any8 Privacy
Policy
This Privacy Policy describes how any8 collects, processes, stores, and protects the personal information of users who access our online casino and sports betting platform. We are committed to handling your data responsibly and transparently, in accordance with applicable international data protection standards.
Introduction
any8 ("we", "us", "the Operator", "the Platform") is the operator of the online casino and sports betting platform accessible at any8.cam. We are committed to protecting the privacy and security of every user ("you", "the User", "the Player") who accesses our services, whether from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere.
This Privacy Policy ("Policy") sets out, in clear and transparent terms, the categories of personal data that any8 collects from you, the purposes for which that data is processed, the legal bases upon which processing relies, and the rights available to you in relation to your personal data. This Policy applies to all services offered through the any8 platform, including live casino games, sports betting markets (including EPL, Liga Super Malaysia, and UFC), promotional features, customer support interactions, and all payment processing activities involving Malaysian Ringgit (MYR) and supported cryptocurrencies.
This Policy forms an integral part of the any8 Terms & Conditions. By registering an account or using the any8 platform, you acknowledge that you have read, understood, and consented to the data processing practices described herein. If you do not agree with this Policy, please discontinue use of the platform and request account closure via our support team.
Plain-language summary: This document tells you exactly what personal information any8 collects, why we need it, who we might share it with (and why), and what rights you have over your own data. We have written it in plain English wherever possible without compromising legal accuracy.
Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
- "Personal Data" — any information relating to an identified or identifiable natural person, including name, contact details, identification documents, financial data, and behavioural data generated through platform use.
- "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, and destruction.
- "Data Controller" — any8, which determines the purposes and means of processing Personal Data collected through the platform.
- "Data Processor" — a third party that processes Personal Data on behalf of any8, such as a payment provider or identity verification service.
- "KYC" — Know Your Customer; the regulatory process by which any8 verifies the identity and age of users prior to granting withdrawal privileges.
- "Cookies" — small text files placed on your device by the any8 platform to facilitate session management, analytics, and user experience optimisation.
- "Services" — all products, games, betting markets, promotions, and features offered through the any8 platform.
- "Consent" — a freely given, specific, informed, and unambiguous indication of your wishes by which you agree to the processing of your Personal Data for a stated purpose.
Categories of Personal Data We Collect
any8 collects only the Personal Data that is necessary for the purposes described in this Policy. The categories of data we collect are as follows:
3.1 Registration & Identity Data
Collected at account registration. Required to create and manage your account and to satisfy age verification obligations.
3.2 Identity Verification (KYC) Data
Collected prior to processing the first withdrawal. Used to verify your identity and confirm that you meet the minimum age requirement of 21 years, as required by our international licensing obligations.
3.3 Financial & Transaction Data
Collected when you make deposits or withdrawals. any8 accepts MYR via Touch 'n Go eWallet, Boost, GrabPay, DuitNow QR, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and Visa / Mastercard. Cryptocurrency transactions in BTC, ETH, USDT, and LTC are also recorded. Full card numbers are never stored by any8 — payment processing is handled by certified third-party processors.
3.4 Gameplay & Behavioural Data
Generated automatically during platform use. Used for account management, responsible gambling monitoring, dispute resolution, and regulatory compliance reporting.
3.5 Technical & Device Data
Collected automatically through standard server logs and session cookies. Used for security monitoring, fraud prevention, and platform optimisation.
3.6 Communications Data
Records of communications you initiate with any8 support, including live chat transcripts, email correspondence, and WhatsApp message summaries. Retained for quality assurance, dispute resolution, and training purposes.
How We Collect Personal Data
any8 collects Personal Data through the following means:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion;
- Automatically — through server logs, session cookies, and tracking technologies as you navigate and interact with the platform;
- From third parties — including identity verification service providers (for KYC), payment processors (for transaction processing and fraud screening), and analytics service providers;
- From public sources — where permitted by applicable law, we may supplement your data with publicly available information for fraud prevention purposes.
Legal Basis for Processing
any8 processes your Personal Data on one or more of the following legal bases:
- Contractual necessity — processing is required to perform the services you have contracted with us (account management, deposit and withdrawal processing, game delivery);
- Legal obligation — processing is required to comply with anti-money laundering (AML), counter-terrorist financing (CTF), and age verification obligations imposed by our international licensing framework;
- Legitimate interests — processing is necessary for our legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gambling monitoring, provided such interests are not overridden by your fundamental rights;
- Consent — where you have provided explicit consent, for example in relation to marketing communications or the placement of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
How We Use Your Personal Data
any8 uses the Personal Data it collects for the following specific purposes:
- Account creation and management — establishing and maintaining your any8 account, verifying your identity, and managing your profile settings;
- Service delivery — processing your bets and wagers, crediting winnings, managing bonuses and promotions, and delivering live casino and sports betting services;
- Payment processing — facilitating MYR deposits via Touch 'n Go eWallet, DuitNow, FPX, and all supported payment channels, and processing withdrawals to your verified payment method;
- KYC and age verification — verifying that all users are aged 21 or above and satisfy our eligibility requirements prior to withdrawal authorisation;
- Fraud prevention and security — detecting and preventing fraudulent, abusive, or illegal activity on the platform, including multi-accounting, bonus abuse, and money laundering;
- Responsible gambling monitoring — identifying patterns of play that may indicate problem gambling, enforcing deposit and loss limits, and administering self-exclusion requests;
- Regulatory compliance — meeting our obligations under international online gaming licensing requirements, including AML and CTF reporting;
- Customer support — responding to your queries, resolving disputes, and maintaining records of support interactions;
- Platform improvement — analysing aggregated and anonymised usage data to improve the performance, design, and functionality of the any8 platform;
- Marketing communications — sending you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.
