1 Introduction and Scope of This Policy
BM8 ("we", "Platform", or "company") is committed to protecting the privacy and security of the personal data of all members and users of our platform. This Privacy Policy explains in detail how we collect, use, store, process, and protect your personal information when you use the BM8 website, mobile app, or any of our services.
This policy applies to all your interactions with BM8 — from your first visit to our website, the registration process, daily gaming activity, financial transactions, to any communication with our support team. It also covers data we receive from third parties such as payment providers and legitimate business partners.
BM8 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection legislation. We take this responsibility seriously because we understand that your trust is our most valuable asset.
2 Types of Personal Data We Collect
BM8 collects several categories of personal data depending on the nature of your interaction with our platform:
2.1 Data You Provide Directly
- Identity Information: Full name, date of birth, identity card number (MyKad), gender.
- Contact Information: Email address, mobile number, residential address.
- Financial Information: Bank account number, bank name, e-wallet account number for payment and withdrawal purposes.
- Verification Documents: A copy of your MyKad or passport, along with a bank statement or utility bill, is required for the KYC process.
- Password: Stored in encrypted hash form — bm8 does not retain your original password.
2.2 Automatically Collected Data
- IP address and approximate location information based on IP.
- Device type, operating system, and web browser version used.
- Activity logs and game history within the platform.
- Deposit and withdrawal transaction history.
- Login times and session duration.
- Platform feature usage data (clicks, navigation, searches).
| Data Category | Example | Primary Purpose |
|---|---|---|
| Identity | Name, MyKad, date of birth | Account verification & KYC |
| Contact | Email, phone number | Communication & security |
| Financial | Bank account no., e-wallet | Payment processing |
| Technical | IP, device, browser | Security & improvements |
| Games | Betting history, wins | Regulatory compliance |
3 Purpose of Data Collection and Processing
BM8 only collects and processes your personal data for legitimate, specified purposes. We do not use your data for any other purpose without first obtaining your consent.
- Account Management: Create, verify, and securely maintain your member account.
- Transaction Processing: Process deposits, withdrawals, and all financial transactions efficiently and securely.
- Identity Verification (KYC): Verify your identity to comply with anti-money laundering legal requirements and confirm you are a legitimate member.
- Customer Service: Resolve inquiries, complaints, and provide the technical assistance you need.
- Platform Security: Detect and prevent fraud, hacking, and suspicious activity that could compromise your account.
- Legal Compliance: Comply with regulatory requirements, audits, and lawful requests from competent authorities.
- Service Improvement: Analyze aggregate usage patterns (without personal identification) to improve the overall user experience.
- Service Communications: Send important notifications related to your account, security, and changes to our terms of service.
4 Data Disclosure to Third Parties
BM8 does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes. However, in delivering our services, we may share your data with a limited set of third-party categories as follows:
4.1 Payment Service Providers
Financial information required to process deposits and withdrawals is shared with licensed and trusted payment service providers. All such providers are bound by strict data protection agreements with bm8 and are not permitted to use your data for any other purpose.
4.2 Game Providers
Minimum technical data required to run games may be shared with licensed game providers. This typically involves only your account ID and wagering balance — not your personal identity information.
4.3 Authorities and Regulatory Bodies
BM8 will disclose your personal data to the relevant authorities when required by law, court order, or a legitimate request from a regulatory body. In such situations, we will endeavour to notify you before the disclosure is made unless prohibited by law.
5 Cookies and Tracking Technology
BM8 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website or use our app.
5.1 Types of Cookies We Use
- Essential Cookies: Required for core platform functions such as login, session security, and navigation. Cannot be disabled.
- Performance Cookies: Collect anonymized information on how users interact with the platform to help us improve it.
- Functional Cookies: Remember your preferences such as language, theme, and display settings to deliver a more personalized experience.
- Analytics Cookies: Help us understand aggregate usage patterns for service improvement purposes.
5.2 Managing Cookies
You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the BM8 platform. Some features may not work properly if cookies are disabled.
6 Data Security Measures
BM8 implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, modification, or destruction.
- Encryption in Transit: All communications between your device and bm8 servers are encrypted using the latest 256-bit TLS/SSL protocol.
- Encryption at Rest: Sensitive data stored in our database, including passwords and financial information, is encrypted using AES-256 encryption algorithms.
- Two-Factor Authentication (2FA): All bm8 accounts come with a 2FA option for an additional layer of security at login.
- Role-Based Access Control: Only staff with a legitimate, licensed need are permitted to access member data, and only to the extent required for their role.
- 24/7 Monitoring: An automated security monitoring system operates around the clock to detect suspicious activity or unauthorised access attempts.
- Regular Security Audits: BM8 conducts regular security audits and penetration testing by accredited independent parties.
- Incident Response Plan: BM8 has clear procedures to respond to any data breach and will notify affected members within the timeframe stipulated by law.
7 Data Retention Period
BM8 retains your personal data only for as long as necessary to fulfil the original purpose of collection and to comply with applicable legal requirements.
- Active Account Data: Retained for the duration your account remains active, plus an appropriate recovery period.
- Financial Transaction Data: Retained for a minimum of 7 years after a transaction is made to meet anti-money laundering compliance requirements.
- KYC Data: Retained for the period mandated by the regulatory authority, typically 5 to 7 years after account closure.
- Security Logs: Retained for 2 years for security investigation purposes if required.
- Communication Data: Communication records between you and the bm8 support team are retained for 3 years.
Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you as an individual.
8 Your Rights as a Data Subject
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and bm8's internal policies, you have the following rights regarding your personal data:
Right to Access
You have the right to obtain a copy of the personal data we hold about you. Requests are processed within 21 business days.
Right to Rectification
If any of your data is inaccurate or outdated, you may request a correction through your account settings or customer support.
Right to Erasure
You may request deletion of your personal data, subject to mandatory retention requirements under applicable law.
Right to Object
You may object to the processing of your data for specific purposes such as direct marketing at any time.
Right to Data Portability
You have the right to receive the data you provided to us in a machine-readable format for transfer to another provider.
Right to Restrict Processing
Under certain circumstances, you may request that BM8 restrict the processing of your data while an issue is being resolved.
9 Children's Privacy
The bm8 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.
If we find that we have inadvertently collected personal data from someone under 18 years of age, we will promptly delete that data and close the relevant account. If you are a parent or guardian and discover that your underage child has registered at bm8, please contact us immediately.
10 Amendments to the Privacy Policy
BM8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, the latest security technology, legal requirements, or changes to the services we offer.
When we make significant changes to this policy, we will notify you via:
- In-app notification on bm8 upon next login.
- Email to the address registered to your account.
- A prominent notice at the top of this page stating the update date.
Your continued use of the bm8 platform after any amendments take effect constitutes your acceptance of the updated policy. We encourage you to review this page periodically.
11 How to Contact Us About Privacy
If you have any questions, concerns, or requests regarding this Privacy Policy or how bm8 handles your personal data, you may contact us through the following channels:
- Live Chat: Available 24/7 on the bm8 app or website — the fastest way to get a response.
- Privacy Email: [email protected] (write "Privacy Enquiry" in your email subject line).
All privacy-related enquiries will be responded to within 5 business days. For more complex requests such as data access or deletion, processing may take longer as outlined in Section 8 above.
You may also visit the following pages for more information on how we operate the platform and protect your interests as a BM8 member:
Play with Calm — Your Privacy Alert
BM8 is committed to protecting your privacy at every step. Register your account today and enjoy a safe, fun, and trusted gaming experience alongside hundreds of thousands of Malaysian players.