Privacy Policy BK8 Mas – Our Commitment to Your Data

1. Information We Collect

BK8 Mas only collects personal information that is genuinely necessary to provide a safe, fair, and legally compliant platform service. The information we collect falls into three main categories:

Information You Provide Directly:

• Full name as stated on a valid identity document.
• National identity card number, passport, or other official identity document.
• Date of birth for age verification purposes.
• Email address and mobile number for account communications.
• Bank account or digital wallet information for processing deposits and withdrawals.
• Current residential address for KYC verification purposes.

Information Collected Automatically:

• IP address and city/state-level geolocation data.
• Device type, operating system, and browser version in use.
• Session data including login timestamps, session duration, and game types played.
• Financial transaction history within the platform.
• Account activity logs for security and fraud detection purposes.

Information From Third Parties:

• Identity verification information from approved KYC service providers.
• Payment processing data from payment gateway operators partnered with BK8 Mas.
• Information from fraud prevention agencies to protect the platform and other users.

2. How We Use Your Information

Every piece of information we collect has a clear and legitimate purpose. bk8 mas uses user data for the following purposes:

BK8 Mas will not use your information for any purpose not stated above without first obtaining your renewed consent.

3. Sharing Information with Third Parties

BK8 Mas does not sell, rent, or disclose users' personal information to third parties except in the following limited and strictly controlled circumstances:

• Service Provider: We share only the necessary information with trusted service providers such as payment gateway operators, KYC service providers, and cloud technology infrastructure providers. All third parties are bound by strict confidentiality agreements.
• Legal Requirement: BK8 Mas will disclose user information to the relevant authorities when required by law, court order, or a legitimate official investigation.
• Your Rights: In cases where disclosure of information is necessary to protect the rights, property, or safety of BK8 Mas, other users, or the public.
• Business Transfer: Should bk8 mas be involved in a merger, acquisition, or asset sale, user information may be transferred. Users will be notified via a clear notice before any such transfer takes place.

4. Cookies and Tracking Technologies

BK8 Mas uses cookies and similar tracking technologies to enhance user experience, ensure account security, and analyse platform usage patterns. There are four types of cookies we use:

• Essential Cookies: Required for core platform operations such as login session management and security. These cookies cannot be disabled.
• Functional Cookies: Saving user preferences such as language, time zone, and display settings for a more comfortable experience.
• Analytics Cookies: Helping us understand how users interact with the platform so we can continue to improve. Data collected is aggregated and anonymised.
• Marketing Cookies: Used only with your consent to display relevant promotions. You may withdraw consent at any time via your account settings.

You can manage your cookie settings through your browser settings. Please note that disabling essential cookies may affect the core functionality of the BK8 Mas platform.

5. Data Security

BK8 Mas implements comprehensive security layers to protect users' personal data from unauthorised access, alteration, disclosure, or destruction. Our key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between users and our servers.
• Sensitive data at rest is protected using AES-256 encryption standards.
• Server infrastructure protected by multi-layered firewalls and intrusion detection systems.
• Round-the-clock security monitoring 24 hours a day, 7 days a week by the bk8 mas cybersecurity team.
• Penetration testing conducted regularly by independent security experts.
• A clear and tested incident response procedure is in place to address any data breaches swiftly and effectively.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. Users also play an important role in keeping their accounts safe by using strong passwords and enabling two-factor authentication.

6. User Rights Over Personal Data

As a bk8 mas user, you have clear and enforceable rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). These rights include:

To exercise any of the above rights, you may submit a written request to the bk8 mas privacy team. We will process your request within 14 business days. For more complex cases, this period may be extended to up to 30 days, with prior notice given to you.

7. Data Retention Period

BK8 Mas retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by applicable laws and regulations. Our data retention guidelines are as follows:

• Active account data: Retained for as long as your account remains active on the BK8 Mas platform.
• Financial transaction records: Retained for seven (7) years in accordance with Malaysian legal and financial regulatory requirements.
• KYC documents: Retained for five (5) years after account closure or the date of the last transaction, whichever is later.
• Security and activity logs: Retained for two (2) years for fraud detection and security incident investigation purposes.
• Closed account data: Basic information is retained for three (3) years after account closure for legal compliance purposes before being permanently deleted.

Once the retention period ends, your data will be securely deleted using methods that ensure it cannot be recovered.

8. Children's Privacy

The bk8 mas platform is exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we find that we have inadvertently collected personal information from someone under the age of 18, we will immediately take the following steps:

• Suspending the relevant account immediately while an investigation is conducted.
• Securely and permanently deleting all related personal information.
• Returning any related fund balances through the appropriate channels.
• Reporting the case to the relevant authorities where required.

9. Changes to This Privacy Policy

BK8 Mas reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When a material change occurs, we will take the following steps:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the bk8 mas platform's home page.
• Sending email notifications to all registered users for significant changes.
• For changes requiring renewed consent, we will request your express consent before the changes take effect.

Continued use of the bk8 mas platform after the effective date of the updated Privacy Policy constitutes your acceptance of those changes. If you do not agree with the changes made, you have the right to close your account and request deletion of your data.

10. Contact Our Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how bk8 mas handles your personal information, our privacy team is ready to assist. You may contact us via:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the bk8 mas platform. This is the fastest way to get a response.
• Support Email: [email protected] — for more detailed written enquiries.
• Help Centre: Visit page FAQ us for answers to the most frequently asked questions about privacy and data security.

Our team is committed to responding to all privacy-related enquiries within 3 business days. For formal data protection complaints, a full response will be provided within 14 business days in accordance with Malaysia's PDPA requirements.