Privacy Policy
bk8mas is committed to protecting the personal information of every player who uses our platform. This Privacy Policy explains in clear, formal terms what data we collect, why we collect it, how it is used and stored, and what rights you hold as a data subject. Please read this document carefully before registering or making a deposit.
Secure Data Handling
All personal data is encrypted in transit and at rest using industry-standard 256-bit SSL technology. Access to player records is strictly role-restricted.
No Data Selling
bk8mas does not sell, rent, or trade your personal information to any third party for marketing purposes. Your data belongs to you.
Your Rights Protected
You may request access, correction, or deletion of your personal data at any time by contacting our support team via live chat or email.
Malaysian Context
Data processing considerations reflect the context of Malaysian players, including MYR transactions, local KYC document types, and Malaysian payment provider integrations.
1Introduction
This Privacy Policy ("Policy") is issued by bk8mas ("Company", "we", "us", or "our"), the operator of the online gaming platform accessible at bk8mas.cam. This Policy governs the collection, use, storage, and disclosure of personal data submitted by or obtained in connection with users ("Player", "User", or "you") of the bk8mas platform.
By registering a bk8mas account, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read in conjunction with the bk8mas Terms & Conditions and Responsible Gambling Policy.
If you do not agree with any part of this Policy, you should discontinue use of the bk8mas platform and contact support to request account closure. Questions regarding this Policy may be directed to our support team at any time.
This Policy applies to all personal data collected through the bk8mas website, mobile-optimised pages, live chat channels, and customer support correspondence, regardless of the device or network used to access these services.
2Definitions
For the purposes of this Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, including name, email address, date of birth, device identifiers, and financial account details. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, alteration, deletion, or transfer, whether automated or manual. |
| "Data Subject" | The individual to whom the personal data relates; in the context of bk8mas, this is typically the registered player. |
| "Third Party" | Any entity other than bk8mas and the data subject, including payment processors, identity verification providers, analytics services, and regulatory authorities. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement by which a data subject signifies acceptance of personal data processing. |
| "KYC Documents" | Identity and address verification documents submitted by a player in fulfilment of Know Your Customer obligations, such as a Malaysian MyKad, passport, or utility bill. |
3Data We Collect
3.1 Information You Provide Directly
When you register, complete identity verification, or contact support, bk8mas may collect the following categories of personal data:
- Identity data: Full legal name, date of birth, nationality, and copies of government-issued identification documents (Malaysian MyKad, passport, or driving licence).
- Contact data: Email address, mobile number, and residential address (including city and state within Malaysia, such as Kuala Lumpur, Penang, or Johor Bahru).
- Financial data: Payment method details including bank account identifiers, e-wallet references (Touch 'n Go eWallet, Boost, GrabPay), and cryptocurrency wallet addresses. bk8mas does not store full card numbers or banking passwords.
- KYC documentation: Document scans and selfies submitted in fulfilment of account verification requirements.
- Support correspondence: Chat logs, email records, and any information voluntarily shared when raising a query or complaint.
3.2 Information Collected Automatically
When you access bk8mas, certain technical and behavioural data is collected automatically:
- Device and network data: IP address, device type, operating system, browser type, and approximate geographic location derived from IP.
- Usage data: Pages visited, game sessions, wagers placed, session duration, login timestamps, and navigation paths within the platform.
- Cookie data: Information stored by cookies and similar tracking technologies as described in Section 7.
4Data Processing
bk8mas processes your personal data for the following purposes:
bk8mas processes personal data only to the extent necessary for each stated purpose. We do not use personal data for purposes incompatible with those disclosed in this Policy without your prior consent.
5Legal Basis for Processing
bk8mas processes personal data on one or more of the following lawful grounds:
- Contractual necessity: Processing required to fulfil the player agreement, including account creation, payment processing, and game access.
- Legal obligation: Processing required to comply with applicable anti-money laundering regulations, identity verification mandates, and regulatory reporting obligations.
- Legitimate interests: Processing conducted in pursuit of bk8mas's legitimate business interests, such as fraud prevention, platform security, and service analytics, where such interests are not overridden by the rights of the data subject.
- Consent: Where processing is based on your explicit agreement, such as the receipt of promotional communications. Consent may be withdrawn at any time by contacting support, without affecting the lawfulness of processing carried out before withdrawal.
6Data Sharing & Disclosure
6.1 Authorised Third-Party Processors
bk8mas may share personal data with carefully selected third-party service providers who process data on our behalf under binding contractual obligations, including:
- Payment processors: Malaysian banking institutions (Maybank, CIMB, Public Bank, Hong Leong), e-wallet operators (Touch 'n Go, Boost, GrabPay), and instant transfer providers (DuitNow, FPX) — for the sole purpose of processing financial transactions.
- Identity verification providers: Third-party KYC service platforms that review identity documents and confirm player eligibility.
- Technology infrastructure: Cloud hosting and content delivery providers that support the operation of the bk8mas platform under strict data processing agreements.
- Fraud detection services: Specialised platforms that identify suspicious account activity or payment irregularities.
