gomk8 Privacy Policy

Introduction

gomk8 ("we", "us", "our") operates the online casino and sports betting platform accessible at gomk8.cam (the "Platform"). This Privacy Policy sets out our obligations and your rights in relation to personal data processed in connection with Platform use.

This Policy applies to all visitors, registered account holders, and former customers whose data we continue to hold in accordance with applicable legal and regulatory retention obligations. It applies to information collected through the website, customer support communications, payment processes, and identity verification procedures.

gomk8 is committed to handling personal data lawfully, fairly, and transparently. The categories of data processed, the purposes for which they are used, and the rights available to you are all described in clear terms below. This Policy should be read together with the gomk8 Terms & Conditions available on this platform.

Definitions

• "Personal Data" means any information that identifies or can reasonably identify a living individual, including name, identification number, contact details, payment records, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Controller" means gomk8, the entity that determines the purposes and means of processing personal data collected through this Platform.
• "Data Subject" or "you" means the natural person whose personal data is being processed — primarily a registered gomk8 player or platform visitor.
• "KYC" means Know Your Customer checks, encompassing identity, age, address, source of funds, and payment instrument verification.
• "Third Party" means any entity other than gomk8 and the data subject, including service providers, payment processors, and regulators.

Data We Collect

3.1 Information You Provide Directly

When registering for a gomk8 account, completing KYC verification, or contacting support, you may provide:

• Full legal name, date of birth, gender, and nationality.
• Malaysian residential address including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam).
• Email address, phone number, and chosen username.
• Copies of identity documents such as Malaysian IC (MyKad), Passport, or Driver's Licence.
• Proof of residential address in the form of utility bills or bank statements no older than three months.
• Payment information including bank account details, eWallet identifiers (e.g., Touch 'n Go eWallet, Boost, GrabPay registered phone number), or cryptocurrency wallet addresses.
• Source of funds or source of wealth declarations where required by our KYC procedures.
• Content of support communications, complaint correspondence, and survey responses.

3.2 Information Generated Through Platform Use

When you access or interact with gomk8, the following data is automatically generated or recorded:

• IP address, device type, operating system, browser type, and language settings.
• Session timestamps, login history, and platform navigation data.
• Wager history, stake amounts, game selections, sports markets, and settlement outcomes.
• Deposit and withdrawal transaction records including amounts, timestamps, methods (e.g., FPX, DuitNow, Maybank, CIMB), and processing status.
• Bonus claims, wagering progress, and promotional interaction records.
• Responsible gambling tool settings such as deposit limits, cooling-off periods, and self-exclusion status.

3.3 Information from Third Parties

We may receive personal data from:

• Identity verification service providers who assist with KYC document authentication.
• Payment processors and financial institutions confirming transaction legitimacy.
• Fraud prevention and anti-money-laundering screening services.
• Responsible gambling registries when verifying self-exclusion status.

Purposes of Processing

gomk8 processes personal data for the following distinct purposes:

• Account creation and management: To register your gomk8 account, maintain accurate account records, and provide secure login access.
• Identity and age verification (KYC): To confirm that you are at least 21 years of age, to verify your identity and residential address, and to comply with anti-money-laundering and anti-fraud obligations.
• Payment processing: To facilitate deposits and withdrawals through your selected Malaysian payment method, to reconcile transactions, and to investigate disputed payments.
• Platform delivery: To present and personalise the sportsbook, live casino tables, slot games, and associated features for your account.
• Customer support: To respond to enquiries, resolve disputes regarding wager settlements or account status, and to manage complaints.
• Responsible gambling: To administer deposit limits, cooling-off periods, and self-exclusion, and to identify patterns that may indicate problematic gambling behaviour.
• Security and fraud prevention: To detect, investigate, and prevent unauthorised account access, payment fraud, collusion, bonus abuse, and other forms of platform misuse.
• Legal and regulatory compliance: To meet applicable legal obligations, respond to regulatory inquiries, and retain records as required by applicable law.
• Platform improvement: To analyse aggregated, anonymised usage patterns and improve the technical performance, interface, and game selection of gomk8.
• Marketing communications: Where you have provided consent or where a legitimate interest exists under applicable law, to send promotional content about gomk8 offers. You may withdraw consent or opt out at any time.

Lawful Bases for Processing

gomk8 processes personal data only where a recognised lawful basis exists. The primary bases applicable to our processing activities are:

• Contractual necessity: Processing required to perform our agreement with you as a gomk8 account holder, including account registration, deposits, wager placement, withdrawals, and support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, anti-money-laundering, and data retention requirements.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gambling monitoring, and service improvement, balanced against your privacy rights and expectations.
• Consent: Processing activities where you have given clear, specific, and freely given consent, primarily in the context of direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Sharing and Disclosure of Personal Data

gomk8 does not sell personal data. We share your information only in the specific circumstances described below and only to the extent necessary for the stated purpose:

• Payment processors and financial institutions: Sharing your payment details and transaction information with providers such as FPX operators, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Visa, Mastercard, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency processors for the purpose of processing your requested transactions.
• KYC and identity verification providers: Sharing identity document images and data with specialist third-party services that assist us in verifying player identity and age.
• Game content providers: Sharing your account identifier and wager data with third-party casino game and live table suppliers as required to deliver the game and record outcomes.
• Fraud prevention and security services: Sharing data with third-party screening tools used to detect and prevent fraudulent activity, collusion, or money laundering.
• Regulators and law enforcement: Disclosing personal data when required to do so by a court order, legal process, regulatory investigation, or applicable statutory obligation.
• Professional advisers: Sharing data with legal counsel, auditors, or accountants where necessary for the purposes of obtaining professional advice or for legal proceedings.

