VK8 Privacy Policy – Malaysia Player Personal Data Protection

To provide a safe, fair, and efficient online wagering service, vk8 needs to collect certain categories of information from our players. This collection is carried out transparently and covers only data that is strictly necessary.

Basic Personal Information: When registering a vk8 account, you are required to provide your full name as per your identity card or passport, an active mobile number, a valid email address, date of birth, and banking details for deposit and withdrawal purposes. All this information is required for identity verification (KYC) and to ensure smooth financial transactions.

Platform Usage Information: When you use the VK8 platform, we automatically record technical data including your device's IP address, web browser type, operating system, pages visited, gaming session duration, betting history and account activity logs. This data is used for security purposes, fraud detection and improving the user experience.

Financial Information: vk8 records the transaction history of all deposits and withdrawals, including amounts, dates, times, and payment methods used. Full card numbers or banking details are not stored on our servers — they are handled exclusively by PCI-DSS certified payment processors.

The following table summarises the categories of data collected and their specific purposes:

Vk8 uses collected information solely for legitimate and transparent purposes. We do not use your data for any purpose not stated in this Privacy Policy without first obtaining your additional consent.

The primary purposes for data use are as follows:

• Account Management: Processes registration, verifies identity, manages login, and ensures the security of your account.
• Transaction Processing: Processes deposits, handles withdrawals, and maintains accurate financial records for your reference and ours.
• Fraud Prevention: Detects suspicious activity patterns, prevents multi-account abuse, and protects platform integrity against misuse.
• Service Communications: Sends important notifications relating to transactions, security updates, and policy changes via email or SMS.
• Platform Improvements: Analyzes aggregated and anonymized usage data to improve the design, performance, and overall experience of the vk8 platform.
• Regulatory Compliance: Fulfills legal obligations including anti-money laundering (AML) requirements and compliance with relevant regulatory bodies.
• Customer Support: Resolves player inquiries, complaints, and technical issues more efficiently and accurately.

For marketing purposes such as sending promotional offers or new product information, we will only do so if you have given explicit consent during registration or through the communication preference settings in your account. You may withdraw this consent at any time via the unsubscribe link in promotional emails or through your account settings.

Vk8 does not sell, rent, or disclose players' personal data to third parties for their own commercial purposes. However, there are limited situations where data sharing is necessary to ensure the service functions properly and complies with legal requirements.

Trusted Service Providers: vk8 works with third-party service providers that have undergone rigorous security assessments. These include payment processors handling your financial transactions, identity verification service providers for the KYC process, gaming platform providers supplying game content, and cloud service providers storing data securely. All third parties are bound by data protection agreements that hold them to the same security standards practised by vk8.

Legal Requirements: vk8 may disclose your personal information to regulatory authorities, law enforcement agencies, or judicial bodies when required to do so by applicable law, court order, or in the context of a legitimate criminal investigation.

Player data security is vk8's highest priority. We consistently invest in the latest security technologies and procedures to ensure your personal information is always protected against unauthorized access, loss, destruction, or accidental disclosure.

The technical measures we implement include:

• Data Encryption in Transit: All communications between your device and vk8 servers use TLS 1.3 protocol with AES-256-bit encryption, ensuring no third party can read your data in transit.
• Stored Data Encryption: Sensitive information stored in vk8's database is protected with additional encryption layers. Account passwords are stored using cryptographic hashing functions that cannot be decrypted.
• Two-Factor Authentication (2FA): vk8 provides a 2FA feature that adds an extra layer of security to your account. We encourage all players to activate this feature.
• Continuous Monitoring: The vk8 system is monitored around the clock by our cybersecurity team using advanced threat detection tools to proactively identify and respond to any suspicious activity.
• Internal Access Controls: Access to player personal data within the VK8 organisation is restricted to staff with a legitimate need only, applying the principle of least privilege.

The vk8 platform uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and help us understand how players interact with our website.

Types of Cookies Used:

• Essential Cookies: Required for basic platform operations such as maintaining your login session and remembering your language preference. These cookies cannot be disabled as the platform will not function properly without them.
• Performance Cookies: Collects information about how you use the platform, such as most frequently visited pages and time spent. This data is used in aggregated, anonymized form for platform improvements.
• Functional Cookies: Allows the platform to remember your preferences such as display theme, language settings, and game preferences to deliver a more personalized experience.
• Security Cookies: Helps detect and prevent fraudulent activity, including identifying suspicious login attempts and verifying that your session is legitimate.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the VK8 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

Vk8 fully respects your rights as the owner of your personal data. Below are the rights you hold with respect to the personal information we retain:

To exercise any of the above rights, please contact the vk8 privacy team via our official support email. We will verify your identity before processing any request to ensure the security of your data.

Vk8 retains your personal data only for as long as is necessary to fulfil the purpose of collection or to comply with applicable legal and regulatory requirements.

• Active Account Data: Retained for the lifetime of your active account at VK8 plus any additional period required by law.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with anti-money laundering and financial reporting legal requirements.
• Security Logs: Retained for 12 months for security incident investigation and fraud detection purposes.
• Support Communication History: Customer support chat histories are retained for 2 years for reference and service improvement purposes.
• Marketing Data: Deleted within 30 days after you withdraw your marketing consent.

Once the retention period has lapsed, data will be securely deleted or anonymised so it can no longer be linked to your identity. The data deletion process follows strict internal procedures to ensure no residual sensitive data remains in our systems.

In the context of VK8's global operations, your personal data may be stored or processed on servers located outside Malaysia. Any such data transfer is carried out with appropriate safeguards to ensure your data receives a level of protection equivalent to or higher than local standards.

Vk8 ensures international data transfers only take place to:

• Countries or jurisdictions with internationally recognized data protection standards.
• Service providers bound by data processing agreements that include international standard protection clauses.
• Entities that have obtained recognised security certifications such as ISO 27001 or SOC 2 Type II.

The vk8 platform is an online wagering service intended exclusively for individuals of legal age 18 years and above. We do not intentionally collect, store or process any personal information from individuals under the age of 18.

Should vk8 discover that personal data of a minor has been collected without our knowledge — possibly due to false information provided during registration — we will take immediate action to delete that data and close the account in question.

Parents or guardians who have reason to believe that their child has registered or used the VK8 platform without authorisation are welcome to contact our support team immediately. We will investigate and take appropriate action promptly.

Vk8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we handle personal data. Any changes will be published on this page with a clear update date.

For changes deemed significant or material — such as changes to how we use your data or the third parties we share it with — VK8 will notify you directly via your registered email or in-platform notification at least 14 days before the changes take effect.

Continued use of the vk8 platform after the effective date of any change constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account and request deletion of your personal data in accordance with the procedures outlined in Section 6.