Privacy Policy bk4
— Your Personal Data Protection

Welcome to the bk4 Privacy Policy. We understand that your privacy matters deeply, and we do not take this responsibility lightly. As an online entertainment platform serving millions of users in Malaysia, bk4 is committed to managing your personal data with the highest standards of care, transparency, and security.

This Privacy Policy clearly explains what information we collect, why we need it, how we use it, and what rights you have regarding that data. We encourage you to read this document carefully and to contact our support team should you have any questions or concerns.

During your use of the platform bk4, we collect various types of information to enable us to provide a secure, seamless, and personalized service. The information we collect can be divided into three main categories:

A. Information You Provide Directly

• Full name as stated in official identification documents.
• Date of birth for age verification purposes.
• Active email address and mobile phone number.
• Full current residential address.
• Bank account or digital wallet details for deposit and withdrawal purposes.
• Copy of identification document (identity card, passport) for the KYC process.
• Proof of address such as a utility bill or recent bank statement.

B. Information Collected Automatically

• IP address and device information used to access the platform.
• Browser data including browser type, version, and language settings.
• History of gaming activity, wagering, and transactions on the platform.
• Login session data including time, date, and session duration.
• Related cookie and tracking technology information.

C. Information From Trusted Third Parties

• Identity verification from an accredited KYC service provider.
• Payment confirmation details from our integrated payment processors.
• Anti-money laundering (AML) screening data from licensed service providers.

The information we collect is used for various legitimate purposes necessary to ensure the platform bk4 operates smoothly and delivers the best user experience. Below is a summary table of data usage purposes:

Bk4 will not use your data for any purpose not stated in this Privacy Policy without obtaining your consent first. If you wish to withdraw consent for marketing communications, you may do so at any time via your account settings or by contacting our support team.

bk4 does not sell, rent, or trade your personal information to third parties for their own commercial purposes. However, in certain limited situations, we may need to share some of your data with the following parties:

• Integrated payment processors — to process your deposit and withdrawal transactions securely and efficiently.
• KYC and AML service providers — to verify your identity and ensure compliance with anti-money laundering regulations.
• Game providers — our game software providers may receive technical data necessary to operate the games, but do not have access to your financial information or full personal identification details.
• Law enforcement authorities — bk4 will disclose required data when mandated by a court order, warrant, or lawful request from a law enforcement agency.
• Regulatory body — for compliance audit purposes and statutory regulatory reporting required by law.

All third parties we work with are bound by strict data protection agreements and are only permitted to use your data for the purposes specified in those agreements. bk4 conducts due diligence checks on all service partners to ensure they comply with data protection standards equivalent to our own.

Platform bk4 uses cookies and similar tracking technologies to improve website functionality and performance, and to provide a more personalised experience for you. Below are the types of cookies we use:

• Essential Cookies — These cookies are required for core platform functions such as login session authentication and security. Without these cookies, the platform cannot function properly.
• Performance Cookies — Helps us understand how users interact with our platform, including the most frequently visited pages and time spent in each section.
• Functional Cookies — Stores your preferences such as language, display settings, and account configuration so you don't have to re-adjust these settings each time you log in.
• Marketing Cookies — Used to display promotional content relevant to your interests. This type of cookie is only activated with your consent.

You can control and manage cookie settings through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the platform. bk4. For more information on how to manage cookies, please refer to the documentation of your web browser.

The security of your personal data is our top priority bk4. We continuously invest in security infrastructure and employ multiple layers of technical and organizational protection to keep your data safe at all times:

• 256-bit SSL Encryption protects all data transmitted between your device and bk4's servers.
• Data encryption at rest (at-rest encryption) for all sensitive data stored in our databases.
• Two-factor authentication (2FA) available and encouraged for all user accounts.
• Intrusion detection and prevention system (IDS/IPS) operating 24 hours a day, 7 days a week to detect and prevent unauthorised access.
• Regular security audits by an independent and accredited third party.
• Role-based access control (RBAC) to ensure only authorised personnel can access user data.
• Incident response plan that has been tested and is ready to be activated in the event of any security threat.

As a user bk4 and data subjects under the Malaysian Personal Data Protection Act, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our Data Protection team via the customer support chat available on the bk4 platform. We will process your request within the timeframe stipulated by law, not exceeding 21 working days from the date of receipt of a complete request.

Your personal data is primarily stored on servers located in regions with data protection standards equivalent to or higher than those in Malaysia. In situations where your data needs to be transferred outside Malaysia — for example, to our international service providers — bk4 ensures that such transfers are carried out with adequate safeguards through:

• Standard data transfer agreements compliant with international legal requirements.
• Verification that the recipient country provides an equivalent level of data protection.
• Implementation of appropriate additional contractual protections for each data transfer case.

Bk4's data retention periods are as follows: KYC and financial transaction data is retained for a minimum of 5 years in accordance with AML legal requirements. Active account data is retained for as long as your account remains active. Once an account is closed, data will be retained for the legally required period before being securely deleted.

Platform bk4 is intended exclusively for users aged 18 years and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we become aware that we have collected personal data from a child without valid parental or guardian consent verification, we will take immediate steps to delete that information from our systems and close the relevant account. bk4 applies a rigorous KYC process to ensure that only users who meet the minimum age requirement are permitted to use our platform.

Platform bk4 may contain information or references to third-party services integrated with our platform, such as game providers and payment processors. Please note that this bk4 Privacy Policy applies only to data we collect and process directly.

Each third-party service provider integrated with bk4 has its own privacy policy governing how they handle user data within the scope of their services. bk4 is not responsible for the privacy practices of those third parties, although we endeavour to partner only with those who maintain high data protection standards.

bk4 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. Any amendments made will be published on this page along with the latest update date.

For amendments deemed material and significant, bk4 will endeavour to notify users via email or in-platform notification at least 14 days before the amendment takes effect. Your continued use of the bk4 platform after the effective date of such amendments will be considered your acceptance of the revised Privacy Policy.

We encourage you to review this page regularly to ensure you are always informed of how bk4 protects your personal information.

If you have any questions, concerns, or wish to exercise your rights in relation to this Privacy Policy, the bk4 Data Protection Officer (DPO) team is ready to assist you. You may contact us via:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom corner of the bk4 platform.
• Help Centre: Visit the FAQ our page for answers to frequently asked questions about privacy.

We are committed to responding to all privacy-related inquiries within 3 working days from the date of receipt, and resolve user rights requests within the timeframe stipulated by law.