Privacy & Data Security

spa8 Privacy Policy

spa8 respects the privacy of every member. This policy clearly explains how we collect, process, store and protect your personal information when you use our platform.

Effective date: 1 January 2026
Malay & English
International licensing

spa8 Commitment to Your Privacy

We ensure that every piece of personal information you share is handled with a high level of security and transparency.

Layered Data Encryption

All your personal data and transaction information are protected using 256-bit SSL encryption technology. No third party can access your information without our authorisation.

Strict Access Controls

Only authorised staff may access your personal data, and only to the extent required for operational needs. Every access is logged for internal auditing purposes.

No Data Selling

spa8 does not sell, rent or disclose your personal information to third parties for marketing purposes. Your data belongs to you alone.

User Control Rights

You have the right to request a review, correction or deletion of your personal data at any time. Contact our support team and we will process your request promptly.

Licensing Compliance

spa8 operates under international licensing that binds us to strict data protection standards. All our privacy practices are subject to periodic review by regulatory bodies.

Policy Change Notifications

Any updates to this Privacy Policy will be communicated to you via email or in-account notification before they take effect. You will not miss any important changes.


This Privacy Policy is a legally binding document between you ("User") and spa8 ("Company", "we"). By registering for or using spa8 services, you agree to the terms set out in this document. Please read it carefully before using our platform.

1. Information Collected

spa8 collects various categories of personal information to ensure the services we offer can operate safely, efficiently and responsibly. Collecting this information forms part of our obligations under the international licensing framework we comply with.

The information we collect includes:

  • Personal identity information: full name, date of birth, identification card number (MyKad) or passport, nationality
  • Contact information: email address, mobile phone number, residential address
  • Financial information: bank account number (for withdrawal purposes), deposit and withdrawal records
  • Technical information: IP address, device type, operating system, web browser, and activity log data
  • Gaming activity information: betting history, game preferences, claimed bonus records
  • Information you share voluntarily through customer support forms or live chat

All information is collected on the basis of your explicit consent. We do not collect any personal information beyond what is required for current operational and legal needs.

2. How Data Is Used

The personal information you provide to us is used solely for legitimate purposes, namely:

  • Identity verification and the Know Your Customer (KYC) process required by regulatory bodies
  • Processing your deposits, withdrawals and account management
  • Detection and prevention of fraud, money laundering and unlawful activities
  • Delivery of 24/7 customer support services in Malay and English
  • Sending important notifications relating to your account, security updates and policy changes
  • Processing bonus claims and verifying promotion eligibility
  • Compliance with legal reporting requirements and valid court orders
  • Continuous improvement of the platform and user experience based on anonymised usage data

We do not use your data for any marketing purposes without your explicit prior consent. If you have consented to receive promotional communications, you may withdraw that consent at any time through your account settings.

3. Disclosure to Third Parties

spa8 may share your personal information with selected third parties in the following limited situations:

  • Payment service providers: processing deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX, ShopeePay and cryptocurrency requires necessary data sharing with the relevant payment processors.
  • Gaming software providers: gaming activity information required to ensure game integrity and resolve any technical disputes.
  • Regulatory bodies and legal authorities: we are required to disclose certain information upon receipt of an official request or valid court order.
  • Security and anti-fraud service providers: to maintain platform security and protect the interests of all our members.

In all of the above cases, disclosure is limited to only the information that is strictly necessary, and each third party is required to comply with strict confidentiality standards. spa8 does not sell your personal information to any party for commercial purposes.

4. Data Security

The security of your personal information is our priority. spa8 applies various technical and organisational measures to protect your data from unauthorised access, modification, disclosure or destruction:

  • 256-bit SSL encryption for all data transmissions between your browser and our servers
  • Password storage in an obfuscated format using modern hashing algorithms
  • Two-factor authentication (2FA) available for all member accounts
  • Continuous security monitoring and intrusion detection systems
  • Regular security reviews by independent auditors
  • Strict internal access control policy based on the principle of least privilege

Although we take all reasonable steps, no security system can guarantee absolute protection. We encourage you to also keep your account password secure and not share it with anyone.

5. Cookies and Tracking Technologies

spa8 uses cookies and similar tracking technologies to improve the user experience on our website. Cookies are small text files stored on your device that help us recognise you during return visits.

