pk8 Privacy Policy

Introduction

pk8 ("we", "us", "our") operates the online gaming and sports betting information platform accessible at https://pk8.buzz. This Privacy Policy ("Policy") describes the categories of personal information we collect from users ("you", "your") when you access or use the pk8 platform, the purposes for which that information is used, the circumstances in which it may be disclosed to third parties, and the rights available to you in connection with your personal data.

This Policy applies to all users of the pk8 website, including Malaysian users accessing the platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other locations across Malaysia. By registering an account, submitting a deposit, completing KYC verification or otherwise using the pk8 platform, you confirm that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or could reasonably identify a living natural person, directly or in combination with other data held by pk8.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" means pk8, the entity that determines the purposes and means by which Personal Data is processed.
• "Data Subject" means the identified or identifiable natural person to whom Personal Data relates — in this context, you as a registered user of pk8.
• "KYC" means Know Your Customer verification, the identity-checking process required to confirm your name, date of birth and residential address before withdrawal is permitted.
• "Cookies" means small text files stored on your device by a website in order to remember information about your session and preferences.
• "Third-Party Processor" means any external service provider that processes Personal Data on behalf of pk8 under a data processing agreement, such as a payment gateway or identity verification service.

Data We Collect

3.1 Registration Data

When you create a pk8 account, we collect your full legal name, date of birth, Malaysian residential address, email address and, where provided, a contact telephone number. This information is required to establish and administer your account.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering and fraud-prevention obligations, pk8 may request copies of government-issued identity documents. For Malaysian users, accepted documents include a MyKad, a valid Malaysian driving licence or a valid passport. Proof of residential address — such as a utility bill or bank statement issued within the previous three months — may also be required.

3.3 Transaction and Payment Data

We record all deposit and withdrawal transactions, including the payment method used, transaction reference numbers, amounts in MYR and timestamps. Payment method details are processed via licensed third-party payment processors — pk8 does not store full card numbers or banking credentials on its own systems.

3.4 Account Activity Data

We collect records of games played, bets placed, bonus offers accepted, wagering activity and session duration data. This information is used for account management, dispute resolution, fraud detection and personalisation of your platform experience.

3.5 Technical and Device Data

When you access pk8, we automatically collect technical data including your IP address, browser type and version, operating system, device type, referring URL and pages visited. This data helps us maintain platform security and improve performance.

3.6 Communications Data

Any communication you send to pk8 — through support enquiries, feedback forms, email or live chat — is stored for the purpose of addressing your request and maintaining a record of our interactions.

Data Processing

pk8 processes your personal data for the following purposes:

Legal Basis for Processing

pk8 processes your personal data under one or more of the following legal bases:

• Contractual necessity: Processing is required to perform the contract between you and pk8 — including account administration, payment processing and provision of gaming services.
• Legal obligation: Processing is necessary to comply with applicable anti-money laundering, age verification, licensing and regulatory obligations.
• Legitimate interests: Processing is necessary for purposes of fraud prevention, platform security, responsible gambling monitoring and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Where we process data for optional purposes such as direct marketing, we do so only on the basis of your freely given, specific and informed consent, which you may withdraw at any time.

Data Sharing

6.1 Payment Processors

To facilitate MYR transactions, pk8 shares necessary payment data with licensed third-party payment processors that operate the Malaysian payment channels available on the platform, including those supporting Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow and FPX. These processors are contractually bound to handle data securely and only for the purpose of completing your transaction.

6.2 Identity Verification Services

KYC documents submitted for identity verification may be shared with licensed third-party verification providers engaged by pk8. These providers process your documents solely for the purpose of confirming your identity and are subject to strict data protection agreements.

6.3 Regulatory and Law Enforcement Authorities

pk8 may be required to disclose personal data to relevant regulatory bodies, licensing authorities, law enforcement agencies or courts when legally compelled to do so. Such disclosures are made only to the extent required by applicable law.

6.4 No Sale of Personal Data

pk8 does not sell, rent or trade personal data to third parties for marketing or commercial purposes. Any data sharing arrangements are governed by data processing agreements that restrict use to specified and legitimate purposes.

Data Retention

pk8 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following general principles apply:

• Account registration and KYC data is typically retained for a minimum of five years following account closure, in line with anti-money laundering regulations.
• Transaction records are retained for a minimum of five years to support audit, dispute resolution and regulatory compliance obligations.
• Support and communications data is retained for a period of two years following the resolution of the relevant enquiry, unless a longer retention period is required.
• Technical and session data used for security and performance purposes is typically retained for periods not exceeding twelve months.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual.

Security Measures

pk8 implements a range of technical and organisational security measures to protect personal data from unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and the pk8 platform;
• Access controls ensuring that personal data is accessible only to authorised personnel with a legitimate operational need;
• Secure storage systems and database protections for all data held at rest;
• Regular security assessments and vulnerability reviews of platform infrastructure;
• Staff training on data protection obligations and secure data-handling procedures.

Cookies Policy

9.1 What Cookies Are

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your preferred language, session status and navigation behaviour — and to distinguish your device from others.

9.2 Types of Cookies Used by pk8

• Essential cookies: Required for the pk8 platform to function. They enable core features such as login session management, security controls and access to account features. These cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised experience on pk8.
• Analytics cookies: Used to collect anonymised data about how users navigate the pk8 website — pages visited, time on page and navigation paths — to help us improve platform layout and content relevance. No personally identifiable information is collected through analytics cookies.

9.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You may choose to block or delete non-essential cookies at any time. Note that blocking essential cookies may prevent certain pk8 platform features from functioning correctly. Refer to the help documentation of your browser for specific instructions on managing cookies.

International Data Transfers

pk8 may transfer personal data to third-party processors or service providers located in jurisdictions outside Malaysia where this is necessary to provide platform services. Where such transfers occur, pk8 ensures that appropriate safeguards are in place — including contractual data protection obligations on the receiving party — to maintain the security and integrity of your personal data to a standard equivalent to that applied within Malaysia.

User Rights

Subject to applicable law and regulatory retention obligations, you have the following rights in connection with your personal data held by pk8:

• Right of access: You may request a copy of the personal data pk8 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to legal retention obligations.
• Right to restrict processing: You may request that pk8 restricts the processing of your personal data in certain circumstances, such as while the accuracy of data is contested.
• Right to object: You may object to processing based on legitimate interests, including direct marketing communications, at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to data portability: Where technically feasible and applicable, you may request a structured, machine-readable copy of personal data you have provided to pk8.

To exercise any of the above rights, please contact the pk8 support team using the contact details provided in Section 14 of this Policy. We will respond to verified requests within a reasonable timeframe and in any event within 30 days of receipt.

Minors & Age Restriction

The pk8 platform is strictly intended for adults aged 21 years and above. pk8 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person below the minimum age, we will close the relevant account and delete all associated data promptly.

If you have reason to believe that a minor has registered on pk8 or submitted personal data to our platform, please notify us immediately using the contact details in Section 14.

Amendments to This Policy

pk8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law or platform functionality. Where changes are material, we will provide reasonable notice to registered users via the platform or by email. The effective date of the current version of this Policy is displayed at the top of this page.

Your continued use of pk8 following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically to stay informed of how your personal data is handled.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy, your personal data or the exercise of your data protection rights, please contact the pk8 support team. All enquiries are handled confidentially and will be acknowledged promptly.

Website email: [email protected]

Please include your registered account name and a brief description of your enquiry or request. For data access or deletion requests, you may be asked to verify your identity before we can action your request, to ensure we are responding to the correct data subject.