Personal Data Protection

Privacy Policy AW8 Nepal – Our Commitment to Protecting Malaysian Players' Personal Data

Your personal data is a trust we take very seriously. This document clearly explains how AW8 Nepal collects, uses, protects, and manages the personal information of every Malaysian member in accordance with the Personal Data Protection Act 2010 (PDPA).

Effective Date: 1 January 2026 · Last Updated: 1 June 2026 · Language: Malay (ms-MY)
Our Core Commitments
  • 256-bit SSL encryption for all data
  • No sale of data to third parties
  • Full rights to access & delete your data
  • Full compliance with Malaysia's PDPA 2010
  • Data storage on certified secure servers

The Six Pillars of AW8 Nepal Data Protection

The comprehensive approach we take to ensure every Malaysian member's personal data remains safe and protected at all times.

Strict Access Controls

AW8 Nepal members' personal information is accessible only to staff with a legitimate operational need who have undergone rigorous background checks. All access to the member database is logged and periodically audited to detect any unauthorised access.

🛡
Malaysia PDPA 2010 Compliance

AW8 Nepal operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). All data collection, processing, and storage practices are designed to meet or exceed applicable Malaysian legal requirements, including user notice and consent obligations.

📋
No Sale of Data to Third Parties

AW8 Nepal does not sell, rent, or share members' personal data with third parties for marketing or commercial purposes without your explicit consent. Your information belongs to you — not to us as an asset to monetise through outside entities.

🚫
Regular Security Audits

AW8 Nepal's data security infrastructure undergoes independent audits by third-party cybersecurity firms at least twice a year. Any vulnerabilities identified are addressed promptly in accordance with established and tested incident response protocols.

🔄
Full Rights Over Your Data

As an AW8 Nepal member, you have the right to access, correct, port, and request the deletion of your personal data at any time. These rights are fully respected and can be exercised through our 24/7 customer support in Bahasa Malaysia.

✅

This Privacy Policy sets out AW8 Nepal's data protection practices and your rights as a member. By using the AW8 Nepal platform, you agree to the practices described in this document. Please read it carefully and contact us with any questions before registering an account.

1

Introduction & Scope of This Privacy Policy

AW8 Nepal is an online casino and betting platform committed to managing members' personal data with integrity, transparency, and in full compliance with applicable law. This Privacy Policy explains how we handle information you provide to us directly, as well as information collected automatically when you use our platform.

This document applies to all individuals who:

  • Registering an account on the AW8 Nepal platform
  • Visiting the aw8nepal.best website without registering an account
  • Interacting with our customer support team
  • Using any service provided by AW8 Nepal

This policy should be read in conjunction with AW8 Nepal Terms & Conditions which constitutes the entire agreement between you and our platform. In the event of any conflict relating to data protection matters, this Privacy Policy shall prevail.

Legal Basis: AW8 Nepal processes the personal data of Malaysian members in accordance with the Personal Data Protection Act 2010 (PDPA), specifically the First Principle (Notice & Choice), Second Principle (Purpose), Fourth Principle (Security), and Seventh Principle (Access).

2

Personal Data We Collect

AW8 Nepal collects your personal data through several different channels. Below is a full breakdown of the types of data collected and the methods used to collect them.

2.1 Data You Provide Directly

Data Type Example Information Primary Purpose
Identification Data Full name, MyKad number, date of birth, profile photo Identity Verification (KYC)
Contact Data Malaysian phone number, email address, residential address Account communications & OTP
Financial Data Bank account numbers, e-wallet details (TNG, GrabPay, DuitNow), transaction history in MYR Processing deposits & withdrawals
Account Data Username, password (encrypted), account settings, communication preferences Account management
KYC Documents Copy of MyKad, passport, utility bill, or Malaysian bank statement AML/KYC Compliance

2.2 Automatically Collected Data

When you use the AW8 Nepal platform, our systems automatically collect technical data necessary for the operation of the service:

  • Device Data: Device type, operating system, phone model, screen resolution
  • Connection Data: IP address, internet service provider (ISP), approximate location based on IP
  • Usage Data: Games played, session duration, betting history, in-platform activity
  • Cookie Data: Session cookies, preference cookies, and analytics cookies – see Section 6 for full details

2.3 Sensitive Data

AW8 Nepal does not process sensitive data as defined under the PDPA — including information relating to health, religious beliefs, political opinions, or biometric data — unless directly required by applicable law in a gambling compliance context.

