Your Privacy Matters: This Privacy Policy constitutes a binding commitment by bk8888 regarding the handling of your personal data. Please read it in full alongside our Terms & Conditions. By registering an account or using our platform, you confirm that you have read and accepted the practices described herein.
1. Introduction
bk8888 ("we", "us", "our", or "the Platform") operates the online gaming website at https://bk8888.cam and is committed to protecting the personal data of all members, prospective members, and visitors who interact with our services. This Privacy Policy applies to all personal data processed by bk8888 in connection with the provision of its online gaming services to players located primarily in Indonesia.
bk8888 is the data controller responsible for the personal data you provide when registering an account, making deposits or withdrawals, contacting customer support, or otherwise using the Platform. As data controller, bk8888 determines the purposes and means by which your personal data is processed, and accepts accountability for ensuring that processing is carried out lawfully, fairly, and transparently.
This Policy is supplemented by our Terms & Conditions and our Responsible Gaming Policy. In the event of any conflict between this Policy and another document on the Platform, this Privacy Policy governs matters relating specifically to personal data.
2. Definitions
For the purposes of this Privacy Policy, the following terms bear the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person ("data subject"), including name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, or economic identity of that person. |
| "Processing" | Any operation performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, transmission, restriction, erasure, or destruction. |
| "Data Controller" | The entity (bk8888) that determines the purposes and means of processing personal data. |
| "Data Processor" | A third party that processes personal data on behalf of bk8888 under a data processing agreement, such as a payment processor or identity verification provider. |
| "Member" | Any natural person who has registered an account on the bk8888 Platform and whose registration has been accepted. |
| "KYC Data" | Identity verification documents and associated data submitted by a Member as part of the Know Your Customer process, including KTP (Indonesian National Identity Card) copies, photographs, and proof of payment method. |
| "Cookies" | Small text files placed on a user's device by the Platform to enable functionality, remember preferences, and support analytical and security processes. |
3. Data We Collect
bk8888 collects personal data in three broad categories: data you provide directly, data generated through your use of the Platform, and data received from third-party sources. The following table outlines the specific types of data collected in each category:
3.1 Data You Provide Directly
| Data Type | Examples |
|---|---|
| Registration Data | Full legal name, date of birth, Indonesian residential address, email address, mobile phone number, preferred username, and password (stored in hashed form). |
| KYC / Identity Data | Copy of Indonesian National Identity Card (KTP), bank account screenshots, selfie photographs, and any additional identity documents requested during verification. |
| Financial Data | Bank account numbers and bank names (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records, and account balance history. |
| Communications Data | Records of live chat conversations, email correspondence, support ticket submissions, and feedback responses involving bk8888 support agents. |
| Responsible Gaming Data | Self-exclusion requests, deposit or loss limit settings, cooling-off period activations, and problem gambling assessment responses where voluntarily provided. |
3.2 Data Generated Through Platform Use
| Data Type | Examples |
|---|---|
| Device & Technical Data | IP address, browser type and version, operating system, device model, screen resolution, and time zone (used to infer approximate location for fraud and security purposes). |
| Behavioural Data | Pages visited, session duration, games played, bet amounts, bet frequencies, bonus claims, and navigation patterns within the Platform. |
| Transaction Log Data | Timestamped records of every deposit, withdrawal, bonus credit, wager, win, and loss attributed to your account. |
| Cookie Data | Session identifiers, preference settings, authentication tokens, and analytics event data generated by cookies placed on your device (see Section 10). |
3.3 Data Received from Third Parties
bk8888 may receive personal data from the following third-party sources in connection with operating the Platform:
- Identity verification providers who confirm KTP authenticity and age;
- Payment processors who confirm deposit and withdrawal transaction status;
- Fraud prevention and anti-money-laundering screening services;
- Analytics providers who aggregate behavioural data at a non-personally-identifiable level;
- Game software providers (such as Pragmatic Play, Evolution Gaming, and Spribe) who log game session outcomes within their certified RNG systems.
4. How We Collect Your Data
bk8888 collects personal data through the following mechanisms:
- Account registration forms: When you create an account on the Platform, you voluntarily submit registration data including your name, email address, and mobile number;
- KYC submission portal: When completing identity verification, you upload documents directly to our secure KYC portal;
- Deposit and withdrawal transactions: Financial data is captured automatically when you initiate or r eceive payments through the Platform;
- Live chat and email support: Communications data is recorded when you contact our support team;
- Cookies and tracking technologies: Technical and behavioural data is collected automatically as you navigate the Platform (see Section 10);
- Third-party integrations: Data is received from payment processors, identity verification services, and fraud prevention partners as described in Section 3.3.
