Mk8my Privacy Policy – Your Personal Data Protection

Mk8my is the data controller responsible for processing your personal information. As an online casino and entertainment platform serving Malaysian users, we take data protection responsibilities extremely seriously.

This Privacy Policy is written in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA). It covers all aspects of how we manage your information — from the moment you first visit our website through the entire duration of your membership with mk8my.

Mk8my collects several categories of information depending on how you interact with our platform. Here is a detailed summary:

Mk8my does not collect sensitive data categories such as health information, religious beliefs, political views, or biometric data, except where strictly required for legal compliance and with your explicit consent.

Your personal information is collected through several different channels:

• Account Registration: Information you enter during the mk8my new account registration process.
• KYC Verification: Identity documents you submitted during the identity verification process.
• Financial Transactions: Information collected when you make a deposit or request a fund withdrawal.
• Platform Usage: Data automatically generated while you play games or browse our platform.
• Communication: Information you share when contacting our customer support team.
• Cookies & Similar Technologies: Data collected via cookies, pixels, and other tracking technologies as you navigate our platform.

Mk8my uses your personal data for the following purposes, all of which have a valid legal basis:

• Account Management: Establish, verify, and manage your membership account on the mk8my platform.
• Payment Processing: Securely handle deposits, fund withdrawals, and financial record reconciliation.
• Identity Verification (KYC): Fulfill legal obligations related to age verification and anti-money laundering compliance.
• Service Provision: Allow you to access and enjoy all games and features on the mk8my platform.
• Platform Security: Detect and prevent fraud, hacking, account abuse, and other unlawful activities.
• Service Improvement: Analyze usage patterns to improve the user experience and develop new features.
• Service Communication: Send important notifications regarding your account, transactions, and policy updates.
• Marketing (with consent): Send promotional information, bonus offers, and the latest mk8my news — you can unsubscribe at any time.
• Legal Compliance: Meet regulatory requirements, respond to authority inquiries, and resolve disputes.

Mk8my does not sell, rent, or commercialize your personal data. However, under certain limited circumstances, we may need to share your information with the following parties:

• Payment Providers: Payment gateways and financial institutions that process your transactions — only data necessary to complete the transaction is shared.
• Game Providers: Game software companies that provide content on the mk8my platform, which may require access to your game session data.
• Cloud Services: Cloud infrastructure providers that store mk8my platform data with advanced, multi-layered security protection.
• Analytics Services: Analytics tools that help us understand usage patterns — data is shared in anonymised or aggregated form only.
• Authorities: Regulatory authorities, law enforcement agencies, or courts when required under Malaysian law.

Protecting your personal data is a core technical and operational priority for mk8my. We continually invest in security infrastructure to ensure your information stays protected at all times.

The security measures we have in place include:

• 256-bit SSL/TLS encryption for all communications between your device and mk8my servers.
• Data-at-rest encryption applied to all databases storing personal and financial information.
• Role-based access control — only authorized staff can access data relevant to their specific responsibilities.
• Regular internal and external security audits conducted by independent cybersecurity firms.
• An intrusion detection system (IDS) that monitors network traffic 24/7.
• Two-factor authentication (2FA) is available for all mk8my user accounts.
• A tested security incident response plan to manage any data breach quickly and effectively.

Mk8my uses cookies and similar technologies to enhance your experience, analyze traffic, and ensure the platform runs smoothly. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled.
• Preference Cookies: Remember your preferences such as language, theme, and display settings for a more comfortable experience.
• Analytics Cookies: Help us understand how users interact with the platform so we can make meaningful improvements.
• Marketing Cookies: Used to display more relevant offers and promotions based on your preferences — you may opt out of these cookies.

You can manage cookie settings through your web browser preferences. Disabling certain cookies may affect the functionality of some parts of the mk8my platform, but basic access will remain available.

As a data subject under Malaysia's PDPA, you have the following rights that mk8my is fully committed to upholding:

The mk8my platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store any personal data from children under the age of 18.

If we discover that personal data of an individual under the age of 18 has been collected without our knowledge, we will take immediate action to:

• Immediately close the account in question.
• Permanently delete all related personal data from our systems.
• Return any available funds in accordance with established procedures.

If you believe a child has registered on the mk8my platform, please contact our customer support immediately so that appropriate action can be taken.

In operating the mk8my platform, some of your data may be processed or stored on servers located outside Malaysia — for example, for cloud backup purposes or game processing by international providers.

In every cross-border data transfer, mk8my ensures:

• The recipient country or organization maintains data protection standards equivalent to or higher than ours.
• Legally binding data processing agreements signed with all recipient parties.
• Data transferred covers only the minimum information required for the relevant operational purpose.
• Appropriate technical security measures are applied throughout the data transfer process.

Mk8my retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: Retained throughout your active membership period and for the required time following account closure to meet legal obligations.
• Financial Transaction Records: Retained for a minimum of seven years in line with Malaysian tax and financial legal requirements.
• KYC Records: Retained for the minimum period stipulated by applicable anti-money laundering regulations.
• Communication Records: Customer support interaction records are retained for three years for dispute resolution purposes.
• Analytics Data: Anonymised usage data is retained for a longer period for platform analytics purposes.

Upon expiry of the relevant retention period, data will be securely deleted or permanently anonymized using industry-recognized methods.

Mk8my reserves the right to modify or update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements.

When we make material changes to this Policy, we will:

• Publish a new version with the latest update date at the top of this document.
• Display a clear notice on the platform's home page for a minimum of 14 days.
• Send notifications to your registered email address for significant changes.

Continued use of the mk8my platform after changes take effect is considered acceptance of the updated Privacy Policy. You may also refer to the FAQ or contact customer support for further clarification on any changes.