Privacy Policy GOMK8 –
Data Protection & Information Security

GOMK8 collects your personal information through several means — including when you register an account, make a deposit or withdrawal, contact our support team, or simply browse our platform. The information we collect falls into three main categories:

Identity Information: Full name, date of birth, identification number (MyKad), email address, and phone number. This information is required to verify your identity during the KYC (Know Your Customer) process and to meet our platform's legal obligations.

Financial Information: Bank account details, deposit and withdrawal history, and transaction records. We do not store your credit card numbers or banking passwords — all payments are processed through verified, secure third-party payment channels such as FPX and licensed e-wallets.

Technical Information: IP address, browser type, operating system, game session data, and platform activity records. This information helps us detect fraud, improve platform performance, and deliver a better experience for you.

Every piece of information we collect has a clear and lawful purpose. GOMK8 uses your personal data solely for the following purposes:

• Account Verification & Security: To verify your identity during registration and login, prevent unauthorized access, and protect your account from suspicious activity.
• Transaction Processing: To accurately and securely process deposits, withdrawals, and bonus payments.
• Legal Compliance: To comply with anti-money laundering (AML) reporting requirements, KYC, and other financial regulations applicable in Malaysia.
• Customer Support: To enable our support team to quickly and accurately identify and resolve your account issues.
• Platform Improvements: To analyze usage patterns and improve the performance, stability, and overall experience of the gomk8 platform.
• Service Communications: To send important account-related notifications, promotions you have subscribed to, and service terms updates.

GOMK8 does not use your data for commercial profiling, third-party advertising, or any purpose not stated above without first obtaining your additional consent.

GOMK8 takes data sharing very seriously. We only share your personal information in the following situations, and strictly to the extent necessary:

• Payment Providers: Transaction details are shared with payment service providers such as FPX, Touch 'n Go, and GrabPay to process your transactions. They are bound by strict confidentiality agreements.
• Relevant Authorities: Where required by law, court order, or official request from a regulatory body, we may need to disclose certain information. We will not disclose more than what is required.
• Technology Providers: Technical infrastructure providers, such as cloud computing services we use, may have limited access to data for operational purposes. All such providers are bound by strict data processing agreements.
• Fraud Investigation: In cases of suspected fraud or financial crime, relevant information may be shared with law enforcement agencies for investigation purposes.

In all of the above cases, GOMK8 ensures that data recipients are bound by confidentiality obligations equivalent to or stricter than our own standards. We do not share your data with advertisers, marketing companies, or data brokers under any circumstances.

GOMK8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use three main types of cookies:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled as they are essential to platform operation.
• Performance Cookies: Collects anonymous information about how you use the platform — which pages are visited most, how long you spend on each page, and general navigation patterns. This helps us identify areas for improvement.
• Preference Cookies: Saves your preferences such as language, display theme, and game choices so you do not have to re-enter them each time you log in.

You can manage your cookie settings through your browser at any time. Please note that disabling essential cookies may affect platform functionality and your gaming experience.

Protecting your data is more than a promise — it is a technical commitment we fulfil every day. gomk8 continuously invests in security infrastructure to keep your data safe from increasingly sophisticated cyber threats.

Key technical measures we implement include:

• Data in transit is encrypted using TLS 1.3, and data at rest is encrypted using AES-256.
• Real-time intrusion detection systems (IDS) and intrusion prevention systems (IPS).
• Security audits and independent penetration testing conducted at least twice a year.
• Role-based access control (RBAC) — only authorised staff can access sensitive member data.
• Multi-layered data backup systems with disaster recovery to ensure service continuity.
• 24/7 security monitoring by our in-house cybersecurity team.

While no system is 100% immune to all threats, GOMK8 takes all reasonable and practical steps to minimize risk. In the event of a security incident affecting your data, we will notify you and the relevant authorities within the timeframe required by law.

In the context of online platform operations, your data may be processed or stored on servers located outside Malaysia. This occurs when we use international cloud infrastructure providers with data centres across multiple regions.

GOMK8 ensures that all cross-border data transfers are carried out with adequate protective measures, including:

• Standard data processing agreements compliant with Malaysia's PDPA requirements.
• Selection of cloud providers holding internationally recognised security certifications (ISO 27001, SOC 2).
• Data protection impact assessment conducted before any new data transfer is implemented.

You have the right to know where your data is transferred and what protection mechanisms are in place. Contact our privacy team for more details.

GOMK8 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Once the retention period expires, your data will be securely deleted or anonymised.

As a general guide, data retention periods are as shown in the table in Section 1. Please note that where a dispute or active investigation involves your account, the relevant data may be retained for longer until the matter is fully resolved.

After you close your gomk8 account, we will initiate the data deletion process within 90 days, except for transaction records and data that must be retained for legal compliance purposes for the period specified by applicable regulations.

GOMK8 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. The "Updated" date at the top of this document will always reflect the latest version in effect.

For material changes — those that significantly affect your privacy rights — we will notify you by email or in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make an informed decision.

If you disagree with any changes made, you have the right to close your account before those changes take effect. Continued use of the platform after the effective date will be considered acceptance of the updated privacy terms.

For any inquiries regarding this Privacy Policy or how we handle your personal data, please contact our support team via live chat, available 24/7 on the gomk8 platform.