Voluntary vs. Mandatory Data: Registration data, KYC documents, and payment method details are mandatory for account operation and withdrawal eligibility. Certain communications data (such as optional feedback forms) is entirely voluntary. Where data collection is optional, this will be clearly indicated at the point of collection.
5. Purposes of Processing
bk8888 processes your personal data exclusively for the following clearly defined purposes. We do not process personal data for any purpose beyond those stated below without first obtaining your explicit consent or as required by law.
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your bk8888 account, including processing login authentication, account settings changes, and preference updates. |
| Identity Verification (KYC) | Verifying your identity, age (21+), and eligibility to use the Platform in accordance with our Terms & Conditions and applicable anti-money-laundering obligations. |
| Payment Processing | Processing deposits and withdrawals through your nominated Indonesian bank accounts (BCA, BRI, BNI, Mandiri, etc.) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). |
| Fraud Prevention & Security | Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, multiple-account violations, and other prohibited activities as defined in our Terms & Conditions. |
| Responsible Gaming | Monitoring gaming behaviour to identify potential problem gambling indicators and administering responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods. |
| Customer Support | Responding to support enquiries, resolving disputes, and maintaining records of communications for quality assurance and training purposes. |
| Platform Improvement | Analysing aggregated behavioural and technical data to improve Platform performance, user experience, game selection, and promotional offerings. |
| Marketing Communications | Sending promotional offers, bonus notifications, and platform updates to members who have opted in to receiving such communications. You may opt out at any time. |
| Legal Compliance | Fulfilling obligations under applicable anti-money-laundering, counter-terrorist-financing, and data protection laws, and responding to lawful requests from competent authorities. |
6. Legal Basis for Processing
bk8888 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual necessity: Processing required to perform the contract between bk8888 and the Member (i.e., the Terms & Conditions), including account administration, payment processing, and game provision;
- Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering obligations, age verification requirements, and responses to lawful authority requests;
- Legitimate interests: Processing carried out in furtherance of bk8888's legitimate business interests (fraud prevention, platform security, responsible gaming monitoring, and service improvement), where such interests do not override the fundamental rights and freedoms of the data subject;
- Consent: Processing activities for which explicit consent has been obtained, primarily marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.
7. Data Sharing
7.1 Third-Party Processors
bk8888 shares personal data with the following categories of third-party data processors, strictly on a need-to-know basis and subject to binding data processing agreements that require processors to maintain confidentiality and implement appropriate security measures:
- Payment processors: Indonesian and international payment gateway providers facilitating deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja;
- Identity verification providers: KYC technology platforms that validate KTP documents, cross-check identity databases, and confirm age eligibility;
- Fraud and AML screening services: Automated and human-review services that screen transactions and account activity against sanctions lists and fraud databases;
- Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, who receive session data to deliver certified RNG game outcomes and maintain game integrity logs;
- IT infrastructure providers: Cloud hosting and content-delivery network providers that store and transmit Platform data on behalf of bk8888 under strict security agreements.
7.2 Legal Disclosure
bk8888 may disclose personal data to competent government authorities, law enforcement agencies, or courts where such disclosure is required by a valid legal order, court judgment, or statutory obligation. In such cases, bk8888 will disclose only the minimum data required to satisfy the legal demand and will notify the affected Member where legally permissible to do so.
7.3 No Commercial Sale of Data
bk8888 does not sell, rent, or trade personal data to any third party for commercial marketing or advertising purposes. Personal data shared with processors is used solely for the operational purposes described in this Policy and subject to the restrictions of the applicable data processing agreement.
Data Sharing Commitment: Every third-party processor engaged by bk8888 is bound by a written data processing agreement that limits their use of your personal data strictly to the purposes for which it was shared. bk8888 conducts periodic reviews of its processor relationships to ensure continued compliance with data protection standards.
