Privacy Policy — BK8Asia

BK8Asia ("we", "us", "our", or "the Platform") operates the online gaming and sports betting platform accessible at bk8asia.cam. We recognise that the personal data entrusted to us by our players is one of the most significant responsibilities we hold, and we are committed to handling it with the highest standards of care, transparency, and security.

This Privacy Policy ("Policy") describes the categories of personal data we collect from users of bk8asia, the lawful bases and purposes for which that data is processed, the circumstances in which it may be shared with third parties, and the rights available to you as a data subject. This Policy applies to all individuals who visit, register on, or otherwise interact with the bk8asia Platform, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia.

By accessing the Platform or creating an Account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference and form part of the overall regulatory framework governing your use of bk8asia.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, device identifiers, and behavioural data.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, alteration, restriction, erasure, or destruction.
• "Data Controller" — BK8Asia, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — a third-party entity that processes personal data on behalf of bk8asia pursuant to a contractual arrangement and in accordance with our instructions.
• "Data Subject" — you, the individual whose personal data is collected and processed in connection with your use of the Platform.
• "Consent" — freely given, specific, informed, and unambiguous agreement by the data subject to the processing of their personal data for one or more specified purposes.
• "KYC" — Know Your Customer; the identity verification process required for regulatory compliance and the prevention of financial crime.
• "Cookies" — small text files stored on your device by your browser at the instruction of the Platform, used to maintain session state and collect usage analytics.

BK8Asia collects personal data from you in several ways: directly through information you provide during registration and account use; automatically through your interaction with the Platform; and in certain cases from third-party sources such as payment processors and identity verification services.

BK8Asia processes your personal data exclusively for specified, legitimate purposes. We do not use your data for purposes that are incompatible with those for which it was originally collected. The primary purposes for which we process your data are as follows:

• Account Management: Creating, maintaining, and administering your Account, including authentication, account recovery, and profile management.
• Service Delivery: Providing access to casino games, sports betting markets, live casino tables, and all other platform features for which you have registered.
• Payment Processing: Facilitating deposits and withdrawals through Malaysian payment channels including Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank, as well as cryptocurrency transactions.
• Identity Verification (KYC): Verifying your identity and age in compliance with anti-money laundering (AML) obligations and to confirm that you are aged 21 or above.
• Legal & Regulatory Compliance: Meeting our obligations under applicable international gaming regulations, AML frameworks, and data protection law, including record-keeping requirements.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct.
• Responsible Gambling: Monitoring gaming patterns to identify at-risk behaviour, enforcing self-exclusion and deposit limit settings, and providing timely interventions in accordance with our Responsible Gambling Policy.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance through our 24/7 support channels.
• Platform Improvement: Analysing aggregated usage data to identify technical issues, improve platform stability, enhance user experience, and develop new features.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform news to players who have opted in to receive such communications. You may opt out at any time through your Account settings or by contacting our support team.

BK8Asia processes your personal data on one or more of the following lawful bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform our contract with you, including account creation, game access, and payment facilitation. Without this processing, we cannot provide the services you have registered for.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC and AML obligations, age verification, and record-keeping requirements mandated by gaming regulatory frameworks.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service analytics, provided such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific consent — most notably in relation to marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

BK8Asia does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your data with third parties only in the circumstances described below, and only to the extent strictly necessary for the stated purpose:

6.1 Service Providers and Data Processors

We engage selected third-party service providers who process personal data on our behalf as Data Processors, acting solely on our instructions and bound by confidentiality and data protection obligations. These include:

• Payment gateway operators and financial institutions facilitating your deposits and withdrawals, including providers of Touch 'n Go eWallet, DuitNow, FPX, Boost, and GrabPay integrations.
• Identity verification and KYC service providers who assist us in confirming the authenticity of submitted documents.
• Cloud hosting and infrastructure providers who store and serve Platform data under contractual security standards.
• Customer support software providers who facilitate the delivery of our live chat and ticket management systems.
• Analytics service providers who process aggregated, anonymised usage data to assist us in improving Platform performance.
• Licensed game content studios and sports data providers whose products are integrated into the Platform.

6.2 Regulatory and Law Enforcement Authorities

BK8Asia may disclose your personal data to competent regulatory, law enforcement, taxation, or judicial authorities where we are legally required to do so, or where such disclosure is necessary to protect the rights, property, or safety of the Platform, its users, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of bk8asia's assets, your personal data may be transferred to the successor entity, subject to the same or equivalent privacy protections as set out in this Policy.

