Privacy Policy

Introduction

GK8 ("the Company", "we", "us", "our") operates the online gaming and sports betting platform accessible at gk8.cam, including all associated pages, mobile interfaces, and digital tools. This Privacy Policy governs the collection, processing, storage, and use of personal data submitted by or collected from users ("you", "your") of the gk8 platform.

GK8 takes the privacy of its users seriously. We are committed to handling personal information in a transparent, lawful, and responsible manner — consistent with applicable data protection principles and the expectations of our players across Malaysia, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond.

By creating an account on gk8, depositing funds, placing bets, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this policy, you should cease using the gk8 platform and contact us to request account closure.

Definitions

The following terms are used throughout this Privacy Policy with the meanings set out below:

Data We Collect

GK8 collects only the Personal Data that is necessary and proportionate to the delivery of our services, compliance with applicable legal obligations, and the protection of our platform and user community. The categories of data we collect include:

GK8 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data except where such information is voluntarily provided in the context of a responsible gambling application or is required for specific regulatory compliance purposes.

Data Processing

GK8 processes your Personal Data for the following specific and documented purposes:

• Account Administration: Creating, maintaining, and securing your gk8 player account, including identity verification, password management, and account communications.
• Service Delivery: Processing deposits and withdrawals in MYR, settling bets, awarding bonuses, and providing access to games and live casino content.
• Legal Compliance: Fulfilling Know Your Customer (KYC) obligations, anti-money laundering (AML) screening, age verification, and reporting to regulatory bodies where required by law.
• Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, account abuse, collusion, money laundering, and other conduct prohibited under our Terms and Conditions.
• Responsible Gambling: Monitoring account activity for signs of problem gambling behaviour, administering deposit limits, self-exclusion requests, cooling-off periods, and related protective measures.
• Customer Support: Responding to queries, complaints, and requests submitted via live chat, email, or other communication channels — in English, Bahasa Melayu, and Mandarin.
• Platform Improvement: Analysing aggregated usage patterns to improve platform performance, game selection, user interface design, and overall service quality.
• Direct Communications: Sending transactional emails (deposit confirmations, withdrawal notifications, security alerts) and, where you have opted in, promotional communications about relevant offers at gk8.

Legal Basis for Processing

GK8 processes Personal Data only where a recognised legal basis applies. The applicable legal bases for each processing purpose are summarised below:

Where processing is based on your consent, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

Data Sharing & Disclosure

GK8 does not sell, rent, or trade your Personal Data to third parties for their independent marketing purposes. Your data is shared only in the following strictly controlled circumstances:

• Payment Service Providers: Transaction data is shared with payment processors — including DuitNow, FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, Visa, Mastercard, and cryptocurrency processing partners — solely to facilitate deposits and withdrawals in MYR on your behalf.
• KYC Verification Partners: Identity documents and verification data are shared with accredited third-party identity verification service providers for the purpose of KYC compliance and age verification.
• Technology & Infrastructure Providers: Technical data is processed by cloud hosting, data storage, and cybersecurity service providers engaged by GK8 under binding data processing agreements that restrict further use or disclosure.
• Regulatory and Law Enforcement Authorities: GK8 may disclose Personal Data to regulators, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory directive.
• Fraud Prevention Networks: Limited account and transaction data may be shared with industry fraud prevention bodies where necessary to investigate suspected money laundering, identity fraud, or multi-accounting abuse.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of GK8, Personal Data held by the Company may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third parties with whom GK8 shares Personal Data are required to process that data only for the specific purposes for which it was shared and in accordance with applicable data protection standards. GK8 maintains Data Processing Agreements with all relevant third-party processors.

Cookies & Tracking Technologies

GK8 uses cookies and similar tracking technologies to operate the platform, maintain session security, and analyse user behaviour in aggregate. The types of cookies we use are described below:

You may configure your browser to block or delete cookies at any time. Note that disabling strictly necessary cookies will prevent you from logging into your gk8 account. Analytical cookies can be declined without affecting core functionality.

