Privacy Policy vk8 — Personal Data Protection for Malaysia Members

Vk8 ("we", "Platform") understands that privacy is not merely a legal requirement — it is a fundamental right of every user. This Privacy Policy is prepared clearly and transparently so you know exactly what happens to your personal information every time you use the vk8 platform.

As an online betting platform serving users in Malaysia and the region, we are committed to handling your personal data with the utmost integrity. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards for data security and privacy.

It is important for you to understand that the data you provide to us is used solely for legitimate purposes — verifying your identity, processing financial transactions, delivering better betting services, and ensuring your account security. We never sell or rent your personal data to third parties for marketing or commercial purposes.

Vk8 collects your personal data through three primary means: information you provide directly during registration, information collected automatically while you use the platform, and information we receive from trusted third parties such as payment providers.

Every piece of data we collect has a clear and legitimate purpose. vk8 uses your personal information for the following purposes:

• Account Management: Creating, verifying, and maintaining your member account, including the identity verification (KYC) process required by law.
• Transaction Processing: Processing deposits, withdrawals, and all other financial transactions securely and accurately via payment methods such as DuitNow, TNG eWallet, Maybank, CIMB, GrabPay, and Boost.
• Legal Compliance: Meeting legal requirements including Anti-Money Laundering (AML), Counter Financing of Terrorism (CFT), and applicable licensing regulations.
• Platform Security: Detecting and preventing fraud, hacking, multiple account ownership, and any activity that violates our terms of use.
• Service Improvement: Analysing aggregated usage patterns to improve the user interface, platform speed, and overall member experience.
• Service Communications: Sending important notifications related to your account, transactions, promotions you have subscribed to, and policy updates.
• Responsible Gaming: Monitoring betting patterns to identify members who may need responsible gaming support, including deposit limit settings and risk management.

We do not use your data for automated decisions that significantly affect you without human involvement, except in cases of fraud detection where immediate action is required to protect your account security.

Vk8 does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes. However, there are limited situations where we need to share your information with certain parties to ensure our services operate properly and remain legally compliant:

• Payment Providers: We share the necessary transaction information with our integrated payment providers (such as DuitNow, TNG eWallet, and leading banks) to process deposits and withdrawals. These providers adhere to strict PCI DSS security standards.
• Game Providers: Minimum required information may be shared with third-party game providers (such as slot and Live Casino providers) to enable you to play on their platforms via vk8.
• Legal Authority: We will disclose information where required by law, court order, or legitimate request from Malaysian government authorities or relevant regulatory bodies.
• Identity Verification Services: For KYC purposes, we may use recognised third-party identity verification services to validate your identification documents.
• Business Transfers: In the event of a merger, acquisition, or sale of business assets, user data may be transferred to the new entity — with appropriate notice provided to you in advance.

Vk8 continuously invests in security infrastructure to ensure your personal and financial data is always protected. The security measures we have implemented include:

• 256-Bit SSL Encryption: All data transmitted between your device and vk8 servers is encrypted using TLS 1.3 protocol with 256-bit keys — the same level of encryption used by leading banking institutions and government agencies worldwide.
• Two-Factor Authentication (2FA): We offer two-factor authentication for all accounts, adding an extra layer of protection beyond your password.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect unusual activity, suspicious login attempts, and potential intrusions.
• Multi-Layer Access Controls: Sensitive data is stored in isolated environments with strict access controls — only authorised personnel with a legitimate business need may access such data.
• Regular Security Audits: Our platform undergoes regular independent security audits to identify and remediate any vulnerabilities before they can be exploited.
• Secure Data Backup: Your data is securely backed up across data centres in different locations to ensure service continuity even in the event of a technical failure.

Vk8 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions, language preference memory, and security. These cookies cannot be disabled as they are essential for platform use.
• Performance Cookies: Collecting information on how users interact with the platform — most frequently visited pages, page load times, and errors encountered. This data is used in aggregate for technical improvements.
• Functional Cookies: Remembering your personal preferences such as display settings, language, and game preferences to deliver a more personalised experience.
• Analytics Cookies: We use internal analytics tools to understand general usage patterns and help us improve the platform's design and content.

You can manage or disable cookies through your web browser settings at any time. However, please note that disabling essential cookies may affect the functionality of the vk8 platform on your device.

Vk8 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable laws and regulations. The following is a general guide to our data retention periods:

• Active Account Data: For the duration of your active account and 7 years after account closure, to fulfil AML legal requirements and financial record obligations.
• Financial Transaction Records: A minimum of 7 years from the date of transaction, in line with Malaysian tax and financial legal requirements.
• KYC Documents: For the duration of the active account and 5 years after closure, or longer if required by regulatory authorities.
• Technical Log Data: Up to 12 months, unless required for an ongoing security investigation.
• Customer Support Records: 3 years from the date of last interaction.

Once the specified retention period has elapsed, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

• Right to Access: You have the right to request a copy of the personal data we hold about you and information on how it is used.
• Right to Rectification: If your data is inaccurate or incomplete, you have the right to request an immediate correction.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data, subject to legal retention requirements.
• Right to Withdraw Consent: You may withdraw consent for certain data processing at any time, without affecting the validity of processing carried out prior to withdrawal.
• Right to Object: You have the right to object to the processing of your data for certain purposes, including direct marketing communications.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another platform where applicable.

To exercise any of the above rights, please contact our data protection team via our support email. We will process your request within 30 business days. For more complex cases, this period may be extended to 60 days with notice to you.

The vk8 platform is strictly for individuals aged 18 and above. We do not intentionally collect or store personal data from individuals under the age of 18.

Every new account registration requires age verification through a KYC process that demands valid identification documents. If we discover that personal data of a minor has been collected without valid parental or guardian consent, we will take immediate action to delete that data and close the associated account.

Vk8 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in the data protection technologies we use.

When material changes are made to this Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending notifications via your registered email or in-app messages to all active members.
• In cases of significant changes requiring new consent, we will seek your explicit agreement before the changes take effect.

Continued use of the vk8 platform after the effective date of any amendment is deemed acceptance of the updated Privacy Policy terms. If you do not agree with any changes, you have the right to close your account and request deletion of your personal data, subject to legal retention requirements.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us through the following channels:

• Data Protection Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom right corner of our platform.
• Response Time: General inquiries are answered within 24 hours; data subject rights requests are processed within 30 business days.

We are committed to addressing every privacy inquiry seriously and within a reasonable timeframe. Your satisfaction and confidence in data security on the vk8 platform is our top priority.