Types of cookies we use:

  • Essential cookies: required for basic website functions such as login sessions and security. These cookies cannot be disabled.
  • Performance cookies: help us understand how users interact with the website for improvement purposes. Data collected is anonymised.
  • Functionality cookies: store your preferences such as language and display settings for a more personalised experience.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some parts of our website.

6. Data Retention and Deletion

spa8 retains your personal information for as long as necessary to fulfil the purpose for which it was collected and to comply with applicable legal and regulatory requirements.

Generally, active account information will be retained for the duration your account remains active. Following account closure, certain records may need to be retained for a period specified by law for compliance, auditing and dispute resolution purposes.

You may request deletion of your personal data by contacting our support team. Such requests will be processed subject to any retention requirements mandated by applicable law.

7. Your Rights

As a spa8 user, you have the following rights regarding your personal data:

  • Right of access: you may request a copy of the personal information we hold about you.
  • Right of correction: you may request that we correct any information that is inaccurate or out of date.
  • Right of deletion: in certain circumstances, you may request that we delete your personal data.
  • Right to restrict processing: you can ask us to limit how we use your data in certain situations.
  • Right to object: you can object to the processing of your data for direct marketing purposes.
  • Right to data portability: you can request your data in a machine-readable format to be transferred to another service provider.

To exercise any of the above rights, please contact our customer support team, which operates 24/7 via live chat or email. We will process your request within a reasonable time.

8. Minor Accounts and Age Requirements

spa8 is an online betting and casino platform strictly restricted to individuals aged 21 and above only. We do not knowingly collect any personal information from individuals under the age of 21.

All account applicants are required to go through a strict age verification process during registration. If we detect that personal information of an individual below the specified age limit has been collected unintentionally, we will take immediate steps to delete that information and close the account in question.

If you are aware that someone under the age of 21 has created an account on our platform, please contact our support team immediately so that the appropriate action can be taken.

9. Changes to This Policy

spa8 reserves the right to modify this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or service expansion. Any changes made will be accompanied by a new effective date at the top of this document.

For material or significant changes, we will notify you via an in-account notification or the email registered with us before those changes take effect. Continued use of spa8 services after the updated policy's effective date indicates your acceptance of the new terms.

We encourage you to review this Privacy Policy periodically to ensure you are always aware of how we handle your personal information.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact the spa8 customer support team:

  • Live Chat: available 24/7 directly on the spa8 website in Malay and English
  • Email: [email protected]

We are committed to responding to all privacy-related enquiries professionally and within a reasonable time.


Questions About spa8 Privacy

Answers to the most commonly asked questions about your data protection and privacy at spa8.

During the registration process, spa8 collects basic information such as your full name, date of birth, identification card number (MyKad), email address, and mobile phone number. This information is required for identity verification, KYC compliance, and to keep our platform free from fraudulent activity.

spa8 only shares your personal information with selected third parties in limited situations — such as payment processors handling your deposits and withdrawals, or legal authorities when required by law. We do not sell or disclose your data for marketing purposes to any external party.

You can submit a data deletion request by contacting the spa8 customer support team via live chat or email. Requests will be processed within a reasonable time, subject to data retention requirements mandated by law. In some cases, certain records must be retained for compliance and auditing purposes.

spa8 uses 256-bit SSL encryption for all data transmissions, intrusion detection systems, two-factor authentication (2FA), and strict internal access controls. Security reviews are conducted regularly by independent auditors to ensure our data protection standards remain current.

Yes, you can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some parts of the spa8 website, including the login feature and user preference storage. Essential cookies required for site operation cannot be fully disabled.

Yes. All transactions via Touch 'n Go eWallet, DuitNow, FPX, ShopeePay and cryptocurrency are processed through encrypted and secure channels. spa8 does not store sensitive information such as your PIN number or e-wallet password. Every transaction is recorded and can be reviewed in your account history.

Get Started with Guaranteed Privacy

Register a spa8 account and enjoy a betting platform that puts your data security first. Minimum deposit RM30, 100% welcome bonus up to RM300, and 24/7 customer support always ready to assist you.

This service is for users aged 21 and above only. Bet responsibly.