Privacy Policy
bk8mya Platform

1 Introduction

bk8mya ("we", "us", "our", "the Company", "the Platform") is committed to protecting the privacy and personal data of all users who access and use the bk8mya online casino and sports betting platform, available at https://bk8mya.cam.

This Privacy Policy ("Policy") sets out how bk8mya collects, processes, stores, shares, and protects the personal data of registered players and platform visitors ("you", "User", "Player"). It applies to all interactions with the Platform including account registration, deposits and withdrawals via Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency channels, as well as all gameplay, support communications, and marketing activities.

bk8mya operates in and targets the Malaysian market. While Malaysia does not currently have a comprehensive personal data protection law equivalent to the EU's GDPR, bk8mya voluntarily adopts data protection principles consistent with international best practice, including purpose limitation, data minimisation, security, and transparency.

2 Definitions

For the purposes of this Policy, the following terms have the meanings given below:

3 What Personal Data We Collect

bk8mya collects Personal Data through a number of channels. The categories of data we collect include, but are not limited to, the following:

3.1 Identity & Registration Data

• Full legal name (as it appears on your government-issued identification);
• Date of birth (for age verification — minimum 21 years required);
• Gender;
• Nationality and country of residence;
• Malaysian MyKad number, Passport number, or equivalent government-issued ID number;
• Username and encrypted password.

3.2 Contact Data

• Email address;
• Mobile phone number;
• Residential address (including postcode and state — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam).

3.3 Financial & Transaction Data

• Payment method details (e.g., Touch 'n Go eWallet account identifier, bank account details for FPX/DuitNow, Boost wallet ID, GrabPay account reference);
• Deposit and withdrawal transaction history, including amounts MYR and cryptocurrency equivalent;
• Cryptocurrency wallet addresses used for deposits and withdrawals;
• Bonus and promotion claims history.

3.4 Gaming & Activity Data

• Game play history, bet amounts, win/loss records;
• Sports betting selections (including Liga Super Malaysia, EPL, UFC, and other markets);
• Session duration and login timestamps;
• Platform navigation patterns and feature usage.

3.5 Technical & Device Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, and browser version;
• Cookie identifiers and similar tracking technologies;
• Referal URL and entry page to the Platform.

3.6 Communications Data

• Live chat transcripts and email correspondence with customer support;
• Responses to surveys or feedback forms (where voluntarily completed);
• Records of responsible gambling requests, including self-exclusion applications and deposit limit changes.

4 How We Collect Personal Data

bk8mya collects Personal Data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting customer support;
• Automated collection: Technical data collected automatically when you access the Platform, including via cookies, server logs, and device fingerprinting technologies;
• Third-party sources: Identity and fraud screening data received from KYC verification service providers and payment processing partners;
• Publicly available sources: In limited cases where necessary for fraud prevention or compliance, data obtained from publicly available records.

5 Purposes of Data Processing

bk8mya processes your Personal Data for the following specific, legitimate purposes:

6 Legal Basis for Processing

bk8mya processes your Personal Data one or more of the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions you accepted upon registration — including account management, payment processing, and service delivery;
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, security monitoring, and platform improvement, provided such interests are not overridden by your privacy rights;
• Legal obligation: Processing required to comply with our licensing obligations, AML/CTF requirements, and any applicable laws;
• Consent: Where you have explicitly consented to specific processing activities, such as receiving marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

bk8mya does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We may share your data only in the following circumstances:

7.1 Service Providers and Data Processors

We engage carefully veted third-party service providers to support the Platform's operations. These providers process data only on our instructions and are bound by data processing agreements. Categories include:

• KYC and identity verification providers;
• Payment gateway and e-wallet processing partners (including technical integrations with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX infrastructure);
• Fraud detection and AML screening services;
• Cloud hosting and infrastructure providers;
• Customer support platform operators;
• Game content providers and casino software studios.

7.2 Legal & Regulatory Obligations

We may disclose Personal Data to relevant authorities, regulators, or law enforcement agencies where we are required to do so by applicable law, court order, or our licensing obligations. In such cases, we will disclose only the minimum data necessary.

7.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets, Personal Data may be transferred to the relevant successor entity. Users will be notified of any such material change prior to its taking effect.

7.4 Responsible Gambling Registers

Where required by our licensing framework, we may be obligated to share self-exclusion information with relevant problem gambling registers or inter-operator exclusion schemes to prevent circumvention of self-exclusion orders.