All third parties who receive personal data on behalf of gomk8 are required to handle that data securely, to process it only for the purposes for which it was shared, and not to disclose it to further parties without authorisation.

International Data Transfers

Some of gomk8's technical infrastructure, game content providers, and identity verification services may be located outside Malaysia. Where personal data is transferred internationally, gomk8 takes reasonable steps to ensure that recipient organisations maintain data protection standards equivalent to those described in this Policy.

Safeguards may include contractual clauses, technical security measures, and third-party certifications. If you have questions about the destination of your personal data or the protections applied to cross-border transfers, you may contact gomk8 using the details in Section 14.

Data Retention

gomk8 retains personal data only for as long as is necessary for the purposes stated in this Policy or as required by applicable legal, regulatory, and contractual obligations. In general:

• Account and KYC records: Retained for the duration of the active account relationship and for a reasonable period thereafter, consistent with applicable anti-money-laundering and financial record-keeping obligations.
• Transaction and wager records: Retained for a period consistent with applicable statutory obligations and dispute resolution requirements.
• Support communications: Retained for a period sufficient to resolve the subject matter and to handle any related follow-up complaints or regulatory enquiries.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period to demonstrate the lawfulness of prior communications.

When data is no longer needed, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

Security Measures

gomk8 implements a range of technical and organisational controls to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• 256-bit TLS encryption for all data transmitted between your browser or device and the gomk8 platform.
• AES-256 encryption for sensitive data held in gomk8 databases.
• Multi-factor authentication requirements for sensitive account operations.
• Role-based access controls restricting internal access to personal data to personnel with a documented need.
• Regular security assessments and penetration testing of the platform infrastructure.
• Security incident response procedures with defined notification timelines.

Cookies and Tracking Technologies

gomk8 uses cookies and similar technologies to operate certain platform features, to remember your preferences, to maintain your login session, and to understand how the platform is used. The types of cookies in use include:

• Strictly necessary cookies: Required for the platform to function, including maintaining your authenticated session, processing deposits, and presenting your account balance. These cannot be disabled.
• Functional cookies: Used to remember preferences such as display language, currency display, and preferred game categories.
• Analytical cookies: Used to gather aggregated, anonymised data about how players navigate and use the platform, helping us identify and fix technical issues and improve page design.

You can adjust your browser settings to refuse or delete cookies, though doing so may affect the availability or functionality of certain platform features, including login and session management. Where cookies require your consent, that consent will be sought before placement.

Your Rights

Subject to applicable law and certain exemptions related to legal obligations, fraud prevention, and security requirements, you have the following rights regarding your personal data held by gomk8:

• Right of Access: To request a copy of the personal data gomk8 holds about you and to receive information about how it is being processed.
• Right to Rectification: To request correction of any inaccurate or incomplete personal data. If your contact details, address, or payment information have changed, you should update your account or contact support promptly.
• Right to Erasure: To request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction of Processing: To request that gomk8 restrict processing of your data in certain circumstances, such as while an accuracy dispute is under investigation.
• Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format where technically feasible and where processing is based on consent or contractual necessity.
• Right to Object: To object to processing based on legitimate interests, including direct marketing. Objections to direct marketing will always be honoured.
• Right to Withdraw Consent: Where processing is based on consent, to withdraw that consent at any time without penalty, without affecting the lawfulness of processing before withdrawal.

To exercise any of the above rights, contact gomk8 using the support details provided in Section 14. We will respond to rights requests within a reasonable period, typically 30 days, subject to complexity and legal requirements. Identity verification may be required before we act on any request affecting account data.

Children and Minors

gomk8 is strictly prohibited for persons under 21 years of age. We do not knowingly collect or retain personal data from minors. Age verification forms a mandatory part of the KYC process, and accounts found to be registered by or on behalf of a person under 21 will be closed and any associated funds may be returned after required due diligence checks.

If you believe that a minor has provided personal data to gomk8 or has accessed the platform in violation of this requirement, please contact us immediately using the details in Section 14.

Changes to This Privacy Policy

gomk8 may update this Privacy Policy from time to time to reflect changes in our processing practices, legal obligations, regulatory requirements, or platform features. When a material change is made, the effective date displayed at the top of this page will be updated accordingly.

Where a change materially affects how your personal data is processed or reduces your existing rights, we will provide notice through your registered email address or through a prominent notice on the platform before the change takes effect. Your continued use of gomk8 following such notice will constitute acceptance of the revised Policy, unless you object and close your account.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, want to report a potential data security concern, or need further information about how gomk8 processes your personal data, please contact our support team directly.

Our 24/7 live chat is accessible from the platform and is the fastest channel for most privacy enquiries. For formal rights requests or complex data matters, you may submit your request in writing to the following plain-text support address:

[email protected]

Please include your registered account username and a clear description of your request. Do not include your password in any communication. Identity verification may be required before certain data requests can be fulfilled.