EGM8 is committed to protecting the privacy and personal data of all users. This Privacy Policy explains what information we collect when you use the EGM8 platform, why we collect it, how we process and store it, who we share it with, and what rights you hold as a data subject. Please read this document in full before creating an account or using EGM8's services.
EGM8 does not sell, rent, or commercially trade your personal data to third parties under any circumstances. Your information is used solely to operate your account and improve the EGM8 platform experience.
All MYR financial transactions — including deposits via Touch 'n Go eWallet, DuitNow, Maybank, CIMB, FPX, and other supported Malaysian payment methods — are handled through PCI-DSS compliant processors.
EGM8 collects only the personal data that is strictly necessary for account operation, regulatory compliance, and service delivery. We do not collect data beyond what is required for these specific purposes.
Subject to regulatory retention requirements, you may request the deletion of your personal data from EGM8's systems. All erasure requests are reviewed and actioned within 30 days of receipt.
Identity documents submitted for KYC verification are encrypted at rest and stored on secured infrastructure. Access is restricted to authorised EGM8 compliance personnel on a strict need-to-know basis.
You can opt out of all EGM8 marketing communications at any time through your account settings or by contacting our support team. Opting out of marketing does not affect your ability to receive essential account notifications.
This Privacy Policy ("Policy") is issued by EGM8 ("we", "us", "the Operator", "the Platform") and governs the collection, use, storage, disclosure, and management of personal data relating to all registered and unregistered users ("you", "User", "Data Subject") of the EGM8 website accessible at egm8.cam and all associated gaming, betting, and account services.
EGM8 takes data privacy seriously. We are committed to handling your personal data with transparency, integrity, and in accordance with internationally recognised data protection principles. This Policy has been written in plain, accessible English so that Malaysian users — and all users of the platform — can fully understand how their information is handled.
By registering an EGM8 account, accessing the platform, or otherwise providing us with personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein. If you do not consent, you should not register an account or use EGM8's services.
Policy Updates: This Privacy Policy may be amended periodically to reflect changes in our practices, technology, or applicable data protection standards. When material changes are made, we will notify registered Users by email. The effective date at the top of this page reflects the current version in force.
The following terms carry the meanings set out below throughout this Privacy Policy:
| Term | Definition |
|---|---|
| "Personal Data" | Any information that identifies or could be used to identify a natural person, whether directly or in combination with other data. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, transmission, modification, restriction, or deletion. |
| "Data Controller" | EGM8, the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | Any third-party service provider that processes Personal Data on behalf of EGM8 under a contractual data processing agreement. |
| "KYC Data" | Identity and address verification documentation submitted by a User as part of the Know Your Customer verification process. |
| "Cookies" | Small data files stored on a User's device by the EGM8 Platform for session management, analytics, and preference storage purposes. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their Personal Data for a stated purpose. |
EGM8 collects the minimum personal data necessary to provide our gaming and betting services, comply with applicable regulations, and protect the security of our platform and users. The categories of personal data we collect are set out below:
EGM8 collects your personal data through the following means:
EGM8 processes your personal data for the following specific and documented purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, KYC data, device data |
| Age and identity verification (21+ enforcement) | KYC data, registration data |
| Processing deposits and withdrawals | Financial transaction data, registration data |
| Providing gaming and betting services | Gaming activity data, financial data |
| Anti-money laundering and fraud prevention | All data categories, device data, transaction data |
| Customer support and dispute resolution | Communications data, account data, transaction data |
| Responsible gambling monitoring | Gaming activity data, session data, communication data |
| VIP programme and loyalty rewards management | Gaming activity data, registration data |
| Marketing communications (where consent given) | Registration data, gaming preferences |
| Platform security and technical operations | Device data, technical data, session data |
| Regulatory reporting and compliance | All data categories as required by licensing obligations |
EGM8 relies on the following legal bases to process your personal data, as recognised under internationally applicable data protection frameworks:
EGM8 does not sell, rent, or commercially share your personal data with third parties. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary:
Important: EGM8 will never share your personal data with third-party marketing companies, data brokers, or any party that intends to use your data for purposes unrelated to EGM8's services. Your data is not a commercial asset.
EGM8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, or licensing retention requirements. The following general retention timelines apply:
Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised so that it can no longer be attributed to a specific individual.
EGM8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
Your Responsibility: While EGM8 takes robust measures to protect your data on our side, you are responsible for maintaining the security of your own EGM8 account credentials. Use a strong, unique password and enable two-factor authentication. Never share your login details with any third party.
