atm8i Official Privacy Document

Atm8i Privacy Policy – Personal Data Protection for Malaysian Members

Atm8i is fully committed to protecting the privacy and personal data security of every member in Malaysia. This Privacy Policy transparently explains how we collect, use, store, and safeguard your information.

🔒 atm8i Privacy Policy 🛡️ SSL 256-bit Full Encryption 📋 Malaysia PDPA Compliance 🔐 Your Data Is Never Sold 👁️ Transparent & Accountable 📧 [email protected] 🔒 atm8i Privacy Policy 🛡️ SSL 256-bit Full Encryption 📋 Malaysia PDPA Compliance 🔐 Your Data Is Never Sold 👁️ Transparent & Accountable 📧 [email protected]

🛡️ atm8i's Six Core Privacy Commitments to Malaysian Members

Before reading the full policy, here is a summary of the six most important privacy commitments atm8i upholds for every member in Malaysia.

256-bit SSL Encryption

All personal data and financial information you submit to atm8i is protected with SSL 256-bit encryption — the same security standard used by Malaysia's major banks, including Maybank and CIMB. No data is ever transmitted unencrypted.

Data Not Sold

Atm8i has never sold, rented, or traded members' personal data to any third party for marketing or any other commercial purpose, and we never will. Your information belongs to you, and we respect that privacy completely.

Malaysia PDPA Compliance

The atm8i Privacy Policy is built entirely on Malaysia's Personal Data Protection Act 2010 (PDPA). We operate in full accordance with all applicable local data protection laws in Malaysia to uphold your rights as a data subject.

Strict Access Controls

Access to atm8i member personal data is restricted strictly to staff who require it to carry out legitimate operational duties. All atm8i personnel with access to personal data are bound by legally enforceable confidentiality agreements.

Right of Access & Correction

As an atm8i member, you have the full right to access, review, and request corrections to your personal data held by us. You are also entitled to request deletion of your data in accordance with applicable legal provisions.

Communication Controls

You have full control over the types of marketing communications you receive from atm8i. You may withdraw your consent to receive promotional emails, SMS, or push notifications at any time through the communication preferences settings in your account.

Last updated: January 2026  •  Version 2.4
ℹ️

Important Note: By registering and using the atm8i platform, you are deemed to have read, understood, and fully agreed to this Privacy Policy. This Privacy Policy forms part of the Terms & Conditions atm8i and should be read together.

1

Introduction

This Privacy Policy ("Policy") is published by atm8i ("Platform", "We", "atm8i"), a digital entertainment and gaming platform operating in Malaysia via the website https://atm8i.my. This Policy explains in detail how atm8i collects, processes, stores, shares, and protects your personal data as a member or user of our platform.

Atm8i fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection regulations in Malaysia. We take our responsibilities as a data controller seriously, ensuring your personal information is handled in a responsible, transparent, and secure manner at all times.

If you have any questions or concerns about how atm8i handles your personal data, we encourage you to reach out to us by email at [email protected]. We are committed to responding to all privacy-related enquiries within 72 working hours.


2

Types of Personal Data Collected by atm8i

Atm8i collects only the personal data strictly necessary for platform operations, identity verification, transaction processing, and legal compliance. We do not collect excessive or irrelevant data beyond the scope of our services.

Data Category Type of Information Purpose
Identity Information Full name, date of birth, MyKad number KYC VerificationAccount
Contact Information Malaysian phone number, email address CommunicationVerification
Financial Data Bank account details, MYR transaction history DepositWithdrawal
Gaming Data Game history, bets, winnings OperationsAudit
Technical Data IP address, device type, web browser SecurityTechnical
Cookie Data Session cookies, language preferences, display settings User Experience
💡

Atm8i does not collect sensitive information such as biometric data, medical records, or political opinions. We only request identity verification documents (such as a copy of your MyKad) when required for KYC compliance, and these are stored with the highest level of security protection.


