BK88 Privacy Policy — Malaysia Personal Data Protection

1. Introduction

Bk88 ("we", "us", or "the Platform") is an online Sports Betting and casino platform operating at bk88-play.com, serving users in Malaysia. We understand that privacy is a fundamental right of every individual, and we take our responsibility to protect members' personal data with the utmost seriousness.

This bk88 Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and leading international data protection principles. This document clearly and transparently explains the types of personal data we collect, why we need it, how we use it, and the measures we take to keep your data safe and protected at all times.

We encourage all bk88 members to read this Privacy Policy carefully. If you have any questions after doing so, bk88's experienced support team is available at any time through our various communication channels.

2. Personal Data We Collect

BK88 collects several categories of personal data depending on the nature of your interactions with our platform. Below is a full breakdown of the types of data we may collect:

2.1 Registration & Identity Data

• Full name as stated on your MyKad or passport
• Malaysian identity card number (MyKad) or passport number
• Date of birth and gender
• Active email address
• Malaysian mobile phone number
• Current residential address in Malaysia

2.2 Financial & Payment Data

• Malaysian bank account details for withdrawal purposes (bank name, account number)
• E-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay)
• Deposit and withdrawal transaction history in Malaysian Ringgit (RM)
• Betting activity and winnings records

2.3 Technical & Usage Data

• IP address and approximate location information
• Device type, operating system, and web browser version
• Server log data including access times and pages visited
• Cookie data and unique device identifiers
• Usage patterns and game preferences on the bk88 platform

3. How We Collect Personal Data

BK88 collects members' personal data through a variety of transparent and responsible methods:

• Registration Form: Information you provide when registering a new BK88 account.
• Platform Usage: Data automatically generated when you browse, play, or make transactions on bk88.
• KYC process: Identity verification documents submitted to fulfil Know Your Customer requirements.
• Customer Support: Information you share when contacting the BK88 support team via live chat, email, or other channels.
• Cookies & Tracking Technologies: Data collected automatically via cookies, pixels, and similar tracking technologies as you browse the BK88 platform.
• Third-Party Sources: In certain cases, we may receive information about you from authorised third-party identity verification service providers.

4. Purposes of Personal Data Use

BK88 uses the personal data collected for the following legitimate and necessary purposes:

Bk88 will not use your personal data for any purpose beyond those stated above without first obtaining your consent. Whenever we wish to use your data for a new or different purpose, we will notify you and, where required, obtain fresh consent from you.

5. Sharing Data With Third Parties

Bk88 takes an extremely cautious approach to sharing members' personal data. We never sell your personal data to any party. However, there are limited situations where we need to share your data with selected third parties, namely:

• Payment Gateway Providers: Transaction information that must be shared with authorised payment providers such as FPX processors, DuitNow, Touch 'n Go eWallet, GrabPay, and Boost to enable your MYR transactions to be processed securely.
• KYC Service Providers: Third-party identity verification service providers we engage to meet our KYC compliance and anti-money laundering (AML) obligations.
• Technical Service Providers: Companies that assist us in operating bk88's technical infrastructure, including server hosting, email services, and platform analytics — all bound by strict confidentiality agreements.
• Regulatory Bodies & Law Enforcement: In cases where we are required to do so by Malaysian law, court order, or a valid request from the relevant authorities.
• Business Associates: In the context of due diligence reviews for any merger, acquisition, or sale of bk88 assets, where data will continue to be protected under strict confidentiality terms.

All third parties that receive BK88 members' personal data are required to uphold data protection standards equivalent to those in this BK88 Privacy Policy and applicable Malaysian law.

6. Personal Data Security

Bk88 continuously invests in cutting-edge cybersecurity infrastructure to ensure members' personal data is always protected against unauthorised access, loss, damage, or disclosure. Key security measures we employ include:

• Data encryption in transit: All communication between your browser and bk88's servers is secured with TLS 1.3 protocol and 256-bit SSL certificates.
• Data encryption at rest: Passwords and other sensitive information are stored in encrypted form using the latest hashing algorithms.
• Role-based access control (RBAC): Only staff who require access to specific data in order to carry out their assigned duties are granted such access.
• Periodic security audits: BK88 conducts regular penetration testing and security audits carried out by independent cybersecurity experts.
• Continuous 24/7 monitoring: Our automated monitoring system detects and responds to any suspicious activity or intrusion attempts in real time.
• Two-factor authentication (2FA): BK88 members are encouraged to enable two-factor authentication for an added layer of security on their accounts.

7. Cookies & Tracking Technologies

BK88 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform performs optimally. There are several types of cookies we use:

• Essential Cookies: Required for core bk88 platform functions such as login session management and security. These cookies cannot be disabled, as the platform will not function without them.
• Preference Cookies: Saves your settings and preferences — such as your preferred language, odds format, and interface display — to provide a more personalised experience.
• Analytics Cookies: Helps us understand how members use the BK88 platform so we can continuously improve our services. This data is collected in aggregate and is not used to identify individuals.
• Marketing Cookies: Used to display more relevant bk88 advertisements and promotions to you. You may opt out of this type of cookie at any time.

You can manage cookie settings through your web browser preferences. Please note that disabling certain types of cookies may affect the functionality or your experience on the BK88 platform.

8. Data Retention & Transfer

Bk88 retains members' personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or for as long as required under applicable Malaysian law:

• Active account data: Retained for the duration your account remains active and for a minimum of 5 years after account closure, in accordance with Malaysian financial and anti-money laundering legal requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian accounting and tax legal requirements.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Cookie and analytics data: Retained for no more than 13 months from the date of collection.

Bk88's primary servers operate in data centres that meet high international security standards. Where data needs to be transferred or processed outside Malaysia, we ensure that a level of protection equivalent to Malaysia's PDPA is maintained at all times through appropriate contractual agreements with data recipients.

9. Your Rights as a Data Subject

As a bk88 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the BK88 Data Protection Officer team via email support@bk88-play.com. We will process your request within 21 business days in accordance with Malaysia's PDPA requirements. Please note that certain requests may be subject to specific legal exemptions.

10. Children's Data & Minors

The BK88 platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process the personal data of children or individuals under the age of 18. Should we discover that data has been collected from an underage individual, we will take immediate steps to delete that data and close the account in question.

If you believe a child or minor has registered an account on bk88, please contact us immediately at support@bk88-play.com so that we may take the appropriate action.

11. Changes to This Privacy Policy

BK88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new Malaysian legal requirements, or changes to BK88's services. When we make material changes, we will:

• Updating the "Updated" date displayed at the top of this page.
• Displaying a prominent notice on the bk88 platform homepage regarding the changes.
• Send notifications via email or push notification to registered members where the changes are material and directly affect their privacy rights.

We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your personal data. Continued use of the BK88 platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy.

12. Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding bk88's Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO) through the following channels:

• Email: support@bk88-play.com
• Live Chat: Available 24/7 via the BK88 platform — the fastest way to get an immediate response
• FAQ: Visit Frequently Asked Questions us for answers to the most frequently asked privacy questions

We are committed to responding to all privacy-related enquiries within 2 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body overseeing PDPA compliance in Malaysia.