6.2 Regulatory and Legal Disclosure
bk8mas may disclose personal data to regulatory authorities, law enforcement agencies, or other competent bodies where required to do so by law, court order, or in connection with the investigation of suspected criminal activity including fraud and money laundering.
6.3 No Commercial Data Selling
bk8mas does not sell, lease, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Any data sharing is strictly limited to operational necessity or legal obligation.
Where personal data is transferred to third parties outside your jurisdiction, bk8mas ensures appropriate safeguards are in place, such as standard contractual clauses, to maintain equivalent levels of data protection.
7Cookies & Tracking Technologies
bk8mas uses cookies and similar client-side tracking technologies to support platform functionality, improve user experience, and analyse aggregate usage patterns. The following categories of cookies are employed:
- Strictly necessary cookies: Essential to the operation of the platform, including session management, login authentication, and security functions. These cannot be disabled without affecting core functionality.
- Functional cookies: Retain your preferences such as language selection and previously visited game categories, improving navigation efficiency on return visits.
- Analytics cookies: Collect anonymised data about page views, session duration, and click patterns. This data helps bk8mas improve platform layout and performance. No personally identifiable information is included in analytics reports.
- Security cookies: Support fraud detection and anti-bot mechanisms that protect account integrity and payment security.
You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may limit your ability to use specific platform features. Continuing to use bk8mas following notification of cookie use constitutes acceptance of this policy unless you adjust your browser settings accordingly.
8Data Retention
bk8mas retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:
- Active account data: Retained for the duration of the player's account with bk8mas plus a minimum period thereafter as required for regulatory compliance.
- Financial transaction records: Retained for a minimum of five (5) years following the date of the transaction to satisfy anti-money laundering record-keeping requirements.
- KYC documentation: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
- Support correspondence: Retained for a period sufficient to resolve any associated dispute and for a reasonable period thereafter, typically not exceeding three (3) years.
- Anonymised analytics data: May be retained indefinitely in aggregated, non-identifiable form for platform improvement purposes.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bk8mas's data disposal procedures.
9Data Security
bk8mas implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the bk8mas platform;
- Encrypted storage of sensitive data fields including identity document references and payment identifiers;
- Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data;
- Regular security reviews, penetration testing, and vulnerability assessments of platform infrastructure;
- Multi-factor authentication requirements for internal administrative access to player data systems;
- Incident response procedures to contain and report data breaches within required regulatory timeframes.
Notwithstanding these measures, no method of electronic transmission or storage is entirely immune to risk. Players are also responsible for maintaining the confidentiality of their own account credentials. bk8mas will never request your password through any communication channel.
If you believe your bk8mas account has been compromised or accessed without authorisation, contact our support team immediately via live chat or at [email protected].
10User Rights
Subject to applicable data protection law, you hold the following rights in respect of your personal data held by bk8mas. To exercise any right, contact our support team with your registered email address and the specific request:
You may request a copy of the personal data bk8mas holds about you, together with information about how and why it is being processed.
You may request correction of any inaccurate or incomplete personal data we hold. Account holders may update certain profile details directly through the account settings area.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations such as AML record-keeping requirements.
You may request that bk8mas restrict the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or object to its use.
Where processing is based on consent or contract and carried out by automated means, you may request a structured, machine-readable copy of your personal data for transfer to another service provider.
You may object to the processing of your personal data where bk8mas relies on legitimate interests as the legal basis, including profiling for personalisation purposes.
Where processing relies on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
bk8mas will acknowledge data rights requests within 3 business days and provide a substantive response within 30 days of receipt. We may need to verify your identity before acting on a request to protect against unauthorised access.
11Minors
The bk8mas platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has registered an account or submitted personal data, we will immediately suspend that account, delete the associated personal data, and take such further steps as are appropriate under our responsible gambling obligations.
If you believe a minor has accessed the bk8mas platform using your account credentials or has registered independently, please notify us immediately via live chat or by email at [email protected]. Parents and guardians are encouraged to use parental control software to prevent underage access to online gambling platforms.
12Policy Updates
bk8mas reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, regulatory guidance, platform functionality, or data processing practices. The revised Policy will be published on this page with an updated effective date.
Where updates are material in nature, bk8mas will notify registered players via email or through a notification displayed within the platform. Your continued use of bk8mas following the publication of an updated Policy constitutes your acknowledgement and acceptance of the revised terms. If you do not agree with the updated Policy, you should cease using the platform and contact support to initiate account closure.
Previous versions of this Policy are available on request by contacting our support team.
13Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bk8mas, please contact our team through any of the following channels:
- Email: [email protected]
- Live Chat: Available 24 hours a day, 7 days a week via the bk8mas platform interface
- Response time: Live chat under 2 minutes; email within 4 hours during operational hours
For broader queries about your account usage rights, please refer to the bk8mas Terms & Conditions. For information about responsible gambling tools including deposit limits and self-exclusion, please visit the Responsible Gambling page.
This Privacy Policy was last reviewed and updated on 1 January 2026.
Your Privacy, Our Priority
Now that you understand how bk8mas handles your data, explore our full platform — or visit the FAQ for practical answers about accounts, payments, and responsible gambling tools.
For adults aged 21 and above only. bk8mas promotes responsible gambling at all times.