3

How We Use Your Personal Data

AW8 Nepal uses collected personal data for the following legitimate and clearly stated purposes:

3.1 Service Operations

  • Creating and managing your member account on the AW8 Nepal platform
  • Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX (Maybank2u, CIMB Clicks) in Malaysian Ringgit (RM)
  • Processing withdrawal requests to your Malaysian bank account or e-wallet
  • Crediting welcome bonuses and other promotions to your account
  • Providing Live Casino, slots, Sports Betting (Malaysia Super League, EPL), and e-sports services

3.2 Security & Compliance

  • Identity verification (KYC) to prevent fraud and money laundering
  • Detecting and investigating suspicious activity or violations of our terms of use
  • Compliance with applicable legal and regulatory requirements
  • Enforcing responsible gaming policies, including an age restriction of 18 years and above

3.3 Communications & Support

  • Sending transaction notifications, OTPs, and account security alerts
  • Providing customer support via live chat in Bahasa Melayu
  • Sending relevant promotional information and offers – only where you have consented to receive marketing communications

3.4 Platform Improvements

Non-identifying usage data is used to understand platform usage patterns, identify areas for improvement, and develop new features relevant to Malaysian players. This analysis is carried out at an aggregate level and does not link behaviour to any individual's identity.

Data Minimisation Principle: AW8 Nepal collects only the data genuinely necessary for the purposes stated above. We do not collect personal data in excess of what is required, nor do we retain data that is no longer needed once its original purpose has been fulfilled.

4

Data Sharing With Third Parties

AW8 Nepal does not sell members' personal data to any third party. Data is shared only in the following limited circumstances and with appropriate safeguards in place:

4.1 Trusted Service Providers

Personal data shared with service providers is limited strictly to what is necessary for the service in question:

  • Payment Providers: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX member banks — data collected solely for the purpose of processing MYR transactions
  • Game Providers: Evolution Gaming, Pragmatic Play Live, SA Gaming and other providers — username and account ID only, not full identification data
  • Cloud Infrastructure Provider: Secure data storage providers that have signed strict data processing agreements with AW8 Nepal
  • KYC Verification Services: Third-party identity verification service providers compliant with international AML standards

All of these service providers are contractually obligated to protect your data and use it solely for the specified purposes. They are not permitted to use your data for any other purpose or to share it with further parties.

4.2 Legal Requirements

AW8 Nepal may disclose members' personal data to Malaysian or international authorities when required by law – including requests from the Financial Intelligence Unit (UPW), the Royal Malaysia Police, or a court with the relevant jurisdiction. In such cases, we will notify you of the disclosure to the extent permitted by law.

4.3 Corporate Protection

If AW8 Nepal undergoes restructuring, a merger, or a corporate acquisition, members' personal data may be transferred to the successor entity, provided that entity agrees to honour this Privacy Policy. Members will be notified before any such transfer takes place.

5

Data Security

AW8 Nepal invests seriously in data security infrastructure to protect every member's personal information from unauthorised access, loss, misuse, or accidental disclosure.

5.1 Technical Measures

  • Transmission Encryption: SSL/TLS 256-bit encryption for all communications between your browser and AW8 Nepal servers
  • Storage Encryption: Sensitive personal data is stored in encrypted format within our databases
  • Password: Account passwords are stored as one-way hashes using the bcrypt algorithm – meaning AW8 Nepal never stores your password in any readable form
  • Two-Factor Authentication: OTP via SMS for every new login and financial transaction exceeding a set threshold
  • 24/7 Monitoring: An intrusion detection system (IDS) that continuously monitors network traffic

5.2 Organisational Measures

  • Mandatory data security training for all AW8 Nepal staff
  • Role-based access control policy – each staff member can only access the data required to perform their specific duties
  • A clearly defined and tested security incident response procedure
  • Independent security audits at least twice a year

5.3 Your Responsibilities

While AW8 Nepal takes extensive measures to protect your data, account security also depends on your own actions. You are responsible for:

  • Using a strong, unique password for your AW8 Nepal account
  • Do not share your login credentials with anyone — including family members
  • Log out of your account when using a shared device
  • Report to customer support immediately if you suspect your account has been compromised

AW8 Nepal will never ask for your account password via email, SMS, live chat, or any other channel. If anyone claims to be an AW8 Nepal representative and requests your password, this is a fraudulent attempt – do not comply and report it to us immediately.

