Privacy Policy mk8my — Protection of Malaysian Player Personal Data

Mk8my ("we", "the platform") respects the privacy of every player and is committed to protecting the personal data you share with us. This Privacy Policy is formulated in accordance with strict data protection principles and complies with applicable privacy laws.

We understand that trust is the foundation of our relationship with you. That's why we are transparent about the data we collect, why it's collected, and how it's used. We never sell your personal data to third parties for marketing or other purposes unrelated to our services.

This policy applies to all users of the mk8my platform including website, Android and iOS mobile apps, and any of our official communication channels. Any third-party services integrated with our platform have their own separate privacy policies distinct from this one.

Mk8my only collects data necessary to provide you with a secure, seamless and high-quality service. Below are the categories of data we collect:

The data we collect is used solely for purposes related to mk8my services and your legitimate interests as a player. Below are the main purposes of data use:

• Account Management — Create, verify, and maintain your account including KYC processes and identity verification.
• Transaction Processing — Process deposits, withdrawals, and any financial transactions quickly and securely.
• Service Delivery — Enable you to access and enjoy all games and platform features.
• Security & Fraud Prevention — Detect and prevent fraudulent activity, money laundering, and other security threats.
• Customer Support — Provide accurate and effective assistance when you need help.
• Responsible Gaming Monitoring — Monitor gameplay patterns to identify and assist players who may require support.
• Legal Compliance — Fulfill applicable legal and regulatory obligations.
• Platform Improvements — Analyze usage data in aggregate to enhance the overall platform experience.

We do not use your personal data to make automated decisions that have a material effect on your rights without appropriate human review.

Mk8my processes your personal data based on the following lawful grounds:

• Contract Performance — Processing required to execute the service agreement between you and MK8MY, including account and transaction management.
• Legal Obligation — Processing required to comply with applicable laws, including anti-money laundering (AML) requirements and identity verification.
• Legitimate Interest — Processing for platform security purposes, fraud prevention, and service improvements where these interests do not override your privacy rights.
• Consent — For specific processing such as opt-in marketing communications, we will obtain your explicit consent beforehand.

Mk8my does not sell or rent your personal data to any third parties. However, in certain situations we need to share data with the following parties for legitimate operational purposes:

• Payment Service Providers — Financial institutions, banks, and e-wallet providers that process your transactions. They only receive data necessary for the relevant transaction.
• Technology Providers — Companies that provide technical infrastructure, cloud services, and security tools we use to operate the platform.
• Game Providers — Gaming companies that provide game content on the MK8MY platform, within the necessary scope only.
• Statutory Authorities — When required by law, court order, or official investigation by authorities with jurisdiction.

All third parties we work with are bound by confidentiality agreements and are required to comply with data protection standards equal to or stricter than our own.

Your data security is the highest priority for mk8my. We implement comprehensive technical and organizational measures to protect your information:

• 256-bit SSL encryption on all data transmission channels between your device and our servers.
• Encrypted data storage in secure data centres with tiered access controls.
• 24/7 security monitoring to detect and respond to any threats swiftly.
• Restricted access — Only authorized personnel who require the data for their assigned duties may access it.
• Periodic security audits by independent third parties to ensure our systems remain up to date.

Data retention period: We retain your personal data as long as your account is active and for the period required after account closure to meet legal obligations, resolve disputes and protect our legitimate interests. Generally, data is retained for five to seven years after account closure according to compliance requirements.

As an mk8my player, you have certain rights regarding your personal data. We are committed to making it easy for you to exercise these rights:

To exercise any of the above rights, contact the mk8my support team via live chat or email at [email protected]. We will process your request within 30 working days.

Mk8my uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our platform.

Types of cookies we use:

• Essential Cookies — Required for the platform to function properly, including login session management and security. These cookies cannot be disabled.
• Functional Cookies — Allow the platform to remember your preferences such as language and display settings for ease of use.
• Analytics Cookies — Help us understand how players use the platform for improvement purposes. Data is collected in aggregate and without individual identification.
• Security Cookies — Used to detect suspicious activity and protect your account from unauthorized access.

You can manage cookie settings through your web browser at any time. Please note that disabling essential cookies may affect platform functionality.

The mk8my platform is exclusively for individuals aged 18 and above. We do not knowingly collect personal data from minors.

If we discover that a child's data has been collected without our knowledge, we will take immediate steps to delete that data and close the related account. If you believe that someone under 18 years of age has registered on our platform, please contact us immediately.

Mk8my reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or service enhancements. The date of the latest amendment will always be displayed at the top of this page.

For material changes, we will notify you via in-platform notification or email before the changes take effect. Your continued use of the platform after notice of amendment is given constitutes your acceptance of the updated policy.

The latest version of this Privacy Policy is effective from January 2026.

If you have any questions, concerns or complaints regarding how we handle your personal data, the mk8my team is ready to assist you wholeheartedly.

You can contact us via:

• Live Chat — Directly from the MK8MY platform, available 24/7 with response within minutes.
• Privacy Email — [email protected] with subject "Privacy Inquiry".
• FAQ — Visit FAQ page us for answers to frequently asked questions.

Every privacy complaint received will be investigated seriously and you will receive feedback within 14 working days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.