Official Data Protection Documents

Privacy Policy coba8 – Our Commitment to Protecting Your Personal Data

At coba8, your privacy is more than a legal obligation — it is a core value we uphold. Find out exactly how we collect, use, and protect your personal information as a member of our platform.

Last updated: 1 January 2026
256-bit
SSL Encryption
0
Sale of Data to Third Parties
24/7
Security Monitoring
PDPA
Data Protection Act Compliance
Quick Summary: coba8 collects your personal data solely for platform operations, account security, and legal compliance purposes. We do not sell your information to any third party for commercial use. Your data is protected with industry-grade encryption at all times.

01 Introduction and Scope of This Policy

This Privacy Policy ("Policy") is published by coba8 ("we", "Platform") and describes how we handle personal information collected from users of the coba8.onl website, the coba8 mobile app, and all related services ("Platform").

This Policy applies to all visitors, registered users, and active members of the coba8 platform. It complies with the data protection principles set out in Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices.

By using the coba8 platform, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this Policy, please stop using our platform. For any enquiries, our privacy team is available to assist you at any time.

02 Types of Information We Collect

Coba8 collects your personal information through several different channels. Below is a comprehensive overview of the data we collect and why it is needed:

a) Account Registration Information

When you register a coba8 account, we collect basic information required to verify your identity and manage your account:

  • Full name as shown on official identification documents (MyKad / passport)
  • Active email address
  • Malaysian mobile phone number
  • Date of birth (for age verification)
  • Encrypted passwords — we never store passwords in plain text

b) Identity Verification (KYC) Information

As a responsible and law-compliant betting platform, we are required to carry out a Know Your Customer (KYC) process. Documents that may be requested include:

  • Copy of MyKad (front and back) or a valid passport
  • Proof of address documents such as a utility bill or recent bank statement
  • Selfie holding your identity document (in certain circumstances)
  • Bank statement or proof of ownership of the registered payment method

c) Financial and Transaction Information

To enable deposits and withdrawals of funds, we record:

  • Bank account number or e-wallet number (Touch 'n Go eWallet, GrabPay, Boost, and others)
  • Deposit and withdrawal transaction history
  • Records of bonuses and promotions claimed
  • Betting history and gaming activity on the platform

d) Technical and Usage Information

When you browse or use our platform, the system automatically records:

  • IP address and approximate location based on IP
  • Device type, operating system, and browser version
  • Pages visited, links clicked, and session duration
  • Cookie information and session identifiers
  • Error logs and crash reports for technical improvement purposes
coba8 never ask you to share sensitive financial information such as your full credit card number, CVV, online banking password, or PIN through any communication channel, including live chat and email. Please be vigilant against phishing attempts that may impersonate coba8.

03 How We Use Your Information

Every piece of data we collect is used for transparent and legitimate purposes. Below is a summary of our data usage:

Purpose of Use Data Types Legal Basis
Account management Registration, KYC Contract performance
Processing transactions Finance, transactions Contract performance
Fraud prevention Technical, financial Legitimate interests
AML/KYC Compliance KYC, transactions Legal obligations
Customer Support Registration, communications Contract performance
Marketing communications Email, phone number Your consent
Analytics and improvements Technical, usage Legitimate interests

We use your information to verify your identity during login, process deposits and withdrawals securely, identify and prevent fraudulent activity or money laundering, and deliver a personalised and relevant gaming experience. For marketing communications, you may unsubscribe at any time via the link included in every promotional email we send.

04 Information Sharing and Disclosure

Coba8 does not sell, rent, or trade your personal information to any third party for commercial purposes. Your information is only shared in the following limited and necessary situations:

Trusted Service Providers: We work with selected third parties to ensure smooth platform operations. This includes payment gateway providers that process your transactions, licensed game software providers, identity verification systems (eKYC), and cloud computing services that store your data securely. All third parties are bound by strict data confidentiality agreements and are only permitted to use your data for specified purposes.

