m8agent is committed to protecting the personal data of every player on our platform. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights available to you as a registered player.
This Privacy Policy ("Policy") describes how m8agent ("the Platform", "we", "us", "our"), operating the website at https://m8agent.cam, collects, processes, stores, and protects the personal data of individuals ("User", "Player", "you", "your") who access or use any services offered through the Platform.
m8agent is an online gaming platform offering casino games, sports betting, live dealer games, and related entertainment services to players primarily in Malaysia and other permitted jurisdictions. We handle personal data with the utmost care, in compliance with applicable data protection legislation and internationally recognised privacy principles.
By registering an account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.
This Privacy Policy forms part of and should be read together with m8agent's Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency.
We may update this Policy from time to time. The most current version will always be available at https://m8agent.cam/privacy-policy and will carry the effective date at the top of the document. Material changes will be communicated to registered Players via email notification or in-platform notice.
For the purposes of this Privacy Policy, the following terms carry the meanings assigned to them below:
m8agent collects Personal Data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and in certain cases from trusted third-party sources for verification purposes.
When you access the Platform, our systems automatically record the following technical data:
In the course of KYC and fraud prevention activities, m8agent may receive supplementary verification data from regulated identity verification providers, payment processors (including Malaysian e-wallet providers such as Touch 'n Go eWallet, Boost, and GrabPay), and financial crime screening databases. Such data is handled in strict accordance with this Policy.
m8agent processes Personal Data only where a lawful basis exists for doing so. The lawful bases we rely upon are as follows:
| Lawful Basis | Examples of Processing Activities |
|---|---|
| Contractual Necessity | Account creation and management, processing deposits and withdrawals in MYR, settling bets, sending transactional emails |
| Legal Obligation | KYC identity verification, anti-money laundering (AML) screening, age verification (21+ compliance), regulatory reporting |
| Legitimate Interests | Fraud detection and prevention, platform security, responsible gambling monitoring, improving Platform functionality |
| Consent | Sending promotional emails and bonus offers, placing non-essential cookies on your device, opt-in marketing communications |
Where processing is based on consent, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, contact our support team or adjust your account notification preferences.
m8agent processes your Personal Data for the following specific purposes:
We use your registration data to create and maintain your player account, authenticate your identity at login, process account updates, and manage your preferences and communication settings.
Financial transaction data is processed to facilitate MYR deposits and withdrawals through supported Malaysian payment channels — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, and supported cryptocurrency networks — and to maintain accurate transaction records.
m8agent is obligated to verify the identity and age of all Players. We process identity documents and verification data to fulfil KYC requirements, conduct AML screening, and comply with reporting obligations imposed by our licensing authority.
Device data, IP addresses, and behavioural patterns are analysed to detect and prevent fraudulent activity, account takeover attempts, bonus abuse, and other security threats. This processing is carried out under our legitimate interest in maintaining a secure platform.
Gaming activity data — including deposit frequency, session duration, and betting patterns — is monitored to identify potential indicators of problem gambling. This information informs our responsible gambling interventions, including proactive support outreach, temporary account restrictions, and self-exclusion processing. This processing is conducted in the legitimate interest of player welfare.
Communications submitted through live chat, WhatsApp, or email are processed to resolve support queries, investigate complaints, and improve our support services. Support interactions may be recorded for quality assurance and training purposes.
Subject to your consent and marketing preferences, we may use your email address, phone number, and gaming history to send personalised bonus offers, promotional notifications, and news about new games or betting markets. You may opt out of all marketing communications at any time through your account settings or by contacting support.
m8agent does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We may share your data only in the circumstances described below:
We engage carefully selected third-party service providers who process data strictly on our behalf and under our written instructions. These include:
All Data Processors are bound by contractual data protection obligations consistent with this Policy and must not use your data for any purpose other than the specific service they are engaged to provide.
m8agent may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, court order, or the requirements of our licensing authority. We will endeavour to notify you of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or part of m8agent's business, Personal Data held by the Platform may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to data handling practices that result from it.
✅ m8agent will never sell your Personal Data to third-party advertisers, data brokers, or commercial data marketplaces. Your data is used solely to operate and improve the Platform and to fulfil our legal obligations.
m8agent retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Regulatory / AML obligation |
| KYC identity documents | Duration of account + 5 years post-closure | Legal obligation |
| Financial transaction records | Minimum 7 years | Regulatory requirement |
| Gaming activity logs | Duration of account + 2 years | Legitimate interest / dispute resolution |
| Customer support communications | 3 years from last interaction | Contractual / legitimate interest |
| Marketing consent records | Until consent withdrawn + 1 year | Consent / legal accountability |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data disposal procedures. Anonymised or aggregated data that cannot identify any individual may be retained indefinitely for statistical and analytical purposes.
m8agent uses cookies and similar tracking technologies on the Platform for the purposes of session management, personalisation, security, and analytics. The following categories of cookies are used:
These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, CSRF protection cookies, and load-balancing cookies. No consent is required for these cookies as they are necessary for the delivery of the service.
