Privacy Policy

1. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for the personal data of natural8 players is the operating entity behind natural8.one. By creating a natural8 Account or using the Platform, you acknowledge that your personal data will be processed in accordance with this Privacy Policy. Questions about how natural8 handles your data may be directed to the support contact address listed in Section 15.

2. Personal Data We Collect

natural8 collects the following categories of personal data from players during the lifecycle of their account:

natural8 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where required for identity verification purposes under applicable licensing obligations.

3. How We Collect Your Data

natural8 collects personal data through the following means:

• Direct collection: Information you provide when registering an Account, completing the KYC verification process, making deposits or withdrawal requests, contacting the support team, or responding to promotions.
• Automated collection: Technical and usage data collected automatically via server logs, cookies, and similar tracking technologies when you access and use the natural8 Platform. See Section 9 for details on cookies.
• Third-party sources: Identity verification data received from third-party KYC service providers; fraud prevention data received from third-party screening services; payment transaction data received from payment processors including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank.

4. How We Use Your Personal Data

natural8 uses the personal data it collects for the following purposes:

4.1 Account Management and Service Delivery

Processing your registration, verifying your identity and age, managing your Account, maintaining your MYR Wallet, processing deposits and withdrawals, and delivering the Platform's products and services — including the sportsbook, live casino, slots, Toto 4D, and e-sports sections.

4.2 Legal and Regulatory Compliance

Complying with know-your-customer (KYC) requirements, anti-money laundering (AML) obligations, and the requirements imposed by natural8's gaming licensing authority. This includes retaining transaction records and identity documents for the retention periods mandated by applicable law and licensing conditions.

4.3 Fraud Prevention and Security

Detecting and preventing fraudulent activity, unauthorised account access, collusion, match fixing, and other prohibited conduct. Technical data including IP addresses, device identifiers, and session logs are used to identify suspicious patterns and protect the integrity of the Platform.

4.4 Responsible Gaming

Monitoring player activity to identify patterns associated with problem gambling, enforcing self-exclusion requests, applying deposit and loss limits, and fulfilling natural8's duty of care obligations under its licensing conditions.

4.5 Customer Support

Responding to Account queries, processing complaints, and providing assistance through the live chat and email support channels. Support communications are retained to maintain a record of interactions and to ensure the quality and consistency of responses.

4.6 Marketing Communications

Where you have provided explicit consent, sending promotional emails, SMS notifications, or in-Platform messages about natural8 products, bonuses, and promotions. You may withdraw marketing consent at any time through your Account settings or by contacting the support team.

4.7 Platform Improvement

Analysing aggregated usage data to understand how players interact with the Platform, identify technical issues, and improve the design and functionality of natural8's products and services.

5. Legal Basis for Processing

natural8 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions applicable to your natural8 Account — including account management, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws, regulations, and the requirements of natural8's gaming licensing authority — including KYC, AML, and data retention obligations.
• Legitimate interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and aggregated analytics — where these interests are not overridden by your data protection rights.
• Consent: Marketing communications, where you have provided explicit opt-in consent. Consent may be withdrawn at any time without affecting prior processing.

6. Data Sharing and Disclosure

natural8 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data is shared with third parties only in the following circumstances:

• Payment processors: Financial data is shared with payment service providers — including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank — to the extent necessary to process deposits and withdrawals.
• KYC and identity verification providers: Identity data and verification documents are shared with third-party KYC service providers engaged by natural8 to fulfil its age verification and anti-money laundering obligations.
• Fraud prevention services: Technical and identity data may be shared with third-party fraud screening services to detect and prevent prohibited conduct on the Platform.
• Gaming licensing authority: Player data may be disclosed to natural8's licensing authority in connection with audits, regulatory inspections, or compliance reporting.
• Law enforcement and regulatory bodies: Personal data may be disclosed to law enforcement agencies, courts, or regulatory authorities where required by applicable law, legal process, or court order.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of natural8's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

7. International Data Transfers

natural8 operates with infrastructure and service providers that may be located outside of Malaysia. Where personal data is transferred to countries that may not provide an equivalent level of data protection to that applicable in Malaysia, natural8 implements appropriate safeguards to protect the transferred data. These safeguards may include contractual data protection clauses with the receiving party, data processing agreements, or reliance on recognised data transfer mechanisms.