Legal and Regulatory Obligations: In certain cases, we may be required by law to disclose your information to the relevant authorities. This includes:

  • Financial Intelligence Unit (FIU) for money laundering-related investigations
  • Royal Malaysia Police (PDRM) under a valid court order
  • Inland Revenue Board of Malaysia (LHDN) for tax compliance purposes
  • The betting regulatory body with jurisdiction over our operations

Platform Interest Protection: We reserve the right to disclose necessary information to investigate, prevent, or take action against illegal activities, violations of our terms of service, situations involving threats to personal safety, or the exercise of our legal rights.

Cross-Border Data Transfers: Some of our service providers operate outside Malaysia. In such cases, we ensure that all cross-border data transfers are protected by data processing agreements that comply with Malaysia's PDPA standards and international best practices.

05 Data Security and Protection Measures

Your data security is our top priority at coba8. We continuously invest in the latest security infrastructure to ensure your information is always protected from unauthorised access, loss, or misuse.

Key security measures we implement include:

  • 256-bit SSL/TLS Encryption for all data communications between your device and our servers
  • Data encryption at rest (at-rest encryption) for all sensitive data in our database
  • Two-factor authentication (2FA) available to protect your account from unauthorised access
  • 24/7 security monitoring with real-time threat detection systems
  • Regular vulnerability assessments (penetration testing) by independent security experts
  • Role-based access control — only authorised personnel may access customer data
  • Regular data backups in geographically distributed secure data centres

While we take all reasonable steps to protect your data, no system is entirely risk-free. You also play an important role — always use a strong and unique password for your coba8 account, never share your login details with anyone, and make sure you log out after every session, especially on shared devices.

06 Cookies and Tracking Technologies

The coba8 platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and help us understand how users interact with our platform.

There are several types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collects anonymous data on how pages are used — such as most visited pages and time spent. This data helps us continuously improve the platform.
  • Functional Cookies: Saves your preferences such as display mode, preferred language, and account settings for a smoother repeat experience.
  • Analytics Cookies: Used alongside internal platform analytics tools to understand usage patterns in an aggregated and anonymised manner.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality and user experience of the coba8 platform.

07 Your Rights as a Data Subject

As a coba8 member and data subject under Malaysia's PDPA, you have several important rights regarding the personal information we hold about you. We are committed to respecting and facilitating the exercise of these rights:

  • Right of Access: You have the right to request and receive a copy of the personal information we hold about you.
  • Right to Rectification: If the information we hold is inaccurate or outdated, you have the right to request that we correct it.
  • Right to Erasure: In certain circumstances, you may request that we delete your personal information, subject to legal record-keeping obligations.
  • Right to Restrict Processing: You may request that we restrict how we process your data in certain circumstances provided by law.
  • Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
  • Right to Withdraw Consent: For processing that relies on your consent (such as marketing emails), you may withdraw that consent at any time.

To submit any request relating to the rights above, please contact our privacy team by email at [email protected]. We will process your request within 21 business days. Please note that some requests may require identity verification first to ensure the security of your account.

08 Data Retention Period

Coba8 does not retain your personal data longer than necessary for the purpose it was collected, or as required by applicable law. The following are our data retention period guidelines:

  • Active account data: Retained for the duration your account remains active and in use on the platform
  • Financial transaction records: Minimum 7 years from the transaction date, as required by Malaysian financial law
  • KYC documents: Minimum 5 years after account closure, as required by anti-money laundering regulations
  • Communication and support logs: 3 years from the date of last interaction
  • Technical data and system logs: 12 months, after which data is aggregated and anonymised

Once the designated retention period has expired, your data will be securely deleted or anonymised using methods that comply with industry security standards. You may request account closure at any time, and we will process the deletion of eligible data within 30 days, while complying with applicable legal retention obligations.

09 Child Data Protection

The coba8 platform is an adult service exclusively intended for individuals aged 18 and above. We do not knowingly collect or process personal information from children under the age of 18.

All account registration applications are processed with strict age verification. Should we find that information has been collected from a person under the age of 18, the account in question will be closed immediately and all related information will be deleted from our systems without delay.

If you believe that a child under the age of 18 has registered or used the coba8 platform without parental or guardian consent, please contact us immediately at [email protected] so we can take prompt action.

10 Amendments to This Privacy Policy

Coba8 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our privacy practices, platform technology, legal requirements, or other operational reasons. The "Last Updated" date displayed at the top of this page will always reflect the latest version in effect.