EGM8 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used by EGM8:
These cookies are essential for the EGM8 Platform to function. They enable core features such as user authentication, session management, and security token validation. These cookies cannot be disabled without preventing basic platform functionality.
Cookies that remember your preferences — such as language settings, game display preferences, and whether you have previously accepted this Privacy Policy notice. These improve your experience but are not strictly required for platform operation.
We use aggregated, anonymised analytics data to understand how Users interact with the EGM8 Platform — which game categories are most popular, where users encounter navigation friction, and how platform performance can be improved. Analytics data does not identify individual Users.
Where you have provided consent, marketing cookies may be used to deliver EGM8 promotional content relevant to your interests. These cookies are used solely for EGM8's own marketing activities. You can withdraw marketing consent at any time through your account settings.
You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the EGM8 Platform. EGM8 does not engage in cross-site behavioural advertising or share cookie data with third-party advertising networks.
Subject to applicable data protection law and regulatory retention obligations, you hold the following rights in relation to your personal data held by EGM8. To exercise any of these rights, please contact us in writing at [email protected] with the subject line "Data Subject Request — [Right Type]".
Under internationally recognised data protection frameworks, EGM8 recognises the following rights for all users. Submit requests to [email protected].
Request a copy of all personal data EGM8 holds about you, along with information on how it is being used and on what legal basis.
Request correction of any inaccurate or incomplete personal data held in your EGM8 account. Updates are applied within 10 business days.
Request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to regulatory retention obligations.
Request that EGM8 limit how your personal data is processed while a dispute about its accuracy or lawfulness is being resolved.
Request your personal data in a structured, commonly used, machine-readable format to transfer to another service provider where technically feasible.
Object to processing of your personal data for direct marketing purposes or for processing based on EGM8's legitimate interests where your interests override ours.
Withdraw any previously given consent for marketing communications or non-essential cookies at any time, without affecting prior processing.
Lodge a complaint with the relevant data protection supervisory authority in the jurisdiction applicable to your situation if you believe your rights have been violated.
EGM8 is strictly prohibited to persons under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory step in the EGM8 registration process, and all accounts are subject to KYC verification that confirms the User's age before any gaming or financial activity is permitted.
If EGM8 discovers — through routine compliance reviews or third-party notification — that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete all collected data, and reverse any financial transactions to the extent possible.
21+ Strictly Enforced: EGM8 is for adults aged 21 and above only. If you are aware of a minor who has accessed EGM8's services, please contact us immediately at [email protected].
As an internationally licensed online gaming operator, EGM8 may process and store personal data on servers located outside of Malaysia. In all cases where personal data is transferred internationally, EGM8 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to internationally recognised data protection requirements.
These safeguards may include contractual data processing agreements with service providers, technical security controls, and jurisdictional adequacy determinations. EGM8 will not transfer personal data to any jurisdiction where adequate protections cannot be guaranteed.
Malaysian Users acknowledge that by using the EGM8 Platform and consenting to this Privacy Policy, they authorise EGM8 to transfer their personal data internationally as described in this clause, where necessary for the provision of services.
EGM8 reserves the right to update, amend, or replace this Privacy Policy at any time. When changes are made, the updated Policy will be published on this page with a revised effective date. For material changes that substantially affect how we process your personal data, we will notify registered Users via the email address associated with their EGM8 account at least 14 days prior to the changes taking effect.
Your continued use of the EGM8 Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must cease use of the Platform and may request account closure by contacting our support team.
We recommend bookmarking this page and reviewing it periodically — especially after receiving a notification email about policy changes. The current effective date is always displayed prominently at the top of this page.
For all privacy-related enquiries, data subject rights requests, or concerns about how EGM8 processes your personal data, please contact our team using the details below. We are committed to responding to all privacy-related communications within 5 business days.
Email: [email protected]
Subject line format for data requests: "Data Subject Request — [Type of Request]"
Live Chat: Available daily from 9:00 AM to 1:00 AM MYT. For complex data protection matters, email is recommended to ensure a fully documented response.
EGM8 will acknowledge all data subject rights requests within 5 business days and provide a substantive response within 30 calendar days, or notify you if additional time is required. Data access requests will be fulfilled at no charge for the first request in any 12-month period.
If you are dissatisfied with EGM8's response to your privacy concern, you have the right to escalate your complaint to the appropriate data protection supervisory authority in your jurisdiction.
Questions about your data? Our English-speaking team is available every day to assist Malaysian players with privacy queries, account data requests, and everything in between. For players aged 21 and above only.