BK8MY Privacy Policy — Our Commitment to Protecting Your Personal Data

1Introduction & Scope of Privacy Policy

This Privacy Policy is published by bk8my ("we", "the Platform") and applies to all individuals who register for, browse, or use any services provided through the bk8my platform ("Members", "you"). This document outlines our privacy practices with respect to the collection, use, disclosure, and protection of your personal information.

This Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs the processing of personal data in commercial transactions. By using the bk8my platform, you agree to the collection and use of your information as described in this policy.

Bk8my believes that member trust is our most valuable asset. We are committed to managing your personal data with full responsibility, transparency, and in accordance with the highest industry standards. Every decision involving member data is made with your security and privacy as the top priority.

2Types of Information We Collect

Bk8my collects personal information from members through several different channels. The following outlines the types of information we collect and the reasons for doing so:

Some information is collected automatically when you use the bk8my platform, while other information is provided directly by you during registration, account verification, or when using our services. We only collect information that is strictly necessary for the stated purposes.

3How We Use Your Information

Personal information collected by bk8my is used solely for the purposes stated below. We will not use your data beyond the scope of these stated purposes without first obtaining your consent:

• Account Management — Creating, verifying, and managing your bk8my account, including any KYC processes required for compliance.
• Financial Transaction Processing — Processing all deposits in MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, CIMB Clicks, and other Malaysian payment methods, as well as your winnings withdrawals.
• Platform Security — Detecting and preventing fraud, money laundering, unauthorised access, and activities that violate bk8my's terms of service.
• Service Communications — Sending important notifications regarding your account, security updates, transaction confirmations, and relevant promotional information (where you have consented to receive marketing communications).
• Responsible Gaming — Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate interventions to protect member wellbeing.
• Platform Improvements — Analysing aggregated usage data (without identifying individuals) to improve user experience, platform performance, and the development of new features.
• Legal Compliance — To comply with legal and regulatory obligations applicable in Malaysia, including responding to enquiries or directives from the relevant authorities.

4Data Storage & Security

Bk8my implements comprehensive technical and organisational security measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. Our data security infrastructure includes:

• 256-bit SSL Encryption for all data transmitted between your device and bk8my's servers.
• Data Encryption at Rest — All sensitive data stored in our databases is encrypted using the latest industry standards.
• Strict Access Control — Only bk8my staff who require access to specific data to perform their duties are permitted to access it.
• 24/7 Monitoring — A continuous security monitoring system to detect and respond to any cyber threats.
• Regular Penetration Testing — Independent security assessments are conducted on a regular basis to identify and address potential system vulnerabilities.
• Data Backup — Data is securely and regularly backed up to ensure continuity of service.

Your personal data is retained for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Once the retention period expires, your data will be securely deleted or anonymised.

5Data Sharing & Disclosure to Third Parties

Bk8my does not sell, rent, or trade members' personal information to any third party. However, in certain limited circumstances, we may need to share information with the following parties:

• Payment Service Providers — Required transaction information is shared with Malaysian payment processors such as FPX, DuitNow providers, and e-wallet platforms to process your deposits and withdrawals.
• Third-Party Game Providers — Data required to operate the games is shared with bk8my's software providers, who are bound by strict confidentiality agreements.
• Technology Service Providers — Third parties that assist us in operating the platform infrastructure, cybersecurity, and data analytics, all of whom are bound by strict data protection agreements.
• Legal Authorities — bk8my will disclose information where required by Malaysian law, court order, or lawful direction from a competent authority.

In all instances of data sharing, bk8my ensures that the receiving party is bound by confidentiality and data protection obligations equal to or higher than our own standards. Information shared is strictly limited to what is genuinely necessary.

6Cookies & Tracking Technologies

The bk8my platform uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device when you visit our platform.

Types of cookies we use:

• Essential Cookies — Required for core platform functions such as login sessions and security. These cookies cannot be disabled as they are critical to platform operations.
• Performance Cookies — Collecting anonymised information about how visitors use the bk8my platform to help us improve performance and user experience.
• Functional Cookies — Saving your preferences such as language, display settings, and login information so you don't have to re-enter them every time.
• Security Cookies — Helping us identify and prevent fraudulent activity and unauthorised access to your bk8my account.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality of some areas of the bk8my platform.

7Member Rights Regarding Personal Data

As a bk8my member and data subject under Malaysia's PDPA, you have the following rights regarding your personal information. bk8my is committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, please contact the bk8my data protection team by email at privacy@bk8my.biz. We will process your request within 14 business days from the date of receipt of the complete request.

8Protection of Children's Data

The bk8my platform is for individuals aged 18 and above only only. We do not intentionally collect or process any personal information from children or individuals under the age of 18.

Should we discover that personal information has been collected from an individual under the age of 18 without proper verification, we will take immediate steps to delete that information and close the account in question.

If you are a parent or guardian and believe your underage child has registered for or used the bk8my platform, please contact us immediately at support@bk8my.biz so that we can take appropriate action promptly.

9Changes to This Privacy Policy

Bk8my reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to the bk8my platform.

Any material changes to this Privacy Policy will be communicated to members via:

• An email notification to your registered email address at least 7 days before the changes take effect.
• A prominent notice on the bk8my platform homepage.
• An update to the "Last Updated" date at the top of this document.

Your continued use of the bk8my platform after the effective date of any changes will be considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed of our latest policy.

10Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how bk8my handles your personal data, or if you wish to exercise your data rights, please reach out to us through the following channels:

• Privacy Email: privacy@bk8my.biz
• General Support Email: support@bk8my.biz
• Live Chat: Available 24 hours a day, 7 days a week via the bk8my platform

Our team will endeavour to respond to all privacy-related enquiries within 3 working days. For formal data rights requests, processing time may take up to 14 business days depending on the complexity of the request.