BK88 Privacy Policy

This Privacy Policy is issued by BK88 ("BK88", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at https://bk88.casa. BK88 is operated under internationally recognised gaming regulations and is committed to responsible handling of personal data in accordance with applicable data protection standards.

This Privacy Policy applies to all registered players ("you" or "Player") and visitors who access the BK88 platform, whether from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere in Malaysia or internationally. It governs the collection, processing, storage, disclosure, and deletion of your personal data in connection with your use of the BK88 Platform.

By registering an account, making a deposit, or otherwise using the BK88 Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

BK88 collects and processes the following categories of Personal Data in connection with your use of the Platform. We collect only the data that is necessary for the purposes described in Section 5 of this Policy.

BK88 collects Personal Data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting our support team.
• Automated Collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, log files, and analytics tools. See Section 10 (Cookies) for full details.
• Third-Party Sources: Identity verification data from KYC service providers; fraud intelligence from compliance screening databases; payment confirmation data from payment processors (Maybank, CIMB, Touch 'n Go, DuitNow, FPX, and others).
• Publicly Available Sources: In limited circumstances and where legally permissible, BK88 may supplement your profile with data from public records or open databases for AML screening purposes.

BK88 processes your Personal Data for the following specific and legitimate purposes:

• Account Management: To create, maintain, and manage your BK88 Player account, including authentication and access control.
• Transaction Processing: To process deposits and withdrawals via your selected Malaysian payment methods, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels.
• KYC & Regulatory Compliance: To verify your identity and residential address as required by our licensing obligations and AML standards. We are legally required to collect and retain this data.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, account takeovers, and other prohibited conduct.
• Platform Improvement: To analyse gameplay patterns, platform usage, and technical performance data to improve our services, user interface, and game offerings.
• Customer Support: To respond to your queries, investigate complaints, and provide assistance in connection with your BK88 account.
• Marketing Communications: Where you have opted in, to send you information about promotions, bonuses, new game launches, and VIP offers relevant to your player profile. You may withdraw consent to marketing communications at any time.
• Responsible Gambling: To monitor gaming behaviour for indicators of problem gambling and to apply responsible gambling tools (deposit limits, self-exclusion) where requested or required.
• Legal Obligations: To comply with applicable laws, regulations, judicial orders, or requests from regulatory authorities.

BK88 processes your Personal Data on the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform our contractual obligations to you as a registered Player — including account management, payment processing, and KYC verification.
• Legal Obligation: Processing required for compliance with applicable laws and regulations, including AML obligations, KYC requirements, and regulatory reporting.
• Legitimate Interests: Processing conducted in pursuit of BK88's legitimate business interests, including fraud prevention, platform security, and service optimisation — balanced against your rights and interests.
• Consent: Processing activities for which you have provided explicit and informed consent, including optional marketing communications. Consent may be withdrawn at any time without detriment to your account.

BK88 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to binding confidentiality and data processing obligations:

• Payment Service Providers: Malaysian banks and e-wallet operators (including Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go, Boost, GrabPay, DuitNow, and FPX) receive transaction data necessary to process deposits and withdrawals.
• KYC & Identity Verification Providers: Specialist third-party KYC service providers who verify the authenticity of identity documents and perform AML screening on our behalf.
• Game Content Providers: Game studios and platform providers that deliver casino and sports betting content may receive anonymised or pseudonymised usage data for technical integration purposes only.
• IT Infrastructure Providers: Cloud hosting, database management, and cybersecurity vendors who operate BK88's technical infrastructure under strict data processing agreements.
• Regulatory Authorities: Where required by law, court order, or regulatory direction, BK88 will disclose Personal Data to the relevant governmental or law enforcement authority.
• Professional Advisers: Legal, audit, and compliance advisers who are bound by professional confidentiality obligations and process data only as strictly necessary.

BK88 retains your Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and KYC Data: Retained for a minimum of five (5) years following account closure to satisfy AML and regulatory record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of five (5) years in accordance with financial compliance obligations.
• Gaming Activity Logs: Retained for a period of two (2) years following the date of each gaming session, or longer where required for dispute resolution or regulatory purposes.
• Support Communications: Retained for three (3) years following resolution of the relevant inquiry or complaint.
• Marketing Preferences: Retained until you withdraw consent or close your account, plus a reasonable suppression period thereafter.
• Technical and Log Data: Typically retained for twelve (12) months for security monitoring and platform analytics purposes.

Upon expiry of the applicable retention period, your Personal Data will be securely deleted or anonymised so that it can no longer be attributed to you as an individual.