Functional cookies remember your preferences — such as preferred language, currency display, and notification settings — to provide a personalised experience. These cookies improve usability but are not strictly required for core Platform functionality.
With your consent, we use analytics cookies to understand how Players navigate the Platform, which pages are most visited, and how features are used. This data is collected in aggregate form and used solely to improve the Platform experience. Analytics data is not sold or shared with third-party advertising networks.
You may control the use of non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of the Platform. Instructions for managing cookies are available in the help documentation of all major browsers used in Malaysia, including Chrome, Firefox, Safari, and Samsung Internet.
m8agent implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security infrastructure includes:
Notwithstanding these measures, no data transmission over the internet is entirely risk-free. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, m8agent will notify you and relevant supervisory authorities in accordance with applicable law and without undue delay.
⚠ m8agent will never ask for your password via email, live chat, or any communication channel. If you receive any communication requesting your account credentials, treat it as fraudulent and contact our support team immediately.
m8agent operates globally and may transfer your Personal Data to servers or service providers located outside Malaysia. In such cases, we take steps to ensure that your data is protected to a standard equivalent to that required under applicable Malaysian data protection principles, including:
By using the Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia where necessary for the provision of the services described in this Policy.
m8agent is strictly a platform for persons aged 21 and above. We do not knowingly collect Personal Data from individuals under the age of 21. Registration on the Platform is conditional on the applicant confirming that they are 21 years of age or older, and this is verified through our KYC process.
🔞 If m8agent discovers or reasonably suspects that a registered account belongs to a person under the age of 21, the account will be immediately suspended, all funds frozen pending investigation, and the matter referred to our compliance team. Any data collected from an underage individual will be deleted as swiftly as practically possible following account closure.
If you are a parent or guardian and believe that a minor has registered on m8agent, please contact our support team immediately at [email protected] so that the matter can be investigated and the account closed promptly.
As a data subject, you have the following rights in relation to your Personal Data held by m8agent. These rights may be exercised by contacting our Data Protection team through the channels listed in Section 14:
You have the right to request a copy of the Personal Data we hold about you, along with information about how it is being processed. We will respond to verified access requests within 30 days.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information directly through your account settings panel.
You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent on which processing was based. Note that we are required by law to retain certain data (e.g. KYC and financial records) for the periods outlined in Section 7, regardless of an erasure request.
You have the right to request that we restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing based on legitimate interests.
Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format, and to request its transfer to another controller where technically feasible.
You may object to the processing of your Personal Data where we rely on legitimate interests as our lawful basis. You also have the absolute right to opt out of direct marketing communications at any time, without providing any reason.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent for marketing communications, adjust your preferences in the account settings panel or contact support.
To exercise any of the above rights, please contact our support team with a clear description of your request and sufficient information to verify your identity. We will respond to all rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it.
m8agent reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our service offering. When material changes are made, we will:
Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms, provided that we have provided adequate notice of the changes. If you do not agree with any material changes, you must cease using the Platform and may request account closure and data deletion in accordance with your rights under Section 12.
We recommend that you review this Privacy Policy periodically. The version date at the top of this page will always indicate when the document was last revised.
If you have any questions, concerns, or requests in connection with this Privacy Policy or the processing of your Personal Data, please contact the m8agent Data Protection team through the following channels:
All privacy-related enquiries will be acknowledged within 5 business days and fully responded to within 30 calendar days of receipt, in accordance with our obligations under applicable data protection law. We are committed to resolving all data-related concerns fairly, transparently, and in a manner consistent with your rights as a data subject.
Privacy is not just a legal obligation at m8agent — it is a core part of how we build trust with every Malaysian player on our platform.
Every page, every transaction, and every data exchange on m8agent is protected by industry-standard 256-bit SSL/TLS encryption — the same standard used by major banks and fintech platforms in Malaysia.
m8agent operates a strict zero-tolerance policy on selling personal data. Your email address, phone number, gaming behaviour, and financial details will never be sold to any advertiser, broker, or third party.
You can request access to, correction of, or deletion of your data at any time. Rights requests are handled within 30 days. Our support team is available in English, Bahasa Melayu, and Mandarin to assist.
We retain your data only for as long as necessary for the purpose it was collected, or as legally required. Once retention periods expire, data is securely deleted or anonymised — not archived indefinitely.
m8agent's systems undergo regular penetration testing and vulnerability assessments carried out by independent cybersecurity professionals. Audit findings are acted upon promptly to close any identified gaps.
Promotional communications are only sent with your explicit consent and can be withdrawn at any time through your account preferences. We will never send unsolicited marketing based on inferred or purchased contact lists.
Our support team is available 24/7 in English, Bahasa Melayu, and Mandarin. If you have any concerns about how your data is handled at m8agent, we're here to help — just reach out via live chat.
Back to Homepage Read Our FAQ