Privacy Policy — hk8

1. Introduction

This Privacy Policy ("Policy") is published by hk8 ("hk8", "we", "us", "our"), the operator of the online gambling platform accessible at hk8.cam ("Platform"). This Policy describes how hk8 collects, processes, stores, and protects personal data relating to individuals ("User", "you", "your") who access or use the Platform, whether as registered account holders or as visitors to the website.

hk8 is committed to maintaining the privacy and security of all personal data entrusted to us. We process personal data only for legitimate, specified purposes and in accordance with applicable data protection principles. By creating an account, using the Platform, or visiting hk8.cam, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read in conjunction with hk8's Terms & Conditions and Responsible Gambling Policy, which collectively govern your use of the Platform.

2. Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, contact details, financial data, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, or deletion.
• "Controller" means hk8, the entity that determines the purposes and means of processing Personal Data.
• "Data Subject" means any individual whose Personal Data is processed by hk8 — including registered Users and Platform visitors.
• "Third Party" means any natural or legal person other than the Data Subject, hk8, and persons authorised to process data under hk8's direct authority.
• "Cookies" means small data files placed on a User's device by the Platform to facilitate functionality, analytics, and session management.
• "KYC" means Know Your Customer — the identity verification process mandatory for all registered Users prior to processing withdrawals.
• "AML" means Anti-Money Laundering — regulatory obligations requiring hk8 to monitor, assess, and report suspicious financial activity.

3. Data We Collect

hk8 collects Personal Data in several categories, depending on the nature of your interaction with the Platform. The categories of data we may hold about you include the following:

3.1 Identity & Registration Data

• Full legal name as it appears on official identification documents;
• Date of birth (used to verify the minimum age requirement of 21 years);
• Nationality and country of residence;
• Username chosen at registration.

3.2 Contact Data

• Email address;
• Mobile telephone number;
• Residential address (required for KYC identity verification).

3.3 Identity Verification (KYC) Documents

• Copy of valid Malaysian identity card (MyKad), Passport, or Driver's Licence;
• Proof of address document — utility bill or bank statement dated within three (3) months;
• Selfie photograph holding the identity document submitted.

3.4 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, dates, and payment references;
• Payment method identifiers — bank account details, e-wallet identifiers (FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong);
• Account balance history and wagering activity records.

3.5 Technical & Usage Data

• IP address and geolocation data;
• Device type, operating system, and browser information;
• Session duration, pages visited, and feature interactions on the Platform;
• Login history including timestamps and device fingerprints.

3.6 Communications Data

• Records of live chat conversations with support agents;
• Email correspondence between you and hk8;
• Records of any complaints or dispute submissions.

4. How We Collect Your Data

hk8 collects Personal Data through the following mechanisms:

• Direct provision — data you submit during account registration, KYC document upload, deposit/withdrawal transactions, or when contacting support;
• Automated collection — data gathered automatically through cookies, log files, and server-side analytics when you access the Platform;
• Third-party sources — identity verification agencies, fraud prevention services, and payment processing providers may supply or confirm information about you for compliance purposes;
• Responsible gambling tools — data arising from your use of deposit limits, self-exclusion, or cooling-off features is recorded for regulatory and player protection purposes.

5. Legal Basis for Processing

hk8 processes Personal Data on the following legal grounds:

6. How We Use Your Data

hk8 uses the Personal Data we hold about you for the following purposes:

• To create, maintain, and administer your Account on the Platform;
• To verify your identity and age (minimum 21 years) in accordance with KYC requirements;
• To process deposit and withdrawal transactions through your chosen payment method;
• To detect, investigate, and prevent fraudulent transactions, money laundering, and other unlawful activities;
• To deliver customer support and resolve queries or disputes you raise;
• To administer promotional offers, bonuses, and loyalty programme benefits you are entitled to;
• To monitor Platform usage and improve our products, services, and user experience;
• To enforce our Terms & Conditions and other Platform policies;
• To comply with applicable legal and regulatory obligations, including anti-money laundering reporting requirements;
• To send you service-related communications regarding your Account, including security alerts and transaction confirmations;
• To send you promotional communications where you have provided explicit consent — you may withdraw this consent at any time.

7. Data Sharing & Disclosure

hk8 does not sell, rent, or commercially disclose your Personal Data to any third party. We may share your data with the following categories of recipients only where strictly necessary and for the purposes described in this Policy:

• Payment Processing Providers — to facilitate deposit and withdrawal transactions via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and other approved channels. Payment providers receive only the minimum data necessary to process the transaction.
• Identity Verification & KYC Agencies — specialist third-party services engaged to verify identity documents and conduct due diligence on Account holders as required under anti-money laundering obligations.
• Fraud Prevention & Security Services — third-party providers assisting in the detection and prevention of fraudulent activity, chargebacks, and account abuse.
• Regulatory & Law Enforcement Authorities — where hk8 is required by law, regulatory directive, or court order to disclose Personal Data to competent authorities. hk8 will notify affected Users where legally permissible to do so.
• Technology & Infrastructure Providers — cloud hosting, data storage, and Platform infrastructure partners who process data strictly on hk8's behalf under binding data processing agreements.
• Professional Advisers — legal counsel, auditors, and compliance consultants engaged by hk8, subject to confidentiality obligations.

