Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by CK8 ("CK8", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at ck8.cam and its associated subdomains, mobile-optimised interfaces, and any related digital services (collectively, the "Platform"). This Policy governs the collection, storage, use, disclosure, and protection of personal data relating to registered players, website visitors, and any other individuals who interact with the Platform ("you", "your", "User", "Player").

CK8 operates primarily in the Malaysia market, serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and nationwide. All personal data collected through the Platform is handled with the care and security it deserves. We do not sell your personal information to third parties for commercial marketing purposes, and we never will.

This Policy should be read together with our Terms & Conditions, which are incorporated by reference. By using the Platform or creating an Account, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

Definitions

The following terms carry the meanings assigned to them in this section throughout this Policy:

Data We Collect

CK8 collects personal data that is necessary for the operation of the Platform, the delivery of services to Players, and compliance with applicable legal and regulatory obligations. The categories of personal data we collect are set out below.

3.1 Registration and Account Data

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Email address;
• Username and password (stored in hashed form);
• Country and city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru);
• Mobile phone number;
• Preferred currency (MYR by default for Malaysian players).

3.2 KYC Verification Data

• Government-issued photo identification (e.g., MyKad, passport);
• Proof of residential address (e.g., utility bill, bank statement);
• Facial verification or selfie image where required by our verification process;
• Source of funds documentation in cases involving large transactions.

3.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references;
• Bank account details, e-wallet identifiers (e.g., Touch 'n Go eWallet, GrabPay, Boost), FPX transaction references, DuitNow transaction IDs;
• Cryptocurrency wallet addresses where BTC or USDT transactions are made;
• Transaction history and account balance records.

3.4 Usage and Technical Data

• IP address and geographic location data;
• Device type, operating system, and browser information;
• Session duration, login timestamps, and navigation paths;
• Game play history, bet history, and wagering records;
• Bonus usage, promotional interactions, and VIP tier activity.

3.5 Communications Data

• Customer support chat transcripts and email correspondence;
• Feedback submitted through surveys or contact forms;
• Responses to marketing communications where you have opted in.

How We Collect Data

CK8 collects personal data through the following means:

1. Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to surveys, or interact with promotional materials.
2. Automatically through the Platform — via server logs, cookies, and similar tracking technologies that record technical and usage data when you browse or interact with the Platform.
3. From third-party service providers — including identity verification partners, payment processors (such as banks offering FPX or DuitNow services), and fraud prevention services that provide enriched data as part of KYC or transaction monitoring processes.
4. From publicly available sources — where necessary for due diligence, AML compliance, or fraud investigation purposes.

Data Processing

CK8 processes your personal data for the following purposes:

Legal Basis for Processing

CK8 relies on one or more of the following legal bases when processing your personal data:

• Contractual Necessity: Processing is required to fulfil our obligations under the Terms & Conditions you agreed to when registering your Account — including providing access to games, processing payments, and managing your Account.
• Legal Obligation: Processing is necessary for CK8 to comply with applicable laws and regulations, including AML/CTF obligations, KYC requirements, and regulatory reporting duties.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud detection, platform security, service improvement, and responsible gambling monitoring — provided these interests are not overridden by your data protection rights.
• Consent: Where processing is based on your explicit consent — such as the receipt of marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing

CK8 does not sell your personal data to third parties. We may share your personal data with third parties only in the following limited circumstances:

In all cases, CK8 takes reasonable steps to ensure that third parties with whom data is shared maintain appropriate technical and organisational measures to protect the personal data they receive.

Data Retention

CK8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable laws and regulations. The following general retention periods apply:

• Account Data: Retained for the duration of your active Account and for a minimum period of five (5) years following Account closure, to meet AML/CTF and regulatory record-keeping obligations;
• KYC Documentation: Retained for a minimum of five (5) years from the date of the last transaction or Account closure, whichever is later;
• Financial Transaction Records: Retained for a minimum of five (5) years in accordance with financial recordkeeping requirements;
• Customer Support Records: Retained for two (2) years from the date of the last interaction;
• Marketing Preferences: Retained until you withdraw consent or request erasure, subject to overriding legal obligations.

Once personal data is no longer required for any lawful purpose, CK8 will securely delete or anonymise it in accordance with our internal data destruction procedures.

Cookies & Tracking Technologies

CK8 uses cookies and similar tracking technologies to improve your experience on the Platform, to maintain session security, to understand how users interact with the Platform, and to deliver relevant content.

The types of cookies we use include:

• Essential Cookies: Required for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how visitors use the Platform — including pages visited, time spent, and navigation paths — to help us identify and resolve performance issues.
• Functional Cookies: Used to remember your preferences, such as language settings, region, and display options, so you do not need to re-enter them on each visit.
• Marketing Cookies: Used to deliver promotional content relevant to your interests, where you have consented to receive marketing communications. These may track your activity across sessions.

Data Security

CK8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols;
• Password Hashing: Account passwords are stored as one-way cryptographic hashes and are never stored or transmitted in plain text;
• Two-Factor Authentication (2FA): Available to all Players and strongly recommended to add an additional layer of Account security;
• Access Controls: Strict role-based access controls ensure that only authorised CK8 personnel can access personal data, on a need-to-know basis;
• Penetration Testing: Regular security assessments are conducted to identify and remediate potential vulnerabilities;
• Data Breach Response: CK8 maintains an incident response protocol to detect, contain, and report data breaches in a timely manner where required by law.

Notwithstanding the above, no method of data transmission over the internet or electronic storage is completely secure. CK8 cannot guarantee absolute security but is committed to maintaining the highest reasonably practicable standards of data protection.

Your User Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to the personal data CK8 holds about you:

1. Right of Access: You have the right to request a copy of the personal data CK8 holds about you, along with information about how it is processed.
2. Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. You may update certain Account details directly through your Account settings.
3. Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to overriding legal obligations such as AML record-keeping requirements.
4. Right to Restrict Processing: You may request that CK8 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or have objected to its processing.
5. Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
6. Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests or is carried out for direct marketing purposes.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

Minors

The CK8 Platform is strictly for persons aged 21 years and above. CK8 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration and KYC process, and any Account where the holder is found to be under 21 will be immediately closed with all data deleted or retained only as required by law for audit purposes.

If you believe that CK8 has inadvertently collected personal data from a person under the age of 21, please contact us immediately at [email protected] so that the data can be identified and deleted without delay.

Third-Party Links

The CK8 Platform may contain references to or interactions with third-party services — including payment processors such as Maybank, CIMB, Public Bank, FPX, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay — whose privacy practices are governed by their own respective privacy policies.

CK8 is not responsible for the privacy practices or the content of any third-party services. We encourage you to review the privacy policies of any third-party payment providers or services you use in connection with your CK8 Account. CK8 has no control over and accepts no responsibility for the data collection or processing activities of third-party operators once data is passed to them for the purpose of completing a payment transaction.

Policy Amendments

CK8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform functionality. The date of the most recent revision is indicated at the top of this page.

Where amendments are material — meaning they significantly affect how your personal data is processed — CK8 will notify affected Players via email to the address registered on their Account or through a prominent notice on the Platform. For non-material changes such as clarifications or corrections, no specific notification will be issued, and the updated Policy will take effect upon publication.

Your continued use of the Platform following any amendment to this Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you must stop using the Platform and may request Account closure by contacting our support team.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way CK8 handles your personal data, please contact our Data Protection team. We are committed to addressing all privacy-related enquiries promptly and transparently.

For enquiries related to our Terms & Conditions, account management, or responsible gambling tools, please refer to the relevant pages or contact live chat support directly from the Platform homepage.