Privacy Policy

bk8rp ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all users ("User", "you", "your") who access and use the services offered at https://bk8rp.cam. This Privacy Policy ("Policy") sets out our practices with respect to the collection, use, storage, disclosure, and protection of your personal data.

This Policy applies to all personal data processed in connection with your use of bk8rp's website, mobile-optimised interfaces, account services, payment processing, customer support, and marketing communications. It is intended to be read alongside our Terms & Conditions, which govern the overall relationship between bk8rp and registered Users.

bk8rp primarily serves players in Malaysia, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout the country. Where personal data is collected from Malaysian residents, we endeavour to handle it in a manner consistent with the Personal Data Protection Act 2010 (PDPA) of Malaysia and applicable international data protection standards.

The following definitions apply throughout this Privacy Policy:

bk8rp collects personal data across several categories depending on how you interact with the Platform. The categories of data collected are as follows:

3.1 Identity & Registration Data

• Full legal name as it appears on your identification document;
• Date of birth (for age verification — 21+ requirement);
• Nationality and country of residence;
• MyKad number, passport number, or equivalent national identification number;
• Username and encrypted password chosen at registration.

3.2 Contact Data

• Email address — primary channel for account communications and support;
• Mobile phone number — for security verification (OTP) and support contact;
• Residential address — requested during KYC or for address verification.

3.3 Financial & Payment Data

• Bank account details associated with DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong Bank transfers;
• E-wallet account identifiers for Touch 'n Go eWallet, Boost, and GrabPay;
• Cryptocurrency wallet addresses for BTC, ETH, USDT, and BNB transactions;
• Deposit and withdrawal transaction records, including amounts in MYR or cryptocurrency equivalent, timestamps, and payment method used.

3.4 Transactional & Gaming Activity Data

• Betting history, wager amounts, game selections, and session durations;
• Sports markets accessed, live betting activity on Liga Super Malaysia, EPL, and other events;
• Bonus and promotion usage records;
• Account balance history and wallet transaction logs.

3.5 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session timestamps, login history, and access logs;
• Cookie identifiers and similar tracking technologies (see Section 11).

3.6 Communication & Support Data

• Records of live chat conversations, email correspondence, and support tickets submitted to bk8rp;
• Feedback, complaints, and dispute documentation.

bk8rp collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC, submitting a support ticket, or contacting us by email.
• Automated Collection: Technical data collected automatically when you access the Platform, including IP address, device information, and cookies (see Section 11).
• Transaction Processing: Payment data shared with us by your bank, e-wallet provider, or cryptocurrency network when you make a deposit or withdrawal.
• Third-Party Verification: Identity data received from third-party KYC verification service providers used to confirm your identity and age.
• Fraud Prevention Partners: Risk signals and fraud indicators received from our anti-fraud and AML compliance partners to protect the Platform and all Users.

bk8rp processes your personal data only for specific, legitimate purposes. The table below sets out the primary purposes for which each category of data is used:

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects, without first obtaining your explicit consent or as expressly required by applicable law.

bk8rp processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — including account management, transaction processing, and provision of gaming services.
• Legal Obligation: Processing is required to comply with applicable laws, including AML obligations, KYC requirements, and regulatory reporting to our licensing authority.
• Legitimate Interests: Processing is necessary for bk8rp's legitimate interests, including fraud prevention, platform security, responsible gambling monitoring, and improving the quality of our services — provided those interests are not overridden by your rights.
• Consent: Where you have given explicit consent — for example, to receive marketing communications or promotional emails. You may withdraw consent at any time by contacting our support team or updating your communication preferences in your Account settings.

bk8rp does not sell your personal data to third parties. We may share your data with the following categories of trusted third parties strictly as necessary to deliver our services:

• Payment Service Providers: Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong), e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), FPX and DuitNow infrastructure providers, and cryptocurrency network processors — to facilitate deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party services that verify your identity and age on our behalf. These providers are contractually bound to handle your data securely and in accordance with this Policy.
• AML & Fraud Prevention Partners: Compliance service providers that assist us in detecting and preventing money laundering, fraud, and account abuse.
• Game Software Providers: Game studios whose products are hosted on the Platform may receive limited transactional data necessary to deliver game outcomes and RTP calculations. No identity data is shared with game studios without necessity.
• Cloud & Hosting Infrastructure: Secure cloud infrastructure providers that host Platform data under data processing agreements with appropriate technical and organisational safeguards.
• Regulatory Authorities: Competent authorities where disclosure is required by law, court order, or our licensing obligations.

