Privacy Policy BK8 Asia — Our Commitment to Protecting Malaysian Users' Data

This Privacy Policy ("Policy") is issued by BK8 Asia ("we", "the Company") and applies to all users who access or use the BK8 Asia online betting and casino platform via bk8asia.best or any related digital platform. This Policy describes our practices regarding the collection, use, disclosure, storage, and protection of your personal data.

BK8 Asia fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all regulations and guidelines issued by the Department of Personal Data Protection Malaysia. As a "Data Controller" under the PDPA, BK8 Asia bears full responsibility for ensuring your personal data is processed lawfully, fairly and transparently.

Bk8 asia collects various types of personal data depending on how you interact with our platform. The data collected can be grouped into the following categories:

Your personal data is collected through various methods as you interact with the BK8 Asia platform:

• Account Registration: When you complete the registration form on BK8 Asia, you voluntarily provide the identification and contact information we need to create your account.
• Identity Verification (KYC): During the Know Your Customer process, you may be asked to upload a copy of your national identity card or passport to verify your identity for compliance purposes.
• Financial Transactions: Every time you make a deposit via Touch 'n Go, DuitNow, GrabPay, or any other method, or submit a withdrawal request, the transaction record is stored in BK8 Asia's system.
• Platform Usage: Betting activity data, casino and slots game records, game preferences and session duration are collected automatically as you use BK8 Asia.
• Support Communications: When you contact the BK8 Asia support team via live chat or email, the content of that communication is stored for issue resolution and service improvement purposes.
• Cookies & Tracking Technologies: BK8 Asia uses cookies and similar technologies to collect technical data and enhance the user experience on our platform.

BK8 Asia uses collected personal data solely for the following legitimate and relevant purposes:

• Creating and managing your BK8 Asia account, including identity verification and user eligibility.
• Processing deposits and withdrawals using your preferred local Malaysian payment methods.
• Providing you with Sports Betting, Live Casino, slots and all other BK8 Asia platform features.
• Managing your VIP Rewards programme, including rebate calculations, cashback and any related bonus claims.
• Sending important account-related communications such as transaction confirmations, security notices and policy updates.
• Sending marketing communications about bk8 asia promotions, special offers, and new features — only if you have given your consent to receive them.
• Detecting, investigating, and preventing fraud, money laundering, collusion, and other unlawful activity on the bk8 asia platform.
• To comply with legal and regulatory obligations applicable to BK8 Asia's operations, including reporting requirements to the relevant authorities.
• To improve the BK8 Asia platform, analyse usage patterns, and develop better features for Malaysian users.
• Managing responsible gaming, including monitoring betting patterns that may indicate problem gambling and reaching out to users who may need assistance.

BK8 Asia does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, in the course of operating the platform, your data may be shared with the following parties under limited and controlled circumstances:

• Payment Service Providers: Payment gateways that process deposit and withdrawal transactions via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX receive only the data required to process each transaction.
• Game Providers: Companies such as Pragmatic Play, PG Soft, Habanero, and Spadegaming, which provide slots and casino games on the bk8 asia platform, may receive game session data necessary for technical functionality.
• Identity Verification Services: The KYC (Know Your Customer) service providers we engage to verify user identities receive copies of identification documents strictly for verification purposes.
• Legal Authorities: BK8 Asia will disclose personal data to the police, courts, regulatory bodies, or other authorities when required by Malaysian law or pursuant to a court order.
• Analytics Service Providers: The analytics tools we use to understand platform usage patterns receive anonymised data that cannot be used to identify any individual.

All third parties who receive BK8 Asia user data are bound by strict confidentiality agreements and are required to uphold data protection standards equal to or higher than our own. BK8 Asia is not responsible for the privacy practices of third parties that fall outside our control.

BK8 Asia implements multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, leaks, loss or destruction:

• Data encryption in transit using 256-bit TLS/SSL protocol — the same standard used by financial institutions in Malaysia.
• Encryption of data at rest for all sensitive user information stored in our databases.
• Role-based access control ensuring that only authorised personnel can access specific user data.
• Two-factor authentication (2FA) available to all BK8 Asia user accounts as an additional layer of protection.
• 24/7 security monitoring and intrusion detection systems to identify and respond to security threats.
• Independent security audits conducted periodically by accredited cybersecurity firms to identify and address vulnerabilities.
• Regular data backups stored across separate, secure locations to ensure data recovery in the event of a system disruption.
• Mandatory data security training for all bk8 asia staff with access to user data.

BK8 Asia retains your personal data for as long as necessary to fulfil the stated purpose of collection or to comply with applicable legal obligations:

• Active account data is retained for the duration your account remains active on the BK8 Asia platform, plus any additional period required by law.
• Financial transaction records — including all deposits and withdrawals made via Touch 'n Go, DuitNow or other methods — are retained for a minimum of seven (7) years in accordance with Malaysia's financial and tax legal requirements.
• Identity verification (KYC) data is retained for a minimum of five (5) years from the account closure date for compliance and investigation purposes.
• Support communication logs are retained for three (3) years for dispute resolution and service improvement purposes.
• Technical data and access logs are retained for ninety (90) days for security and technical troubleshooting purposes.
• Once the retention period has ended and there is no legal requirement to retain the data any longer, your data will be securely deleted or anonymised.

BK8 Asia uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the BK8 Asia website.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the BK8 Asia platform and prevent you from logging in or using certain features. BK8 Asia does not use cookies for third-party advertising purposes.

As a BK8 Asia user in Malaysia, you have the following rights regarding your personal data under the PDPA 2010:

To exercise any of the rights above, please contact the bk8 asia support team at support@bk8asia.best. We will process your request within 21 business days upon completion of your identity verification.

BK8 Asia strictly prohibits the use of its platform by anyone under the age of 18. This platform is not designed for children or teenagers, and we do not knowingly collect personal data from underage users.

• All BK8 Asia users are required to confirm that they are at least 18 years of age at the point of registration.
• The identity verification (KYC) process we actively conduct helps prevent underage individuals from registering on the platform.
• Should bk8 asia discover that personal data belonging to a minor has been collected without our knowledge, we will promptly delete that data and close the account in question.
• If you believe a minor has registered on BK8 Asia, please notify us immediately at support@bk8asia.best.

Bk8 asia reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements in how we protect user information. When material amendments are made, we will notify you via:

• A notice prominently displayed on the bk8asia.best homepage for a minimum of 30 days before any amendment takes effect.
• An email notification to the address registered with your bk8 asia account at least seven (7) days before the changes take effect.
• A pop-up notification will appear the first time you log in to your BK8 Asia account after an amendment takes effect, prompting you to review and acknowledge the updated Privacy Policy.

It is your responsibility to review this Privacy Policy periodically. The "Last Updated" date at the top of this document will always reflect the date of the most recent version. Your continued use of the BK8 Asia platform after any amendment takes effect will be deemed as acceptance of the revised Privacy Policy.

If you have any questions, concerns or requests regarding this Privacy Policy or how BK8 Asia handles your personal data, our Bahasa Malaysia-speaking team is ready to assist you:

• Privacy Email: support@bk8asia.best — state "Privacy Enquiry" in your email subject line.
• Live Chat: Available 24 hours a day, seven days a week via the chat icon on the BK8 Asia platform.
• Response Time: We aim to respond to all privacy-related enquiries within 48 hours. Data access or deletion requests will be processed within 21 working days.