Data Retention

GK8 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our general retention guidelines are as follows:

• Account Data: Retained for the duration of your account's existence and for a period of five (5) years following account closure, to comply with AML and regulatory record-keeping obligations.
• Transaction Records: Deposit and withdrawal records, including financial data processed in MYR, are retained for a minimum of five (5) years from the date of the transaction.
• KYC Documents: Identity verification documents are retained for the duration of the account relationship and for five (5) years post-closure, or longer where specifically required by regulatory instruction.
• Support Communications: Chat logs and email correspondence are retained for two (2) years from the date of the interaction, or longer where the communication relates to an active dispute or complaint.
• Usage and Technical Data: Session logs and behavioural analytics are retained for up to twenty-four (24) months in anonymised or aggregated form.
• Marketing Consent Records: Records of marketing opt-in and opt-out decisions are retained for as long as the account exists and for three (3) years thereafter, as evidence of consent management.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where deletion is not technically practicable within the standard retention window, data will be isolated from active processing systems pending scheduled deletion.

Data Security

GK8 employs industry-standard technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the gk8 platform.
• Encryption at rest for all sensitive data stored on GK8 servers, including financial data and identity documents.
• Two-factor authentication (2FA) available to all users to protect account access.
• Role-based access controls limiting internal staff access to Personal Data to those with a documented operational need.
• Continuous intrusion detection and network monitoring systems operating on a 24/7 basis.
• Regular security audits and penetration testing by qualified independent cybersecurity professionals.
• Staff data handling training for all personnel who process Personal Data in connection with gk8 operations.

Your Rights

As a user of the gk8 platform, you hold the following rights in respect of your Personal Data. These rights may be exercised by submitting a written request to [email protected]. GK8 will acknowledge all valid requests within 5 business days and provide a substantive response within 30 days.

Please note that certain rights are subject to exceptions where fulfilling a request would conflict with GK8's legal obligations, the prevention of financial crime, or the rights of third parties. GK8 will explain any applicable limitations at the time of responding to your request.

Minors & Age Restriction

The gk8 platform is strictly intended for use by individuals who are 21 years of age or older. GK8 does not knowingly collect, store, or process the Personal Data of minors. Age verification is a mandatory component of the KYC process, and all accounts are subject to age confirmation before withdrawal functionality is enabled.

If GK8 becomes aware, at any point, that Personal Data has been collected from an individual under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any funds held therein to the payment source from which they originated, subject to our standard verification procedures.

International Data Transfers

In the course of operating the gk8 platform and delivering our services to Malaysian users, Personal Data may be transferred to, stored in, or processed in countries outside Malaysia. Such transfers occur only where:

• The receiving country provides an adequate level of data protection as recognised by applicable standards;
• Appropriate contractual safeguards — such as standard data protection clauses — are in place with the receiving entity; or
• The transfer is necessary for the performance of a contract between you and GK8, including the processing of MYR transactions via international payment networks.

GK8 implements contractual and technical safeguards to ensure that any international transfer of Personal Data maintains a standard of protection equivalent to that described in this Privacy Policy. Where such transfers involve payment data — including transactions processed via Visa, Mastercard, or cryptocurrency channels — the receiving processors are PCI-DSS compliant and subject to binding contractual data protection obligations.

Policy Amendments

GK8 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services offered on the gk8 platform.

When material amendments are made — meaning changes that significantly affect how your Personal Data is processed or the rights available to you — GK8 will notify registered users by email to the address on file and/or by posting a prominent notice on the platform prior to the changes taking effect. The "Last updated" date at the top of this page will reflect the date of the most recent revision.

Continued use of the gk8 platform after the effective date of any amendment to this Privacy Policy constitutes acceptance of the revised terms. If you do not accept the revised policy, you should cease using the platform and contact us to close your account.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or GK8's data processing practices, please contact our privacy team using the information below. All contact details are provided for informational reference only and must not be used as interactive links.

For information about responsible gambling tools, self-exclusion, or deposit limits, please visit our Responsible Gambling page. For full platform usage terms, see our Terms & Conditions.