Personal Data Protection

Privacy Policy bm8 — Our Commitment to Your Data

Bm8 takes the protection of every member's personal data seriously. This Privacy Policy transparently explains how we collect, use, store, and protect your information in line with industry best practices.

Updated: 1 January 2026 256-bit SSL Encryption
Your Privacy Rights at bm8
Data is never sold to third parties
Secure & encrypted data storage
You can update or delete your data
Opt-out option for promotional communications

How bm8 Protects Your Privacy


Advanced-Level Encryption

All data transmitted between your device and bm8's servers is encrypted using 256-bit SSL technology. Your personal and financial information remains inaccessible to unauthorized parties at all times.

Secure Data Center

Bm8 member personal data is stored in data centres that meet international physical and digital security standards. Strict access controls ensure that only authorised personnel can access system information.

Strict Access Controls

Access to member personal data is restricted to bm8 staff who require it to perform their duties only. All access is logged and audited regularly to ensure no unauthorised use occurs.

No Data Sales

Bm8 has never and will never sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data belongs to you, and we respect the trust you have placed in us.

Right to Update Data

You have the right to review, update, or request deletion of your personal data at any time. Contact the bm8 support team and we will process your request within 7 working days after identity verification is completed.

Transparent Cookie Management

Bm8 uses cookies to improve user experience and monitor platform performance. You can manage your cookie preferences at any time through your web browser settings without affecting the platform's core functionality.

1 Introduction

Bm8 (bm8.run) takes the privacy and security of every member's personal data very seriously. This Privacy Policy is provided to clearly and transparently explain how we collect, use, store, protect, and disclose your personal information when you use the bm8 platform.

This document applies to all users accessing the bm8.run website, including registered members and casual visitors. By continuing to use the bm8 platform, you are deemed to have read, understood, and agreed to this Privacy Policy. We encourage you to review this document carefully from time to time as we may amend its contents to ensure it remains accurate and relevant.

This Privacy Policy applies together with Terms and Conditions bm8. In the event of any conflict between these two documents on matters relating to privacy, this Privacy Policy shall take precedence.

2 Information Collected

Bm8 collects your personal information in various ways depending on how you interact with our platform. The following are the categories of information we collect:

Information you provide directly:

  • Full name as shown on your identity card or passport
  • Identity card number (MyKad) or passport number
  • Date of birth and gender
  • Email address and mobile phone number
  • Current residential address
  • Bank account and e-wallet details for deposit and withdrawal purposes
  • Identity verification documents (KYC) submitted by you

Information collected automatically:

  • IP address and geographic location data derived from it
  • Browser type, operating system, and device type used
  • Gaming activity data including bets, wins, and transaction records
  • Session duration, pages visited, and navigation patterns within the platform
  • Cookie data and similar tracking technologies
Data Category Primary Purpose Retention Period
Identity Information Account verification & KYC Throughout active account period + 5 years
Financial Data Deposit & withdrawal processing 7 years (legal requirement)
Gaming Data Platform security & analytics 3 years after account closure
Technical Data Security & UX improvement 12 months

3 How We Use Your Data

Bm8 uses collected personal information solely for lawful and specific purposes. We do not use your data for any purpose not stated in this Privacy Policy without obtaining your prior consent. The primary purposes for which data is used include:

  • Create and manage your bm8 member account and verify your identity
  • Process financial transactions including deposits, withdrawals, and bonus payments
  • Provide effective customer support whenever you need assistance
  • Detect and prevent fraudulent activity, money laundering, and other security threats
  • Comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements
  • Send important notifications relating to your account, transactions, and policy updates
  • Send promotional communications and bonus offers, subject to your opt-in preferences
  • Improve the user experience through analysis of platform usage patterns
  • Provide responsible gaming programmes tailored to your usage profile

Bm8 will not use your personal data to make automated decisions that significantly affect you without human intervention. Every important decision relating to your account will be reviewed by our team.

4 Information Sharing

Bm8 respects the trust you place in us. We will not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, there are certain situations where limited sharing of information is necessary for legitimate operational purposes:

  • Payment service providers: Information required to process your financial transactions is shared with registered and trusted payment gateways and banking institutions
  • Game providers: Minimum technical data required to launch and authenticate gaming sessions is shared with our gaming software providers
  • Legal requirements: bm8 may be required to disclose information to government authorities, law enforcement bodies, or courts when mandated by applicable law
  • Fraud prevention: In certain circumstances, information may be shared with fraud prevention agencies or recognised industry bodies to protect members and the platform
  • Professional advisors: Lawyers, accountants, or auditors bound by professional confidentiality obligations may access data required for advisory or audit purposes

All third parties that receive data from bm8 are bound by strict data protection agreements. They are only permitted to use that data for agreed purposes and may not disclose it to any other party.

