gomk8 Privacy Policy – How We Handle Your Data

1. Who We Are

For the purposes of this Privacy Policy, "gomk8", "we", "us", or "our" refers to the operating entity behind the gomk8 platform, accessible at gomk8.asia. gomk8 acts as the data controller in respect of personal data collected through the Platform from Members and visitors located in Malaysia and elsewhere.

This Privacy Policy applies to all personal data collected by gomk8 through the Platform, including data submitted during account registration, KYC verification, deposit and withdrawal processing, customer support interactions, and general Platform usage.

2. Data We Collect

2.1 Data You Provide Directly

When you register an account or use the Platform, gomk8 collects the following categories of personal data that you provide voluntarily:

• Identity Data: Legal full name, date of birth, nationality, and government-issued identification number (e.g., Malaysian MyKad number or passport number);
• Contact Data: Email address and mobile phone number;
• Address Data: Residential address, city, and postcode;
• Financial Data: Bank account numbers, e-wallet identifiers (e.g., Touch 'n Go eWallet, Boost), or cryptocurrency wallet addresses used for deposit and withdrawal purposes;
• Identity Verification Documents: Scanned copies or photographs of government-issued photographic identification documents submitted during KYC verification;
• Support Communications: Content of messages, emails, or live chat conversations between you and the gomk8 support team.

2.2 Data Collected Automatically

When you access the Platform, gomk8 automatically collects certain technical and behavioural data, including:

• Device Data: Device type, operating system, browser type and version, device identifiers;
• Log Data: IP address, login timestamps, session duration, pages accessed, and actions taken on the Platform;
• Transaction Data: Deposit amounts, withdrawal requests, game session records, bet history, and wallet balance changes;
• Cookie Data: Data collected through cookies and similar tracking technologies as described in Section 5.

3. How We Use Your Data

gomk8 uses the personal data it collects for the following purposes:

• Account Administration: To create, manage, and maintain your gomk8 Account, including processing login authentication and account security;
• Identity & Age Verification: To verify that you are at least 21 years of age and are who you claim to be, in compliance with our regulatory obligations;
• Transaction Processing: To process deposits, withdrawals, and in-game transactions accurately and securely in MYR;
• Regulatory Compliance: To meet anti-money laundering (AML), counter-terrorism financing (CTF), and other legal obligations imposed under the international gaming licence framework under which gomk8 operates;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account abuse, and security breaches on the Platform;
• Customer Support: To respond to your enquiries, complaints, and support requests efficiently;
• Responsible Gaming: To monitor gaming patterns and, where appropriate, apply or suggest responsible gaming tools in accordance with our Responsible Gaming policy;
• Service Improvement: To analyse Platform usage data in aggregate form to improve the gomk8 product experience;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may withdraw this consent at any time.

4. Legal Basis for Processing

gomk8 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Member Agreement (as set out in the Terms & Conditions), including account administration and transaction processing;
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML, and CTF obligations;
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications, where you have provided explicit consent. You may withdraw consent at any time by contacting gomk8 support.

5. Cookies & Tracking Technologies

The gomk8 Platform uses cookies and similar technologies to operate correctly, improve performance, and understand how Members use the Platform. The categories of cookies used are as follows:

5.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features including login session management, wallet authentication, and security controls. These cookies cannot be disabled.

5.2 Performance & Analytics Cookies

These cookies collect anonymised data about how visitors interact with the Platform — pages visited, session duration, error events — to help gomk8 improve its services. No personally identifiable information is collected through these cookies.

5.3 Functional Cookies

These cookies remember your preferences (such as language settings and display options) to provide a more personalised experience on return visits to the Platform.

You can configure your browser to refuse cookies. However, disabling strictly necessary cookies may prevent certain Platform features from functioning correctly, including login and wallet access. For guidance on managing cookies on your browser, consult your browser's help documentation.

6. Data Sharing & Disclosure

gomk8 does not sell your personal data to third parties. We do not share your personal data with third parties for their own marketing purposes. We share personal data only in the following circumstances:

• Service Providers: Third-party vendors engaged by gomk8 to provide services including payment processing, KYC verification, fraud detection, and IT infrastructure. These providers are contractually bound to process personal data solely for the purposes specified by gomk8 and in accordance with this Policy;
• Game Providers: Certified game studios whose games are accessed through the gomk8 Platform may receive session-level technical data (such as player session identifiers) necessary to deliver game functionality. No financial or identity data is shared with game studios;
• Regulatory Authorities: gomk8 may be required to disclose personal data to government agencies, licensing authorities, or law enforcement bodies where legally compelled to do so;
• Business Transfers: In the event of a merger, acquisition, or sale of gomk8's business or assets, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

7. Data Retention

gomk8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your Account plus a minimum of 5 years following Account closure, to meet regulatory and audit requirements;
• KYC Documentation: Retained for a minimum of 5 years following Account closure in accordance with AML record-keeping obligations;
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction;
• Support Communications: Retained for 2 years from the date of the communication, unless the content relates to an ongoing dispute or legal matter;
• Marketing Consent Records: Retained until consent is withdrawn plus 1 year for audit purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.

8. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by gomk8:

• Right of Access: You may request a copy of the personal data gomk8 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. Note that this right is subject to regulatory retention obligations;
• Right to Restriction: You may request that gomk8 restrict processing of your personal data in certain circumstances;
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to gomk8;
• Right to Object: You may object to processing of your personal data for legitimate interests purposes or direct marketing;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact the gomk8 Data Privacy team at [email protected]. gomk8 will respond to verifiable requests within 30 days. Identity verification may be required before processing rights requests.

9. Data Security

gomk8 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Measures in place include:

• 256-bit SSL/TLS encryption on all data in transit between your device and the Platform;
• Encryption of sensitive data fields (including financial data and identity documents) at rest;
• Access controls restricting internal access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Multi-factor authentication requirements for all gomk8 internal systems handling personal data;
• Incident response procedures for identifying, containing, and reporting personal data breaches.

Notwithstanding the above, no method of transmission over the internet or electronic storage is completely secure. gomk8 cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials.

10. Children & Minors

If you are a parent or guardian and believe that your minor child has registered on the gomk8 Platform, please contact us immediately at [email protected]. gomk8 takes underage access seriously and will act on confirmed reports promptly.

11. Third-Party Links

The gomk8 Platform does not contain links to third-party websites for purposes other than technical service delivery. This Privacy Policy applies solely to the gomk8 Platform (gomk8.asia) and does not govern the data practices of any third-party payment providers, game studios, or other external services that you may interact with in the course of using the Platform. gomk8 bears no responsibility for the privacy practices of third-party services.

12. Policy Updates

gomk8 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform functionality. The current version of the Privacy Policy will always be accessible on this page, and the "Last Updated" date at the top of the document will be revised accordingly.

Where changes are material, gomk8 will notify Members via email or an in-Platform notification prior to the changes taking effect. Your continued use of the gomk8 Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the updated Policy, you must cease using the Platform and contact support to close your Account.

13. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or gomk8's data practices, please contact us through the following channel:

If you are not satisfied with gomk8's response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority or gaming regulatory body in your jurisdiction.