Privacy Policy tk8 – Your Data Protection

1Information We Collect

Tk8 collects your personal information through various means as you interact with our platform. Collecting this information is necessary to enable us to provide services that are safe, fair, and tailored to your needs as a player.

Information you provide directly:

• Full name, date of birth, identification card number (MyKad) or passport upon account registration.
• Email address, phone number, and residential address for communication and verification purposes.
• Payment method information including bank account numbers, account holder names, and e-wallet details.
• KYC documents such as a photo ID, utility bill, or bank statement for identity verification.
• Any information you provide when contacting our customer support.

Information we collect automatically:

• Your IP address, device type, operating system, and web browser type.
• Session log data including the date, time, and duration of platform usage.
• Your betting history, deposits, withdrawals, and gaming activity.
• Cookie and similar tracking technology data to enhance user experience.
• Geolocation information at the country or region level for compliance purposes.

2How We Use Your Data

Every piece of information we collect has a clear and legitimate purpose. TK8 does not use your data for any purpose other than those stated in this Privacy Policy without first obtaining your consent.

3Legal Basis for Processing

Tk8 processes your personal data on one or more valid legal grounds under Malaysia's PDPA 2010. We ensure every data processing activity has a solid and defensible justification.

• Contract performance: Processing required to provide the services you request, such as processing deposits and managing your account.
• Legal obligation: Processing required to comply with applicable laws such as KYC requirements, AML (Anti-Money Laundering), and reporting to authorities.
• Legitimate interests: Processing for fraud prevention, system security, and service improvement purposes that do not adversely affect your fundamental rights.
• Consent: Processing for marketing and promotional communication purposes, carried out only after you provide explicit consent, which may be withdrawn at any time.

4Information Sharing

Tk8 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where we need to share your information with certain parties in order to deliver our services.

• Payment service providers: To securely process your deposits and withdrawals. They receive only the information necessary for payment processing purposes.
• KYC service providers: A third-party identity verification platform that helps us verify your identity securely and efficiently.
• Game providers: Third-party game developers who require access to basic game session information to operate games properly.
• Authorities and regulatory bodies: When required by law or a valid court order.
• Professional firms: Lawyers, accountants, or auditors bound by professional confidentiality obligations.

5Data Security

Tk8 invests seriously in security infrastructure to protect your personal data from unauthorized access, disclosure, alteration, or destruction. We employ multiple layers of technical and organizational security controls to ensure comprehensive data protection.

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Data-at-rest encryption for all sensitive information stored in our databases.
• Role-based access control (RBAC) ensuring only authorised personnel can access specific data.
• Continuous security monitoring and intrusion detection systems (IDS) operating 24/7.
• Regular penetration testing by independent security firms to identify and address vulnerabilities.
• Two-factor authentication (2FA) available for all staff accounts and encouraged for player accounts.
• Secure data backups and a disaster recovery plan to ensure continuity of service.

While we take all reasonable precautions, no security system is entirely perfect. In the event of any material data security breach, we will notify you and the relevant authorities within the timeframe required by law.

6Data Retention Period

Tk8 retains your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy, or as required by applicable law.

• Active account data: Retained for the duration of your active account and for any additional period required by law following account closure.
• Financial transaction records: Retained for a minimum of seven years in accordance with Malaysia's financial and tax legal requirements.
• KYC records: Retained for the duration of the active account plus five years after account closure, in accordance with AML requirements.
• Support communication logs: Retained for three years for reference and dispute resolution purposes.
• Marketing data: Retained until you withdraw consent or request deletion, whichever comes first.

Upon expiry of the retention period, your data will be securely deleted or anonymised so that it can no longer be associated with you.

7Your Rights

As a data subject, you have certain rights regarding your personal data that TK8 is fully committed to upholding. These rights may be exercised by contacting our privacy team.

To exercise any of the above rights, please contact our privacy team via email or live chat within the platform. We will process your request within 30 business days of receiving a complete submission.

8Cookies & Tracking Technologies

Tk8 uses cookies and similar tracking technologies to enhance the user experience, analyze platform usage, and support our security efforts. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform functions such as session authentication and security. These cookies cannot be disabled as they are critical to website operation.
• Performance Cookies: Collects information about how you use the website to help us improve performance and navigation. All information is collected in aggregate and anonymised form.
• Functional Cookies: Remembers your preferences such as language, region, and display settings to deliver a more personalised experience.
• Analytics Cookies: Helps us understand usage patterns to improve our services through internal analytics tools.

You may manage or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of the TK8 platform.

9Cross-Border Data Transfers

In the course of our operations, your personal data may be transferred to and stored on servers located outside Malaysia. When this occurs, TK8 ensures that such data transfers are carried out with adequate safeguards equivalent to Malaysia's PDPA standards.

The safeguards we use for cross-border data transfers include data processing agreements incorporating standard data protection clauses, security assessments of data recipients in the destination country, and ensuring that the destination country provides an adequate level of data protection.

10Children's Privacy

The TK8 platform is strictly for adults aged 18 and above. We do not knowingly collect, store, or process personal data of individuals under the age of 18. Should we discover that we have unknowingly collected data from a minor, we will take immediate steps to delete that data and close the relevant account.

11Privacy Policy Changes

Tk8 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to our services. The "Last Updated" date at the top of this document will always reflect the date of the latest version.

For material changes, we will notify you via your registered email or through a prominent in-platform notification at least seven days before the changes take effect. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights, the TK8 privacy team is ready to assist you. We are committed to responding to every privacy enquiry seriously and within a reasonable timeframe.

• Contact us via live chat within the TK8 platform for the fastest response.
• Send your privacy enquiries by email to [email protected]
• For more complex issues or formal data access requests, please submit your written request to our Data Privacy Officer.

We will endeavour to respond to all enquiries within three business days and resolve more complex requests within 30 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.