Privacy Policy BK8MY — Your Privacy Is Our Priority

BK8MY operates with full commitment to personal data protection in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We recognise that every piece of information you share with us — whether your name, phone number, address, or financial details — belongs to you, and we are merely its custodian.

As an online betting platform serving exclusively Malaysian players, bk8my collecting your personal data for clearly defined purposes, storing it securely, and using it only for purposes to which you have given consent. We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.

The core principles that guide how we handle your data:

• Data Minimisation: We only collect data that is strictly necessary to provide you with bk8my services
• Transparency: We are transparent with you about what data we collect and why
• Security: We invest in the latest security technology to safeguard your data
• User Controls: You have the right to access, correct, and request the deletion of your data

To provide a complete and secure gaming experience on bk8my, we need to collect certain categories of personal information. Below is a full list of the data we collect and the purposes for which it is used:

Data We Do NOT Collect

Bk8my does not collect PIN numbers or passwords in plain text, biometric information, or any data that is not relevant to the provision of our services to you.

Every piece of data we collect has a clear and legitimate purpose. Bk8my uses your personal information solely for the following purposes, and for no other purpose without your consent:

Core Operational Purposes

• Account Management: Creating, verifying, and managing your bk8my account
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX; as well as withdrawals of winnings to your bank account or e-wallet
• Identity Verification (KYC): To verify that you are the authorised account holder and to comply with legal requirements under Anti-Money Laundering (AML) regulations
• Gaming Services: Providing access to slots, live casino, EPL and Malaysia Super League football betting, badminton, e-sports, jackpots, and poker
• Customer Support: Resolving your enquiries, complaints, and technical issues
• Platform Security: Detecting and preventing fraud, hacking, and abuse

Secondary Purposes (With Your Consent)

• Sending information about relevant bk8my promotions, bonuses, and offers
• Conducting customer satisfaction surveys to improve our services
• Analysing usage patterns to develop better new features

Bk8my does not sell your personal data. No data trading. Full stop. However, in the course of operating the platform, there are specific situations where your information needs to be shared with certain parties to enable bk8my's services to function properly.

Parties That May Receive Your Data

• Payment Processors: Licensed payment gateways that process your deposits and withdrawals via FPX, Touch 'n Go, GrabPay, DuitNow, and more — they are bound by strict confidentiality agreements
• Game Providers: Gaming software providers that supply slots, live casino, and other games — only data necessary for game operation is shared
• Regulatory Body: Licensing authorities and regulators where required by law
• Legal Authority: Police, courts, or government agencies where a valid court order or legal requirement exists
• Technical Vendors: Cloud and security service providers that help us operate bk8my's infrastructure safely

Your data security is an investment — not an expense — for bk8my. We implement multiple layers of technical and organisational safeguards to ensure your personal information remains secure at all times.

Technical Security Layers

• 256-bit SSL/TLS Encryption: All data transmitted between your device and bk8my's servers is encrypted using industry-standard protocols
• AES-256 Encryption: Sensitive data is stored in encrypted form on our servers
• Password Hashing: Your password is never stored in plain text — only a one-way hash value that cannot be decrypted
• Two-Factor Authentication (2FA): An additional layer of security available to all bk8my accounts
• 24/7 Monitoring: A round-the-clock threat detection system that identifies suspicious activity
• Network Isolation: Databases containing personal information are isolated from public networks

Organisational Measures

• Access to members' personal data is restricted to bk8my staff who genuinely require it to carry out their duties
• All staff who handle personal data undergo regular data security training
• Internal security audits are conducted regularly to ensure procedural compliance

Bk8my retaining your personal data only for as long as necessary for the purposes stated in this policy, or as required under applicable Malaysian law.

• Active Account Data: For as long as your account remains active on the bk8my platform
• Financial Records: Minimum 7 years after the transaction — in line with Malaysian accounting and tax legislation
• KYC Data: 5 years after account closure, in accordance with the requirements of the Anti-Money Laundering Act 2001
• Communication Logs: 2 years for dispute resolution and customer support purposes
• Technical Data (logs): 90 days for security and debugging purposes

When data is no longer needed and there is no legal obligation to retain it, bk8my will securely delete or anonymise it using approved procedures.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several rights regarding your personal data held by bk8my. We respect these rights in full.

Platform bk8my uses cookies and similar tracking technologies to ensure the platform functions properly, personalise your experience, and analyse usage patterns for improvement purposes.

Types of Cookies We Use

• Essential Cookies: Required for the bk8my platform to function — including login session cookies and security cookies. These cannot be disabled.
• Functional Cookies: Remembering your preferences such as language, display settings, and login details for your convenience
• Analytics Cookies: Helping us understand how members use the bk8my platform so we can continuously improve it
• Performance Cookies: Collects data on page load times and platform performance for technical improvement purposes

Managing Your Cookie Preferences

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the bk8my platform. For more details on how to manage cookies, refer to your web browser's help documentation.

Platform bk8my is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors or underage individuals.

All prospective members are required to verify their age during the registration process. Should bk8my discover that a minor's personal data has been inadvertently collected, we will take immediate steps to delete that information and close the account in question.

Bk8my may update this Privacy Policy from time to time to reflect changes in law, technology, or the way we conduct our business. Any amendments will be published on this page along with a revised "last updated" date.

For material amendments — that is, significant changes that affect how we use your data — bk8my will send a notification via:

• An email to the address registered to your bk8my account
• An in-platform notification the next time you log in
• Updates to this page will be made with reasonable prior notice

Your continued use of the bk8my platform after any amendments are published constitutes your acceptance of the revised terms. If you do not agree with the changes, you have the right to close your account by contacting our support team.

If you have any questions or concerns, or wish to exercise any of your rights under this Privacy Policy, you may contact bk8my through the following channels. We are committed to responding to all privacy-related inquiries within 14 business days.