Privacy Policy

This Privacy Policy ("Policy") is issued by Viva8 ("we", "us", "our", or "the Platform"), the operator of the online casino and sports betting platform accessible at viva8.cam. This Policy applies to all personal data collected from individuals ("you", "the User") who access, register on, or interact with the Viva8 Platform in any capacity, including as a registered member, prospective user, or visitor.

Viva8 is committed to protecting the privacy and personal data of all users, including players based in Malaysia and other jurisdictions where the Platform is accessed. We operate in accordance with applicable international data protection standards and take our obligations as a data controller seriously.

By registering an account, accessing the Platform, or otherwise providing personal information to Viva8, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not access or use the Platform.

This Policy should be read in conjunction with Viva8's Terms & Conditions and Responsible Gambling Policy, which are available via the navigation links on this site and are incorporated into the overall framework governing your use of the Platform.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, email address, identity document number, financial account details, IP address, device identifiers, and behavioural data where those data can be linked to an individual.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, deletion, or any other form of handling.
• "Data Controller" means Viva8, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of Viva8, under a data processing agreement and subject to Viva8's instructions.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their personal data.
• "KYC Data" means identity and address verification documents and associated information collected as part of the Know Your Customer compliance process.
• "Cookies" means small data files stored on a User's browser or device that may be used to identify returning visitors and support Platform functionality.

Viva8 collects personal data from Users through several channels, including direct input during account registration, through KYC verification processes, automatically through Platform usage, and via third-party payment and service providers. The categories of personal data we collect are detailed in the table below.

Personal data collected by Viva8 is used solely for the purposes described below. We do not use personal data for any purpose that is incompatible with the purpose for which it was originally collected without obtaining fresh consent or establishing a new legal basis.

• Account management: Creating, maintaining, and securing your registered account, including processing login credentials and enabling two-factor authentication.
• Transaction processing: Facilitating deposits and withdrawals via approved Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank, as well as cryptocurrency channels.
• Identity verification (KYC): Verifying your identity and address as required for regulatory compliance and fraud prevention prior to withdrawal processing.
• Regulatory compliance: Meeting anti-money laundering (AML), counter-terrorism financing, and other applicable legal and regulatory obligations.
• Customer support: Responding to queries, resolving disputes, and providing 24/7 live chat assistance through your account dashboard.
• Responsible gambling: Monitoring account activity to identify patterns indicative of problem gambling behaviour, and administering self-exclusion, deposit limits, and other responsible gambling tools where requested or required.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how the Platform is used and to improve functionality, game selection, and user experience.
• Fraud detection and security: Detecting, investigating, and preventing fraudulent transactions, multi-accounting, bonus abuse, and other prohibited conduct.
• Promotional communications: Sending relevant promotional offers and platform updates to registered users who have not opted out of such communications.

Viva8 processes personal data in accordance with recognised legal bases applicable under international data protection law. The primary legal bases we rely upon are:

• Contractual necessity: Processing is necessary to perform the contract between Viva8 and the User — i.e., to operate your account, process bets and transactions, and deliver all Platform services.
• Legal obligation: Processing is required to comply with applicable legal and regulatory obligations, including AML requirements, KYC obligations, and fraud prevention duties.
• Legitimate interests: Processing is necessary for the legitimate interests of Viva8, such as maintaining Platform security, preventing fraud, conducting internal analytics, and improving products and services — provided such interests are not overridden by the User's privacy rights.
• Consent: For certain processing activities, such as sending marketing communications and the use of non-essential cookies, Viva8 will seek your prior consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

Viva8 does not sell, rent, or trade personal data with third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

• Payment processors: Personal and financial data is shared with payment service providers — including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX integrations, and cryptocurrency processing services — solely for the purpose of processing deposits and withdrawals.
• Identity verification services: KYC documents and identity data may be shared with third-party identity verification providers engaged by Viva8 to perform document checks and anti-fraud screening.
• Game content providers: Certain technical data (e.g., User ID, session token) may be shared with certified game providers to enable gameplay and resolve technical disputes.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory directive, Viva8 may disclose personal data to law enforcement agencies, financial regulators, or other competent authorities.
• Anti-fraud and AML networks: Viva8 may share information about accounts suspected of fraudulent activity with relevant industry fraud-prevention bodies as permitted by law.
• Professional advisors: Viva8 may share data with legal counsel, auditors, and other professional advisors under strict confidentiality obligations where necessary for the operation of the business.

All third parties with whom personal data is shared are required to handle such data in accordance with applicable data protection standards and may only use it for the specified purpose for which it was shared.

