Bk888 Privacy Policy – Personal Data & Information Protection

At bk888, privacy is more than a legal obligation — it is a core value we uphold in every aspect of our platform operations. We understand that member trust is the most valuable asset we hold, and that trust can only be built when you clearly know how your personal information is handled.

This Privacy Policy is drafted in accordance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia and explains in detail every aspect of the collection, processing, storage, and protection of your personal data. This document applies to all bk888 members who use the official website, mobile app, or any services provided by our platform.

If you have any questions about this Privacy Policy or wish to learn more about your privacy rights, you may contact our privacy team using the details provided in the "Contact Us" section below.

Bk888 collects various categories of personal information when you interact with our platform. This collection is divided into three main stages:

Information You Provide Directly:

• Full name as stated on your official identification document.
• National identification number (MyKad) or passport number for international users.
• Date of birth for age verification purposes (18 and above).
• Active email address and mobile phone number.
• Residential or mailing address.
• Bank account details, credit/debit card numbers, or e-wallet information.
• Information you share through customer support channels.

Automatically Collected Information:

• IP address, device type, operating system, and browser version.
• Game session data including date, time, game type, and wagering amount.
• Geographic location (city/state level) based on IP address.
• Account activity log records for security and audit purposes.
• Mobile app usage data including crash reports and performance metrics.

Identity Verification (KYC) Information:

• Copy of national identity card or passport (front and back).
• Proof of address such as a utility bill or recent bank statement (not older than 3 months).
• Selfie holding your identity document for liveness face verification.
• Financial supporting documents if required for AML compliance.

Bk888 uses your personal data only for lawful, relevant purposes that are consistent with the reason it was collected. Below is a summary table of the primary purposes for data use:

Bk888 will not use your personal data for any purpose not stated in this policy without first obtaining your renewed consent. You may withdraw consent for marketing communications at any time through your account settings or by contacting our team.

The security of your personal data is bk888's top priority. We have made significant investments in our technical and organisational security infrastructure to ensure your data is always protected from unauthorised access, breaches, or misuse.

Technical Security Measures:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and bk888 servers is encrypted using the latest TLS 1.3 protocol.
• Data-at-rest encryption: Sensitive data stored in our databases is encrypted using the AES-256 algorithm.
• Two-Factor Authentication (2FA): An additional security layer is available for all member accounts via an authenticator app or SMS OTP.
• 24/7 security monitoring: Our security team continuously monitors systems using real-time threat detection tools.
• Firewall & intrusion detection system: Our infrastructure is protected by next-generation firewalls (NGFW) and advanced IDS/IPS systems.
• Regular penetration testing: bk888 conducts independent security audits on a regular basis to identify and patch any system vulnerabilities.

Organisational Security Measures:

• Access to member personal data is restricted to staff who genuinely require it to perform their duties.
• All staff handling sensitive data are required to complete mandatory information security training.
• Non-disclosure agreements (NDAs) are signed by all staff and contractors with access to personal data.
• A comprehensive data security incident response procedure has been established and is tested regularly.

Bk888 practices the principle of minimal data disclosure. We do not sell or rent member personal data to any third party. However, in certain situations, we may need to share data with trusted business partners to enable us to deliver quality services.

Categories of third parties that may receive your personal data:

• Payment service providers: Parties that process your deposit and withdrawal transactions, such as banks, FPX providers, e-wallets, and crypto providers. They only receive the data necessary to process your transactions.
• KYC/AML service providers: Third-party identity verification companies that help us meet our regulatory compliance obligations.
• Game software provider: Game development companies that supply gaming content to the bk888 platform. Data shared is typically limited to anonymised member identifiers without full names.
• IT infrastructure service providers: Hosting, CDN, and cloud computing companies that help us operate the platform securely.
• Regulatory authority: Law enforcement agencies, courts, or regulatory bodies when required by law or court order.

Every third party with whom we share data is required to sign a Data Processing Agreement (DPA) stipulating that they use the data solely for agreed purposes and implement security measures equivalent to bk888's standards.

As a bk888 member, you have important rights regarding your personal data under Malaysia's PDPA 2010. We are committed to helping you exercise these rights in a straightforward and transparent manner:

To exercise any of the above rights, please contact the bk888 Data Protection Officer via email at [email protected]. We will review your request and respond within the timeframe required by law.

Bk888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, account sessions, and security. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how members use the platform so we can improve the user experience. This information is collected anonymously.
• Functional Cookies: Remembers your preferences and settings such as language, preferred wagering limits, and interface display.
• Analytics Cookies: Used to analyse overall platform usage patterns and performance for the purpose of continuous improvement.

You may manage or disable cookies through your browser settings. However, disabling essential cookies may affect the functionality of certain parts of the bk888 platform. For more information on managing cookies, refer to your browser's help section.

In the course of operating the platform, your personal data may be transferred to and stored on servers located outside Malaysia. bk888 ensures that any such transfer is carried out in accordance with the requirements of PDPA 2010 and only to countries or regions that provide an equivalent or higher level of data protection than Malaysia.

For data transfers to countries that do not provide an equivalent level of data protection, bk888 will ensure that adequate safeguards are in place, including the use of recognised Standard Contractual Clauses (SCC) or other protective mechanisms approved by the relevant authorities.

The bk888 platform is strictly for members aged 18 and above. We do not knowingly collect or store any personal data from individuals under the age of 18. Our account registration process requires strict age verification through KYC procedures.

If we become aware that we have collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who believe their child has registered on our platform are requested to contact our team immediately at [email protected].

If you have any questions, concerns, or complaints regarding this Privacy Policy or how bk888 handles your personal data, please contact our Data Protection Officer (DPO):

You may also visit the FAQ for answers to frequently asked questions about privacy and account security. If you are dissatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

Bk888 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our business operations, legal requirements, or industry best practices. Members will be notified of any material amendments via:

• Notifications within the member account or via registered email.
• A clear announcement on the homepage and Privacy Policy page displaying the latest amendment date.
• In the event of significant amendments, we may require you to reconfirm your consent.

Your continued use of the bk888 platform after the effective date of any amendment will be considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your personal data.