Privacy Policy
How Natural8 Protects Your Data

Natural8 ("Natural8", "we", "us", "our") is committed to protecting the privacy and personal data of every individual ("User", "Player", "you") who accesses or uses the online gaming platform operated at natural8.cam ("Platform"). This Privacy Policy ("Policy") sets out in clear, formal terms how Natural8 collects, processes, stores, shares, and safeguards your personal data in connection with your use of the Platform and its associated services.

This Policy is issued in accordance with applicable data protection principles and constitutes a binding part of the agreement between you and Natural8, together with our Terms & Conditions and Responsible Gambling Policy. By registering an account, accessing the Platform, or otherwise interacting with Natural8's services, you confirm your acknowledgment and acceptance of the practices described in this Policy.

Natural8 primarily serves verified adult players aged 21 and above located in Malaysia, including users from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations throughout the country. All financial transactions on the Platform are processed in Malaysian Ringgit (MYR) via local payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian bank transfers.

The following terms have the meanings set out below wherever they appear in this Privacy Policy:

Natural8 collects only the Personal Data that is necessary and proportionate to the purposes described in this Policy. The categories of data we collect are as follows:

Natural8 collects Personal Data through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or opting into a promotion.
• Automated Technical Collection: Data collected automatically as you use the Platform, including IP address, device identifiers, session data, and cookie-based tracking. This data is collected by our systems as a standard part of platform operation.
• Payment Providers: When you initiate a transaction via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, or Public Bank, the relevant payment provider confirms transaction status and reference data to Natural8's payment gateway. We do not receive or store your full card numbers or e-wallet PINs.
• Identity Verification Services: Where Natural8 engages a third-party KYC or AML service provider, that provider may return identity verification results (pass/fail/refer) to Natural8 following document review. The underlying identification documents are processed in accordance with the provider's own privacy policy and applicable law.
• Public Sources: In limited circumstances related to AML compliance or fraud prevention, Natural8 may cross-reference publicly available information, such as politically exposed persons (PEP) databases or sanctions lists, with account data.

Natural8 processes your Personal Data only for the following specified, explicit, and legitimate purposes:

• Account Administration: To create, maintain, and manage your Natural8 account, including authentication, account settings, and communication of account-related updates.
• Service Delivery: To enable access to games, live casino, sports betting, and other features available on the Platform, and to process all associated transactions in MYR.
• Identity & Age Verification (KYC): To verify that you are a real person, that you are aged 21 or above, and that your identity matches the payment methods you have registered. This is a legal and regulatory obligation.
• Payment Processing: To facilitate deposits and withdrawals via supported Malaysian payment methods, and to maintain an accurate transaction history for your account.
• Fraud Prevention & AML Compliance: To monitor transactions for suspicious patterns, screen against sanctions and PEP lists, and comply with anti-money laundering obligations applicable to the Platform's operations.
• Responsible Gambling: To implement and monitor voluntary limits (deposit limits, session limits, self-exclusion) requested by players, and to identify patterns of behaviour that may indicate problem gambling requiring intervention.
• Customer Support: To investigate and respond to queries, complaints, disputes, or technical issues submitted via our 24/7 support channel.
• Platform Improvement: To analyse aggregate usage data, identify technical issues, and improve the performance, stability, and user experience of the Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant updates — but only where you have expressly opted in to receive such communications. You may withdraw consent at any time.
• Legal & Regulatory Compliance: To comply with applicable laws, regulatory requirements, court orders, and lawful requests from competent authorities.

Natural8 relies on the following legal bases for processing your Personal Data, depending on the specific processing activity concerned:

• Contractual Necessity: Processing required to perform our obligations under the agreement with you — including account management, payment processing, KYC verification, and service delivery — is carried out on the basis of contractual necessity.
• Legal Obligation: Certain processing activities — including AML monitoring, identity verification, record-keeping, and responding to regulatory or law enforcement requests — are required by applicable law and are processed on that basis.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, and internal analytics is based on Natural8's legitimate interest in operating a secure, well-functioning gaming environment, provided that such interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications and for the use of non-essential cookies is carried out on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Natural8 does not sell, rent, or trade your Personal Data to any third party. We share Personal Data only in the following strictly limited circumstances:

• Payment Service Providers: Personal Data necessary to process deposits and withdrawals is shared with the relevant payment processor (e.g., FPX gateway operators, e-wallet providers, cryptocurrency payment rails). These providers act as Data Processors under binding data processing agreements.
• KYC & AML Service Providers: Identity documents and verification data may be shared with licensed third-party identity verification providers engaged to conduct KYC and AML checks on Natural8's behalf.
• Game Studios & Technology Partners: Certain technical identifiers and session data may be shared with licensed game studios or platform technology providers to enable gameplay, resolve disputes, and investigate game integrity issues. No directly identifying Personal Data (such as your name or bank account details) is shared with game studios.
• Legal & Regulatory Authorities: Natural8 will disclose Personal Data to courts, regulatory bodies, law enforcement agencies, or other competent authorities where required to do so by applicable law, court order, or lawful regulatory direction.
• Professional Advisors: In the context of legal proceedings, audits, or regulatory investigations, Personal Data may be disclosed to Natural8's legal counsel, auditors, or insurers under obligations of professional confidentiality.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of Natural8's business, Personal Data held at that time may be transferred to the successor entity, subject to equivalent privacy protections being maintained.

