coba8 is committed to safeguarding the personal data of every member on our platform. This Privacy Policy explains what information we collect, why we collect it, how it is used, and the rights you have over your data — in plain, straightforward English.
These cards highlight the most important aspects of our data practices. The full legal text in the sections below governs in all cases.
All data transmitted between your device and the coba8 platform is encrypted using industry-standard TLS/SSL protocols. Your personal information and payment details are never transmitted in plain text.
coba8 does not sell, rent, or trade your personal data to third parties for marketing purposes. Data is only shared with regulated service providers who process data strictly on our behalf and under binding agreements.
Personal data is stored on access-controlled servers with multi-layer security. We apply the principle of data minimisation — we only collect and retain data that is genuinely necessary for the purposes described in this policy.
You have the right to access, correct, port, restrict, or request deletion of your personal data at any time, subject to our legal and regulatory retention obligations. Submit a request to our support team and we will respond within 30 days.
We use cookies and similar tracking technologies strictly for platform functionality, session management, analytics, and fraud prevention. We do not use tracking cookies to build advertising profiles or share behavioural data with ad networks.
Our data practices are designed to align with applicable data protection laws and AML/KYC regulatory requirements. All data processing activities are documented and reviewed regularly by our compliance team.
This Privacy Policy ("Policy") issued by coba8 ("coba8", "we", "us", "our") and applies to all personal data collected, processed, and held by coba8 in connection with your use of the coba8 website at https://coba8.cam and all associated services (collectively, the "Platform").
coba8 is an online gaming and sports betting platform serving members primarily located in Malaysia. As a data controller, coba8 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable data protection legislation.
We understand that privacy matters deeply to our members — whether you are registering from Kuala Lumpur, placing a live bet in Penang, or checking your account from Johor Bahru. This Policy is designed to give you clear, honest information about our data practices so you can make informed decisions about the information you share with us.
By accessing the Platform or registering an Account, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together govern your use of the coba8 Platform.
Note: This Policy applies to all current and former members of coba8, as well as visitors to the Platform who have not registered an Account. If you do not agree with any aspect of this Policy, please discontinue your use of the Platform.
For the purposes of this Policy, the following terms shall have the meanings ascribed to them below:
coba8 collects and processes the following categories of Personal Data in connection with the operation of the Platform and the provision of our Services:
We do not knowingly collect sensitive categories of Personal Data (such as biometric data, health data, or political opinions) except where strictly required for KYC verification purposes (e.g., facial recognition checks as part of identity document verification).
coba8 collects your Personal Data through the following means:
When you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, submit a complaint, or participate in a promotion, you provide Personal Data directly to us. The information collected at each touchpoint is described in the relevant section of these Terms or the applicable registration flow.
When you access the Platform, our servers automatically collect technical data including your IP address, browser characteristics, device identifiers, referring URLs, and interaction logs. This data is collected via server logs, Cookies, and similar tracking technologies as described in Section 10of this Policy.
We may receive Personal Data about you from third parties where permitted by applicable law, including: (a) payment processing partners (e.g., FPX gateway providers, e-wallet operators such as Touch 'n Go, Boost, or GrabPay) confirming transaction status; (b) identity verification service providers assisting with KYC checks; and (c) fraud prevention databases or sanctions screening services where we are required to conduct such checks under our AML obligations.
coba8 processes your Personal Data for the following specific and legitimate purposes:
Important: coba8 does not engage in automated decision-making that produces legal or similarly significant effects on Members, except where such processing is necessary for fraud detection and prevention, in which case you retain the right to request human review of any automated decision affecting your Account.
coba8 processes your Personal Data on the following legal bases, as applicable to each processing activity:
coba8 does not sell, rent, or otherwise transfer your Personal Data to third parties for their own commercial or marketing purposes. Your data may be disclosed to the following categories of recipients strictly in connection with the purposes described in this Policy:
We engage trusted third-party service providers who process Personal Data on our behalf under binding data processing agreements, including: payment gateway operators (FPX, DuitNow, and e-wallet processors such as Touch 'n Go, Boost, and GrabPay); identity verification and KYC service providers; fraud detection and AML screening platforms; cloud hosting and data storage providers; customer relationship management (CRM) systems; and live chat support platforms.
coba8 may disclose Personal Data to competent regulatory bodies, law enforcement agencies, financial intelligence units, or courts of law where required by applicable legislation, lawful court order, or regulatory instruction. We will, where legally permissible, notify you of such disclosures in advance.
In the event of a merger, acquisition, restructuring, or sale of all or part of coba8's business, Personal Data held by coba8 may be transferred to the acquiring entity as part of the transaction, subject to the same data protection obligations as set out in this Policy. We will notify affected Members prior to any such transfer taking effect.
