BK8 Sports Privacy Policy – Our Commitment to Protecting Your Data

BK8 Sports ("we", "Platform" or "BK8") operates an online sports betting and casino platform accessible via our official website and mobile app. In the course of these operations, we collect and process certain personal information relating to you as a user of our platform.

This Privacy Policy is designed to ensure you fully understand what information we collect, why we need it, how it is used, and the rights you have regarding your personal data. We believe that transparency in data handling is the foundation of the trust you place in us.

This Privacy Policy applies to all users of the BK8 Sports platform, including website visitors, registered members, and former members. By using our services, you agree to the data protection practices described in this document.

BK8 Sports collects various categories of information depending on how you interact with our platform. Below is a comprehensive list of the data types we collect:

We may also collect information from trusted third-party sources, such as identity verification agencies or fraud prevention service providers, solely for the purpose of verifying the accuracy of the information you have provided to us.

BK8 Sports uses the personal data we collect for legitimate, clearly stated purposes. We will not use your data for any purpose other than those listed below:

• Account Management: Processing new account registrations, verifying your identity through the KYC process and managing your account settings.
• Service Delivery: Enabling you to access all games, process deposits and fund withdrawals, and receive effective customer support.
• Platform Security: Detecting and preventing fraud, money laundering and any attempts to misuse our platform.
• Legal Compliance: Fulfilling the legal and regulatory obligations imposed on bk8 sports by the relevant regulatory bodies.
• Service Improvement: Analysing usage patterns to improve the gaming experience, user interface and overall platform performance.
• Marketing Communications: Sending promotional information, bonus offers and platform updates — only to players who have given their explicit consent.
• Responsible Gaming: Monitoring wagering patterns to identify players who may need additional support or betting limits.

BK8 Sports processes your personal data on the basis of one or more valid legal grounds under the Malaysian Personal Data Protection Act 2010 (PDPA):

• Contract Fulfillment: Processing required to execute the service agreement between you and bk8 sports, including financial transaction processing and account management.
• Legal Obligations: Processing required to comply with legal obligations, including anti-money laundering (AML) and Know Your Customer (KYC) requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement where our interests do not override your fundamental rights.
• Consent: For direct marketing and non-essential analytics purposes, we will first request your explicit consent. You may withdraw this consent at any time.

BK8 Sports does not sell your personal data to any third party. However, in the course of platform operations, we may need to share data with the following categories of recipients under certain limited circumstances:

• Payment Service Providers: Local banks, e-wallet operators, and payment gateways that process your financial transactions. All such providers are bound by strict data protection agreements.
• Game Providers: Companies such as Microgaming, Evolution Gaming, and Pragmatic Play that provide game content. Only the minimum data required for game delivery is shared.
• Identity Verification Services: Third-party agencies that assist us in conducting KYC checks and verifying the authenticity of documents you submit.
• Law Enforcement Authorities: Government authorities or regulatory bodies issuing lawful orders or requests for access to specific data.
• Cloud Services & Infrastructure: Technical infrastructure providers that store and process data on our behalf, subject to binding data processing agreements.

The security of your personal data is bk8 sports' highest priority. We implement multiple layers of technical and organisational security to protect your data from unauthorised access, disclosure, alteration or destruction:

• 256-Bit SSL Encryption: All data transmitted between your device and our servers is encrypted using 256-bit TLS/SSL protocols — the same security standard used by leading international banking institutions.
• Encrypted Databases: Sensitive data such as financial information and identity documents are stored in encrypted format within databases protected by multiple layers of access controls.
• Two-Factor Authentication (2FA): Players are encouraged to enable two-factor authentication for an added layer of protection on their account.
• 24/7 Security Monitoring: Our automated threat detection system operates around the clock to identify and respond to any suspicious activity in real time.
• Internal Access Controls: Only bk8 sports staff with a legitimate business need are permitted to access player personal data, and every access is logged for audit purposes.
• Regular Security Testing: We conduct regular penetration testing and security audits by independent cybersecurity experts to ensure your protection remains up to date.

BK8 Sports uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login session authentication and security. Without them, the platform cannot operate properly and they cannot be disabled.
• Preference Cookies: Allowing the platform to remember your preferences such as language, time zone and display settings to deliver a more personalised experience.
• Analytics Cookies: Used to collect information about how visitors use our platform, helping us understand which pages are most popular and how we can improve the user experience.
• Marketing Cookies: Used to deliver more relevant advertisements to you based on your interests. These cookies are only activated with your consent.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience of the bk8 sports platform.

Under the Malaysian Personal Data Protection Act 2010, you have the following rights regarding the personal data held by BK8 Sports:

BK8 Sports retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law:

• Active Account Data: Retained for the duration your account remains active and in use.
• KYC and Identity Data: Retained for at least 5 years after account closure, in compliance with anti-money laundering legal requirements.
• Financial Transaction Records: Retained for 7 years after each transaction occurs, in compliance with financial reporting and tax requirements.
• Support Communication Logs: Retained for 3 years for reference purposes and service quality assurance.
• Anonymised Analytics Data: May be retained indefinitely as it no longer contains information that can personally identify you.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymized in accordance with established procedures.

In certain circumstances, your personal data may be transferred to or accessed from countries outside Malaysia, particularly in connection with our third-party service providers' operations. BK8 Sports ensures that any such data transfers are carried out with adequate safeguards, including:

• Use of standard contractual clauses approved by the relevant data protection authorities.
• Transfers only to countries or organizations that provide an equivalent or higher level of data protection.
• Implementation of additional technical and organisational measures as required to protect data during transfers.

The bk8 sports platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from minors. Should we become aware that a child's personal data has been collected without appropriate age verification, we will take immediate steps to delete that data and close the relevant account.

Parents or guardians who believe their child has registered on this platform are urged to contact us immediately so that appropriate action can be taken without delay.

BK8 Sports reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or added platform features. Any significant amendments will be communicated to you via email or in-platform notification at least 7 days before they take effect.

We encourage you to review this Privacy Policy periodically. The "Updated" date at the top of this page will always reflect the latest version of this document. Continued use of the platform after any changes take effect signifies your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or complaints regarding how bk8 sports handles your personal data, please contact our Data Protection Officer (DPO):

• DPO Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 directly on the bk8 sports platform
• Response Time: Within 5 business days for privacy inquiries

You also have the right to lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the relevant data protection regulatory body if you believe your privacy rights have been violated and we have failed to address your complaint satisfactorily.