3

How atm8i Uses Your Personal Data

Atm8i uses your personal data only for legitimate, agreed-upon purposes. Below are all the primary purposes for which data is used on the atm8i platform:

Operations & Account Administration

To register your account, verify your identity, manage secure logins, process deposits and withdrawals in Malaysian Ringgit (MYR), and give you access to all games on atm8i, including slots, Keno, and Three Card Poker.

Security & Fraud Prevention

To identify and prevent fraudulent activity, money laundering, account misuse, or any other unlawful activity that may occur through the atm8i platform. Technical data such as IP addresses is used for these security purposes.

Customer Support

To enable atm8i's Malay-speaking support team to provide relevant and personalised assistance to you. Support interaction history is retained to improve service quality and ensure continuity of assistance.

Communications & Promotions

To send you information about atm8i promotions, new bonuses, the latest games, and important account updates – provided you have given consent to receive marketing communications. You may withdraw your consent at any time.

Legal Compliance

To fulfil atm8i's legal obligations under applicable Malaysian law, including the PDPA 2010, anti-money laundering (AML) requirements, and any court orders or directives from lawful authorities.

Platform Improvements

To analyse aggregated and anonymised usage patterns on the atm8i platform for the purpose of improving the user experience, optimising technical performance, and developing better new features for members in Malaysia.

⚠️

Atm8i will not use your personal data for any purpose not stated in this Privacy Policy without first obtaining your additional consent. Should the purpose of data use change, you will be informed and asked to provide fresh consent.


4

Data Sharing with Third Parties

Atm8i does not sell, rent, or share members' personal data with third parties for their own marketing purposes. However, there are limited circumstances in which atm8i may need to share your personal data with certain parties for legitimate operational purposes:

  • Payment Service Providers: Data required to process your deposit and withdrawal transactions through payment gateways such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX. These providers are bound by strict data protection agreements with atm8i.
  • Identity Verification Service Providers: For legally mandated KYC verification purposes, identity data may be processed by certified KYC providers, subject to strict confidentiality requirements.
  • Technology & Infrastructure Providers: Companies providing hosting, cybersecurity, and technical infrastructure services for the atm8i platform may process your personal data as part of their services, subject to binding data processing agreements.
  • Malaysian Authorities: Where required by Malaysian law, court order, or a lawful request from a Malaysian law enforcement agency such as PDRM or SPRM, atm8i may be obligated to disclose your personal data.
  • Intra-Group Sharing: Where atm8i forms part of a group of companies, personal data may be shared with related entities within the same group solely for legitimate internal administrative purposes.
✅

The atm8i Promise: All third parties handling atm8i members' personal data are required to comply with data protection standards at least as stringent as atm8i's Privacy Policy and Malaysia's PDPA. atm8i takes full responsibility for ensuring all such third parties meet these obligations.


5

Atm8i Data Security Measures

The security of members' personal data is atm8i's top priority. We continuously invest in the latest security technologies and processes to ensure your data remains protected against cyber threats and unauthorised access at all times.

256-bit SSL Encryption

All communications between your browser and atm8i's servers are encrypted using 256-bit SSL/TLS — the same industry-leading standard used by Malaysia's top financial institutions.

Secure & Redundant Servers

Atm8i's data is stored in high-performance data centres with multiple layers of physical and digital protection. Automated backup systems ensure that no data is lost due to any technical failure.

Staff Access Controls

Access to atm8i members' personal data is strictly restricted on a need-to-know basis. All staff access is logged and monitored, and every team member is bound by a confidentiality agreement.

Continuous Threat Monitoring

Atm8i's security monitoring system operates 24/7 to detect and respond promptly to any unauthorised access attempts, cyberattacks, or suspicious activity.

🔔

In the event of a data breach involving your personal information, atm8i will notify you within 72 hours of the breach being identified, in line with the notification requirements set out under applicable Malaysian law.