BK88 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your browser and the BK88 Platform;
• Encryption of sensitive data fields (including payment details and identity document images) at rest;
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access Personal Data;
• Two-factor authentication (2FA) enforced for all BK88 administrative accounts;
• Automated real-time monitoring systems that detect and respond to anomalous access patterns, brute-force attempts, and potential data exfiltration;
• Regular third-party penetration testing and security audits of BK88's infrastructure;
• Incident response procedures that include mandatory notification to affected players and relevant authorities in the event of a data breach.

Whilst BK88 takes all reasonable precautions to safeguard your data, no online platform can guarantee absolute security. You are also responsible for maintaining the confidentiality of your account credentials. BK88 recommends enabling two-factor authentication on your account and using a strong, unique password.

BK88 uses cookies and similar tracking technologies to deliver and improve the Platform experience. Cookies are small data files placed on your device when you access the Platform. BK88 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session management, authentication, and security. These cannot be disabled without impairing your use of the Platform.
• Functional Cookies: Store your preferences such as language selection, account settings, and responsible gambling tool configurations to personalise your experience.
• Analytics Cookies: Collect anonymised data about how players interact with the Platform — pages visited, session duration, and navigation paths — to help us improve usability and performance.
• Security Cookies: Used for fraud detection, bot prevention, and abuse monitoring to maintain the integrity of the Platform.

BK88 does not use third-party advertising cookies or behavioural tracking cookies that profile your activity across other websites. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use core Platform features.

As a data subject whose Personal Data is processed by BK88, you hold the following rights, subject to applicable legal limitations:

• Right of Access: You may request a copy of the Personal Data BK88 holds about you. We will provide this within 30 days of a valid request.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations (e.g., AML records must be retained for five years regardless of your request).
• Right to Restriction: You may request that we restrict processing of your Personal Data in certain circumstances, such as where accuracy is contested or processing is unlawful.
• Right to Data Portability: Where processing is based on your consent or a contract with you, you may request a structured, machine-readable copy of your Personal Data.
• Right to Object: You may object to processing based on legitimate interests, including profiling. You may also withdraw consent to marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact BK88 at [email protected] with the subject line "Data Rights Request" and include your registered username and a description of your request. We will acknowledge all valid requests within 5 business days and provide a substantive response within 30 days.

BK88 does not knowingly collect Personal Data from any individual under the age of 21. The BK88 Platform is strictly for players aged 21 and above. Our registration process includes date-of-birth verification and mandatory KYC identity checks designed to identify and reject underage applicants.

If BK88 becomes aware that Personal Data has been collected from a person under the age of 21, such data will be immediately deleted, the associated Account will be closed, and any funds deposited will be returned to the original payment method following investigation.

Parents or guardians who believe a minor may have accessed or registered on the BK88 Platform are encouraged to contact us immediately at [email protected]. We take underage gambling extremely seriously and will treat all such reports as a priority matter.

As an online platform serving players across Malaysia and operating infrastructure across multiple jurisdictions, BK88 may transfer your Personal Data to countries outside Malaysia for processing. This may occur when we use cloud hosting, KYC verification services, or game content providers located in other jurisdictions.

Wherever Personal Data is transferred internationally, BK88 ensures that appropriate safeguards are in place to protect your data, including:

• Binding contractual obligations on receiving parties that require them to protect your data to a standard equivalent to this Privacy Policy;
• Transfer only to jurisdictions with data protection frameworks recognised as providing adequate protections;
• Encrypted transmission channels for all cross-border data transfers.

BK88 reserves the right to update this Privacy Policy periodically to reflect changes in our data processing practices, regulatory requirements, or operational context. When material changes are made, BK88 will notify registered players by email to their registered address and/or through a prominent notice on the Platform.

The revised Policy will indicate the date of the most recent update at the top of the document. Continued use of the BK88 Platform following the effective date of any amendments constitutes your acceptance of the updated Privacy Policy.

Players are encouraged to review this page periodically. The current version of this Privacy Policy is always accessible at https://bk88.casa/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or BK88's data processing practices, please contact us through the following channels:

• Live Chat: Available 24/7 via the support widget on the BK88 Platform — the fastest route for urgent data or account security matters.
• Email: [email protected] — please include "Privacy Enquiry" or "Data Rights Request" in the subject line to ensure prompt routing.

Our support team is available at all times and is familiar with the context of Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. BK88 acknowledges all privacy-related correspondence within 48 hours and provides substantive responses within 30 days of a valid data rights request.

BK88 is committed to resolving data protection concerns through direct communication. Where a concern cannot be resolved through BK88's internal process, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.