bk8apk Privacy Policy
— Your Data, Protected

1 Introduction

bk8apk ("we", "us", "our") is committed to protecting the privacy and personal data of every player who registers with or uses the bk8apk platform. This Privacy Policy describes the categories of personal data collected, the purposes for which that data is processed, how long it is retained, with whom it may be shared, and the rights available to data subjects.

By creating a bk8apk account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein. If you do not accept any part of this policy, you should discontinue use of the services and contact the support team to close your account.

This policy should be read alongside the bk8apk Terms & Conditions. In the event of a conflict between the two documents on a privacy matter, this Privacy Policy shall prevail.

2 Definitions

"Personal Data"

Any information relating to an identified or identifiable natural person ("data subject"), including but not limited to name, email address, date of birth, residential address, payment details, and device identifiers.

"Processing"

Any operation performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.

"Controller"

bk8apk, the entity that determines the purposes and means of processing personal data collected through the platform.

"Data Subject"

Any natural person whose personal data is processed by bk8apk, including registered players, prospective players, and visitors to the platform.

"Third Party"

Any natural or legal person, public authority, agency, or body other than the data subject, the controller, and persons who, under the direct authority of the controller, are authorised to process personal data.

"Consent"

Freely given, specific, informed, and unambiguous indication by the data subject, by a statement or clear affirmative action, signifying agreement to the processing of personal data relating to them.

3 Information We Collect

bk8apk collects personal data from players directly and, in some cases, from third parties and automated systems. The categories below reflect information that may be collected depending on how you interact with the platform.

4 Purpose of Processing

Personal data collected by bk8apk is processed only for specified, explicit, and legitimate purposes. The primary purposes are:

• Account creation and management: registering your account, maintaining player profiles, enabling login, and handling account settings.
• Payment processing: executing deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and other supported methods; reconciling transactions; managing cryptocurrency deposits and withdrawals in BTC, ETH, USDT, and BNB.
• Identity verification and compliance: satisfying know-your-customer (KYC) obligations, age verification (21+ requirement), anti-money-laundering (AML) checks, and other regulatory requirements.
• Service delivery: enabling access to casino games, live dealer tables, sports betting markets (including EPL, Liga Super Malaysia, and UFC events), and platform features.
• Security and fraud prevention: detecting unusual activity, protecting accounts against unauthorised access, and investigating suspected misuse.
• Customer support: handling queries, complaints, and responsible gambling requests through live chat and email.
• Responsible gambling: monitoring player activity for indicators of gambling harm, applying voluntary limits and exclusions, and maintaining records that support safe gambling controls.
• Platform improvement: analysing aggregated, de-identified usage data to enhance platform performance, usability, and game quality.
• Legal obligations: retaining records as required by applicable law and responding to lawful requests from competent authorities.

5 Legal Basis for Processing

Each processing activity rests on one or more of the following legal bases:

• Contract performance: processing necessary to provide the services you have registered to receive, including account maintenance, game delivery, and payment processing.
• Legal obligation: processing required to comply with applicable laws and regulations, including KYC, AML, and record-keeping requirements.
• Legitimate interests: processing that serves the reasonable interests of bk8apk in operating the platform securely and efficiently, where those interests are not overridden by your fundamental rights — such as fraud detection, IT security, and platform analytics.
• Consent: processing for which you have given specific and informed consent, such as receiving promotional communications. You may withdraw consent at any time by contacting support, without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

bk8apk does not sell, rent, or trade your personal data. Data may be shared with the following categories of recipients only to the extent necessary and under appropriate safeguards:

• Payment service providers: banks, e-wallet operators (including Touch 'n Go eWallet, Boost, and GrabPay), FPX and DuitNow infrastructure providers, and cryptocurrency exchange gateways — for the purpose of processing your financial transactions.
• Identity and KYC verification providers: third-party identity verification services used to confirm your age, identity, and, where required, source of funds.
• Game studios and software providers: licensed international game suppliers who may receive minimal technical data needed to deliver game content and settle results.
• Fraud prevention and security services: specialist providers who assist in detecting and preventing fraudulent activity, money laundering, and account compromise.
• Regulatory and law enforcement authorities: where bk8apk is subject to a legal obligation, court order, or lawful request from a competent authority to disclose personal data.
• IT infrastructure and cloud service providers: hosting, database, content delivery, and customer support software providers operating under data processing agreements with confidentiality obligations.

