Privacy Policy – Personal Data Protection for gomk8 Malaysia Members

This Privacy Policy is published by gomk8 ("we", "the platform") and applies to all individuals who access the gomk8 website at gomk8.click, register a member account, carry out financial transactions in Ringgit Malaysia (RM), or use any services provided by our platform.

Gomk8 operates in compliance with the Malaysia Personal Data Protection Act 2010 (PDPA) and all related regulations issued from time to time by the Personal Data Protection Commissioner of Malaysia. We take our responsibilities as a data controller seriously and have implemented appropriate technical and organisational measures to safeguard your information.

This policy should be read alongside gomk8's Terms & Conditions, which together form your complete agreement with the platform. In the event of any conflict between the two documents, the Privacy Policy shall prevail on matters relating to the handling of personal data.

Gomk8 collects various categories of information depending on how you interact with our platform. Below is a full breakdown of the data we collect:

Gomk8 collects personal information through a variety of channels. It is important that you understand how this occurs so you can make informed decisions about your use of our platform:

• Account registration: You provide information directly when completing the gomk8 registration form, including your name, email address, and Malaysian phone number.
• Identity verification (KYC): To comply with anti-money laundering (AML) regulations, we may request verification documents such as a national ID or passport.
• Financial transactions: Data is collected automatically when you make a deposit or withdrawal via Malaysian eWallets such as Touch 'n Go, GrabPay, Boost, ShopeePay, or through FPX and DuitNow.
• Betting activity: Every bet you place — whether on a Malaysia Super League match, EPL, BWF badminton, MPL e-sports, slots, or live casino baccarat — is recorded automatically.
• Cookies and tracking technologies: Your web browser automatically sends certain data when you visit the gomk8 website, including your IP address, browser type, and pages visited.
• Support communications: When you contact the gomk8 customer support team, conversation records may be retained for training and service improvement purposes.

Gomk8 uses your personal data for legitimate and transparent purposes only. We will never use your data for any purpose not stated here without first obtaining your consent:

• Creating and managing your member account on the gomk8 platform
• Processing MYR deposits and withdrawals via local Malaysian payment methods
• Verifying your identity in accordance with Malaysia's KYC and AML requirements
• Providing sports betting, casino, e-sports, and table game services
• Sending important notifications regarding your account, transactions, and security
• Enforcing gomk8 bonus and promotional terms
• Detecting and preventing fraud, money laundering, and platform abuse
• Complying with legal obligations and regulations applicable in Malaysia
• Analysing usage patterns to improve the platform's user experience
• Sending relevant marketing communications (with your consent)

Gomk8 does not sell, rent, or trade your personal data to any third party. However, we may share certain information in the following limited and lawful circumstances:

All third parties that receive your data are bound by strict data protection agreements and are not permitted to use your information for any purpose other than what has been specified.

Gomk8 takes data security seriously. The technical and organisational measures we have in place include:

• Data encryption at rest: All personal data stored in our databases is encrypted using AES-256 standards
• Encryption of data in transit: All communications between your browser and gomk8's servers are protected by the latest version of SSL/TLS
• Role-based access controls: Only authorised personnel who require access to carry out their duties are permitted to view member data
• 24/7 monitoring: Intrusion detection and anomaly monitoring systems operate around the clock
• Regular penetration testing: Independent security audits are conducted regularly by specialist firms
• Two-factor authentication (2FA): Available to all member accounts and mandatory for internal administrative access

Gomk8 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to meet legal obligations. The following are our data retention guidelines:

• Active account data: Retained for the duration the account remains active and open
• Financial transaction records (MYR): A minimum of 7 years, in accordance with Malaysian legal requirements for financial records
• KYC verification data: 5 years after account termination or the date of the last transaction
• Activity & security logs: 12 months for routine access logs, 36 months for security incidents
• Support communication records: 24 months after issue resolution
• Marketing data: Until you withdraw consent or request deletion

Once the retention period expires, data will be permanently deleted or anonymised so that it can no longer be associated with you.

As a gomk8 member residing in Malaysia, you have the following rights under PDPA 2010 and international data protection best practices:

To exercise any of the above rights, please contact our Data Protection Officer at privacy@gomk8.click stating your full name, account number, and the right you wish to exercise. We will respond within 14 business days.

Gomk8 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

You can manage your cookie preferences through your web browser settings. Disabling certain cookies may affect the functionality of the gomk8 platform. We do not use third-party cookies for advertising purposes unrelated to our platform.

Gomk8 strictly prohibits the use of our platform by anyone under the age of 18. Our platform is not designed for children, and we do not knowingly collect personal data from minors.

Should we discover or be notified that data belonging to a person under the age of 18 has been collected, we will take immediate action to delete that data and close the account concerned, without any refund of bonuses or winnings.

In the course of operating the gomk8 platform, your personal data may be processed or stored on servers located outside Malaysia. This may occur when we utilise licensed cloud technology service providers or international gaming software providers.

In all such cases, gomk8 ensures that data transfers are carried out with appropriate safeguards in place, including:

• Data transfer agreements compliant with international standards
• Assessment of the recipient's data protection standards prior to any sharing
• Standard contractual clauses ensuring your rights are protected regardless of where processing takes place

Gomk8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, Malaysian legal requirements, or the technologies we use. Any material changes will be communicated to you via:

• In-platform notification on gomk8 when you log in
• Email notification to your registered address for any significant changes
• Update the "Last Updated" date at the top of this document

Continued use of the gomk8 platform after any changes take effect will be considered acceptance of the updated policy. We recommend reviewing this page periodically to stay informed about how we protect your information.

Gomk8 has appointed a Data Protection Officer (DPO) responsible for overseeing our compliance with this Privacy Policy and Malaysia's data protection laws. If you have:

• Enquiries about how we handle your personal data
• Requests to exercise your rights under the PDPA
• Privacy concerns or complaints
• Reports of potential data breaches

Please contact us via:

• DPO Email: privacy@gomk8.click
• General Support Email: support@gomk8.click
• Live Chat: Available on the platform 24 hours a day, 7 days a week in Bahasa Melayu

We are committed to responding to all privacy-related enquiries within 14 business days. For urgent matters relating to account security or potential data breaches, we will respond within 24 hours.