8. Data Retention
bk8888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following standard retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account Registration Data | Duration of account plus 5 years from account closure, to satisfy anti-money-laundering record-keeping obligations. |
| KYC / Identity Documents | Duration of account plus 5 years from account closure. Extended to 7 years where a suspicious activity report has been filed. |
| Financial Transaction Records | 7 years from the date of each transaction, in accordance with standard financial record-keeping requirements. |
| Customer Support Communications | 3 years from the date of the last support interaction, for quality assurance and dispute resolution purposes. |
| Behavioural / Analytics Data | Up to 24 months in identifiable form; thereafter retained in fully anonymised aggregated form indefinitely for platform improvement purposes. |
| Self-Exclusion Records | Retained indefinitely for permanent self-exclusions; for time-limited exclusions, retained for the duration of the exclusion period plus 2 years. |
| Marketing Preferences | Until opt-out is received, plus 1 year to maintain a suppression record confirming the opt-out. |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.
9. Data Security
bk8888 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes, but is not limited to, the following measures:
- 256-bit SSL/TLS encryption: All data transmitted between your device and the bk8888 Platform is encrypted in transit using industry-standard TLS 1.3 protocols;
- Data encryption at rest: Sensitive personal data (including KYC documents and financial records) stored on bk8888 servers is encrypted at rest using AES-256 encryption;
- Password hashing: Member passwords are never stored in plain text; they are processed using a one-way cryptographic hashing algorithm (bcrypt) with a unique salt per account;
- Two-factor authentication (2FA): Members are strongly encouraged to enable 2FA, which adds a second verification layer for login and withdrawal confirmation;
- Access controls: Internal access to personal data is restricted to authorised bk8888 personnel with a documented operational need, governed by role-based access controls and audit logging;
- Penetration testing: bk8888 engages independent cybersecurity specialists to conduct regular penetration tests and vulnerability assessments of Platform infrastructure;
- Incident response procedures: bk8888 maintains documented data breach response procedures and will notify affected members promptly in the event of a breach that presents a risk to their rights and freedoms.
Security Responsibility: While bk8888 applies robust security measures to protect your data on our end, you also play a critical role in account security. Never share your password or 2FA codes with anyone — not even with bk8888 support agents, who will never ask for your password. Contact [email protected] immediately if you suspect your account has been compromised.
10. Cookies & Tracking Technologies
10.1 What Are Cookies
Cookies are small text files stored on your device when you visit the bk8888 Platform. They serve a range of functions — from keeping you logged in between sessions to enabling us to understand how members use the Platform so we can improve it. bk8888 uses cookies responsibly and does not use cookies to collect personal data beyond what is described in this Policy.
10.2 Types of Cookies We Use
| Cookie Type | Purpose |
|---|---|
| Essential Cookies | Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality. |
| Functional Cookies | Remember your preferences such as language settings, display preferences, and previously selected game categories to improve your experience across sessions. |
| Analytics Cookies | Collect anonymised and aggregated data about page views, session duration, and navigation paths to help bk8888 understand Platform usage and make improvements. |
| Security Cookies | Support fraud detection by identifying unusual login patterns, device fingerprinting anomalies, and bot-like behavioural signals that may indicate account compromise or abuse. |
10.3 Managing Cookies
You may configure your browser to refuse all or some cookies, or to alert you when websites set or access cookies. Please note that disabling essential cookies will prevent core Platform features (including login and game access) from functioning correctly. Functional and analytics cookies may be disabled without affecting core functionality, though your experience may be less personalised.
11. Your Data Rights
As a member of bk8888 and a data subject, you hold the following rights with respect to your personal data. Requests to exercise these rights should be submitted to [email protected] with your registered account username and a description of the right you wish to exercise. bk8888 will respond within 30 days.
Right of Access
You have the right to request a copy of all personal data that bk8888 holds about you, along with information about how that data is being processed and the purposes for which it is used.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete personal data held about you. Certain corrections (such as name or date of birth changes) may require supporting KYC documentation to be submitted.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. This right is subject to bk8888's legal data retention obligations — financial and KYC records must be retained for statutory periods even after account closure.
Right to Restriction
You have the right to request that bk8888 restrict (but not delete) processing of your personal data in certain circumstances — for example, while a rectification request is being resolved, or where you contest the legal basis for processing.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that this data be transmitted directly to another controller where technically feasible.
Right to Object
You have the right to object to processing carried out on the basis of legitimate interests, including profiling for platform improvement purposes. You also have an absolute right to object to processing for direct marketing purposes, which bk8888 will action immediately upon receipt of such an objection.