6

Cookies & Tracking Technologies

The AW8 Nepal platform uses cookies and similar tracking technologies to ensure the platform functions correctly and to provide you with a better experience.

6.1 Types of Cookies Used

  • Essential Cookies: Required for core platform functionality — login, game sessions, and security. Cannot be disabled without affecting platform performance.
  • Preference Cookies: Saves your preferences such as language (Bahasa Malaysia), display theme, and favourite game selections for a more convenient experience on your next visit.
  • Analytics Cookies: Collects aggregated information on how the platform is used — most visited pages, time spent, referral sources — to help us improve the platform. This data does not directly identify individuals.
  • Security Cookies: Identifying legitimate sessions and preventing unauthorised access and CSRF attacks.

6.2 Managing Cookies

You can manage your cookie settings through your internet browser. However, disabling essential cookies will affect the functionality of the AW8 Nepal platform — you may be unable to log in or complete financial transactions properly. AW8 Nepal recommends keeping essential and security cookies enabled for the best experience and protection.

7

International Data Transfers

As AW8 Nepal works with international technology and gaming providers, your personal data may be processed or stored on servers located outside Malaysia in the course of service delivery.

Every international data transfer is carried out with appropriate safeguards in place, including:

  • A binding Data Processing Agreement with every third-party service provider
  • Compliance with data protection standards equivalent to or exceeding Malaysia's PDPA requirements
  • Use of internationally recognised standard contractual clauses for cross-border data transfers

Data transferred is limited strictly to what is necessary for the operation of the relevant service. Full identification data such as MyKad numbers are not shared with third-party providers except where specifically required for KYC verification with an authorised provider.

8

Data Retention Period

AW8 Nepal retains your personal data only for as long as necessary for the stated purposes or as required by applicable law:

  • Active Account Data: For as long as your account remains active and the services are in use
  • KYC & Identity Verification Data: Minimum 5 years after account closure, in accordance with Malaysia's Anti-Money Laundering (AML) legal requirements
  • Financial Transaction Records: Minimum 7 years in accordance with Malaysian accounting and tax requirements
  • Security & Audit Logs: Minimum 2 years for security incident investigation purposes
  • Customer Support Data: 3 years after case resolution for reference purposes

Once the relevant retention period has elapsed, data will be securely deleted or anonymised so it can no longer be linked to any individual. The deletion process is automatic and systematic, following the schedule set out in AW8 Nepal's records management policy.

9

Your Rights Under the PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you are entitled to the following rights, all of which AW8 Nepal is committed to upholding:

Right of Access

You have the right to obtain a copy of the personal data AW8 Nepal holds about you at any time. Access requests can be submitted via customer support live chat or by emailing support@aw8nepal.best and will be processed within 14 business days.

Right to Rectification

If the personal data AW8 Nepal holds about you is inaccurate, incomplete, or out of date, you have the right to request a correction. Basic account information can be updated directly through your account settings, while corrections requiring additional verification can be made through customer support.

Right to Erasure ("Right to Be Forgotten")

You may request that AW8 Nepal delete your personal data under certain circumstances — for example, when the data is no longer needed for its original purpose or when you withdraw your consent. However, AW8 Nepal may be required to retain certain data to meet legal obligations even after a deletion request has been received.

Right to Object to Direct Marketing

You may object to the processing of your personal data for direct marketing purposes at any time, without providing a reason. Simply click "unsubscribe" in any promotional email, or notify our customer support team, and we will cease all marketing communications within 48 hours.

Data Portability Rights

You have the right to receive your personal data in a machine-readable format (CSV or JSON) for the purpose of transferring it to another platform. Data portability requests will be processed within 21 business days.

Right to Withdraw Consent

Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that took place prior to the withdrawal. However, withdrawing consent for processing that is essential to account operations may mean AW8 Nepal is no longer able to provide you with the full service.

10

Complaints & How to Contact Us

If you have any concerns, questions, or complaints regarding how AW8 Nepal handles your personal data, we encourage you to reach out to us directly in the first instance.