Viva8 uses cookies and similar tracking technologies on the Platform to support core functionality, maintain session security, and gather anonymised analytics data. The following categories of cookies may be used:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication cookies and security tokens. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember user preferences such as language settings and display options across sessions.
• Analytics cookies: Used to collect anonymised data about how users interact with the Platform — pages visited, session duration, navigation paths — to help us improve the user experience. This data is not linked to individual identities.
• Performance cookies: Used to monitor Platform stability and identify technical issues.

Viva8 does not deploy third-party advertising or retargeting cookies. You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect your ability to use some features of the Platform.

Viva8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods applied by Viva8 are as follows:

• Account data and KYC documents: Retained for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years following the date of the transaction.
• Support communications: Retained for three (3) years from the date of the communication.
• Technical and log data: Retained for up to twelve (12) months for security monitoring purposes, after which it is anonymised or deleted.
• Behavioural and analytics data: Retained in anonymised, aggregated form indefinitely for internal research purposes.

Where personal data is no longer required for any legitimate purpose and no legal retention obligation applies, Viva8 will delete or irreversibly anonymise the data in a secure manner.

Viva8 employs a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption on all data transmissions between the User's browser and Viva8 servers.
• Encrypted storage of sensitive personal and financial data at rest.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a documented need.
• Two-factor authentication (2FA) available on all User accounts and enforced for internal staff systems.
• Regular security audits and penetration testing conducted by qualified third-party security professionals.
• Incident response procedures in place to detect, contain, and notify affected parties of any data security incident within applicable regulatory timeframes.

While Viva8 takes all reasonable precautions to safeguard personal data, no transmission over the internet or electronic storage system is unconditionally secure. Users are encouraged to take their own precautions, including using strong unique passwords and enabling 2FA on their account.

As a User whose personal data is processed by Viva8, you hold the following rights with respect to your personal information. To exercise any of these rights, please contact the Viva8 support team through the in-platform live chat.

Viva8 will respond to all verified data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

The Viva8 Platform is strictly intended for use by individuals aged 21 years and above. Viva8 does not knowingly collect, store, or process any personal data relating to individuals under the age of 21. If Viva8 becomes aware that personal data has been provided by or on behalf of a minor, such data will be deleted immediately and the associated account closed.

If you have reason to believe that a minor has registered an account on the Viva8 Platform or submitted personal data to us, please contact our support team immediately through the live chat function in your account dashboard so that we may investigate and take appropriate action.

In order to operate the Viva8 Platform and deliver its services, personal data may be processed by Viva8 or its authorised Data Processors in jurisdictions outside of Malaysia. Where such international transfers occur, Viva8 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable data protection law.

Such safeguards may include data processing agreements incorporating standard contractual clauses, adequacy decisions, or binding corporate rules as appropriate to the transfer in question. By using the Platform, you acknowledge that your personal data may be processed in these international locations.

The Viva8 Platform integrates with a number of third-party service providers to deliver core functionality, including payment processors (such as operators supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank integrations), certified game providers, identity verification services, and cloud infrastructure providers. Each of these third parties may process certain categories of User data as Data Processors on Viva8's behalf.

All third-party Data Processors engaged by Viva8 are subject to written data processing agreements that require them to: process data only on documented instructions from Viva8; implement appropriate technical and organisational security measures; not sub-process data without Viva8's prior authorisation; and return or delete User data upon termination of the service engagement.

The Viva8 website does not contain links to external third-party websites. Where the Platform references the names of payment services or other providers for informational purposes, Viva8 is not responsible for the privacy practices of those entities with respect to their own platforms and websites.

Viva8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, legal requirements, or Platform functionality. When material changes are made, Viva8 will notify registered users via in-platform notification or, where contact details are on file, by email communication prior to the changes taking effect.

The revised Privacy Policy will be published on this page with an updated effective date. Continued use of the Platform following the publication of an amended Policy constitutes your acceptance of the updated terms. If you do not agree with the amended Policy, you should cease use of the Platform and request account closure.

We encourage you to review this Privacy Policy periodically to stay informed of how Viva8 handles your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by Viva8, please contact our support team through the 24/7 live chat function available within your registered account dashboard on the Platform. This is the fastest and most secure channel for privacy-related enquiries.

For written privacy correspondence, you may reach us at the following address:

Email (no reply): [email protected]
Please do not send KYC documents or sensitive personal data by email. All document submissions must be made through the secure upload portal within your account.