Bk200 Privacy Policy — Data Protection & Information Security

Bk200 ("we", "Platform" or "company") takes data protection seriously. This Privacy Policy explains in detail how we handle the personal information you provide to us when using the bk200 platform.

By registering and using bk200's services, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, you should not use our platform.

This Privacy Policy applies to all users of the bk200 platform, including website visitors, registered members, and VIP members. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

Bk200 collects your personal information through several channels — directly from you during registration, automatically while you use the platform, and in some cases, through trusted third parties. The following are the categories of information we collect:

The personal information we collect is used responsibly and only for legitimate purposes. bk200 uses your data for the following:

• Account management: Creating, verifying, and managing your account on the bk200 platform, including secure login and two-factor authentication (2FA).
• Transaction processing: Processing deposits and withdrawals securely, verifying your identity for transactions exceeding certain limits, and maintaining required financial records.
• Regulatory compliance: Fulfilling legal obligations including anti-money laundering (AML), know-your-customer (KYC), and mandatory financial reporting requirements.
• Customer support: Providing effective technical support and customer service, resolving disputes, and addressing your complaints accurately.
• Platform security: Detecting and preventing fraud, unauthorized access, account misuse, and other suspicious activities that could compromise platform security.
• Service improvements: Analyzing platform usage patterns to improve user experience, develop new features, and ensure smooth platform operation.
• Marketing communications: Sending you information about relevant promotions, bonuses, and special offers — subject to the communication preferences you set in your account.
• Responsible gaming: Monitoring your betting patterns to identify signs of problem gambling and provide appropriate support in accordance with our responsible gaming policy.

Bk200 does not sell, rent, or trade your personal information to any third party for marketing purposes. However, in certain situations, we may need to share your data with the following parties:

• Payment service providers: Required financial information is shared with payment gateways, banks, and e-wallet providers used to process your transactions. All such providers are bound by strict confidentiality agreements.
• Technology service providers: Cloud infrastructure providers, cybersecurity services, and analytics tools that help us operate the platform may have limited access to your technical data, solely for operational purposes.
• Regulatory authority: We are obligated to disclose information to Malaysian government authorities when required by law, court order, or for AML and KYC compliance.
• Business partners: In the event of a merger, acquisition, or sale of company assets, user information may be transferred to the new entity taking over bk200's operations, with appropriate notice given to you.
• Independent audit body: Independent auditors verifying the RNG system and game fairness may access statistical data that contains no personally identifiable information.

In all data-sharing scenarios above, bk200 ensures that receiving parties comply with data protection standards equal to or higher than those we apply ourselves.

Your data protection is bk200's top priority. We continuously invest in the latest security technologies and procedures to ensure your information remains safe and protected from unauthorized access.

• Encryption in transit: All communications between your browser and bk200's servers are protected by TLS 1.3 encryption with a 256-bit SSL certificate. This ensures no third party can intercept or read the data transmitted.
• Encryption of stored data: Sensitive personal information, including financial details and KYC documents, is stored in encrypted form using AES-256 standards in secured data centers.
• Internal access controls: Access to user data within the bk200 organisation is restricted to staff who require it to perform their duties. All access is logged and continuously monitored.
• Regular security audits: The bk200 platform undergoes regular penetration testing and security audits conducted by accredited independent cybersecurity firms.
• 24/7 monitoring: Our threat detection system operates continuously to identify and respond to any unauthorized access attempts or cyberattacks.
• Incident response plan: bk200 has a tested incident response protocol to address any data breaches swiftly, including notifying affected users within the timeframes prescribed by law.

Bk200 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential cookies: Required for core platform functions such as secure login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference cookies: Saving your preferences such as language, display settings, and personal preferences so you don't need to reset them on each visit.
• Analytics cookies: Helping us understand how users interact with the platform — most visited pages, time spent, and navigation paths. This information is used for platform improvements.
• Security cookies: Used to detect suspicious activity, prevent fraud, and verify that login sessions are legitimate and secure.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality and your experience on the bk200 platform. For more information on managing cookies, please refer to your web browser's documentation.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal information held by bk200:

• Right to access: You have the right to request a copy of the personal information we hold about you. Such requests will be processed within 21 working days.
• Right to rectification: If the information we hold is inaccurate or outdated, you have the right to request that corrections be made promptly.
• Right to erasure: In certain circumstances, you may request the deletion of your personal information, subject to regulatory and legal obligations that may require us to retain certain records.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time. An unsubscribe option is available in every marketing communication we send.
• Right to withdraw consent: You may withdraw consent previously given for data processing at any time, though this may affect our ability to provide certain services.
• Right to complain: If you believe your privacy rights have been violated, you have the right to file a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.

To exercise any of the above rights, please contact our data protection team via email or live chat. We will verify your identity before processing any requests related to your personal data.

Bk200 retains your personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations.

• Active account data: For as long as your account is active and throughout your membership period at bk200.
• Financial transaction records: Minimum seven (7) years after a transaction occurs, in accordance with Malaysia's financial and tax reporting legal requirements.
• KYC documents: Five (5) years after account closure or the end of the business relationship, in line with Malaysia's AML requirements.
• Support communication logs: Three (3) years for reference and dispute resolution purposes.
• Technical data and system logs: Twelve (12) months for security and digital forensics purposes where required.

Once the designated retention period has expired, your data will be securely deleted or anonymized so it can no longer be linked to your identity. Our data deletion process follows recognized industry standards to ensure data cannot be recovered.

The bk200 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal information from individuals under the age of 18.

All new registrants are required to verify their age during the KYC process. Should we discover that personal information has been collected from someone under the age of 18, we will immediately delete that information and close the account in question.

Bk200 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, new legal requirements, or data protection improvements.

When material changes are made to this Privacy Policy, we will notify you via your registered email or a prominent notice on the bk200 platform before the changes take effect. For non-material amendments, the updated date at the top of this page will be automatically revised.

Continued use of the bk200 platform after any amendments are published constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we handle your personal information.

If you have any questions, concerns, or requests regarding bk200's Privacy Policy or how we handle your personal information, our data protection team is ready to assist.

• Data protection email: [email protected]
• Live chat: Available 24/7 via the chat icon at the bottom corner of the bk200 platform
• Response time: Under 2 minutes via live chat; 24 hours via email
• Official data requests: Please state "Personal Data Request" in your email subject line for faster processing

We also encourage you to read Terms and Conditions and page Responsible Gaming us for a fuller understanding of how bk200 operates in your best interest.