Privacy Policy plea8

1. Information We Collect

Plea8 only collects data that is strictly necessary to provide, improve, and protect our services. We do not collect data beyond what is required for platform operations. Generally, the data we collect falls into three main categories:

1.1 Data You Provide Directly

This is the information you provided when registering or using the platform:

• Full name as shown on your identification document.
• Email address and mobile number.
• Date of birth (for age verification).
• Bank account or digital wallet details for deposit and withdrawal purposes.
• KYC documents such as a copy of your MyKad or bank statement when requested.
• Information you provide through customer support sessions.

1.2 Data Collected Automatically

When you use the plea8 platform, we automatically record certain technical information to ensure the platform operates correctly and securely:

1.3 Data from Third Parties

In certain circumstances, we may receive additional data from the payment service providers you use, or from identity verification agencies we engage for KYC purposes. This data is used solely to verify your identity and prevent fraud.

2. How We Use Your Data

The personal data we collect is used solely for lawful and transparent purposes. Below is the full list of data usage purposes at plea8:

• Account Management: Creating, maintaining, and protecting your account.
• Transaction Processing: Processing deposits, withdrawals, and financial records accurately.
• Identity Verification: Ensuring you meet the required age eligibility and valid identity criteria.
• Platform Security: Detecting and preventing fraud, money laundering, and unauthorized access.
• Customer Support: Responding to inquiries and resolving account issues efficiently.
• Service Improvement: Analyzing usage patterns to improve the platform experience.
• Legal Compliance: Meeting reporting obligations to the relevant authorities.
• Account-Related Communications: Sending important notifications about your account, security, or policy changes.
• Marketing (with consent): Informing you about new plea8 promotions and offers where you have given your consent.

3. Data Sharing & Disclosure

Plea8 does not sell or trade your personal data. However, in operating the platform, we may need to share certain data with the following parties in limited and controlled situations:

3.1 Third-Party Service Providers

We work with trusted service providers to handle specific platform functions, including payment processing providers, cloud service providers, and customer support system providers. All these providers are bound by strict data confidentiality agreements and may only use your data for agreed purposes.

3.2 Legal Compliance & Authorities

Plea8 will disclose personal data to government authorities, courts, or law enforcement bodies when required to do so by applicable Malaysian law, a valid court order, or in situations involving a serious public safety threat.

3.3 Business Transfers

Should plea8 undergo any merger, acquisition, or asset transfer, members' personal data may be transferred as part of those assets. In such cases, members will be informed in advance, and the new entity will be bound by an equivalent or stricter privacy policy.

4. Data Security

Protecting your data is not merely a legal obligation for plea8 — it is a moral responsibility we take very seriously. We continuously invest in the latest security infrastructure to ensure your data remains safe at all times.

4.1 Technical Measures

• End-to-end encryption: All communications are secured with TLS 1.3 and AES-256 encryption.
• Two-Factor Authentication (2FA): Available to all accounts for an added layer of security.
• Data imaging: Data backups are performed regularly to a secure, separate location.
• Vulnerability scanning: Our systems are regularly scanned to identify and patch any security vulnerabilities.
• 24/7 Monitoring: Our security team monitors systems around the clock to detect any suspicious activity.

4.2 Organisational Measures

Access to member personal data is restricted to plea8 staff who require it to perform their job duties only. All staff with access to sensitive data are required to complete data protection training and sign a confidentiality agreement.

4.3 Incident Response

In the event of a data breach affecting your information, plea8 is committed to notifying you within 72 hours of becoming aware of the incident, in line with industry best practices. The notification will describe the nature of the incident, the data involved, and the steps we have taken.

5. Cookies & Tracking Technologies

Plea8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

5.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly — such as maintaining your login session. These cookies cannot be disabled.
• Functional Cookies: Saving your preferences such as language and display settings to improve ease of use.
• Analytical Cookies: Helping us understand how members use the platform so we can make meaningful improvements.
• Security Cookies: Helping identify and prevent fraudulent activity and unauthorized access.

5.2 Managing Your Cookies

You can control or delete cookies through your browser settings at any time. Please note that disabling essential cookies may affect platform functionality and your login experience. Detailed guidance on managing cookies is available in the help section of your web browser.

6. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by plea8:

To exercise any of these rights, please contact our data protection team via the customer support section. We will verify your identity before processing any request to ensure the security of your data.

7. Data Retention & Deletion

Plea8 only retains your personal data for as long as it is needed for the purposes stated in this policy or as required by applicable law. The following are our data retention period guidelines:

• Active account data: Retained for as long as your account is active or as needed to provide the service.
• Financial transaction records: Retained for a minimum of 7 years in line with Malaysian financial legal requirements.
• KYC Records: Retained for a minimum of 5 years after account closure for AML compliance purposes.
• Support communication logs: Retained for 2 years from the date of last interaction.
• Anonymous analytics data: May be retained for a longer period in a non-identifiable form.

Once the designated retention period expires, your data will be securely deleted or fully anonymised using methods that meet industry security standards.

8. Privacy Policy Amendments

Plea8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. We will notify you of any material amendments via in-platform notifications or through the email address registered to your account.

The "Updated" date at the top of this page indicates when this Privacy Policy was last reviewed. Your continued use of the plea8 platform after any amendments are published constitutes your acceptance of the updated policy.

9. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how plea8 handles your personal data, please contact us through the following channels:

You may also visit the FAQ us for answers to frequently asked questions, or check Terms and Conditions us for more information on platform usage rules.