As an online platform operating internationally, bk8rp may transfer your personal data to servers and service providers located outside of Malaysia. Where such international transfers occur, bk8rp will ensure that appropriate safeguards are in place, which may include:

• Contractual clauses that require the recipient to protect your data to the same standard as required under this Policy and applicable Malaysian law;
• Transfer to jurisdictions that provide an adequate level of data protection as recognised by the relevant authorities;
• Application of technical and organisational security measures equivalent to those applied to data held within Malaysia.

You may request details of the safeguards in place for specific international transfers by contacting our support team at the contact details provided in Section 15.

bk8rp retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. Our standard retention periods are as follows:

• Active Account Data: Retained for the duration of your Account and for a minimum of 5 years following Account closure, to comply with AML record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years from the date of the last transaction or Account closure, whichever is later, in accordance with AML compliance requirements.
• Transaction Records: Retained for a minimum of 7 years to satisfy financial regulatory and audit requirements.
• Support & Communication Records: Retained for 3 years following resolution of the matter to which they relate, or 5 years where a dispute has been escalated.
• Marketing Consent Records: Retained for as long as you remain an active subscriber, plus a 2-year audit trail following withdrawal of consent.

Once the applicable retention period has expired, your data will be securely deleted or anonymised in a manner that prevents recovery or identification.

bk8rp takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data, including financial credentials and identity documents, is stored using AES-256 encryption at rest.
• Access Controls: Access to personal data is restricted on a strictly need-to-know basis. All bk8rp personnel with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication (2FA): Account holders may enable 2FA to add an additional layer of security to login and withdrawal processes.
• Regular Security Audits: The Platform undergoes regular penetration testing and security audits conducted by independent third-party security specialists.
• Incident Response Protocol: In the event of a data breach that poses a risk to your rights, bk8rp will notify affected Users and, where required, the relevant regulatory authority, within the timeframe mandated by applicable law.

While bk8rp employs robust security measures, no system is completely impenetrable. You also play a role in keeping your account secure — please ensure your password is strong, unique, and not shared with any third party.

bk8rp uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain session security, and analyse Platform usage. The types of cookies we use are categorised as follows:

You may configure your browser settings to decline or delete cookies. Please note that disabling essential cookies may impair your ability to access certain features of the Platform, including login and payment functions. Non-essential cookies (analytics and functional) may be declined without affecting core Platform functionality.

In accordance with the Personal Data Protection Act 2010 (Malaysia) and applicable international data protection principles, you have the following rights in relation to your personal data held by bk8rp. You may exercise any of these rights by contacting our support team as described in Section 15.

bk8rp will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days with written notice provided within the initial 30 days. We reserve the right to verify your identity before processing any rights request to prevent unauthorised access to another person's data.

bk8rp's services are strictly restricted to individuals aged 21 years and above. We do not knowingly collect or process personal data from any individual under the age of 21. If bk8rp becomes aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated Account.

Age verification is conducted as part of the KYC process and may include verification of a MyKad or passport. Parents and guardians who believe their child has accessed or registered on the Platform are encouraged to contact our support team immediately at [email protected] so that the matter can be addressed promptly.

bk8rp reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or business operations. Where changes are material, we will notify registered Users by email and/or by a prominent notice on the Platform prior to the changes taking effect.

The effective date of each version of this Policy is displayed at the top of this page. We encourage you to review this Policy periodically, particularly when you interact with the Platform after a significant period of inactivity, to stay informed about how your data is being protected and used.

Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Policy. If you do not agree with the amended Policy, you should cease using the Platform and contact us to request Account closure.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bk8rp handles your personal data, please contact our Data Protection team using the following channels:

When submitting a data rights request, please include your Account username and a clear description of the right you wish to exercise. bk8rp may request verification of your identity before actioning the request. We aim to acknowledge all requests within 5 business days and resolve them within 30 calendar days.