6

Personal Data Retention Periods

Atm8i retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required under Malaysian law. We do not keep data longer than necessary.

  • Active Account Data: Retained for the duration your atm8i account remains active. Once the account is closed, data is kept for the period prescribed by Malaysian law for audit and compliance purposes.
  • Financial Transaction Records: Transaction history in MYR (RM) is retained for a minimum of seven (7) years from the date of each transaction, in accordance with Malaysian financial and tax law requirements.
  • KYC Verification Documents: Copies of MyKad and other identity verification documents are retained for the period required under Malaysia's anti-money laundering regulations, typically a minimum of five (5) years.
  • Security Logs: Access logs and security activity records are retained for one (1) to two (2) years for investigation purposes in the event of a security incident.
  • Communication Data: Customer support communication records are retained for two (2) years for quality control purposes and historical case reference.
🗂️

Once the retention period has expired, atm8i will delete or anonymise your personal data in a secure and irreversible manner. You may request information about the retention period for your specific data by contacting us at [email protected].


7

Cookies & Tracking Technologies at atm8i

The atm8i platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform usage patterns. The following are the types of cookies used at atm8i:

You can manage your optional cookie preferences through your web browser settings. Please note that disabling essential cookies may affect the functionality and security of the atm8i platform. For more information about cookies, please refer to your web browser's documentation.


8

Your Rights as an atm8i Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and atm8i's own policies, you have several important rights regarding your personal data, all of which we fully respect:

👁️
Right of Access

You have the right to request and receive a copy of all personal data atm8i holds about you. Requests will be processed within 21 working days.

✏️
Right of Rectification

You have the right to request the correction of any inaccurate or incomplete personal data that atm8i holds about you.

🗑️
Right to Erasure

You have the right to request the deletion of your personal data under certain circumstances, subject to atm8i's legal obligations to retain specific data.

🚫
Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes or in certain other circumstances.

📤
Data Portability Rights

You have the right to receive your personal data in a machine-readable format for transfer to another service provider under certain circumstances.

↩️
Right to Withdraw Consent

You may withdraw your consent to consent-based data processing — including marketing communications — at any time, with no penalty.

📬

To exercise any of the above rights, please contact atm8i by email at [email protected] stating the specific right you wish to exercise and your account information for identity verification. We will process your request within 21 business days and notify you of the action taken.


9

Child Protection

The atm8i platform is strictly for individuals aged 18 and above. atm8i does not knowingly collect or process personal data of individuals under the age of 18.

Atm8i applies strict age verification procedures during the account registration process to prevent sign-ups by underage individuals. Should atm8i discover that personal data of a person under the age of 18 has been inadvertently collected, we will take immediate action to delete that data and close the account in question.

👨‍👩‍👧

If you are a parent or guardian and believe that your child under the age of 18 has registered an account with atm8i, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly.


10

Amendments to atm8i's Privacy Policy

Atm8i reserves the right to modify or update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. The "Last updated" date at the top of this page will always reflect the date of the most current version of the Privacy Policy.

For significant amendments that materially affect your rights, atm8i will notify you via the email address registered to your account, or through a prominent notice on the atm8i platform, at least 30 days before the changes take effect. For minor amendments that are editorial or clarificatory in nature, a notice via an update to this page is sufficient.

Your continued use of the atm8i platform after any amended Privacy Policy comes into effect constitutes your acceptance of the revised policy. If you do not agree with the changes, you have the right to close your account before the effective date of those changes.


11

Contact Us for Privacy Enquiries

If you have any questions, concerns, or requests regarding the atm8i Privacy Policy or how your personal data is handled, please don't hesitate to reach out. The atm8i privacy team is here to help.

Privacy Email

For privacy and data protection enquiries, please contact us at [email protected] with the subject line "Privacy Enquiry". We will respond within 72 business hours.

24/7 Live Chat

For urgent general enquiries about your atm8i account's privacy or security, use the live chat function available at the bottom right of every page on our platform, which operates 24/7.

