BK96 Privacy Policy for Malaysian Players

1Introduction

BK96 is an online casino and sports betting platform serving registered users across Malaysia, including players located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions. The operator of BK96 is committed to handling personal data responsibly and in a manner consistent with its international gaming licensing obligations and with recognised data protection principles.

This Privacy Policy applies to all personal data collected through the BK96 website, account portal, support channels, payment flows, and related services. It forms part of the overall agreement between each registered player and BK96, together with the Terms & Conditions.

By creating a BK96 account or by continuing to use the platform after the effective date of this policy, each user confirms they have read and understood its contents. If a user does not accept this Privacy Policy, they must not continue to access BK96 services.

2Definitions

• "BK96" / "we" / "us" refers to the operator and its authorised service providers delivering the BK96 platform.
• "Personal Data" means any information that identifies or could reasonably identify a living individual, including name, contact details, identity documents, financial data, and device identifiers.
• "Processing" means any operation applied to personal data, including collection, recording, storage, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Controller" means the entity that determines the purposes and means of processing personal data — in this context, the BK96 operator.
• "Processor" means a third party that processes personal data on behalf of BK96 under a written contract.
• "User" / "Player" means a natural person who holds or applies for a registered BK96 account.
• "KYC" refers to Know Your Customer verification, including identity, age, address, and payment ownership checks.

3Personal Data We Collect

BK96 collects the following categories of personal data from registered users and account applicants:

4How Personal Data Is Collected

BK96 collects personal data through the following means:

• Direct submission — registration forms, KYC document uploads, deposit and withdrawal requests, support messages, and responsible gaming applications.
• Automated platform interaction — login events, betting activity, game sessions, navigation behaviour, and device and network data captured by the BK96 system.
• Payment and verification partners — banks, e-wallet providers such as Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect, and identity verification services may pass transaction or verification outcomes to BK96 as part of an integrated service.
• Cookies and similar technologies — session management, fraud detection, performance analytics, and preference storage, as described further under Section 11.
• Referral information — where a user arrives through a BK96 affiliate or referral link, the referring identifier may be recorded for bonus attribution and compliance purposes.

5Data Processing and Purpose

BK96 processes personal data for the purposes described in the table below. Processing for a different incompatible purpose will not occur without either an additional lawful basis or, where applicable, user consent.

6Legal Basis for Processing

BK96 relies on the following lawful bases when processing personal data:

• Contractual necessity — processing required to fulfil the account agreement, including account management, payment processing, and wager settlement.
• Legitimate interests — fraud prevention, security monitoring, platform analytics, and responsible gaming administration, where those interests are not overridden by the user's rights.
• Legal obligation — processing required to comply with applicable international licensing obligations, AML requirements, identity verification mandates, or lawful orders.
• Consent — promotional communications where consent has been provided and can be withdrawn at any time without affecting the ability to hold a BK96 account.

7Data Sharing with Third Parties

BK96 does not sell personal data. Data may be shared with third parties only in the circumstances set out below:

• Payment processors and financial institutions — banks including Maybank, CIMB, Public Bank, and Hong Leong, e-wallet operators, DuitNow, FPX, and cryptocurrency processing partners, to the extent required to execute authorised transactions.
• Identity and KYC verification providers — specialist services used to confirm identity documents, age eligibility (21+), and payment ownership.
• Game and platform technology suppliers — providers of casino software, sports data feeds, esports content, and responsible gambling tools who process data as processors under contractual obligations.
• Fraud prevention and security services — third-party systems assisting with risk scoring, suspicious activity detection, and account integrity.
• Legal, regulatory, and licensing authorities — where disclosure is required by a lawful order, licensing condition, or internal compliance procedure.
• Professional advisers — lawyers, auditors, and consultants bound by professional confidentiality obligations.

All processors engaged by BK96 are required to implement appropriate technical and organisational measures to protect personal data and to process data only on documented instructions.

8International Data Transfers

BK96 operates under an international gaming licence, and some service providers or data storage systems may be located outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide an equivalent standard of data protection, BK96 will implement appropriate safeguards such as contractual data protection clauses with the receiving entity.

