BK8 Betting Malaysia Privacy Policy – How We Protect Your Personal Data

1. Introduction

bk8 betting (referred to as "we", "the platform", or "bk8 betting" throughout this document) is fully committed to protecting the privacy of every player who registers and uses our services. This Privacy Policy is provided to clearly and transparently explain how we handle your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

When you register an account with bk8 betting, using any part of our platform — whether playing slots, Live Casino, progressive jackpots, table games, or placing Sports Betting wagers on the Liga Super Malaysia and EPL — you agree to the data collection and usage practices described in this Privacy Policy. If you do not agree with any part of this policy, please contact our support team before continuing to use the platform.

2. Personal Data We Collect

bk8 betting collects various types of personal information depending on how you interact with our platform. Below is a detailed breakdown of the data categories we collect:

A. Information You Provide Directly

• Full name as it appears on your MyKad or valid Malaysian passport.
• Active email address used for account communications.
• Malaysian mobile phone number.
• Date of birth (for age verification).
• Encrypted passwords — we cannot read your password in its original form.
• Identity verification documents (MyKad or passport) submitted during the KYC process.
• Details of payment methods used — Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u, CIMB Clicks, and other participating banks.

B. Automatically Collected Information

• IP address and location data (country and state only, not precise location).
• Device type, operating system, and web browser version in use.
• Activity log data — pages visited, session duration, games played.
• Financial transaction records including deposits, withdrawals and betting history.
• Cookie data and similar tracking technologies (explained further in Section 7).

3. How Personal Data Is Used

bk8 betting use the personal data collected solely for lawful and relevant purposes. The following is a full list of the purposes for which your data is used:

• Service Provision — Processes account registration, verifies identity, handles deposits and withdrawals via methods such as Touch 'n Go, GrabPay and FPX, and provides access to all games and services on the platform.
• Account Security — Detecting suspicious login activity, preventing unauthorised access to player accounts, and sending security alerts when necessary.
• Legal Compliance — Fulfilling the KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements set by the relevant regulatory authorities, including obligations under Malaysia's PDPA.
• Service Improvement — Analysing platform usage patterns in aggregate (not at an individual level) to understand the most popular games among Malaysian players, identify technical issues, and plan improvements.
• Service Communications — Sends account-related notifications including deposit confirmations, withdrawal status updates, session expiry reminders, and important security alerts.
• Responsible Gaming — Monitoring gameplay patterns to identify players who may need responsible gambling support, and ensuring that deposit limit and session limit tools are functioning correctly.
• Marketing Communications — Promotional information and exclusive offers are sent to players who have consented to receive such communications. You may unsubscribe from promotional emails at any time via the unsubscribe link.

bk8 betting will not use your personal data for any purpose not stated above without first obtaining your consent.

4. Sharing Data with Third Parties

bk8 betting does not sell, rent, or transfer player personal data to third parties for their own commercial purposes. However, there are limited circumstances in which we may need to share certain information with selected third parties:

• Payment Service Providers — Required transaction information is shared with payment processors to facilitate secure deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX. All payment processors are bound by strict confidentiality agreements and industry data security standards.
• Game Providers — Session information required to run games is shared with software providers such as Evolution, Pragmatic Play, Playtech and other providers that supply games on the platform bk8 betting. This data is limited to what is strictly necessary for gaming operations only.
• Regulatory Body — Information required to meet legal obligations, including AML and KYC requirements, may need to be shared with the relevant authorities upon lawful request.
• Security Providers — Companies providing fraud detection and cybersecurity services may receive the technical data necessary to identify and prevent unlawful activity on the platform.