Right to Withdraw Consent
Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time by contacting support or using the unsubscribe link in any marketing email. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
12. Children's Privacy
bk8888 strictly prohibits the use of its Platform by any person under the age of 21. The Platform is not directed at, and does not knowingly collect personal data from, persons under 21 years of age. Age verification is a mandatory component of the account registration and KYC processes, and any account found to belong to a person under 21 will be immediately closed.
If bk8888 becomes aware that personal data has been collected from a person under the age of 21 without verifiable parental consent or in violation of our age verification process, that data will be promptly deleted and the associated account closed. If you have reason to believe that a minor is using the Platform, please report this immediately to [email protected].
13. Third-Party Services & Links
The bk8888 Platform may include integrations with third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) whose software is embedded within the Platform environment. These providers operate their own data processing systems to deliver certified game outcomes, and their privacy practices are governed by their own privacy policies.
bk8888 is not responsible for the privacy practices of third-party game studios or payment processors beyond the requirements set out in our data processing agreements with those parties. We recommend reviewing the privacy policies of all third-party services you interact with through the Platform. The bk8888 Platform does not contain links to external third-party websites unrelated to the operation of the Platform.
14. International Data Transfers
As an internationally operated online gaming platform serving members primarily located in Indonesia, bk8888 may transfer personal data to servers and processors located outside Indonesia, including in jurisdictions that may not have data protection laws equivalent to those applicable in Indonesia. Where such transfers occur, bk8888 ensures that appropriate safeguards are in place, including:
- Binding contractual clauses in data processing agreements with all third-party processors that require equivalent standards of data protection;
- Transfers to processors located in jurisdictions recognised as providing an adequate level of data protection;
- Technical safeguards including end-to-end encryption for data in transit across international network boundaries.
By registering an account and submitting your personal data to bk8888, you acknowledge and consent to the transfer of your data internationally as described in this section, subject always to the protections described herein.
15. Policy Amendments
bk8888 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform operations, or data processing practices. Material changes to this Policy will be communicated to registered Members via email notification to the address associated with their account, or via a prominent notice on the Platform homepage, at least 14 days before the changes take effect.
Non-material amendments (such as typographical corrections or clarifications that do not alter the substance of data processing activities) may be made without specific prior notice. The "Last Updated" date displayed at the top of this Policy will always reflect the date of the most recent revision. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.
16. Contact & Complaints
If you have any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by bk8888, please contact our Data Protection team using the details below. All correspondence should include your registered account username and a clear description of your query or request.
bk8888 Data Protection Contact
Email: [email protected]
Subject Line: Privacy Request – [Your Username]
Response Time: Within 5 business days for general enquiries; within 30 days for formal data rights requests
Support Hours: 24/7 via live chat; email responses during 08:00–24:00 WIB
16.1 Complaints
If you are not satisfied with bk8888's response to a data protection concern or believe that your personal data is being processed unlawfully, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. bk8888 encourages Members to contact us directly in the first instance so that we have the opportunity to resolve the matter promptly and to your satisfaction.
Our Data Protection Commitments
Six principles that guide every data decision bk8888 makes on behalf of its members across Indonesia.
256-Bit SSL Encryption
Every byte of data transmitted between your device and the bk8888 Platform travels through industry-leading TLS 1.3 encryption. Your account credentials, payment details, and personal data are protected end-to-end at all times.
Zero Data Selling Policy
bk8888 has never sold, rented, or traded member data to third-party advertisers or data brokers, and never will. Your personal information is used exclusively to operate your account and improve your experience on the Platform.
Full Member Data Rights
Access, correct, export, restrict, or delete your personal data at any time by contacting our support team. We respond to all data rights requests within 30 days and treat every request with the utmost seriousness.
Secure KYC Handling
Identity documents you submit during KYC verification are encrypted at rest, accessible only to authorised verification staff, never shared beyond our licensed KYC processor, and retained strictly within the timeframes stated in this Policy.
Transparent Processing
We document every data processing activity, its legal basis, and its retention period. If you want to know exactly what data we hold about you and why, simply ask — we will provide a full data subject access report within 30 days.
Strict 21+ Age Verification
Age verification is mandatory for all accounts and is enforced at the KYC stage using KTP document validation. bk8888 does not knowingly collect or retain personal data from any person under 21 years of age under any circumstance.
Questions About Your Privacy?
Our support team is available 24 hours a day to address any data protection question or concern. You can also review our Terms & Conditions, explore our Responsible Gaming commitments, or visit our FAQ for quick answers.
21+ only. bk8888 is committed to responsible gaming and the protection of all member data. Play responsibly.