Users who have questions about the safeguards applied to a specific transfer may contact BK96 support in writing using the contact details provided in Section 15.

9Data Retention Periods

BK96 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, unless a longer period is required or permitted by law, by licensing requirements, or for the defence of legal claims.

• Active account data — retained for the duration of the account relationship and for a period after closure as required by licensing and AML obligations.
• KYC and identity documents — retained for the period required by the applicable licensing framework following account closure or last account activity.
• Financial transaction records — retained for the minimum period required by the applicable anti-money-laundering and international licensing framework.
• Support and communication logs — generally retained for a defined period following the resolution of the relevant support matter.
• Responsible gambling records — retained for a period following a self-exclusion to prevent circumvention and to support any future access request.
• Technical and analytics data — aggregated or anonymised where possible after a reasonable operational period.

10Security Measures

BK96 applies technical and organisational measures proportionate to the risks involved in processing personal data. These measures include:

• TLS encryption for all data transmitted between a player's device and BK96 servers;
• encryption at rest for sensitive stored data, including identity documents and financial records;
• role-based access controls limiting staff access to personal data to those with a defined operational need;
• multi-factor authentication for staff administrative systems;
• automated monitoring for anomalous login behaviour, unusual transaction patterns, and potential account takeover activity; and
• periodic security reviews and supplier assessments.

No method of internet transmission or storage is completely secure. Players should also protect their own credentials by using a strong unique password, enabling two-factor authentication where available, and logging out after each session.

11Cookies and Similar Technologies

BK96 uses cookies and similar tracking technologies for the following purposes:

• Essential cookies — required for session management, login state, security tokens, and load balancing. These cannot be disabled without affecting core platform functionality.
• Analytics cookies — used to understand aggregate usage patterns, identify performance issues, and improve platform navigation.
• Fraud detection and security cookies — assist in identifying suspicious device behaviour, duplicate account detection, and bot traffic.
• Preference cookies — store non-personal preferences such as display language or session time settings.

Players may manage non-essential cookies through their browser settings. Disabling certain cookies may affect platform features. BK96 does not use advertising or retargeting cookies to place BK96 advertising on third-party websites.

12User Rights

Subject to applicable law and the conditions of BK96's international gaming licence, registered users have the following rights in relation to their personal data:

To exercise any of the above rights, submit a written request to BK96 support with your registered email address and account identifier. BK96 may request additional verification before fulfilling a rights request to confirm the identity of the requester and protect other users.

13Minors and Age Policy

BK96 is strictly available only to individuals aged 21 and above. BK96 does not knowingly collect personal data from persons under this age. If it becomes apparent that personal data belonging to an underage individual has been collected, BK96 will close the account, void any associated activity, and securely delete the relevant data to the extent permitted by fraud prevention and licensing obligations.

Any person who suspects that a minor has accessed BK96 should contact support immediately so that the matter can be reviewed as a priority.

14Changes to This Privacy Policy

BK96 may update this Privacy Policy to reflect changes in data processing activities, platform functionality, applicable legal requirements, or international licensing obligations. Where changes are material, BK96 will communicate the update through the website or via the registered account.

The effective date at the top of this page identifies the version currently in force. Continued use of BK96 after the revised policy becomes effective constitutes acceptance of the updated terms. Users who do not accept an update may request account closure in accordance with the Terms & Conditions.

15Contact Us

Questions, corrections, access requests, or privacy complaints relating to the processing of personal data by BK96 should be directed to the BK96 support team. Please include your registered email address, account identifier, and a clear description of the subject matter.

The BK96 support email address is displayed as plain text: [email protected]. Do not include passwords, one-time verification codes, or full payment card details in any email correspondence. For urgent account matters, please use Live Chat.

BK96 will acknowledge receipt of a written privacy enquiry and provide a substantive response within a reasonable period. Where BK96 is unable to resolve a complaint to the user's satisfaction, the user may seek further guidance through the relevant channel available under their international licensing framework.