For formal complaints relating to personal data protection that cannot be resolved directly with atm8i, you may contact the Department of Personal Data Protection (JPDP) Malaysia through their official website. This Privacy Policy is governed by and interpreted in accordance with the laws of Malaysia.

❓ Frequently Asked Questions – atm8i Privacy Policy

Answers to the questions most frequently asked by Malaysian members regarding privacy and data security at atm8i.

No, atm8i has never sold, rented, or shared members' personal data with any third party for their own marketing purposes. This is a commitment we hold firmly. Your personal data is only shared in very limited circumstances – namely with payment service providers such as Touch 'n Go, GrabPay, and FPX as required to process your transactions, with technology providers that support platform operations, and with Malaysian authorities when required by law. All such third parties are bound by strict data protection agreements with atm8i and are not permitted to use your data for any other purpose.

To exercise your right of access or data erasure, you may contact the atm8i privacy team by email at [email protected], clearly stating your request. Please also include your account details – such as your username or registered phone number – for identity verification purposes. atm8i will process data access requests within 21 business days from the date the request is received and identity verification is completed. For erasure requests, please note that certain categories of data are required by Malaysian law to be retained by atm8i (such as financial transaction records for 7 years) and cannot be deleted even upon request. We will inform you of what can and cannot be deleted, along with the reasons.

No, atm8i does not store your full bank card details, credit card numbers, or eWallet login credentials (such as Touch 'n Go, GrabPay, or Boost) on our servers. When you make a deposit or withdrawal, you are connected directly to a secure third-party payment gateway that handles the transaction. atm8i only receives confirmation that the transaction was successful, along with a transaction reference number for our records. This method, known as tokenisation, ensures that your sensitive financial information never comes into direct contact with atm8i's systems. All payment gateways used by atm8i are certified and compliant with PCI DSS security standards.

atm8i employs multiple layers of protection to keep your account secure. First, all communications are encrypted with 256-bit SSL to prevent data interception in transit. Second, atm8i's systems detect suspicious login activity — including repeated failed password attempts — and automatically lock the affected account on a temporary basis. Third, atm8i offers two-factor authentication (2FA), which we strongly encourage all members to enable. With 2FA active, even if someone knows your password, they still cannot log in without the verification code sent to your Malaysian phone number. Additionally, atm8i continuously monitors account activity and will notify you if any unusual behaviour is detected, such as a login from a new location or an unrecognised device.

Yes, you have full control over the types of marketing communications you receive from atm8i. To stop receiving promotional emails, click the "Unsubscribe" link found at the bottom of any marketing email sent to you by atm8i. To manage your communication preferences more broadly — including SMS, push notifications, and email — log in to your atm8i account and navigate to "Account Settings", then "Communication Preferences". There, you can choose which types of communications you wish to receive and which to opt out of. Please note that even if you opt out of marketing communications, atm8i still needs to send you important transactional communications such as deposit confirmations, withdrawal confirmations, and critical account security notices.
🔒

Your Privacy Is Protected. Play with Confidence at atm8i!

Your personal data security and privacy are atm8i's top priority. Backed by 256-bit SSL encryption, full Malaysia PDPA compliance, and a transparent privacy policy, you can enjoy all your favourite games — from slots to Keno and Three Card Poker — with complete confidence that your information is fully protected. Register a free account today and join over 250,000 Malaysian members who already trust atm8i!

SSL 256-bit  •  PDPA Compliant  •  18+ Only  •  24/7 Support

🔒
Data Protection Commitment – atm8i

Atm8i is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). All member personal data is protected with SSL 256-bit encryption and is never sold or shared with third parties for marketing purposes. You have the full right to access, correct, or request the deletion of your personal data.

For any privacy-related enquiries or requests, please contact [email protected]. See also Terms & Conditions and Responsible Gaming us.

Bahasa Melayu