For significant changes to how we process your personal data, we will notify you via email to your registered address or through a prominent notice on the platform's home page at least 14 days before the changes take effect. Your continued use of the coba8 platform after the effective date constitutes your acceptance of the updated Privacy Policy.

11 Contact Our Privacy Team

We welcome any questions, concerns, or complaints regarding your privacy and data protection. The coba8 privacy team is committed to providing transparent and timely responses:

  • Privacy Email: [email protected] (please state "Privacy Enquiry" in the email subject line)
  • Live Chat: Available 24/7 via the chat icon within the platform — select the "Privacy & Data" category
  • Response Time: Privacy-related enquiries will be responded to within 3 business days; data rights requests within 21 business days

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) as the responsible regulatory body under PDPA 2010.

Six Pillars coba8 Privacy

Privacy is more than a document — it is a daily practice we prioritise in every operational and technology decision we make.

Military-Grade Encryption

All sensitive data is protected with AES-256 encryption and the latest SSL/TLS standards. Your personal and financial information cannot be read by any unauthorised party, whether in transit or at rest.

Secure & Efficient KYC

Our identity verification process uses the latest eKYC technology to ensure your documents are processed quickly and securely. KYC documents are stored in a fully encrypted environment and are only accessible by authorised personnel.

No Data Sales

Coba8 has never and will never sell, rent, or trade your personal information to advertisers, data brokers, or any third party for commercial purposes. Your data belongs to you — it is not our commodity.

Malaysia PDPA Compliance

All our data processing practices are designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). Our privacy team continuously monitors legal developments to ensure full compliance at all times.

24/7 Threat Monitoring

Our automated security system monitors suspicious activity around the clock. Should any security incident affecting your data occur, we will notify you within the timeframe required by law.

Full Control in Your Hands

You have full control over your personal data — from updating profile information and managing marketing communication preferences, to requesting account deletion. All of this can be done through your account settings or by contacting our support team.

You Have Full Rights Over Your Data

Data Access Right

Request a copy of all personal information we hold about you at any time.

Right to Rectification

Update or correct any inaccurate or incomplete information in our records.

Right to Erasure

Request deletion of your personal data, subject to legal retention obligations.

Right to Object

Object to the processing of your data for direct marketing purposes at any time without providing a reason.

Right to Withdraw Consent

Withdraw your consent for consent-based processing at any time without affecting prior processing.

JPDP Complaint Right

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection.

Related Questions Data Privacy

Absolutely not. coba8 has never sold, rented, or traded your personal information to any advertiser or data broker for commercial purposes. Your data is used solely for platform operations, account security, and legal compliance.

You may submit a data access request by emailing [email protected] with the subject line "Data Access Request". Please include your full name and registered account number. We will process your request within 21 business days after identity verification is complete.

Following account closure, data that is no longer required will be deleted within 30 days. However, financial records and KYC documents will be retained for the period prescribed by Malaysian law (between 5 and 7 years) before being permanently deleted.

coba8 does not store your full credit or debit card number, CVV, or PIN. All card transactions are processed through a PCI-DSS certified payment gateway. We only store encrypted payment tokens to facilitate future transactions.

Yes, you can unsubscribe from promotional emails at any time by clicking the "Unsubscribe" link at the bottom of any marketing email we send. You can also manage your communication preferences through your account settings or by contacting our support team.

Contact the coba8 support team immediately via 24/7 Live Chat or email [email protected]. We will freeze your account right away, investigate any suspicious activity, and help you regain secure access. Change your password and enable two-factor authentication (2FA) once your account is restored.
Important Note: This Privacy Policy forms part of the overall agreement between you and coba8. Please also read Terms and Conditions as well as Responsible Gaming Policy for a complete overview of your rights and responsibilities as a platform member.

Play with Confident, Your Data Is Protected

Coba8 combines world-class gaming experiences with robust data protection. Register now and enjoy a safe, fair wagering platform trusted by hundreds of thousands of members across Malaysia.

100% Data Protected
256-bit SSL Encryption
PDPA Compliance
24/7 Support
Bahasa Melayu