Spa8 Privacy Policy — How We Protect Your Data

1. Information We Collect

When you register or use the spa8 platform, we collect several categories of information to ensure our services run smoothly and securely. This information is collected only when necessary and stored safely.

Account Information

Including your username, encrypted password, email address, phone number, and date of birth. This information is required to create an account and verify your identity.

Device & Browser Information

We record device type, operating system, browser type, IP address, and general location data. This helps us detect suspicious activity and ensure a consistent experience across all devices.

Payment Information

For transactions in Malaysian Ringgit (MYR), we record deposit and withdrawal history, payment methods used, and associated bank account or e-wallet numbers. We do not store credit card details directly — all processing is handled through secure channels.

Usage Data

Includes game activity records, betting history, login and logout times, and navigation patterns within the platform. This data is used to enhance the user experience and identify abnormal usage patterns.

2. How We Use Your Information

Spa8 uses the information collected for the following legitimate and necessary purposes:

• Account management: Managing registration, login, identity verification, and account security.
• Transaction processing: Handles MYR deposits and withdrawals securely and efficiently.
• Service improvement: Analysing usage patterns to improve the interface, speed, and game selection.
• Communications: Sending account-related notifications, transaction updates, promotions you have opted in to receive, and system announcements.
• Legal compliance: Comply with applicable legal and regulatory requirements, including fraud prevention and anti-money laundering obligations.
• Platform security: Detecting and preventing fraudulent activity, unauthorised access, and security breaches.

3. Cookie Usage & Tracking

Spa8 uses cookies and similar tracking technologies to enhance user experience and analyse platform performance. We use several types of cookies:

• Session cookies: Automatically deleted when you close your browser. Used to maintain your login status during an active session.
• Persistent cookies: Stored on your device for a set period to remember your preferences and settings.
• Analytics cookies: Used to collect anonymous statistical data on how users interact with our platform.

You can manage or block cookies through your browser settings. However, some platform features may not function properly if cookies are fully disabled.

4. Data Storage & Security

User data security is spa8's highest priority. We apply a range of technical and organisational measures to protect your information:

• All data is transmitted over encrypted connections using SSL/TLS protocols.
• Passwords are stored in hashed form and cannot be decrypted.
• Access to sensitive data is restricted to staff who require it to carry out their duties.
• Security systems are continuously monitored to detect any intrusion attempts.
• Data is stored on servers protected by strict physical and digital access controls.

While we take all reasonable precautions, no system can guarantee absolute security. We encourage users to also take responsibility by using strong passwords and keeping their login credentials private.

5. Sharing Information with Third Parties

Spa8 does not sell, rent, or share users' personal information with third parties for marketing purposes without your explicit consent. However, we may share information in the following limited circumstances:

• Service providers: Third parties who help us operate the platform, including payment processors and game providers, are bound by strict confidentiality agreements.
• Legal basis: When required by law, court order, or a request from a legitimate authority.
• Protection of interests: When it is necessary to protect the safety of other users or prevent serious fraud.

In all instances of sharing, we ensure that recipients are bound by data protection obligations equal to or higher than our own standards.

6. User Rights, Policy Changes & Contact Us

Your Rights as a User

As a spa8 user, you have the following rights regarding your personal data:

• Right to access: You can request a copy of the personal information we hold about you.
• Right to rectification: You can update any inaccurate information through your account settings or by contacting our support team.
• Right to erasure: You may request the deletion of your account and personal data, subject to applicable legal retention requirements.
• Right to restrict processing: You can request that we restrict how we use your data under certain circumstances.

Privacy Policy Changes

Spa8 reserves the right to update this Privacy Policy from time to time. Users will be notified of any material changes via in-platform notifications or email. Continued use of the platform after changes are made constitutes acceptance of the revised policy.

How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to the spa8 support team:

Support Email: [email protected]

We aim to respond to all privacy-related enquiries within 3–5 business days. For general questions, you may also refer to our FAQ page.