8 Data Retention

bk8mya retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our licensing obligations and applicable law. Indicative retention periods are as follows:

• Account and registration data: Retained for the duration of your account's active lifetime plus a minimum of 5 years following account closure, in accordance with AML/KYC record-keeping requirements;
• Transaction records: Retained for a minimum of 5 years from the date of each transaction;
• Customer support records: Retained for3 years from the date of the last interaction;
• Marketing consent records: Retained for 3 years from the date of consent or until withdrawal of consent, whichever is earlier;
• Technical logs: Typically retained for 12 months, unless a longer period is required for security investigations.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised. Anonymised aggregate data may be retained indefinitely for analytical purposes, as it can no longer be used to identify any individual.

9 Data Security

bk8mya takes the security of your Personal Data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encrypted storage of sensitive Personal Data, including passwords (stored as salted hashes) and financial identifiers;
• Access controls limiting internal access to Personal Data to authorised personnel with a demonstrated business need;
• Segregated player funds held separately from operational capital to protect your balance;
• Regular security audits and penetration testing of Platform infrastructure;
• Incident response procedures enabling rapid containment and notification in the event of a data breach.

While bk8mya employs robust security measures, no system is completely immune to security risks. You are responsible for maintaining the security of your account credentials and for notifying us immediately upon becoming aware of any unauthorised activity on your account.

10 Cookies & Tracking Technologies

bk8mya uses cookies and similar technologies to provide, improve, and secure the Platform. The categories of cookies we use are:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication, login state management, and payment process continuity. These cannot be disabled without impairing Platform functionality;
• Analytical cookies: Used to understand how players navigate the Platform, which features are most used, and where technical issues occur. Data is aggregated and anonymised where possible;
• Functional cookies: Store your preferences (such as language, display settings, and game history) to provide a personalised experience;
• Security cookies: Used for fraud detection, bot prevention, and account protection purposes.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. We do not use cookies to serve third-party advertising.

11 International Data Transfers

As bk8mya operates under international licensing and uses globally distributed cloud infrastructure, your Personal Data may be transferred to and processed in countries outside of Malaysia. These countries may not have data protection laws equivalent to those in Malaysia.

When transferring Personal Data internationally, bk8mya ensures appropriate safeguards are in place, including:

• Contractual clauses in data processing agreements with service providers requiring them to protect your data to equivalent standards;
• Use of service providers located in jurisdictions that maintain adequately protective data laws;
• Internal policies and technical controls limiting cross-border data flows to what is strictly necessary.

12 Your Data Rights

Subject to applicable law and the nature of our processing obligations, bk8mya acknowledges that you hold the following rights with respect to your Personal Data:

To exercise any of these rights, please contact our Data Privacy team via the live chat widget on the Platform or at email address provided in Section15. We will respond to all valid requests within 30 days. Some requests may be subject to identity verification before processing.

13 Protection of Minors

The bk8mya Platform is strictly intended for adults aged21 years and above. We do not knowingly collect or process Personal Data relating to persons under 21. Age verification is a mandatory step of our KYC process, and we deploy automated and manual controls to detect and prevent underage access.

If we become aware that Personal Data has been collected from a person under the age of 21 without appropriate verification, we will immediately suspend the relevant account, delete the associated data, and report the matter to relevant authorities where required by law.

If you believe that a minor may have registered on the Platform without proper age verification, please contact our customer support team immediately via live chat or the email address in Section 15.

14 Changes to This Privacy Policy

bk8mya reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. Where changes are material, we will provide advance notice by:

• Posting the updated Policy prominently on the Platform at least 14 days before the changes take effect;
• Sending a notification to your registered email address where the changes materially affect your rights;
• Updating the Effective Date shown at the top of this page.

Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to the changes, you should discontinue use of the Platform and contact us to arrange account closure and data handling.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data, please contact the bk8mya Data Privacy team through the following channels:

• Live Chat Support: Available 24/7 via the live chat widget on the Platform. Response time under 2 minutes for general queries.
• Email: [email protected] — Please include "Privacy Request" in your subject line for data-related enquiries.

For responsible gambling support in Malaysia, please contact Talian Kasih at15999. Details of our responsible gambling tools are available on the Responsible Gambling page.

Our fullTerms & Conditions are also available for review.