Bk8login Privacy Policy – Malaysian Member Personal Data Protection

1 Introduction & Scope of Privacy Policy

This Privacy Policy describes how bk8login, operating through its official website at bk8login.best, collects, uses, stores, and protects the personal data of members who use our online entertainment platform in Malaysia.

We understand that privacy matters deeply to Malaysian users. In this digital age, the trust you place in us by sharing your personal information is something we do not take lightly. Every decision we make about data management is guided by your best interests and your safety as a bk8login member.

This Privacy Policy applies to all information collected through the bk8login platform, including during account registration, MYR deposit and withdrawal processes, use of Sports Betting, Live Casino, slots, table games, virtual sports, and all interactions with our customer support team.

2 Personal Data We Collect

2.1 Data You Provide Directly

When you register a bk8login account, we collect the following information that you provide voluntarily:

• Full name as per official Malaysian identity documents.
• An active Malaysian mobile number for SMS OTP verification.
• An active, reachable email address.
• Date of birth to verify that the minimum age requirement of 21 years is met.
• KYC (Know Your Customer) information such as a copy of your MyKad or passport when requested for further verification.
• Payment method details used — the account holder name for Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX — for withdrawal verification purposes.

2.2 Automatically Collected Data

When you use the bk8login platform, our systems automatically collect the following technical information:

• IP address and general IP-based location information (state within Malaysia, not your exact address).
• Browser type, version, and language settings.
• Device model and operating system in use.
• The time and duration of each login session.
• Pages visited and actions taken within the bk8login platform.
• Cookie data and session identifiers for secure login management.

2.3 Financial & Game Activity Data

As a licensed online entertainment platform, bk8login is required to maintain complete records of financial transactions and gaming activity. This includes deposit and withdrawal history in MYR, records of all Sports Betting activity (Malaysia Super League, EPL, badminton, e-sports, and more), Live Casino game history, slots, table games, virtual sports, as well as bonus and VIP rebate records credited to your account.

3 How bk8login Uses Your Data

Bk8login uses collected personal data solely for the following legitimate and necessary purposes:

3.1 Account Management and Identity Verification

Your identification data is used to create and manage your bk8login account, verify your identity during the KYC process, prevent multiple account registrations that violate the platform's Terms & Conditions, and ensure that only eligible individuals access our services.

3.2 Financial Transaction Processing

Your financial data and payment methods are used to process deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks, and other available methods; to process your winnings withdrawals in MYR; to verify that withdrawals are made to a payment method held in the same name as your bk8login account; and to resolve any transaction disputes that may arise.

3.3 Gaming Service Provision

Your game activity data is used to process bets and games, calculate odds and results, determine your VIP tier and eligible benefits, automatically calculate weekly rebates, and ensure compliance with betting limits and withdrawal limits based on your VIP tier at bk8login.

3.4 Security and Fraud Prevention

Technical data including IP addresses, login patterns, and account activity is used to detect and prevent unauthorised access to your account, identify and block fraudulent activity or system manipulation, verify that transactions are carried out by the legitimate account holder, and monitor compliance with bk8login's Terms & Conditions.

3.5 Customer Support

Records of your communications with the bk8login customer support team are used to process and resolve enquiries, complaints, and disputes; to provide technical assistance; and to improve the quality of our support services over time.

3.6 Responsible Gaming

Your gaming and financial activity data is used by bk8login's Responsible Gaming monitoring system to identify behavioural patterns that may indicate risk, send alerts to members approaching their self-set limits, and fulfil the platform operator's obligations to ensure member wellbeing.

4 Data Sharing with Third Parties

Bk8login does not sell, rent, or commercialise members' personal data to any party for advertising or marketing purposes. However, there are specific situations where we may need to share your data with selected third parties:

4.1 Required Service Providers

To deliver the bk8login platform services, we work with carefully selected service providers who are bound by strict data protection agreements. These include:

• Payment Gateway Providers: To process MYR deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX. Only the data required to complete the transaction is shared.
• Game Software Providers: Live casino providers such as Evolution Gaming, Pragmatic Play Live, and SA Gaming receive the game session data necessary to run the games. They do not receive your full personal data.
• Cloud Service Providers: Data is stored on secure servers hosted by infrastructure providers that comply with industry security standards.
• Identity Verification Services: For the KYC process, we may engage accredited third-party services to verify identity documents. This data is processed securely and is not retained beyond what is strictly necessary.

4.2 Legal Requirements

Bk8login may be required to disclose member personal data to the relevant authorities where mandated by Malaysian law, a valid court order, or an official request from a law enforcement agency. In such circumstances, we will endeavour to notify the member concerned where permitted to do so by law.

4.3 What We Do Not Do

• We do not sell member data to advertising companies or data brokers.
• We do not share data with other online entertainment platforms or competitors.
• We do not allow third parties to use bk8login member data for marketing purposes without your explicit consent.
• We do not share members' detailed financial information except with payment service providers directly involved in processing your transactions.

