Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how bk8mya ("bk8mya," "we," "us," "our"), the operator of the online gaming platform accessible at bk8mya.app, collects, uses, stores, discloses, and otherwise processes personal data relating to users ("you," "your") of the bk8mya platform ("Platform").

bk8mya operates the Platform as a licensed online gaming service. As part of providing this service to Malaysian players and other users, we are required by law and our operating licence conditions to collect and process certain categories of personal data. This Policy explains what data we collect, why we collect it, how we use it, and what rights you have in relation to it.

By registering an Account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of the bk8mya Terms & Conditions.

2. Data Controller

bk8mya, the operator of bk8mya.app, is the data controller in respect of the personal data collected and processed through the Platform. As data controller, bk8mya determines the purposes and means by which your personal data is processed.

For all privacy-related queries, requests, or complaints, you may contact our Data Protection team via the live chat facility on the Platform or by email at [email protected] (plain text — not a clickable link).

3. Data We Collect

bk8mya collects the following categories of personal data:

3.1 Identity Data

• Full legal name as it appears on your government-issued identification document;
• Date of birth;
• National identification number (e.g., MyKad number for Malaysian nationals);
• Gender (where provided);
• Copies of identity documents submitted for Know Your Customer (KYC) verification, such as MyKad (front and back), passport, or other government-issued identification.

3.2 Contact Data

• Email address;
• Mobile phone number (Malaysian numbers in the format +60XXXXXXXXX or equivalent);
• Residential address, including postcode and state (e.g., Kuala Lumpur, Selangor, Penang, Johor).

3.3 Financial Data

• Payment method details (e.g., Touch 'n Go eWallet identifier, Boost account reference, GrabPay linked details, FPX bank account details);
• Transaction history, including deposit amounts, withdrawal requests, and dates;
• Bonus and promotional credit history.

3.4 Account & Gaming Data

• Username and encrypted password hash;
• Account registration date and activity history;
• Betting and wagering history across all Platform products (Sportsbook, Live Casino, Slots, Poker);
• Responsible gaming settings, including any limits or self-exclusion requests you have applied.

3.5 Technical & Usage Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, browser type and version;
• Session timestamps, pages visited, features accessed, and in-session behaviour;
• Crash reports and error logs.

3.6 Communications Data

• Content of live chat, email, and WhatsApp support communications between you and bk8mya;
• Records of any complaints or dispute submissions.

4. How We Collect Data

bk8mya collects personal data through the following means:

• Direct submission: Data you provide during Account registration, identity verification, payment setup, or support interactions;
• Automated collection: Technical and usage data collected automatically via cookies, server logs, and similar technologies when you access the Platform;
• Third-party sources: Identity verification data confirmed through KYC service providers; payment data confirmed through payment gateway providers (e.g., FPX, eWallet operators); fraud prevention signals from third-party risk management services.

5. Purposes of Processing

bk8mya processes your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your bk8mya Account, including authentication and security;
• Service delivery: Enabling your participation in Sportsbook, Live Casino, Slots, and Poker products;
• Payment processing: Processing deposits and withdrawals via your chosen MYR payment method;
• Identity verification (KYC): Verifying your identity and age (21+) in compliance with our operating licence conditions and applicable regulations;
• Anti-money laundering (AML) & fraud prevention: Monitoring transactions and account activity for signs of money laundering, fraud, or other prohibited conduct as required by regulatory obligations;
• Responsible gaming: Monitoring account activity for signs of problem gambling behaviour and administering any responsible gaming tools you have activated;
• Customer support: Responding to your queries, complaints, and disputes;
• Legal compliance: Meeting obligations under applicable laws, regulations, and our gaming licence conditions, including reporting obligations to regulatory and law enforcement authorities;
• Platform improvement: Analysing aggregated usage data to improve Platform performance, features, and user experience;
• Marketing communications: Sending promotional offers and updates, where you have given consent or where permitted under applicable law, with the ability to opt out at any time.

6. Legal Bases for Processing

bk8mya processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and bk8mya (i.e., operating your Account and delivering the Platform services);
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC, AML, and gaming licence requirements;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests do not override your fundamental rights and freedoms;
• Consent: Processing for direct marketing communications, where we rely on your consent, which may be withdrawn at any time.