10.1 Contact the AW8 Nepal Data Privacy Officer

Data privacy-related requests — including access, correction, deletion requests, or general enquiries — can be submitted via:

  • Live Chat: Available 24/7 within the AW8 Nepal platform – the fastest option for immediate responses in Bahasa Malaysia
  • Email: support@aw8nepal.best — for formal written requests or those requiring documentation

We are committed to responding to all privacy-related enquiries within 5 business days for general enquiries and 14 working days for formal requests such as data access or deletion.

10.2 Complaints to the Regulatory Authority

If you are unsatisfied with AW8 Nepal's response to your privacy complaint after going through our internal channels, you have the right to escalate the matter to the Department of Personal Data Protection (JPDP) Malaysia, the authority responsible for enforcing PDPA 2010 in Malaysia.

For any enquiries or requests relating to your personal data at AW8 Nepal, contact us at support@aw8nepal.best with the subject line "Data Privacy Request" so it can be routed to the relevant team promptly.

11

Privacy Policy Amendments

AW8 Nepal reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or the technologies we use. All material amendments will be communicated to members via in-platform notifications and email at least 14 days before the amendment takes effect.

Continued use of the AW8 Nepal platform after the effective date of any Privacy Policy amendment constitutes acceptance of the updated version. The latest version of this Privacy Policy is always available on this page, with the revision date clearly displayed at the top of the document.

For significant changes to how we process your personal data, we will seek your explicit consent before those changes take effect, in line with Malaysia's PDPA 2010 requirements.

Why a Robust Privacy Policy Matters for Malaysian Online Casino Players

When we talk about safety in online casino gaming, most people's minds go straight to game fairness – are the outcomes truly random, is the RTP what it claims to be. But there is another layer of security that is equally important yet often overlooked: personal data protection. In Malaysia, we live in an increasingly mature digital ecosystem – we use Touch 'n Go to pay tolls, GrabPay to buy lunch, DuitNow to transfer money to family. Our financial information is deeply woven into our digital lives. So the platforms we entrust with this information – including AW8 Nepal – carries a very significant responsibility.

One of the things that puts many AW8 Nepal members at ease is the platform's transparency in clearly stating exactly what data is collected and for what purpose. This goes beyond a legal obligation under PDPA 2010 – it is an ethical choice that reflects the platform's values. When you register an AW8 Nepal account, you know precisely what your name, phone number, and payment details are being used for. There is no silent data collection for advertising purposes you never agreed to. This may seem like a small thing, but in an industry still building public trust, this level of transparency sets serious platforms apart from the rest.

Protecting Your Financial Data Is Our Priority

When you make a deposit to your AW8 Nepal account using Touch 'n Go eWallet or FPX Maybank2u, you are entrusting your financial information to our systems. The 256-bit SSL encryption we use is not just a figure — it means your transaction data is encrypted to the same standard that Malaysia's major banks use to protect your internet banking activity. Without the correct encryption key, any data intercepted in transit is nothing more than meaningless random text to any unauthorised party.

One principle AW8 Nepal holds firmly is that your payment information – e-wallet account numbers, bank account numbers, FPX details – is never stored in a form readable by AW8 Nepal staff. Our systems use tokenisation, whereby sensitive information is replaced with a unique token that is meaningless without the associated encryption system. This means that even in the highly unlikely scenario where our internal systems were breached, an attacker would not gain access to your actual payment details.

Your Rights as a Malaysian User

The Personal Data Protection Act 2010 grants you certain rights over your personal data — the right to access, correct, and in certain circumstances, request deletion of your data. AW8 Nepal takes these rights seriously and has put clear procedures in place for you to exercise them. There is no need to engage a lawyer or navigate any complicated process — simply contact our customer support team in Bahasa Malaysia via 24/7 live chat and we will guide you through the relevant steps.

One thing many Malaysian users are unaware of is that they can request a copy of all the data a platform holds about them. At AW8 Nepal, this is a right you can exercise at any time — we will provide a comprehensive personal data report within 14 business days of your request. This right is not simply written into this document to satisfy a legal requirement — it is an operational commitment you can put to the test, and one we will honour.

As a Malaysian user who is increasingly aware of your digital rights, you should demand high privacy standards from every digital platform you use – including online casino and betting platforms. AW8 Nepal is committed to being a platform you can trust not only for an enjoyable gaming experience and fair bonuses, but also for responsible data management. This Privacy Policy is not merely a formal document – it is our written commitment to each and every one of you who has entrusted your personal data to this platform.