We do not use your personal data for automated decision-making that has significant legal effects, except where required for mandatory fraud screening or regulatory compliance purposes. You may request human review of any automated decision that affects your account.
Data Sharing & Third Parties
any8 does not sell, rent, or trade your Personal Data to any third party for commercial or marketing purposes. We share your data only in the following limited and necessary circumstances:
- Identity verification providers — to perform KYC checks, including age and identity document verification. These providers are bound by strict data processing agreements and may not use your data for any other purpose;
- Payment processors — to facilitate your deposit and withdrawal transactions. Processors handling MYR transactions (including Touch 'n Go eWallet, Boost, Maybank integrations, and FPX) operate under their own privacy policies and are bound by contractual data protection obligations;
- Fraud prevention and analytics services — third-party providers that assist with security monitoring, IP geolocation, and behavioural analytics for fraud detection purposes;
- Regulatory and licensing authorities — where disclosure is required to satisfy our obligations under applicable international gaming licensing conditions or in response to a lawful regulatory request;
- Law enforcement and legal proceedings — where disclosure is required by a court order, statutory instrument, or law enforcement authority with appropriate jurisdiction;
- Corporate transactions — in the event of a merger, acquisition, or sale of all or part of any8's business, Personal Data may be transferred to the acquiring entity, subject to the continuing application of this Policy.
All third-party Data Processors engaged by any8 are required to enter into Data Processing Agreements that oblige them to process your data solely on our documented instructions, implement appropriate technical and organisational security measures, and refrain from sub-processing without prior written authorisation.
Cookies & Tracking Technologies
any8 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that help us remember your preferences, maintain your session, and analyse how the platform is used.
8.1 Types of Cookies We Use
- Strictly necessary cookies — essential for the platform to function. These include session authentication cookies that keep you logged in during your visit. They cannot be disabled without impairing platform functionality;
- Functional cookies — remember your preferences such as language selection and display settings to personalise your experience;
- Analytics cookies — collect anonymised data about how users interact with the platform (pages visited, features used, session duration) to help us improve performance. No personally identifiable information is included in analytics data;
- Security cookies — help detect and prevent fraudulent activity, multiple account registrations, and unauthorised access attempts.
8.2 Managing Cookies
You may manage or disable non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of certain platform features. Strictly necessary cookies cannot be disabled through browser settings without affecting your ability to use the platform.
any8 does not use third-party advertising or retargeting cookies. We do not operate cross-site tracking for marketing purposes.
Data Retention
any8 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our licensing obligations and applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & identity data | Duration of account + 7 years after closure | AML / licensing compliance |
| KYC documents | Duration of account + 7 years after closure | Regulatory / legal obligation |
| Transaction records | Duration of account + 7 years after closure | Financial regulation / AML |
| Gameplay & betting history | Duration of account + 5 years after closure | Dispute resolution / compliance |
| Support communications | 3 years from last interaction | Legitimate interest / dispute resolution |
| Technical / device logs | 12 months rolling | Security monitoring |
| Marketing consent records | Until withdrawal of consent + 1 year | Consent management |
| Self-exclusion records | Permanently (or as specified by user) | Responsible gambling obligations |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with any8's data destruction policy.
Data Security
any8 implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- SSL 256-bit encryption on all data transmitted between your device and the any8 platform — the same encryption standard used by major banks and financial institutions in Malaysia;
- Encrypted storage of Personal Data at rest, including KYC documents and financial records;
- Access controls — Personal Data is accessible only to authorised any8 personnel with a documented business need. Access is logged and audited;
- Two-factor authentication (2FA) available on all user accounts to prevent unauthorised access;
- Penetration testing and vulnerability assessments conducted on a regular schedule by independent security specialists;
- Incident response procedures — in the event of a confirmed data breach that poses a risk to your rights and freedoms, any8 will notify affected users and relevant authorities within the timeframes required by applicable law.
Your responsibility: You are responsible for maintaining the security of your account credentials. Do not share your password or 2FA codes with anyone. any8 staff will never ask for your password via any channel. If you believe your account has been compromised, contact support immediately.
Your Data Rights
Subject to applicable law and our regulatory obligations, you have the following rights in relation to your Personal Data held by any8:
Request a copy of the Personal Data any8 holds about you, including how it is being used and with whom it has been shared.
Request correction of inaccurate or incomplete Personal Data. Account details can be updated by contacting our support team.
Request deletion of your Personal Data where it is no longer necessary, where consent is withdrawn, or where processing is unlawful — subject to our legal retention obligations.