Natural8 retains your Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law.

• Active Account Data: Retained for the duration of your account's existence on the Platform plus a minimum period following closure, as required by applicable AML and gaming regulations.
• Transaction Records: Financial transaction data, including deposit and withdrawal history, is retained for a minimum of seven (7) years from the date of each transaction in compliance with anti-money laundering record-keeping obligations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the end of the customer relationship, in accordance with regulatory requirements.
• Customer Support Records: Correspondence and support ticket records are retained for a period of three (3) years following closure of each ticket, unless longer retention is warranted by an ongoing dispute or legal matter.
• Marketing Data: Where you have opted in to marketing communications, your marketing preference data is retained until you withdraw consent or for up to two (2) years of account inactivity, whichever is earlier.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that renders it irrecoverable. Anonymised or aggregated data that no longer identifies any individual is not subject to this Policy and may be retained for statistical or analytical purposes.

Natural8 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit Secure Sockets Layer (SSL) encryption for all data transmitted between your device and the Natural8 Platform.
• Encryption of sensitive data at rest, including KYC documents and financial records, using industry-standard encryption algorithms.
• Access controls ensuring that Personal Data is accessible only to Natural8 personnel who require it for legitimate operational purposes, on a strict need-to-know basis.
• Multi-factor authentication requirements for internal system access by Natural8 staff handling personal data.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent security professionals.
• Incident response procedures enabling Natural8 to detect, investigate, contain, and report data security incidents in a timely manner.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is entirely immune to risk. You are responsible for maintaining the confidentiality of your account credentials. If you believe your account has been compromised, you must contact our support team immediately.

Natural8 uses cookies and similar tracking technologies on the Platform to support essential functionality and to improve the user experience. The categories of cookies used are as follows:

• Strictly Necessary Cookies: These cookies are required for the Platform to function and cannot be disabled. They support session management, authentication state, security features, and basic platform functionality. No consent is required for strictly necessary cookies.
• Analytical / Performance Cookies: These cookies collect aggregate, anonymised data about how users interact with the Platform — pages visited, session duration, error encounters. This data is used to improve Platform performance and user experience. These cookies are activated only where you have provided consent.
• Functional Cookies: These cookies remember your preferences such as language settings, display options, and previously used payment methods to provide a more personalised experience. Consent is required for functional cookies.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing your account or completing transactions. Natural8 does not use advertising or third-party tracking cookies for the purpose of profiling users for targeted advertising.

As a user whose Personal Data is processed by Natural8, you hold the following rights in respect of that data. Natural8 is committed to honouring these rights promptly and without undue burden.

To exercise any of the above rights, please contact Natural8's support team. We will verify your identity before processing any request and will respond within thirty (30) calendar days. In complex cases, we may extend this period by a further thirty (30) days and will notify you accordingly.

The Natural8 Platform is strictly for use by persons aged 21 years or above. Natural8 does not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Age verification is conducted as a mandatory part of the KYC process, and any account found to have been registered by or on behalf of a person below the minimum age will be immediately suspended.

If Natural8 becomes aware that Personal Data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has accessed Natural8 or that their data has been submitted to us, please contact our support team immediately.

The Natural8 Platform does not contain links to third-party websites for general browsing or promotional purposes. However, during the course of payment processing, you may be redirected to a third-party payment provider's interface (such as a bank's FPX page or Touch 'n Go eWallet's authorisation screen) to complete a transaction. These third-party interfaces are subject to their own privacy policies and are not governed by this Policy.

Natural8 is not responsible for the privacy practices or content of any third-party payment interfaces or services accessed during the course of a transaction. You are encouraged to review the privacy policies of any third-party payment services you use in connection with Natural8.

Natural8 reserves the right to amend, update, or replace this Privacy Policy at any time. Material changes — those that materially affect your rights or Natural8's data processing practices — will be communicated to registered users via email to the address on file, or via a prominent notice on the Platform, no less than seven (7) calendar days before the change takes effect.

Non-material amendments, such as typographical corrections or clarifications that do not alter the substantive content of this Policy, may be made without specific advance notice. The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

For any queries, requests, or complaints related to this Privacy Policy, the processing of your Personal Data, or the exercise of your data rights, please contact Natural8's support team using the details below. All privacy-related requests are handled with strict confidentiality and prioritised accordingly.

When submitting a data rights request, please include your registered email address and a brief description of your request so that we can verify your identity efficiently and process your request without delay. You may be asked to provide additional verification before sensitive account data is disclosed or deleted.