BK8 Casino Privacy Policy – User Data Protection

At bk8 casino, we understand that your trust in us depends not only on game quality or withdrawal speed, but also on how we handle your personal information. This Privacy Policy is written in plain language to ensure you truly understand what happens with your data – from the moment you register through every login and transaction.

This document details the types of data we collect, the purposes for which it is used, how we protect it, and your rights as the data owner. We comply with Malaysia's Personal Data Protection Act (PDPA) and international standards for responsible user data management.

Bk8 casino collects your personal data through several different channels, depending on how you interact with our platform. The following are the main categories of information we collect:

a) Identity & Account Information

• Full name as it appears on a valid identity document.
• Date of birth for minimum age verification of 18 years.
• An active email address and mobile phone number for communication and account security.
• Passwords stored using one-way encryption (we do not store passwords in plaintext).
• The username or unique ID you chose during registration.

b) KYC (Know Your Customer) Information

• A copy of your identity card (MyKad), passport or other valid identification document.
• Proof of address such as a recent utility bill or bank statement.
• Financial information such as bank account numbers for Withdrawal purposes.
• Source of funds documentation when required by AML (Anti-Money Laundering) requirements.

c) Usage & Technical Information

• IP address, browser type, operating system, and device information.
• Access log data including pages visited, session duration, and in-platform actions.
• General geolocation information (state/country) for permitted region verification.
• Cookies and similar tracking technologies for an improved user experience.

d) Transaction Information

• Deposit and withdrawal history including payment methods used.
• Wagering activity records for responsible gaming and compliance purposes.
• Digital wallet account information such as Touch 'n Go eWallet, GrabPay, or Boost if used.

The data we collect is used exclusively for legitimate and transparent purposes. We do not use your data for any other purpose without obtaining your consent beforehand. The following are the primary purposes of data use:

Purpose of Use	Data Type	Legal Basis
Identity verification & KYC	Identity, KYC	Legal Obligation
Account management & login	Identity, Technical	Contractual Agreement
Deposit & Withdrawal processing	Finance & Transactions	Contractual Agreement
Fraud prevention & AML	All categories	Legitimate Interest
Customer support & communications	Identity, Usage	Contractual Agreement
Platform improvement & analytics	Technical (anonymous)	Legitimate Interest
Marketing communications (opt-out available)	Identity, Preferences	Consent
Responsible gaming & monitoring	Transactions, Usage	Public Interest

Bk8 casino takes great care regarding data sharing and only does so where it is genuinely necessary. Your data is not sold, rented or transferred for third-party marketing purposes. We only share data in the following situations:

• Payment Service Providers: Required transaction information is shared with registered and licensed payment processors such as FPX, Touch 'n Go eWallet, GrabPay, Boost, and licensed banks in Malaysia. They are subject to their own privacy policies and security standards.
• Game Software Providers: Game session information may be shared with game software providers to ensure game integrity and the resolution of any disputes.
• Authorities & Regulatory Bodies: We are required to disclose certain information when lawfully requested by law enforcement authorities, courts, or regulatory bodies with jurisdiction.
• Cloud Services & Infrastructure: Technical infrastructure providers such as carefully selected cloud server services, subject to strict data protection agreements.
• Independent Auditors & Verifiers: Independent audit firms verifying that our operations comply with licensing requirements and industry standards may access limited data within the scope of their work.

Every third party that works with bk8 casino is required to sign a legally binding data protection agreement and comply with security standards equal to or exceeding our own.

The bk8 casino website uses cookies and similar technologies to enhance the user experience, secure login sessions, and understand how users interact with our platform. The following are the types of cookies we use:

• Essential Cookies: Required for basic website functions such as login session verification, security, and navigation. These cookies cannot be disabled as the platform cannot function properly without them.
• Performance Cookies: Collects anonymous information on how users use the website to help us identify areas for improvement.
• Functional Cookies: Saves your preferences such as language, theme, and other settings to personalise your experience on future visits.
• Analytics Cookies: Used to understand aggregate usage patterns for product improvement purposes. This data is processed anonymously.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the full functionality of the bk8 casino website.

Bk8 casino retains your personal data only for as long as it is necessary for the purposes described in this privacy policy or as required by applicable law. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account is active and for an additional period following account closure as required by law.
• Financial Transaction Records: Retained for at least seven years in accordance with applicable tax and AML legal requirements in Malaysia.
• KYC Documents: Retained for at least five years after the business relationship ends, or as required by the relevant regulatory authority.
• Security & Technical Logs: Retained for 90 days for security incident investigation and fraud detection purposes.
• Support Communication Data: Retained for three years for reference and service quality improvement.

Once the retention period has expired and there is no binding legal requirement, your data will be securely deleted or anonymised using procedures that meet internationally adopted information security standards.

We continuously invest in the latest cybersecurity infrastructure to keep your data protected at all times. Key security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Two-factor authentication (2FA) for all user accounts and internal staff access.
• Intrusion detection (IDS) and intrusion prevention (IPS) systems operating 24/7.
• Segregation of sensitive data in protected environments with strict role-based access controls.
• Periodic security audits by accredited independent cybersecurity firms.
• A comprehensive incident response plan to address any data breaches swiftly and transparently.
• Mandatory information security training for all staff with access to user data.

Under Malaysia's Personal Data Protection Act (PDPA) and the bk8 casino privacy policy, you have the following rights regarding your personal data:

To exercise any of the above rights, you may contact our Data Protection team via live chat or our support email. We will process your request within 30 working days. For complex or large-scale requests, this period may be extended to up to 60 days, with prior notice to you.

Please note that certain requests may be limited by legal requirements or contractual obligations. For example, we are unable to delete financial transaction records that must be retained under Malaysia's AML and tax laws. In such cases, we will explain the reasons for these limitations to you in detail.

In certain circumstances, your personal data may be processed or stored on servers located outside Malaysia – particularly when involving global cloud infrastructure providers or international game software vendors. In all such cases, bk8 casino ensures that:

• Data transfers are conducted using recognised protection mechanisms such as Standard Contractual Clauses or data protection adequacy assessments.
• Data recipients outside Malaysia are required to comply with data protection standards equivalent to or stricter than Malaysia's PDPA requirements.
• Legally binding data processing agreements are in place with all third parties that receive bk8 casino user data.

Bk8 casino reserves the right to update this Privacy Policy from time to time to reflect changes in applicable laws, the technologies we use, or the way we handle data. Each new version will be published on this website with a clear update date.

For material changes that significantly affect your privacy rights, we will provide advance notice via your registered email or through a prominent in-platform notification at least 14 days before the changes take effect. Your continued use of our platform after the effective date of such changes will be considered your acceptance of the updated policy.

If you have any questions, concerns or complaints regarding how bk8 casino handles your personal data, our Data Protection Officer team is ready to assist you. You may contact us via:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of our platform.
• Email: Send your privacy enquiries to [email protected] with the subject line "Privacy Policy Enquiry".

We are committed to responding to all privacy inquiries within two business days and resolving any complaints within 30 business days. If you are unsatisfied with our response, you have the right to file a formal complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the relevant Personal Data Protection Department.