BK8Asia uses cookies and similar technologies (including local storage, session tokens, and device fingerprinting) to operate and improve the Platform. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication tokens that keep you logged in, security cookies that protect against cross-site request forgery, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences such as language selection and responsible gambling tool settings. These are not strictly necessary but improve your experience on the Platform.
• Analytics Cookies: Collect anonymised or pseudonymised data about how users interact with the Platform — such as pages visited, session duration, and error events — to assist us in identifying improvements. We do not share raw analytics data with third parties.
• Security Cookies: Support our fraud detection systems by identifying unusual access patterns, multiple login attempts, and device consistency across sessions.

BK8Asia does not deploy third-party advertising cookies or tracking pixels that follow you across unrelated third-party websites. You may manage cookie preferences through your browser settings; however, disabling necessary cookies may prevent certain Platform features from functioning as intended.

BK8Asia retains personal data for no longer than is necessary to fulfil the purposes described in this Policy, or as required by applicable law and regulatory obligations. The following general retention guidelines apply:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in accordance with AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years following each transaction, consistent with anti-money laundering and financial regulatory obligations.
• KYC Documents: Retained for a minimum of five (5) years following the conclusion of the business relationship, or longer where required by applicable law.
• Customer Support Records: Retained for a period of three (3) years following the closure of each support interaction, to facilitate follow-up and dispute resolution.
• Usage and Analytics Data: Anonymised or aggregated analytics data may be retained indefinitely as it no longer constitutes personal data. Non-anonymised usage logs are retained for up to twelve (12) months.
• Marketing Preferences: Opt-in and opt-out records are retained for the duration of your Account and for three (3) years following Account closure for compliance auditing purposes.

Upon the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction methods.

BK8Asia implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bk8asia Platform.
• Encryption at rest for all sensitive personal data stored on our servers, including financial records and identity documents.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel who require it to perform their legitimate job functions.
• Two-factor authentication (2FA) options for player accounts to reduce the risk of unauthorised access.
• Continuous automated monitoring of system access logs for anomalous activity, with alerting and incident response procedures in place.
• Regular internal security reviews and third-party penetration testing of Platform infrastructure.
• Employee training on data protection obligations and secure data handling practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bk8asia will notify affected users and relevant authorities as required by applicable law, without undue delay.

Given the global nature of some of our service provider relationships — including cloud infrastructure, game content delivery networks, and payment processing systems — your personal data may in certain circumstances be transferred to, stored in, or processed in countries outside Malaysia.

Where such transfers occur, BK8Asia ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under applicable Malaysian and international data protection principles. These safeguards may include contractual data protection clauses incorporated into agreements with the relevant third-party processors, binding corporate rules where applicable, or other recognised transfer mechanisms.

You may request information about the specific safeguards applied to any international transfer of your personal data by contacting our support team at [email protected].

As a data subject, you hold a number of rights in relation to the personal data that bk8asia holds about you. We are committed to facilitating the exercise of these rights in a timely and transparent manner. Your rights are as follows:

To exercise any of the above rights, please submit a written request to [email protected], clearly identifying yourself, the right you wish to exercise, and the specific data or processing activity concerned. BK8Asia will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) days, extendable by a further sixty (60) days in complex cases with notification.

BK8Asia strictly prohibits access by individuals under the age of 21. The Platform is not intended for, directed at, or designed to attract persons below the minimum age requirement. We do not knowingly collect personal data from individuals under the age of 21.

Where we discover or are notified that personal data has been collected from an individual below the minimum age, we will immediately terminate the relevant Account, delete the associated personal data without undue delay, and report the matter to relevant authorities where required by law.

If you are a parent or guardian and believe that your child or a minor in your care has registered on or accessed bk8asia, please contact us immediately at [email protected]. We take underage access with the utmost seriousness and will act swiftly on all such reports.

BK8Asia reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal obligations. The current version of this Policy, along with its effective date, is always available on the Platform.

Where amendments are material — meaning they significantly affect your rights or the way your data is used — bk8asia will endeavour to provide advance notice by posting a prominent notice on the Platform or sending a communication to your registered email address. Your continued use of the Platform following the publication of a revised Policy constitutes acceptance of the updated terms.

We encourage you to review this Policy periodically to remain informed about how bk8asia protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the BK8Asia Data Privacy team using the details below. All privacy-related correspondence must be submitted in English to ensure accurate and complete processing.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. BK8Asia will cooperate fully with any regulatory investigation conducted in accordance with applicable law.

For responsible gambling-related concerns, additional support and resources are available on our Responsible Gambling page. For general account and operational queries, please visit our FAQ page.