Privacy Policy
CS8 is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we may share it with, and the rights you hold as a CS8 player. Please read this document carefully before using our platform.
Data Security
All personal and financial data on CS8 is protected by 256-bit SSL encryption. Your information is never transmitted in plain text.
Your Rights Matter
You have the right to access, correct, and request deletion of your personal data at any time. CS8 honours all reasonable data subject requests.
No Unauthorised Sharing
CS8 does not sell or rent your personal data to third parties. Sharing is limited to verified service providers necessary for platform operations.
Cookie Transparency
We use cookies to improve your experience on CS8. Our cookie usage is explained in full in this policy and you retain control over non-essential cookies.
Payment Data Protection
Transactional data for DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and all supported payment channels is handled with strict PCI-aligned controls.
Marketing Preferences
You can opt out of marketing communications at any time. CS8 will continue to send transactional and account-related messages regardless of marketing preferences.
Introduction
This Privacy Policy ("Policy") issued by CS8 ("the Platform", "we", "us", or "our") and applies to all personal data collected from individuals ("you", "User", or "Player") who access, register with, or use the CS8 online casino and sports betting platform located at https://cs8.cam.
CS8 is an online gaming platform serving players primarily across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and surrounding areas. In the course of providing our services — which include live casino, sports betting, slot games, live football, lottery, and arcade titles — we collect and process personal data about our users.
We take the privacy and security of your personal data seriously. This Policy has been prepared to give you a clear and complete understanding of our data practices. It sets out the categories of data we collect, the purposes for which we process it, the basis upon which we do so, how long we retain it, and the rights you hold in relation to your data.
Definitions
For the purposes of this Privacy Policy, the following terms have the meanings given below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, device identifiers, and behavioural data. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, retrieval, or deletion. |
| "Data Controller" | CS8, which determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of CS8, such as payment providers, identity verification services, and cloud hosting partners. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose. |
| "KYC Data" | Identity and verification documents submitted by a User during the Know Your Customer (KYC) process, including government-issued identification and proof of address. |
| "Cookies" | Small text files placed on your device by the CS8 Platform or by authorised third-party services to store preferences, session data, and analytical information. |
Data We Collect
CS8 collects Personal Data across several categories depending on your interactions with the Platform. The following table summarises the primary data categories we hold:
| Data Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (e.g., MyKad number or passport number) |
| Contact Data | Email address, mobile phone number, registered residential address (for verification purposes) |
| Account Data | Username, hashed password, account preferences, communication language settings |
| Financial Data | Deposit and withdrawal transaction records, payment method identifiers (e.g., masked e-wallet IDs for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong), balance history |
| KYC Documents | Copies of identity documents, proof of address documents, and payment method verification screenshots submitted during account verification |
| Gaming Activity Data | Game session records, bet history, sports betting records, bonus usage, wagering data, win and loss records |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, referring URL, session timestamps |
| Communications Data | Records of live chat conversations, email correspondence, and WhatsApp support interactions with the CS8 customer service team |
| Marketing Preferences | Opt-in or opt-out status for promotional emails, SMS, and push notifications; preferred communication channel and language |
How We Collect Your Data
CS8 collects Personal Data through the following means:
4.1 Direct Collection
You provide data directly to us when you:
- Register a CS8 account by completing the sign-up form
- Submit KYC documentation for identity and age verification
- Make a deposit or withdrawal request through any supported payment method
- Contact our customer support team via live chat, WhatsApp, or email
- Respond to promotions, surveys, or other marketing communications
- Update your account profile or notification preferences
4.2 Automated Collection
When you access and use the CS8 Platform, we automatically collect certain Technical Data through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, pages visited, time spent on each page, and click-stream data. This information helps us maintain platform security, detect unusual activity, and improve user experience.
4.3 Third-Party Sources
In limited circumstances, CS8 may receive Personal Data about you from third-party sources, including fraud prevention databases, identity verification service providers, and, where applicable, our payment partners. Such data is used solely for the purpose of verifying your identity, preventing financial crime, and ensuring the integrity of the Platform.
Data Processing
CS8 processes your Personal Data for the following stated purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Identity Data, Contact Data, Account Data |
| Identity verification (KYC) and age confirmation (21+) | Identity Data, KYC Documents |
| Processing deposits and withdrawals | Financial Data, Identity Data |
| Provision of gaming services | Account Data, Gaming Activity Data, Technical Data |
| Customer support and dispute resolution | Communications Data, Account Data, Financial Data |
| Fraud detection, AML compliance, and security monitoring | Technical Data, Financial Data, Identity Data |
| Responsible gambling monitoring and player protection | Gaming Activity Data, Account Data |
| Sending transactional and account communications | Contact Data, Account |
| Marketing communications (where consent has been given) | Contact Data, Marketing Preferences |
| Platform analytics and improvement | Technical Data, Gaming Activity Data |
Legal Basis for Processing
CS8 processes your Personal Data one or more of the following legal bases:
- Contractual Necessity: Processing that is necessary to fulfil our contractual obligations to you — including account management, payment processing, and the delivery of gaming services — is carried out on the basis that it is required for the performance of the contract between you and CS8.
- Legal Obligation: Certain processing activities — particularly KYC verification, anti-money laundering (AML) checks, and the retention of transactional records — are carried out to comply with applicable legal and regulatory requirements.
- Legitimate Interests: CS8 processes some categories of Personal Data on the basis of our legitimate interests, including fraud prevention, platform security, responsible gambling monitoring, and internal analytics — provided such interests are not overridden by your fundamental rights and freedoms.
- Consent: Where processing is based on your consent — particularly for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent may be made by contacting CS8 support via live chat.