Where data is transferred to service providers outside Malaysia, bk8apk takes reasonable steps to ensure that appropriate contractual protections are in place consistent with applicable data protection requirements.

7 Retention Periods

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected and to satisfy applicable legal or regulatory requirements. The following general retention periods apply:

• Active account data: retained for the duration of your account registration and for a minimum of five years after account closure for AML and record-keeping compliance.
• Financial transaction records: retained for a minimum of seven years following the date of the transaction in accordance with standard financial record-keeping requirements.
• KYC verification documents: retained for a minimum of five years from submission or from account closure, whichever is later.
• Support communications: retained for up to three years from the date of the last interaction unless earlier deletion is requested and permissible.
• Technical and log data: session and server logs are typically retained for up to 90 days for security review purposes before being purged or permanently anonymised.
• Self-exclusion and responsible gambling records: retained for the duration of the exclusion period and for a period thereafter as required to prevent re-registration during the exclusion window.

8 Security Measures

bk8apk implements technical and organisational measures commensurate with the risk associated with processing player data. Current measures include, without limitation:

• 256-bit SSL/TLS encryption for all data in transit between your device and bk8apk servers;
• Encryption at rest for sensitive personal and financial data stored on bk8apk infrastructure;
• Multi-factor authentication options for player accounts and mandatory strong authentication for internal administrative access;
• Role-based access controls ensuring that employees and contractors access only the data strictly required for their function;
• Regular penetration testing, vulnerability scanning, and third-party security audits;
• Incident response and escalation procedures with defined notification timelines; and
• Staff data protection training reviewed periodically.

No security measure is infallible. Players should also take steps to protect their own accounts, including choosing a strong unique password, enabling two-factor authentication where available, and logging out from shared devices.

9 Cookies and Tracking Technologies

bk8apk uses cookies and similar technologies to operate the platform, maintain your login session, remember preferences, and analyse aggregate traffic patterns. The primary categories of cookies used are:

• Strictly necessary cookies: essential for login sessions, security tokens, and core platform functionality. These cannot be disabled without impeding the services.
• Functional cookies: remember your language, currency display (MYR), and interface preferences to improve your experience across visits.
• Analytics cookies: collect aggregated, de-identified data on how players navigate the platform to support performance improvements. No individual player is identified through analytics processing.

bk8apk does not use third-party behavioural advertising cookies. Your browser settings allow you to manage or block cookies, though some platform features may not function correctly if strictly necessary cookies are disabled.

10 Your Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by bk8apk:

• Right of access: you may request a copy of the personal data bk8apk holds about you, together with information about how it is used.
• Right to rectification: you may request correction of inaccurate or incomplete personal data at any time.
• Right to erasure: in certain circumstances, you may request deletion of your personal data. This right may be limited where bk8apk is required to retain data by law — for example, to comply with AML record-keeping obligations.
• Right to restriction: you may request that bk8apk restrict the processing of your data in certain circumstances, such as while an accuracy dispute is resolved.
• Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
• Right to object: you may object to processing based on legitimate interests. bk8apk will cease such processing unless compelling legitimate grounds override your interests, rights, and freedoms.
• Right to withdraw consent: where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, contact the bk8apk data team via the details in Section 13. We will acknowledge your request promptly and aim to respond substantively within 30 days, subject to identity verification.

11 Minors and Age Restriction

The bk8apk platform is intended exclusively for persons aged 21 and above. bk8apk does not knowingly collect or process personal data from individuals under 21. During registration, players are required to confirm their age and provide identity documentation for verification where requested.

If bk8apk determines or is notified that a person under 21 has provided personal data or accessed the platform, we will promptly close the account, cancel any associated transactions, and delete the relevant personal data subject to any legal retention obligations that may apply.

12 Changes to This Privacy Policy

bk8apk may update this Privacy Policy from time to time to reflect changes in applicable law, data protection standards, platform features, or operational practices. Material changes will be communicated to registered players through email notification or a prominent notice on the bk8apk platform, and the effective date at the top of this document will be updated accordingly.

Continued use of bk8apk following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should stop using the platform and request account closure through the support team. We encourage you to review this page periodically to remain informed of how your data is protected.

13 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the bk8apk data protection team through any of the channels below. We are committed to responding to all privacy-related enquiries promptly and thoroughly.