🔏 bk8mya Privacy Policy

1. Introduction

bk8mya is committed to protecting the privacy and personal data of all players and users of the bk8mya platform. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. We recognise that Malaysian players entrust us with sensitive personal and financial information, and we take that responsibility seriously.

This Policy applies to all users of the bk8mya website at bk8mya.co, including registered account holders and visitors who have not yet registered. It governs the collection, use, storage, disclosure, and protection of personal data in connection with the bk8mya platform and all related services — including the sportsbook, bk8mya Casino, slots, Plinko, and VIP programmes.

2. Data Controller

bk8mya acts as the data controller in respect of all personal data processed in connection with the bk8mya platform. As data controller, bk8mya determines the purposes and means of processing your personal data. Where bk8mya engages third-party service providers to process data on its behalf, those parties act as data processors under written agreements that bind them to comply with applicable data protection obligations and to process personal data only on documented instructions from bk8mya.

For all privacy-related enquiries, players in Malaysia and elsewhere may contact bk8mya's data team at: [email protected]

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register for a bk8mya account or use bk8mya services, you may provide the following categories of personal data:

• Identity data: Full name, date of birth, nationality, national identity card number or passport number;
• Contact data: Email address, mobile phone number, residential address (including city — for example, Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru);
• Financial data: Payment method details (e.g., Touch n Go eWallet account, Boost account, Maybank, CIMB, or Public Bank account identifiers), transaction history, deposit and withdrawal records;
• Account credentials: Username and encrypted password;
• Verification documents: Copies of identity documents submitted for KYC (Know Your Customer) verification;
• Communications: Records of correspondence with bk8mya's support team, including live chat transcripts and email exchanges.

3.2 Data Collected Automatically

When you access or use the bk8mya platform, certain technical and behavioural data is collected automatically, including:

• IP address, device type, browser type and version, operating system;
• Session data, login timestamps, pages viewed, and navigation paths on bk8mya;
• Game play data, including games accessed, bet amounts, session duration, and game outcomes;
• Geolocation data derived from your IP address;
• Cookie and tracking data as described in Section 9 of this Policy.

4. How bk8mya Uses Your Personal Data

bk8mya processes your personal data for the following purposes:

5. Legal Basis for Processing

bk8mya processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil the contractual relationship between you and bk8mya, including account management and payment processing;
• Legal obligation: Processing required to comply with anti-money-laundering laws, gaming regulations, and other applicable legal obligations;
• Legitimate interests: Processing necessary for fraud prevention, platform security, and improving bk8mya's services, where such interests are not overridden by your rights;
• Consent: Processing for marketing communications or non-essential cookies, where you have provided explicit consent that you may withdraw at any time.

6. Sharing Your Personal Data

bk8mya does not sell your personal data to third parties. We may share your data in the following limited circumstances:

• Payment service providers: Your financial data is shared with payment processors (e.g., Touch n Go eWallet, Boost, banking partners) solely for the purpose of processing your transactions;
• Identity verification providers: KYC data may be shared with regulated third-party identity verification services to fulfil our age and identity verification obligations;
• Game providers: Technical session data may be shared with certified game studios (e.g., for live casino and slot products) as required to deliver game content;
• Regulatory authorities: bk8mya may be required to disclose personal data to gaming regulators, law enforcement agencies, or financial intelligence units in accordance with applicable legal obligations;
• Group companies: Data may be shared within the bk8mya corporate group for internal administrative purposes, subject to the same data protection standards as this Policy.

All third-party recipients are required to process your data only for the specified purposes and under data protection obligations consistent with this Policy.

7. Data Retention

bk8mya retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and our licencing obligations. Specifically:

• Account and identity data: retained for a minimum of five (5) years following account closure, in compliance with anti-money-laundering record-keeping requirements;
• Transaction records: retained for a minimum of five (5) years from the date of each transaction;
• Customer support communications: retained for three (3) years from the date of last contact;
• Marketing data: retained until you withdraw consent or opt out of marketing communications.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bk8mya's data disposal procedures.

8. Security Measures

bk8mya implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL encryption for all data transmitted between your device and bk8mya's servers;
• Encrypted storage of passwords — bk8mya staff do not have access to your plaintext password;
• Two-factor authentication (2FA) available for all account holders;
• Access controls restricting internal access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of the bk8mya platform;
• Incident response procedures to detect, investigate, and notify affected players of any personal data breach in accordance with applicable regulatory timelines.

Despite these measures, no data transmission over the internet can be guaranteed to be completely secure. Players should safeguard their bk8mya login credentials and contact support immediately if they suspect any unauthorised account activity.

9. Cookies & Tracking Technologies

bk8mya uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies used by bk8mya include:

• Strictly necessary cookies: Required for the bk8mya platform to function, including session management and bk8mya login authentication. These cannot be disabled.
• Performance cookies: Collect anonymised data on how players interact with bk8mya pages, used to improve platform performance and user experience.
• Functional cookies: Remember your preferences (e.g., language, display settings) to personalise your bk8mya experience.
• Analytics cookies: Used to understand traffic patterns and engagement on bk8mya. Data collected is aggregated and does not identify individual users.

You can manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the bk8mya platform.

10. Your Data Protection Rights

Subject to applicable law, you have the following rights in respect of your personal data held by bk8mya:

• Right of access: Request a copy of the personal data bk8mya holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data, subject to bk8mya's legal retention obligations;
• Right to restrict processing: Request that bk8mya limits how it uses your data in certain circumstances;
• Right to data portability: Request a structured, machine-readable copy of personal data you have provided to bk8mya;
• Right to object: Object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact bk8mya at [email protected]. bk8mya will respond to verified requests within 30 days. We may require proof of identity before processing any data subject request.

11. Minors

The bk8mya platform is strictly for adults aged 21 years and above. bk8mya does not knowingly collect personal data from persons under the age of 21. If bk8mya becomes aware that personal data has been collected from a minor, the relevant account will be immediately suspended, all data relating to the minor will be deleted, and any deposits or winnings associated with the account will be handled in accordance with our age verification and responsible gaming policies.

Parents and guardians who believe a minor has registered on bk8mya should contact [email protected] immediately.

12. Changes to This Privacy Policy

bk8mya reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. Material changes will be communicated to registered players by email or via a notice displayed on the bk8mya platform at least 7 days prior to the change taking effect. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Continued use of bk8mya following any update constitutes acceptance of the revised Privacy Policy.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bk8mya, please contact our support team:

• 📧 Email: [email protected]
• 💬 Live Chat: Available 8 AM – 12 AM (MYT) via the bk8mya platform
• 🤖 Automated Support: 24/7

bk8mya serves players across Malaysia — Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Ipoh, Kota Kinabalu, Kuching, and all other regions.