Privacy Policy TK8

Tk8 collects your personal information only when necessary to provide the services you request. Data collection is done directly from you during registration, through platform usage, and via automated technologies such as cookies. The following are the categories of data we collect:

All information you provide to us must be accurate, current, and complete. You are responsible for updating your information should any changes occur.

The data we collect is used responsibly and only for legitimate purposes. TK8 does not use your data for any unrelated purpose without your consent. The following are the primary purposes for data use:

• Account Management: Creating, verifying, and maintaining your account on the tk8 platform.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions in your account securely and accurately.
• Identity Verification (KYC): Keeping the platform free from fraud and ensuring compliance with anti-money laundering laws.
• Customer Service: Responding to inquiries, resolving complaints, and providing you with effective technical support.
• Platform Security: Detecting and preventing fraudulent activity, unauthorised access, and cybersecurity threats.
• Product Improvement: Analysing aggregated usage patterns to improve the user experience and introduce new features.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — only if you have consented to receive them.
• Legal Compliance: Fulfilling our obligations under Malaysian law, including PDPA 2010 and related regulations.

Tk8 continuously invests in security infrastructure to ensure your data remains protected at all times. We employ multiple layers of protection encompassing current technology and industry best practices.

• 256-bit SSL Encryption: All communications between your device and tk8 servers are encrypted using TLS/SSL protocol with 256-bit keys — the same standard used by international banking institutions.
• Two-Factor Authentication (2FA): You can enable 2FA on your account for an additional layer of security during login and withdrawals.
• 24/7 Monitoring: Our automated monitoring system is always active to detect any unusual activity or unauthorised access attempts.
• Data Segregation: Sensitive data such as financial information and KYC documents are stored in isolated environments with role-based access controls.
• Regular Security Audits: TK8's infrastructure undergoes regular penetration testing and security audits by qualified third parties.
• Internal Access Controls: Only specifically authorized personnel may access members' personal data, and every access is recorded in an audit log.

While no system can guarantee absolute security, tk8 is committed to maintaining the highest level of protection achievable with current technology. Should any security incident involving your data occur, we will notify you within 72 hours.

Tk8 does not sell or rent your personal data to any third party. However, in the course of operating the platform, we may need to share certain data with the following parties, and only to the extent necessary:

• Payment Service Providers: FPX, DuitNow, Touch 'n Go, GrabPay, and other payment gateways require transaction information to process your deposits and withdrawals.
• Game Providers: Game provider companies partnering with tk8 may receive anonymous account identifiers for game synchronisation purposes.
• Identity Verification Services: Trusted third-party KYC service providers help us verify member identities securely.
• Legal Authority: tk8 will disclose data if required by court order, criminal investigation, or a lawful request from Malaysian authorities.
• Analytics Services: Anonymized usage data (without identifying information) is used for platform analytics and improvement purposes.

Tk8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can manage or delete cookies through your browser settings at any time. Please note that deleting essential cookies may affect certain functions on the TK8 platform. We recommend reviewing your browser cookie settings periodically.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by TK8:

• Right to Access: You have the right to request and receive a copy of all personal data we hold about you.
• Right to Rectification: If any of your data is inaccurate or outdated, you have the right to request an immediate correction.
• Right to Withdraw Consent: You may withdraw consent for non-mandatory data processing at any time, including unsubscribing from marketing communications.
• Right to Object: You may object to the processing of your data for specific purposes such as direct marketing.
• Right to Request Deletion: Under certain circumstances, you may request that your data be deleted – subject to legal obligations requiring us to retain certain records.
• Right to Information: You have the right to know who your data is shared with and for what purpose.

To submit any request regarding your privacy rights, please contact our data protection team via email at [email protected]. We will respond to your request within 14 business days.

Tk8 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or to comply with applicable legal requirements.

• Active Account Data: Retained for as long as your account is active and up to 7 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with Malaysia's financial legal requirements.
• KYC Documents: Retained for 5 years after the business relationship ends or as directed by the relevant authorities.
• Platform Activity Logs: Retained for 2 years for security and investigation purposes if required.
• Marketing Data: Deleted within 30 days after you withdraw consent for marketing communications.

Once the retention period expires and there is no legal obligation to retain the data, TK8 will securely delete or anonymize your data using methods that ensure it cannot be recovered.

The tk8 platform is strictly for users aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

If we discover that a child's personal data has been collected inadvertently, we will take immediate action to delete that data and close the account in question. Parents or guardians who believe their child has registered a tk8 account should contact us immediately at [email protected].

Tk8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any amendments made will be accompanied by:

• Update the "Last Updated" date at the top of this document.
• In-platform notice for material or significant amendments.
• Email notification for changes that directly affect how we handle your data.

We encourage you to review this page regularly, at least once every six months. Continued use of the tk8 platform after any amendments are published will be considered acceptance of the revised terms. If you do not agree with the changes made, you have the right to contact us and close your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the tk8 data protection team is ready to assist you.