7. Disclosure of Personal Data

bk8mya does not sell your personal data to third parties. We may disclose your personal data to the following categories of recipients:

• Service providers: KYC/identity verification providers, payment gateway operators, fraud detection services, IT infrastructure providers, and customer support platform providers, all bound by data processing agreements that restrict their use of your data;
• Game content providers: Where game-level activity data is processed by licensed game studios (e.g., Evolution, Pragmatic Play, PG Soft) to deliver their games, under contractual data protection terms;
• Regulatory and law enforcement authorities: Where we are legally required to disclose information by applicable law, court order, or regulatory direction, including anti-money laundering reporting obligations;
• Group entities: Where bk8mya operates within a corporate group, data may be shared with group entities for the purposes of group-wide compliance and risk management, subject to appropriate data protection safeguards;
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bk8mya's business, your personal data may be transferred as part of that transaction, subject to equivalent data protection commitments.

8. International Data Transfers

8.1 As an internationally operated platform, bk8mya may transfer your personal data to countries outside Malaysia for processing by service providers or group entities. Where such transfers occur, bk8mya implements appropriate safeguards to ensure that your personal data receives an equivalent level of protection, including through the use of standard contractual clauses or reliance on adequacy decisions where applicable.

8.2 By using the bk8mya Platform, you consent to your personal data being transferred and processed outside Malaysia as described in this Policy.

9. Cookies and Tracking Technologies

9.1 bk8mya uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function, including session management and security;
• Performance cookies: Collecting aggregated analytics data to help us understand how users navigate the Platform and identify areas for improvement;
• Functional cookies: Remembering your preferences, such as language settings and responsible gaming limit configurations.

9.2 You may manage cookie preferences through your browser settings. Disabling essential cookies will impair the functionality of the bk8mya Platform and may prevent you from accessing certain features including Account login.

9.3 bk8mya does not use third-party advertising or cross-site tracking cookies on the Platform.

10. Data Retention

10.1 bk8mya retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and licence-related retention requirements.

10.2 Account and transaction data is generally retained for a minimum period following Account closure as required under anti-money laundering regulations and gaming licence conditions. After this period, data is securely deleted or anonymised.

10.3 Communications records (live chat, email) are retained for a period sufficient to resolve any associated disputes and comply with applicable complaint-handling regulatory requirements.

11. Your Data Rights

Subject to applicable law and our regulatory obligations, you may have the following rights in relation to your personal data held by bk8mya:

• Right of access: To request a copy of the personal data we hold about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data, subject to our legal and regulatory retention obligations;
• Right to restriction: To request that we limit our processing of your personal data in certain circumstances;
• Right to data portability: To request a machine-readable copy of personal data you have provided to us;
• Right to object: To object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: To withdraw any consent you have given for processing at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our Data Protection team via live chat on the Platform or at [email protected]. bk8mya will respond to verified requests within a reasonable timeframe in accordance with applicable law. Note that some rights may be limited where compliance with regulatory and legal obligations requires us to retain or continue processing certain data.

12. Security Measures

12.1 bk8mya implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bk8mya Platform;
• Encryption of sensitive data at rest, including payment credentials and identity document copies;
• Access controls limiting employee access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Incident response procedures for detecting, reporting, and addressing data security incidents.

12.2 While bk8mya maintains robust security measures, no digital platform can guarantee absolute security. You are responsible for maintaining the security of your own Account credentials and for notifying bk8mya immediately of any suspected unauthorised access.

13. Minors

The bk8mya Platform is strictly intended for users aged 21 years and above. bk8mya does not knowingly collect personal data from individuals under 21. Where bk8mya becomes aware that personal data has been collected from a person under 21, that data will be deleted and the associated Account closed immediately. If you believe a minor has registered on the Platform, please contact us immediately via live chat.

14. Amendments to This Policy

bk8mya may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. Where changes are material, we will notify registered users via email to their registered address or via a notice on the Platform. The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Continued use of the Platform following notification of a material change constitutes acceptance of the revised Policy.

15. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or bk8mya's data processing practices, please contact our Data Protection team:

• Live Chat: Available 24/7 on the bk8mya Platform — average response time 3–5 minutes;
• Email: [email protected] (plain text — not a clickable link).

If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.