5 Data Security – bk8login Protection Measures

5.1 Security Infrastructure

Bk8login continually invests in security infrastructure to protect every member's data. The technical measures we have in place include:

• 256-bit SSL Encryption: All communications between your device and bk8login's servers are fully encrypted. This means that even if someone were to intercept your network traffic, the data they would see is meaningless encrypted text.
• Two-Factor Authentication (2FA): Available and encouraged for all bk8login members as an added layer of account security.
• 24-Hour Security Monitoring: Our automated monitoring system continuously watches for suspicious account activity and instantly alerts the security team to take swift action.
• Internal Access Controls: Access to member data within bk8login is strictly limited to staff who require it to perform their duties, with full logging of every access instance.

5.2 Financial Transaction Security

All financial transactions on bk8login — MYR deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX — are processed through payment gateways compliant with PCI DSS (Payment Card Industry Data Security Standard). Your full bank account or e-wallet details are not stored in bk8login's database.

5.3 Organisational Measures

Beyond technical measures, bk8login also implements strict organisational safeguards, including regular privacy and security awareness training for all staff, a clearly defined security incident management policy, data breach response procedures, and periodic external security audits conducted by independent parties.

6 Data Retention Period

Bk8login retains member personal data for as long as necessary to fulfil the purposes outlined in this policy, or for the period required by applicable legal obligations, whichever is longer.

In general, bk8login's data retention principles are as follows:

• Active Account Data: Retained for as long as your bk8login account remains active. If your account is closed at your request, data that is not required to be retained for legal purposes will be deleted within 90 days.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with applicable Malaysian financial compliance and legal requirements. This includes records of deposits and withdrawals in MYR.
• KYC Records: Retained for the period required to fulfil anti-money laundering (AML) obligations and related identity verification requirements.
• Support Communication Logs: Retained for three (3) years for dispute resolution and service quality improvement purposes.
• Technical Data & Security Logs: Retained for 12 months for security monitoring and digital forensics purposes in the event of an incident.

Once the relevant retention period has lapsed, data will be deleted or anonymised (with all personal identifiers removed) in accordance with secure data disposal procedures.

7 Your Rights Over Personal Data

As a bk8login member residing in Malaysia, you have the following rights regarding the personal data we hold about you:

To submit any request related to the rights listed above, contact the bk8login customer support team via live chat, WhatsApp, or email at support@bk8login.best. We will acknowledge receipt of your request within 24 hours and aim to process valid requests within 30 calendar days.

Please note that these rights may be subject to certain limitations where data processing is required to comply with legal obligations, resolve pending disputes, or enforce the bk8login platform's Terms & Conditions.

8 Cookies, Sessions & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the bk8login platform. They help us recognise you across different browsing sessions, maintain your login session, and deliver a more consistent experience each time you use our platform.

8.2 Types of Cookies Used

8.3 Cookie Controls

You may manage or delete cookies through your browser settings at any time. Please note that deleting or blocking certain cookies – particularly session and security cookies – may affect the functionality of the bk8login platform, including your ability to log in and use our services normally.

9 Children's Data Protection

The bk8login platform is strictly for adults aged 21 and above. We do not target, intend to collect, or accept personal data from individuals under the age of 21.

If we discover that we have inadvertently collected data from an individual below the stipulated age, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect that their child or dependent has registered a bk8login account without authorisation are urged to contact our support team immediately via live chat or email at support@bk8login.best.

10 Cross-Border Data Transfers

In the course of its operations, bk8login may store or process data on servers located outside Malaysia – for example, servers belonging to cloud service providers or international game software providers such as Evolution Gaming and Pragmatic Play Live, which supply Live Casino services to our platform.

Any cross-border data transfers that occur are subject to adequate safeguards to ensure your data remains protected even when processed outside Malaysia. These safeguards include binding data processing agreements with the relevant providers, strict data security compliance requirements, and verification that providers operate to standards equivalent to or higher than our own.

Bk8login does not transfer member data to parties that lack adequate protection mechanisms, and we conduct regular reviews of the data management practices of the third-party providers we work with.

11 Privacy Policy Amendments

Bk8login reserves the right to update or amend this Privacy Policy from time to time in line with changes to Malaysian data protection laws, updates to platform operations, or improvements to our privacy practices.

Members will be notified of any significant changes to this Privacy Policy through:

• In-platform notifications on bk8login when you next log in.
• An email will be sent to your registered email address at least seven (7) days before the changes take effect.
• Updating the "Last Updated" date at the top of this document.

Your continued use of the bk8login platform after any amendment takes effect will be considered your acceptance of the updated Privacy Policy. It is your responsibility to review this Privacy Policy periodically. If you do not agree with any changes made, you have the right to close your account and stop using the bk8login platform.

12 Contact Us – Privacy Enquiries

If you have any questions, concerns, or requests regarding bk8login's Privacy Policy or the management of your personal data, please reach out to us through any of the following channels:

We aim to acknowledge all privacy enquiries within 24 hours and provide a full response within 30 calendar days, subject to the complexity of the request.