Request that we temporarily restrict processing of your data where its accuracy is contested or where you have objected to processing pending verification of our legitimate grounds.
Receive a copy of your Personal Data in a structured, machine-readable format for transfer to another data controller, where processing is based on consent or contractual necessity.
Object to processing based on legitimate interests, including direct marketing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Withdraw consent at any time for processing activities based on consent, such as marketing communications. Withdrawal does not affect the lawfulness of prior processing.
Request human review of significant decisions made by automated processing, including those involving your account status or responsible gambling interventions.
To exercise any of the above rights, please contact any8 via live chat or email at [email protected], clearly identifying the right you wish to exercise and providing sufficient information to identify your account. any8 will respond within 30 days. Where requests are complex or numerous, this period may be extended by a further 60 days with notice to you.
Please note that some rights are subject to limitations where processing is required to comply with our legal or regulatory obligations — for example, we may not be able to delete your transaction records during the mandatory retention period under our licensing framework.
International Data Transfers
any8 operates as an international platform. Your Personal Data may be transferred to and processed in countries outside Malaysia, including countries where any8's operating entity, licensing authority, or third-party service providers are established.
Where Personal Data is transferred internationally, any8 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections provided under this Policy. Safeguards may include contractual data protection clauses, adequacy decisions, or other recognised transfer mechanisms.
Malaysian users should note that Malaysia's Personal Data Protection Act 2010 (PDPA) governs certain aspects of personal data processing by organisations operating in Malaysia. any8, as an internationally licensed operator, processes data in accordance with international standards. Malaysian users may seek independent legal advice regarding their rights under Malaysian law.
Protection of Minors
any8 is strictly prohibited for use by persons under the age of 21 years. We do not knowingly collect Personal Data from individuals below the age of 21. Age verification is a mandatory step in the KYC process, and accounts suspected of being held by minors will be immediately suspended pending investigation.
If you believe that any8 has inadvertently collected Personal Data from a minor, please contact us immediately at [email protected]. We will take prompt action to investigate and, where confirmed, delete all associated data and close the account.
21+ only: By providing your Personal Data during registration, you confirm that you are at least 21 years of age. Providing false information about your age is a breach of our Terms & Conditions and may constitute fraud under applicable law.
Changes to This Privacy Policy
any8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform features. When material changes are made, we will notify registered users by email to the address associated with their account and update the "Last reviewed" date at the top of this Policy.
We encourage you to review this Policy periodically. Your continued use of the any8 platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using the platform and request account closure.
Minor changes that do not materially affect how we process your Personal Data (such as typographical corrections or clarifications) may be made without direct notification, provided the "Last reviewed" date is updated accordingly.
Contact Us & Data Protection Enquiries
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact any8 using any of the following channels:
- Live Chat: Available 24/7 directly on the any8 platform — average response under 5 minutes. Suitable for general privacy queries and account-related requests;
- Email: [email protected] — for formal data subject access requests, erasure requests, or complaints. Please mark your subject line "Data Privacy Request — [Account Username]";
- WhatsApp: Available daily from 08:00–00:00 MYT in English, Bahasa Melayu, and Mandarin — for general queries.
any8 will acknowledge privacy requests within 5 business days and provide a substantive response within 30 calendar days of receipt. Where a request is complex, the response period may be extended to 90 days with prior written notice to you.
This Privacy Policy was last reviewed and effective as of 1 January 2026. It supersedes all previous versions of the any8 Privacy Policy. The English version of this Policy is the authoritative version; in the event of any conflict with a translation, the English text prevails.
Six Ways any8 Protects Your Privacy
Our Privacy Policy runs to several thousand words of careful legal text. Here are the six things that matter most to Malaysian players — in plain language.
We Never Sell Your Data
any8 does not sell, rent, or trade your personal information to advertisers, data brokers, or any third party for commercial gain. Your data is used only to operate and improve the services you use on our platform.
SSL 256-Bit Encryption
Every connection between your device and any8 is protected by SSL 256-bit encryption — the same standard used by Maybank, CIMB, and other major Malaysian financial institutions. Your data is unreadable to any third party in transit.
Strict 21+ Enforcement
Age verification is mandatory before any withdrawal is processed. any8 collects identity documents (MyKad, passport) solely to verify that every player is aged 21 or above — protecting minors and satisfying our licensing obligations.
You Control Your Data
You have the right to access, correct, restrict, port, or delete your personal data at any time. Submit a request via live chat or email and any8 will respond within 30 days — no bureaucratic runaround.
Clear Retention Limits
any8 does not keep your data indefinitely. Account and transaction records are retained for up to 7 years post-closure to satisfy regulatory requirements, after which they are securely and permanently deleted.
No Advertising Cookies
any8 uses cookies only for session management, security, and anonymised platform analytics. We do not use third-party advertising or cross-site retargeting cookies, and we will never track you across unrelated websites.
Your Privacy, Our Priority
any8 is built on transparency. If you have a question about this Privacy Policy, a data access request, or simply want to understand how we handle your information — our support team is available 24/7 in English, Bahasa Melayu, and Mandarin.