We require all third parties to whom we disclose your Personal Data to maintain appropriate security standards and to process that data only in accordance with our documented instructions and applicable data protection law.
coba8 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:
At the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data disposal procedures.
coba8 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
Whilst coba8 takes all reasonable precautions to protect your data, no method of electronic transmission or storage is completely secure. In the event of a data breach affecting your rights and freedoms, we will notify you and relevant authorities in accordance with applicable legal requirements.
coba8 uses cookies and similar tracking technologies on the Platform for the following limited purposes:
These cookies are essential for the Platform to function and cannot be disabled. They include session cookies that maintain your logged-in state, CSRF protection tokens that prevent cross-site request forgery attacks, and load-balancing cookies that ensure consistent performance across our server infrastructure.
These cookies remember your preferences (such as language selection and display settings) to provide a personalised experience on the Platform. Disabling these cookies may affect certain non-essential features but will not prevent you from accessing the core Services.
We use first-party analytics tools to collect anonymised usage data — including pages visited, features used, and session duration — solely for the purpose of improving Platform performance and user experience. We do not share this analytics data with third-party advertising networks.
These cookies support our fraud detection and account security systems by identifying anomalous session patterns, tracking device fingerprints for account verification purposes, and supporting risk scoring models that protect Members from unauthorised account access.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing the Platform as they are required for core functionality. For detailed information on which specific cookies are set by the Platform, please contact our support team.
As a Data Subject, you have the following rights in relation to your Personal Data held by coba8. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and we will respond within 30 calendar days:
| Right | What It Means for You |
|---|---|
| Right of Access | You may request a copy of all Personal Data we hold about you, together with information about how it is processed, where it is stored, and who has been shared with. |
| Right to Rectification | If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly. Identity-critical corrections may require supporting documentation. |
| Right to Erasure | You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected — subject to our legal and regulatory retention obligations, which may require us to retain certain data regardless of your request. |
| Right to Restriction | You may request that we temporarily restrict the processing of your Personal Data while a dispute about accuracy or a complaint about legitimate interests is being resolved. |
| Right to Data Portability | You may request a copy of Personal Data you have provided to us in a structured, machine-readable format (such as CSV or JSON) for the purpose of transfering it to another service provider. |
| Right to Object | You may object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. |
| Right to Withdraw Consent | Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal. |
We will not charge a fee for exercising your rights in ordinary circumstances. Where requests are manifestly unfounded, repetitive, or excessive, we reserve the right to charge a reasonable administrative fee or to decline the request, with written justification provided to you.
The coba8 Platform is strictly intended for individuals who are 21 years of age or older. coba8 does not knowingly collect, process, or retain Personal Data from persons under the age of 21. Our KYC verification process is specifically designed to confirm that every registered Member meets this minimum age requirement before accessing any Services.
In the event that coba8 discovers that Personal Data has been collected from a person under the age of 21, we will take immediate steps to: (a) suspend and permanently close the associated Account; (b) refund any Real Money Balance to the payment method from which funds originated; and (c) securely delete all Personal Data associated with the minor's Account as soon as practicable, subject to any applicable legal retention obligations.
Parents and Guardians: If you believe a person under 21 years of age has registered an Account on coba8, please contact us immediately at [email protected]. We treat all underage access reports as urgent priority matters and will act swiftly to investigate and resolve the situation.
Some of the third-party service providers engaged by coba8 may process Personal Data in countries outside of Malaysia. Where such transfers occur, coba8 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that required under applicable Malaysian data protection law, including:
For information about the specific safeguards applied to any particular international transfer of your Personal Data, please contact us at [email protected].
coba8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will provide advance notice by posting the updated Policy on the Platform and, where practicable, notifying registered Members via the email address associated with their Account.
The "Last updated" date at the top of this page reflects the effective date of the current version. We encourage you to review this Policy periodically. Your continued use of the Platform following the posting of an updated Policy constitutes your acknowledgement of the changes. If you disagree with any amendments, please cease using the Platform and contact us to close your Account.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data by coba8, please contact our Data Protection team through any of the following channels:
coba8 will acknowledge all privacy-related requests within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, with prior notification to you.
If you are dissatisfied with our handling of your Personal Data or our response to a data rights request, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. We request that you contact coba8 directly in the first instance to allow us the opportunity to address your concerns before escalating to a supervisory authority.
We take all privacy complaints seriously and are committed to resolving them fairly and promptly. Our goal is to be the most trusted gaming platform for Malaysian players — and that trust begins with how we handle your personal information.
Our support team is available around the clock to help you exercise your data rights, understand our privacy practices, or submit a formal data request. We are here to help.