Players with questions about the jurisdictions in which their data may be processed may contact the natural8 support team as described in Section 15.

8. Data Retention

natural8 retains personal data for the periods necessary to fulfil the purposes set out in this Privacy Policy, subject to the following minimum retention periods imposed by natural8's licensing and legal obligations:

• Account and identity data: Retained for a minimum of five (5) years following Account closure, or for such longer period as may be required by applicable law or licensing conditions.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of the transaction.
• KYC documentation: Retained for a minimum of five (5) years following the completion of the verification process.
• Support communications: Retained for a minimum of two (2) years following the date of the communication.
• Technical and usage logs: Retained for up to twelve (12) months, subject to legal hold requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with natural8's data disposal procedures.

9. Cookies and Tracking Technologies

natural8 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly — including session management, authentication, and security functions. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and previously entered form data to improve your experience on return visits.
• Analytics cookies: Used to collect aggregated data about how players navigate and use the Platform, to identify technical issues, and to inform product improvement decisions. This data is anonymised where possible.
• Marketing cookies: Used to deliver relevant promotional content within the Platform and, where consent has been provided, through third-party advertising channels. You may opt out of marketing cookies through your browser settings.

You may manage your cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from accessing certain features of the natural8 Platform, including the login and account management functions.

10. Your Data Rights

Subject to applicable data protection law, you have the following rights in relation to the personal data natural8 holds about you:

To exercise any of the above rights, please contact the natural8 support team as described in Section 15. natural8 will respond to all valid requests within 30 days. Identity verification may be required before a request can be processed.

11. Children's Privacy and Age Restrictions

The natural8 Platform is strictly for adults aged 21 years and above. natural8 does not knowingly collect personal data from individuals under the age of 21. Where natural8 discovers or has reason to believe that an Account has been created by an individual under 21, the Account will be closed immediately, all associated data will be handled in accordance with natural8's data retention obligations, and any deposited funds may be withheld pending investigation.

Parents and guardians who believe that a minor may have registered on the natural8 Platform are encouraged to contact the support team immediately using the contact details in Section 15.

12. Security Measures

natural8 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between players and the natural8 Platform.
• Encryption of stored personal data and financial information at rest.
• Access controls restricting internal access to personal data to authorised personnel with a legitimate operational need.
• Two-factor authentication available for all player Accounts.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Player funds held in segregated accounts, operationally separated from natural8's business accounts.

While natural8 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. Players are responsible for maintaining the security of their own Account credentials and for using secure network connections when accessing the Platform.

13. Third-Party Links

The natural8 Platform does not include links to third-party websites for commercial or affiliate purposes. Where references are made to external services — such as payment providers — in the context of operational or support information, natural8 is not responsible for the privacy practices of those third parties. Players are encouraged to review the privacy policies of any third-party payment provider they use in connection with their natural8 Account.

14. Updates to This Privacy Policy

natural8 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or licensing requirements. Where a material change is made to this Privacy Policy, natural8 will notify registered players by email or through a prominent notice on the Platform. The revised Privacy Policy will display the updated effective date at the top of this page. Continued use of the natural8 Platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy.

Players are encouraged to review this Privacy Policy periodically to remain informed of how natural8 manages their personal data.

15. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by natural8, please contact us through the live chat function available on the Platform, or by email at the address displayed in the footer of this website. natural8 aims to acknowledge all data-related enquiries within 48 hours and to resolve them within 30 days.

When submitting a data rights request, please include your registered email address and a description of the data or processing activity your request relates to. Identity verification may be required before natural8 can process your request.