Data Sharing & Disclosure
CS8 does not sell, rent, or otherwise commercially transfer your Personal Data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and only for the purposes stated in this Policy:
- Payment Service Providers: Authorised partners facilitating deposits and withdrawals, including operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency transaction processors. Sharing is limited to transaction-relevant data necessary to complete the payment.
- Identity Verification Providers: Third-party KYC service providers engaged to verify the identity, age, and address of Account holders. These providers are bound by data processing agreements and are not permitted to use your data for any secondary purpose.
- Fraud Prevention & AML Services: CS8 may cross-reference data against fraud prevention and AML databases where there is a reasonable basis to do so. Such sharing is carried out in fulfilment of legal obligations.
- Cloud Hosting & Technology Partners: CS8 uses secure cloud infrastructure to operate the Platform. Server and hosting partners are bound by confidentiality agreements and data security standards.
- Regulatory Authorities: CS8 may disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law or pursuant to a valid legal order.
Data Retention
CS8 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and Identity Data | Duration of Account plus 5 years following Account closure, to meet AML and regulatory record-keeping obligations |
| KYC Documents | Duration of Account plus 5 years following closure, or as required by applicable law |
| Financial Transaction Records | 7 years from transaction date, in line with standard financial record-keeping requirements |
| Gaming Activity Data | Duration of Account plus 3 years following closure |
| Customer Support Communications | 3 years from the date of the communication |
| Marketing Preference Data | Until consent is withdrawn, or until the Account is closed |
| Technical / Log Data | Up to 12 months from collection |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in manner that prevents reconstruction of individually identifiable information.
Cookies & Tracking Technologies
CS8 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Essential for the Platform to function — including login session management, security tokens, and payment flow continuity. | No |
| Functional | Remembers your preferences such as language, interface settings, and last visited game categories. | Yes |
| Analytical / Performance | Tracks aggregate usage patterns, page load times, and feature engagement to help us improve the Platform. Data is anonymised where possible. | Yes |
| Marketing | Used to present relevant promotional content to you on the CS8 Platform based on your gaming preferences and activity. | Yes |
You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the CS8 Platform, including your ability to log in and access your Account.
Data Security
CS8 implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:
- 256-bit Transport Layer Security (TLS/SSL) encryption applied to all data in transit between your device and the CS8 Platform
- Encryption of sensitive data at rest, including stored KYC documents and financial records
- Role-based access controls limiting staff access to Personal Data on a strict need-to-know basis
- Regular internal security audits and vulnerability assessments of Platform infrastructure
- Secure password hashing — CS8 does not store plain-text passwords under any circumstances
- Automated fraud and anomaly detection systems monitoring Account activity for unusual patterns
While CS8 takes all reasonable precautions to protect your data, no online platform can provide an absolute guarantee of security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, CS8 will notify affected users in a timely manner through the contact details held on their Account.
Your Rights as a Data Subject
Subject to applicable data protection laws, you hold the following rights in relation to the Personal Data that CS8 holds about you. These rights may be exercised by contacting our support team via live chat or by emailing [email protected].
CS8 will respond to all valid data subject requests within a reasonable timeframe. In some circumstances, we may be required to retain certain data notwithstanding a deletion request — for example, where retention is required for AML compliance or to resolve an open dispute. In such cases, we will explain the reason for any limitations on your request.
Children & Minors
The CS8 Platform is strictly for persons aged 21 years and above. CS8 does not knowingly collect Personal Data from individuals under the age of 21. Registration is subject to age verification, and Accounts for which we cannot confirm the holder is 21 or older will be suspended pending verification.
If CS8 becomes aware that Personal Data has been collected from an individual under the age of 21 without proper consent, we will take immediate steps to delete that information and close the associated Account. Any transactions made by an ineligible minor may be reversed and funds returned to the deposit source.
Cross-Border Data Transfers
In the course of operating the CS8 Platform, your Personal Data may be transferred to and processed in countries other than Malaysia — for example, where our cloud infrastructure or third-party service providers are based. In all such cases, CS8 ensures that appropriate safeguards are in place to protect your data, including:
- The use of standard contractual clauses or equivalent data transfer mechanisms with all overseas service providers
- Ensuring that recipient countries organisations offer an adequate level of data protection
- Imposing contractual obligations on all international Data Processors that are equivalent to those CS8 holds itself to under this Policy
CS8 will not transfer your Personal Data to any overseas party unless adequate protections are confirmed to be in place and the transfer is necessary for the fulfilment of the purposes described in this Policy.
Amendments to This Policy
CS8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. The effective date at the top of this page will be updated whenever a material revision is made.
Where changes are significant, CS8 will endeavour to provide advance notice through the Platform or via the email address registered to your Account. Your continued use of the CS8 Platform following the publication of a revised Policy constitutes your acceptance of the updated terms.
We encourage you to review this Privacy Policy periodically to remain informed of how CS8 collects, uses, and protects your Personal Data.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact CS8 through the following channels. Our Data Protection team can be reached via the same support contacts available to all CS8 players.
Email: [email protected] (plain text — not a clickable link)
Languages: English, Bahasa Melayu, 中文
Average Response Time: Under 5 minutes via live chat
CS8 serves players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, Shah Alam, and Bangsar. Our multilingual support team is available around the clock to assist with all account, payment, and data-related queries.
All data subject requests will be acknowledged within 3 business days and responded to within 30 days, except where a longer period is permitted by applicable law and the complexity of the request warants additional time.
Explore CS8 — Play With Confidence
Your personal and financial data is protected at every step on CS8. Explore our platform knowing your privacy is taken seriously. For players aged 21 and above only.
Review our Terms & Conditions and Responsible Gambling pages for the full picture. Data queries: contact our support team 24/7 via live chat.