5. Personal Data Security

bk8 betting implement comprehensive technical and organisational security measures to protect players' personal data from unauthorised access, disclosure, alteration, or destruction. The key security measures we employ include:

• Data Encryption in Transit — All communications between your browser and the bk8 betting servers are protected by TLS 1.3 protocol with a valid 256-bit SSL certificate.
• Data Encryption at Rest — Sensitive information such as passwords (stored as irreversible hashes), card numbers and financial details are stored encrypted using AES-256.
• Role-Based Access Control — Access to player data within our internal systems is restricted based on each staff member's job requirements. No single staff member has full access to all data.
• 24/7 Security Monitoring — An automated monitoring system operates continuously to detect any anomalies or unauthorised access attempts within our systems.
• Regular Security Audits — Penetration testing and independent security audits are conducted on a regular basis to identify and address any vulnerabilities before they can be exploited.
• Two-Factor Authentication — Players are encouraged to enable two-factor authentication (2FA) for an added layer of protection that prevents unauthorised access even if your password is compromised.

While we take all reasonable steps to protect your data, no security system can be guaranteed to be 100% secure. In the event of a data security breach that affects your personal information, bk8 betting will notify you within the timeframe required by applicable law and take immediate action to address the situation.

6. Data Retention Period

bk8 betting retain your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable laws and regulatory obligations. The following are general data retention guidelines by data category:

• Active Account Data — For as long as your account remains active on the bk8 betting platform, your core account data will be retained to enable continued delivery of our services.
• Financial Transaction Records — Retained for a minimum of 7 years from the transaction date, in line with Malaysian accounting and AML compliance requirements.
• KYC Documents — Retained for the duration of the active account period plus 5 years following account closure, in accordance with applicable legal requirements.
• System and Activity Log Records — Retained for 12 months for security purposes and technical dispute resolution.
• Support Communication Data — Communication records with the customer support team are retained for 3 years for reference and service improvement purposes.

Once the relevant retention period has ended, your personal data will be securely deleted or anonymised so that it can no longer be linked to any specific individual. Should you close your account at bk8 betting, we will observe the stipulated retention period before permanently deleting your data.

7. Cookies & Tracking Technologies

Platform bk8 betting uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform performance. The following are the types of cookies we use:

• Essential Cookies (Required) — Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting your ability to use the platform.
• Preference Cookies — Saves your preferences such as language, display format, and other settings to deliver a more personalised experience.
• Analytics Cookies — Helps us understand how players use the platform — which pages are visited most, how long they spend on the platform, and where they typically end their sessions. This data is used in aggregate form and cannot be traced back to any individual.
• Security Cookies — Helps detect and prevent fraudulent activity by identifying unusual access patterns.

You can manage your cookie settings through your web browser settings. Please note, however, that disabling essential cookies may affect certain functionality on the platform. bk8 betting. For more information on managing cookies in your browser, refer to the help guide for the browser you are using.

8. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the data protection principles we uphold, you have the following rights regarding your personal data held by bk8 betting:

To submit any request relating to the rights listed above, please email privacy@bk8betting.com with the subject line "Data Subject Rights Request", including your full name, account number and details of your request. bk8 betting will respond within 30 calendar days from the date the request is received.

9. Children's Data

Platform bk8 betting is strictly limited to individuals aged 18 and above. We do not knowingly collect or process personal data from minors. Should we become aware that data has been collected from anyone under 18, we will take immediate steps to delete that data and close the account in question.

10. Changes to the Privacy Policy

bk8 betting reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legislative changes, or new regulatory requirements. Any changes will be published on this page, with the latest revision date noted at the top of the document.

For significant changes to how we process your personal data, we will send a notice to the email address registered to your account at least 14 days before the changes take effect. Your continued use of the platform bk8 betting after the changes take effect will be considered acceptance of the updated policy.

11. How to Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how bk8 betting handle your personal data, please contact us through the following channels:

• Privacy Email (For Data Protection Enquiries Only): privacy@bk8betting.com
• General Support Email: support@bk8betting.com
• Live Chat: Available 24/7 via the chat icon at the bottom corner of the bk8 betting website

Our Data Protection Officer (DPO) team handles all privacy-related requests with high priority and will respond within 30 calendar days. If you are not satisfied with the response provided, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant supervisory authority.

We take every privacy-related enquiry and complaint seriously. Our vision bk8 betting is to be the most trusted online entertainment platform in Malaysia — and that trust starts with how we handle the personal data of every player who places their confidence in us.