pk8 | Privacy Policy – How We Protect Your Personal Data

01. Introduction

Pk8 ("we", "Platform") is an online entertainment platform operator committed to protecting the privacy of every member who uses our services. This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards.

By registering an account or using any pk8 service, you give us consent to process your personal data in the manner described in this document. If you do not agree with any provision of this policy, you should stop using the platform immediately.

This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy to fully understand your rights and responsibilities as a pk8 member.

We do not sell, rent, or trade your personal data to any third party for marketing purposes without your explicit consent. This is our commitment to every member.

02. Personal Data We Collect

To operate a secure and compliant platform, pk8 collects several categories of information from our members. Below is a comprehensive summary of the data types we process:

Data Categories	Information Type	Primary Purpose
Identity Data	Full name, date of birth, MyKad/passport number	KYC verification & fraud prevention
Contact Data	Email address, phone number, residential address	Account communications & notification delivery
Financial Data	Bank account details, deposit & withdrawal records	Payment processing & AML compliance
Technical Data	IP address, device type, web browser, OS	Account security & platform analytics
Gaming Data	Betting records, game history, wins	Licence compliance & responsible gaming
Document Data	MyKad photo, utility bill, KYC selfie photo	Identity verification & legal compliance

We only collect data that is strictly necessary for the stated purposes. Our data minimisation principle ensures no excessive information is collected from you.

03. How We Use Your Data

The personal data we collect is used exclusively for legitimate and transparent purposes. Here is how we use your information:

Account Management: Creating, verifying, and managing your member account, including the mandatory KYC process.
Transaction Processing: Processing all deposits, withdrawals, and bonus payments securely through approved channels.
Platform Security: Detecting and preventing any fraudulent activity, money laundering, or unauthorised access to your account.
Service Communications: Sending important notifications related to your account, transactions, promotions, and terms updates via email or in-app.
Platform Improvements: Analysing aggregated usage patterns to improve the user experience, introduce new features, and optimise platform performance.
Legal Compliance: Meeting reporting obligations to relevant authorities as required by Malaysian law and our operating licence.
Responsible Gaming: Monitoring gameplay patterns to identify members who may need support or self-protection measures.

          
          We do not use your data to make automated decisions that negatively affect you without human review. Every action taken on your account involves review by our team.
        

04. Sharing Information with Third Parties

Pk8 does not sell or disclose your personal data to third parties for marketing purposes. However, there are limited situations where we need to share certain information with trusted external parties:

Payment Providers: Required transaction information is shared exclusively with approved banks and e-wallet operators solely to process your payments.
Technical Service Providers: Hosting, cybersecurity, and analytics partners that help us operate the platform — subject to strict confidentiality agreements.
KYC Verification Provider: Approved third-party platforms for verifying member identities in accordance with licensing compliance requirements.
Authority: When required by law, court order, or lawful directive from a competent enforcement authority in Malaysia.

Reminder: All third parties we engage are bound by strict data protection agreements. They are only permitted to use your data for the specific purposes agreed upon with pk8.

05. Data Security and Protection

The security of your personal data is our highest priority. pk8 consistently invests in the latest security infrastructure to ensure your information stays protected at all times.

The security measures we apply include:

256-bit SSL/TLS Encryption: All communications between your device and pk8 servers are protected with industry-grade encryption.
Two-Factor Authentication (2FA): An additional security layer to protect your account from unauthorized access.
24/7 Monitoring: Continuous monitoring systems to detect and respond to any security threats promptly.
Internal Access Controls: Only authorised personnel have access to member personal data, with all access logged and audited.
Regular Backups: Data is backed up regularly and stored at a separate secure location to ensure continuous availability.
Penetration Testing: Our platform undergoes regular security testing by independent experts to identify and patch any vulnerabilities.

In the event of a serious data breach, we will notify affected members within the timeframe required by applicable law and take immediate steps to limit the damage.

06. Cookies and Tracking Technologies

Pk8 uses cookies and equivalent tracking technologies to enhance the user experience and ensure the platform functions smoothly. Cookies are small text files stored on your device when you visit our platform.

Types of cookies we use:

Essential Cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled.
Performance Cookies: Collecting information about how you use the platform so we can continuously improve the overall user experience.
Functional Cookies: Storing your preferences such as language, display settings, and login information for your convenience.
Analytics Cookies: Helping us understand platform traffic and usage patterns in an aggregated, anonymous manner.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality and user experience of the pk8 platform.

07. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data we hold about you. We fully respect these rights and will respond to any request within the timeframe prescribed by law.

Right of Access

You have the right to obtain a copy of the personal data we hold about you at any time.

Right to Rectification

You have the right to request correction of any data that is inaccurate, outdated, or incomplete.

Right to Erasure

You may request deletion of your data, subject to applicable legal retention obligations.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain situations provided for by law.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another platform.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

          
          To exercise any of the above rights, please contact our support team through the official channels available on the pk8 platform. We will respond within 30 days of receiving your request.
        

08. Data Retention Period

Pk8 retains your personal data only for as long as necessary for the stated purpose or as required by applicable law. This principle ensures we do not hold data that is no longer relevant or needed.

Active Account Data: Retained for the duration your account is active plus the mandatory period following account closure.
Financial Transaction Records: Retained for a minimum of seven (7) years in line with Malaysia's financial and tax legal requirements.
KYC Documents: Retained for a minimum of five (5) years after account closure in accordance with AML/CFT compliance requirements.
Security Logs: Retained for three (3) months to two (2) years depending on the log type and investigation requirements.
Communication Data: Support chat records and emails are retained for two (2) years for reference and service improvement purposes.

Once the specified retention period has elapsed, your data will be securely deleted or anonymised in accordance with our data disposal procedures.

09. Child and Minor Protection

Pk8 does not provide services to individuals under the age of 18. We do not knowingly collect personal data from children or minors. Our entire registration and KYC verification process is designed to prevent sign-ups by underage individuals.

If we discover that personal data has been collected from a person under the age of 18 without our knowledge, we will take immediate steps to delete that data and close the relevant account.

Notice to Parents & Guardians: If you believe your child has registered an account on our platform, please contact our support team immediately for corrective action.

10. Privacy Policy Amendment

Pk8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in how we protect your data.

Members will be notified of any material changes to this policy through:

Notifications within your pk8 platform account.
Email to the address registered to your account.
A notice link on the platform home page for a specified period.

Continued use of the pk8 platform after any amendments are published will be considered acceptance of the latest version of this Privacy Policy. The last updated date is always displayed at the top of this document for your reference.

pk8's Privacy Commitment

Bank-Grade Encryption

All your data is protected with 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia.

Integrated KYC

Our integrated identity verification system ensures that only the true account owner can access and manage their account.

No Data Selling

We have never sold and will never sell your personal data to advertisers or any third party for commercial purposes.

Malaysia PDPA Compliant

Our privacy policy and data management practices are fully compliant with the Personal Data Protection Act 2010 in force in Malaysia.

Control in Your Hands

Through your account settings, you can manage communication preferences, review your data, and exercise the rights granted to you by law.

Secure Data Deletion

Data that has exceeded its retention period is deleted using security procedures that ensure it cannot be recovered.

FAQ – Privacy Policy

pk8 does not sell or disclose your personal data to external parties for marketing purposes. We only share necessary information with payment providers, technical partners, and authorities when required by law. All third parties involved are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.

You may submit a data access request by contacting our support team via live chat or the official email available on the platform. Please include sufficient identity verification when making your request. We will process your request and provide a report within 30 days of receipt.

When your account is closed, we will retain your data only for the period required by law — typically five to seven years for financial records and KYC documents. Data no longer required after the mandatory retention period will be securely deleted or anonymised. You will not receive any marketing communications after account closure.

You have the right to request deletion of your personal data. However, this right is subject to certain exceptions — we are legally required to retain financial records, KYC documents, and compliance-related information for a prescribed period even if you request deletion. Other data not subject to legal retention requirements will be deleted upon your request.

pk8 employs multiple layers of security including 256-bit SSL encryption, two-factor authentication, real-time threat monitoring, enterprise-grade firewalls, and periodic penetration testing by independent security experts. In addition, staff access to sensitive data is restricted on a need-to-know basis and audited regularly to prevent any misuse.

Trusted Platform

Join pk8 with Complete Confidence

Your personal data is fully protected at pk8. Register today and enjoy a safe, transparent, and responsible online entertainment experience.

Pk8 Privacy Policy – Your Personal Data Protection