bk8mas Privacy Policy

1. Who We Are

bk8mas is an online sports betting and casino platform operating under an international gaming licence. The Platform is accessible at bk8mas.win and is specifically designed to serve English-speaking Malaysian players. For the purposes of this Policy, bk8mas is the data controller responsible for the personal data of registered account holders.

If you have any questions about how bk8mas handles your personal data, please contact our Data Protection team at the address provided in Section 14 of this Policy.

2. Data We Collect

bk8mas collects the following categories of personal data from users of the Platform:

2.1 Identity & Registration Data

• Full legal name
• Date of birth (for age verification purposes)
• Email address
• Username chosen at registration
• National identification or passport number (where required for verification)

2.2 Contact & Communication Data

• Mobile phone number (where provided or required for 2FA)
• Records of communications with bk8mas Customer Support, including live chat transcripts and email correspondence

2.3 Financial & Transaction Data

• Payment method details (e.g., bank account numbers, e-wallet registered phone numbers) — retained only to the minimum extent required for payment processing
• Deposit and withdrawal history
• Betting and gaming history, including bet amounts, outcomes, and game sessions
• Account balance history

2.4 Technical & Usage Data

• IP address at the time of registration and each login
• Device type, operating system, and browser type
• Session duration and activity logs
• Geolocation data at the time of access (country/region level)
• Cookies and similar tracking technologies (see Section 7)

2.5 Verification Documents

• Copies of identity documents (e.g., Malaysian MyKad, passport) submitted during the Know Your Customer (KYC) verification process
• Proof of address documents where required
• Source-of-funds documentation where required for high-value withdrawal processing

3. How We Collect Your Data

bk8mas collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact Customer Support, or respond to a promotion.
• Automatically — when you use the Platform, through cookies, server logs, and analytics tools that record technical and usage data (see Section 7).
• From third parties — from payment providers (to confirm transaction status), identity verification services (to validate documents), and fraud prevention services (to assess risk).

4. How We Use Your Data

bk8mas uses the personal data it collects for the following purposes:

5. Legal Basis for Processing

bk8mas processes personal data on the following legal bases:

• Contractual necessity — processing required to provide the bk8mas Platform services, including account management, payment processing, and bet settlement.
• Legal obligation — processing required to comply with applicable legal and regulatory requirements, including KYC, AML, and licensing obligations.
• Legitimate interests — processing for fraud prevention, security monitoring, responsible gaming oversight, and internal analytics, where these interests are not overridden by your data protection rights.
• Consent — processing for direct marketing communications, where you have given explicit consent. You may withdraw consent at any time by updating your communication preferences in Account Settings or by contacting [email protected].

6. Data Sharing & Third Parties

6.1 bk8mas does not sell your personal data to third parties for their own independent marketing purposes.

6.2 bk8mas may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment processors and e-wallet providers — including providers of Maybank2u, CIMB Clicks, FPX, Touch 'n Go eWallet, Boost, GrabPay, and DuitNow integrations, for the purpose of processing financial transactions.
• Identity verification and KYC service providers — for the purpose of verifying account holder identity and age in compliance with licensing requirements.
• Fraud prevention services — for the detection and prevention of fraudulent activity, money laundering, and other financial crime.
• Game software providers — limited technical data required for game session management (e.g., account ID, session tokens) is shared with certified game providers whose software is integrated into the bk8mas Platform.
• Regulatory and law enforcement authorities — where bk8mas is legally required to disclose data, including under AML reporting obligations or in response to a valid legal order.
• IT infrastructure and hosting providers — for the purpose of operating and maintaining the Platform infrastructure, subject to contractual data processing obligations.

6.3 All third-party data processors engaged by bk8mas are required to process personal data only in accordance with bk8mas's instructions and are prohibited from using personal data for their own independent purposes.

7. Cookies & Tracking Technologies

7.1 The bk8mas Platform uses cookies and similar technologies to operate the Platform, maintain login sessions, detect fraudulent access, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies — essential for Platform functionality, including session authentication, security tokens, and user preference storage. These cannot be disabled without affecting Platform usability.
• Analytical cookies — used to collect aggregated and anonymised data about how users interact with the Platform, for the purpose of improving functionality and performance.
• Security cookies — used for fraud detection, login security, and identification of suspicious access patterns.

7.2 You may manage non-essential cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair Platform functionality, including your ability to remain logged in.

8. Data Retention

8.1 bk8mas retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal obligations. The following general retention periods apply:

• Account and identity data — retained for the duration of the account and for a minimum of five (5) years following account closure, in compliance with AML and licensing retention requirements.
• Transaction and betting history — retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications — retained for three (3) years from the date of each interaction.
• Technical and usage logs — retained for twelve (12) months from the date of collection, unless required for longer for security or fraud investigation purposes.

8.2 Where data is no longer required for any operational or legal purpose, bk8mas will securely delete or irreversibly anonymise it.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by bk8mas:

• Right of Access — you may request a copy of the personal data bk8mas holds about you.
• Right to Rectification — you may request correction of inaccurate or incomplete personal data.
• Right to Erasure — in certain circumstances, you may request deletion of your personal data. Note that this right is subject to bk8mas's legal retention obligations; data required for AML, regulatory, or dispute resolution purposes cannot be deleted on request.
• Right to Restriction — you may in certain circumstances request that bk8mas restrict processing of your data while a dispute regarding its accuracy or lawfulness is resolved.
• Right to Data Portability — you may request that bk8mas provide your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity.
• Right to Object — you may object to processing based on legitimate interests, including direct marketing. bk8mas will cease direct marketing communications upon receipt of an objection.
• Right to Withdraw Consent — where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, contact bk8mas Data Protection at [email protected], quoting "Data Rights Request" in your subject line and your registered account email address. bk8mas will respond within thirty (30) days of a verified request.

10. Data Security

10.1 bk8mas implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption of sensitive data at rest;
• Access controls restricting personal data access to authorised personnel on a need-to-know basis;
• Regular security assessments and penetration testing;
• Anomaly detection and monitoring systems for identifying suspicious access patterns.

10.2 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected users, bk8mas will notify affected users and relevant authorities in accordance with applicable legal requirements.

11. International Data Transfers

11.1 As an internationally licensed platform, bk8mas may transfer personal data to service providers and infrastructure partners located outside of Malaysia. Where such transfers occur, bk8mas ensures that appropriate safeguards are in place to protect the personal data transferred, such as contractual clauses that impose data protection obligations equivalent to those described in this Policy.

11.2 By using the bk8mas Platform, you consent to the transfer of your personal data to international locations as described in this section, subject to the safeguards described above.

12. Children & Minors

21+ The bk8mas Platform is strictly for adults aged 21 and above. bk8mas does not knowingly collect personal data from individuals under the age of 21. If bk8mas becomes aware that personal data has been collected from an underage individual, that data will be deleted and the associated account closed immediately. If you believe an underage individual has registered on the Platform, please notify bk8mas Customer Support at [email protected].

13. Policy Updates

13.1 bk8mas reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via the email address associated with their account, or via a prominent notice on the Platform, before the changes take effect.

13.2 The current version of this Policy is always accessible at bk8mas.win/privacy-policy. The effective date displayed at the top of this page reflects the date of the most recent revision. Your continued use of the Platform after a notified policy update constitutes your acceptance of the revised Policy.

14. Contact Us

For any enquiries, requests, or complaints relating to this Privacy Policy or the handling of your personal data by bk8mas, please contact:

• Data Protection Enquiries — Email: [email protected] (subject line: "Privacy / Data Rights")
• Live Chat: Available 24/7 through the bk8mas Platform for general account and data queries