All third parties with whom hk8 shares Personal Data are contractually required to implement appropriate technical and organisational security measures and to use the data only for the specified purpose for which it was shared.

8. Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by the Platform when you visit hk8.cam. They allow the Platform to recognise your device on subsequent visits and enable core functionality, performance measurement, and personalisation.

8.2 Types of Cookies We Use

8.3 Managing Cookies

You may configure your browser to decline or delete cookies at any time. However, disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing your Account or completing transactions. Instructions for managing cookies vary by browser and device — consult your browser's help documentation for specific guidance.

9. Data Retention

hk8 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Account data is retained for the duration of your active Account relationship with hk8 and for a minimum of five (5) years following Account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC documents are retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later.
• Transaction records are retained for a minimum of five (5) years to satisfy financial regulatory obligations.
• Support communications are retained for a minimum of three (3) years from the date of the interaction.
• Technical & usage data (logs, IP records) are retained for up to twelve (12) months unless required for longer periods by fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with hk8's data disposal procedures.

10. Data Security

hk8 implements comprehensive technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption across all data transmissions between your device and our servers;
• Encryption of sensitive data at rest within our database infrastructure;
• Role-based access controls limiting staff access to Personal Data on a strict need-to-know basis;
• Two-factor authentication requirements for administrative system access;
• Regular penetration testing and vulnerability assessments of Platform infrastructure;
• Continuous monitoring and logging of access to Personal Data systems;
• Documented incident response procedures for handling data security events.

While hk8 employs industry-standard security practices, no system is entirely immune to breach. In the unlikely event of a data security incident affecting your Personal Data, hk8 will notify affected Users and applicable regulatory authorities in accordance with applicable legal obligations.

11. International Data Transfers

hk8 operates on an international basis and may transfer Personal Data to, or process it in, countries outside of Malaysia in connection with the services described in this Policy. Where such transfers occur, hk8 ensures that appropriate safeguards are in place, which may include:

• Contractual protections in the form of data processing agreements with service providers;
• Transfer to jurisdictions recognised as providing an adequate level of data protection;
• Implementation of technical security measures consistent with those described in Section 10 of this Policy.

By using the Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Malaysia. hk8 takes reasonable steps to ensure that international data transfers are conducted with appropriate care and that recipient parties maintain standards of protection consistent with this Policy.

12. User Rights

Subject to applicable law, you hold the following rights in relation to your Personal Data held by hk8. You may exercise any of these rights by contacting our support team via live chat at hk8.cam or by email at the address listed in Section 16:

hk8 will respond to all verified rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further two months, in which case you will be notified of the extension and its reason. We may require verification of your identity before processing any rights request in order to protect your data from unauthorised disclosure.

Please note that certain rights are subject to limitations. For example, the right to erasure does not apply where hk8 is required to retain data to comply with a legal obligation, including AML record-keeping requirements, which mandate a minimum five-year retention period.

13. Children's Privacy

The Platform is strictly intended for adults aged 21 years and above. hk8 does not knowingly collect Personal Data from individuals under the age of 21. If hk8 becomes aware that Personal Data has been collected from a person under the minimum age, such data will be deleted promptly and the associated Account will be permanently closed in accordance with our Terms & Conditions.

If you are a parent or guardian and believe your child has accessed the Platform or provided Personal Data without your knowledge, please contact us immediately via live chat or at the email address listed in Section 16.

14. Third-Party Links

The Platform may, from time to time, contain references to third-party services, payment providers, or other organisations. This Policy applies solely to data processed by hk8 through hk8.cam. hk8 is not responsible for the privacy practices of any third-party website or service, and we encourage Users to review the privacy policies of any third-party services they access in connection with their use of the Platform.

15. Amendments to This Policy

hk8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will be revised each time a material change is made.

Where changes are material, hk8 will notify registered Users via a notice on the Platform or by email to the address on file. Continued use of the Platform following the effective date of any revised Policy constitutes your acknowledgment of and agreement to the updated terms. We recommend reviewing this Policy periodically.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by hk8, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on the Platform at hk8.cam — the fastest way to reach us
• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to acknowledge all written privacy enquiries within 48 business hours and resolve them within 30 calendar days
• Operating Hours: 9:00 AM – 11:59 PM (MYT, GMT+8) for email; live chat is available around the clock

For questions specifically relating to responsible gambling tools, self-exclusion, or account restrictions, please refer to our Responsible Gambling page.