Summary of Your Personal Data Rights at AW8 Nepal

Six key rights that AW8 Nepal is committed to upholding under Malaysia's PDPA 2010.

Right of Access

Request a copy of all your personal data within 14 business days.

Right to Rectification

Correct inaccurate data through your account settings or by contacting customer support.

Right to Erasure

Request data deletion when it is no longer required (subject to legal retention obligations).

Right to Object

Object to your data being used for direct marketing — stopped within 48 hours.

Right to Portability

Receive your data in CSV/JSON format within 21 business days.

Withdraw Consent

Withdraw consent for data processing at any time by contacting customer support.

To exercise any of the rights above, contact the AW8 Nepal customer support team via 24/7 live chat in Bahasa Malaysia or by emailing support@aw8nepal.best with the subject line "Data Privacy Request". We will process your request within the stipulated timeframe.

FAQ – AW8 Nepal Privacy Policy

Answers to the most frequently asked questions about personal data protection at AW8 Nepal.

No, AW8 Nepal does not sell, rent, or share members' personal data with any advertising companies, data aggregators, or third parties for marketing purposes without your explicit consent. Your data is shared only with service providers necessary for platform operations — such as payment providers (Touch 'n Go, GrabPay, FPX) and game providers (Evolution Gaming, Pragmatic Play) — and only the information strictly required for those services is shared. All such providers are contractually bound not to use your data for any other purpose.

When you close your account, AW8 Nepal does not immediately delete all your data. Financial records and transaction history must be retained for a minimum of 7 years in accordance with Malaysian accounting and tax legislation. KYC and identity verification data must be retained for a minimum of 5 years in accordance with Anti-Money Laundering (AML) requirements. Once these retention periods expire, data will be automatically deleted or anonymised. You may request details on what specific data is still held after account closure by emailing support@aw8nepal.best.

When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, or any other Malaysian payment method, the transaction is processed through an encrypted payment gateway. AW8 Nepal uses tokenisation — your sensitive payment information is replaced with a unique token that is meaningless without the dedicated encryption system. This means AW8 Nepal does not store your e-wallet account numbers or banking details in any readable form. Even in the highly unlikely event that our database were breached, an attacker would not be able to obtain your actual financial information.

Yes, you have every right to object to the processing of your data for direct marketing purposes. The easiest way is to click the "unsubscribe" link at the bottom of any AW8 Nepal promotional email — this will stop all marketing emails within 48 hours. You can also update your communication preferences in your account settings or contact customer support for immediate action. Please note that essential transactional emails — such as deposit confirmations, security OTPs, and account notifications — are not considered marketing and cannot be disabled, as they form part of your account security.

AW8 Nepal has a comprehensive security incident response protocol in place. In the event of a data security incident affecting members' personal data, we will: (1) Identify and isolate the affected systems immediately; (2) Conduct a thorough investigation to determine the scope and root cause of the incident; (3) Notify affected members directly within a reasonable timeframe as required by law; (4) Report the incident to the relevant authorities in accordance with Malaysian legal requirements; (5) Implement remedial measures to prevent a recurrence. We believe in full transparency when incidents occur — members have the right to know if their data may have been compromised.
256-bit
SSL Encryption
14 Days
Data Request Response
PDPA
Full 2010 Compliance
24/7
Privacy Support
The Relationship Between This Privacy Policy and the Terms & Conditions

This Privacy Policy document is to be read together with AW8 Nepal Terms & Conditions. Both documents together form the entire agreement between you and our platform. In the event of any conflict relating to data protection matters, this Privacy Policy shall prevail. You are also encouraged to read Responsible Gaming Policy to understand how we use your activity data to help safeguard your wellbeing as a player.

Your Data Is Safe With Us

Ready to Play on a Platform That Respects Your Privacy?

Register a free AW8 Nepal account today and enjoy over 500 games including Live Casino, slots, Malaysia Super League Sports Betting, EPL, and e-sports — all on a platform that takes your personal data protection seriously. Deposit easily via Touch 'n Go, GrabPay, or DuitNow, with a welcome bonus of up to RM500 waiting for you.

Touch 'n Go GrabPay DuitNow FPX Boost
Bahasa Melayu