to keep the data, we will securely delete or destroy your information using industry-approved methods. Data that is no longer needed will not be retained in our active systems.

9. Children's Privacy

The st8 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal information from individuals under the age of 18. Should we discover that a minor's information has been collected without valid parental or guardian consent, we will take immediate steps to delete that information and close the relevant account.

If you believe your child has registered or used the ST8 platform without authorisation, please contact our support team immediately so that appropriate action can be taken.

Child Protection: If you suspect someone under the age of 18 is using the ST8 platform, please contact us at [email protected] and we will respond promptly.

10. Third-Party Links

The st8 platform may contain links to third-party websites or services for informational convenience. These links do not imply that we endorse or are responsible for the content or privacy practices of those websites. We strongly recommend reading the privacy policy of each third-party website you visit separately, as their policies may differ from ours.

11. Privacy Policy Amendments

St8 reserves the right to update or modify this Privacy Policy at any time to reflect changes in law, technology, or our operational practices. Any material changes will be communicated to you via an in-platform notice or email at least 7 days before the changes take effect.

The "Last Updated" date at the top of this document will be updated whenever an amendment is made. Your continued use of the st8 platform after any amendment takes effect will be considered your acceptance of the updated policy. It is your responsibility to review this page periodically.

12. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, you may contact us through the following channels:

  • Privacy Email: [email protected]
  • Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform.
  • FAQ: Visit our FAQ page for answers to frequently asked questions about privacy.

We will endeavour to respond to all privacy-related enquiries within 5 working days. For formal complaints that cannot be resolved through us, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia.

Our Commitment: st8 is constantly working to improve our privacy practices. Your feedback is invaluable in helping us become a safer and more trusted platform for all users in Malaysia.

Your Privacy Rights at ST8

As a st8 platform user, you have full control over your personal data.

1

Right of Access

You have the right to request a copy of all personal information we hold about you. We will provide it within 14 working days of receiving your request.

2

Right to Rectification

If your information is inaccurate or outdated, you have the right to request an immediate correction. You may also update your basic profile information through your account settings.

3

Right to Erasure

You may request the deletion of your personal data when it is no longer needed, subject to our remaining legal data retention obligations.

4

Right to Withdraw Consent

For data processed based on your consent — such as marketing communications — you may withdraw your consent at any time through your account settings or by contacting us.

5

Right to Object to Processing

You have the right to object to the processing of your data for specific purposes, including direct marketing. We will honour your objection promptly.

6

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider of your choice.

Why Your Data Is Safe with st8

Six layers of protection we practise every day to safeguard your privacy

Military-Grade Encryption

All data transmitted between your device and the st8 servers is protected with 256-bit SSL/TLS encryption — the security standard used by leading financial institutions worldwide.

Integrated KYC Verification

Our integrated KYC process ensures that only verified players can use the platform. This protects you from identity misuse and maintains a secure betting environment.

Malaysia PDPA Compliance

St8 is in full compliance with the Malaysia Personal Data Protection Act 2010. We undergo regular compliance audits to ensure our practices remain aligned with current legal requirements.

No Sale of Personal Data

St8 has never and will never sell, rent, or trade your personal data to third-party advertisers or data brokers. Your data is used solely for the purposes for which you have given consent.

Real-Time Threat Monitoring

Our cybersecurity team monitors the platform 24 hours a day, 7 days a week to detect and neutralize any security threats before they affect user data.

Privacy Controls in Your Hands

Through your st8 account settings, you can manage communication preferences, access your data, and control data processing permissions with ease — all in one convenient place.

Privacy Guaranteed. Play Without Worry.

Register your ST8 account today and enjoy a wagering platform that is not only fun, but safe and transparent in every aspect of your personal data management.

Your data is protected under Malaysia's PDPA. Platform for individuals aged 18 and above only.

Bahasa Melayu