5 Data Security

Protecting your personal data is bm8's top priority. We implement comprehensive technical and organisational security measures to safeguard your information against unauthorised access, alteration, disclosure, or destruction.

  • 256-bit SSL/TLS encryption for all data transmitted between the platform and our servers
  • At-rest encryption for all sensitive information stored in our databases
  • Advanced intrusion detection systems (IDS) and firewalls that continuously monitor traffic
  • Two-factor authentication (2FA) is available for all bm8 member accounts
  • Regular internal and external security audits conducted by independent parties
  • Real-time account activity monitoring to detect any suspicious activity
  • Mandatory information security training for all bm8 staff
  • Clear incident response procedures in the event of a data breach

While bm8 takes every reasonable measure to protect your data, no security system can guarantee absolute 100% protection. We encourage you to use a strong password, enable two-factor authentication, and never share your login credentials with anyone.

6 Cookies & Tracking Technologies

Bm8 uses cookies and similar tracking technologies to enhance platform functionality, understand how users interact with our website, and deliver a more personalized experience. The following are the types of cookies we use:

  • Essential cookies: Required for core platform functions such as login authentication and session management. These cookies cannot be disabled as the platform will not function properly without them
  • Performance cookies: Collect information about how visitors use our website — such as the most frequently visited pages and errors encountered — to help us improve the platform
  • Functional cookies: Remember your preferences such as language, region, and display settings to provide a more comfortable experience on future visits
  • Analytics cookies: Help us understand aggregated usage patterns to make data-driven improvement decisions

You can control and manage cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the bm8 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

7 User Rights

As a bm8 member, you have certain rights regarding your personal data. bm8 is committed to helping you exercise these rights efficiently and without unnecessary obstacles:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You can request the correction of any inaccurate or incomplete data we hold about you.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data from our systems.

Right to Object

You can object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You can request that your data be transferred to another platform in a machine-readable format.

Right to Restriction of Processing

You can request that the processing of your data be temporarily restricted in certain circumstances.

To exercise any of the above rights, please contact bm8's customer support team via live chat or email at [email protected]. We will process your request within 7 to 14 business days upon completion of identity verification.

8 Data Retention & Deletion

Bm8 only retains your personal data for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable law. Retention periods vary depending on the type of data and relevant legal requirements.

  • Active member account data is retained for the duration your account is active, plus the mandatory period following closure
  • Financial transaction records are retained for a minimum of 7 years to comply with applicable financial and tax regulations
  • Customer support communication logs are retained for 2 years after case resolution
  • Technical data and system logs are retained for 12 months before being automatically deleted
  • KYC documents are retained for 5 years after account closure in accordance with compliance requirements

When data is no longer needed, bm8 will securely delete it using methods that ensure it cannot be recovered. For data stored in physical format, secure document destruction procedures are applied.

9 Third-Party Links

The bm8 platform may contain links to third-party websites or services, particularly for responsible gaming information or support resources. bm8 is not responsible for the privacy practices or content of those third-party websites.

We encourage you to read the Privacy Policy of every website you visit, especially when leaving the bm8 platform. Please note that this Privacy Policy applies only to information collected by bm8 through our official platform at bm8.run.

Third-party game providers registered with bm8 are subject to strict data protection agreements with us. However, any direct interactions you have with their independent websites fall outside the scope of this bm8 Privacy Policy.

10 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how bm8 handles your personal data, please do not hesitate to contact us through the following channels:

  • Live Chat on the bm8 platform — available 24 hours a day, 7 days a week
  • Privacy email: [email protected] (response within 1–2 working days)
  • Section FAQ for frequently asked questions on privacy and account security

Bm8 takes every privacy complaint seriously. Our Data Protection Officer (DPO) team will investigate all complaints received and a response will be provided within 14 business days. If you are unsatisfied with our response, you have the right to refer the matter to the relevant data protection authority.

Privacy Policy Amendment History
v3.2 1 January 2026 — Update to cookies section and user rights
v3.1 1 July 2026 — Addition of data retention schedule
v3.0 1 January 2026 — Comprehensive review aligned with international standards
Join bm8 Today

Your Data Is Safe with bm8

With an internationally certified data protection system and a full commitment to member privacy, bm8 is an online gaming platform you can trust completely. Register a free account and enjoy a safe gaming experience alongside over 180,000 members across Malaysia.

180K+
Registered Members
256-bit
SSL Encryption
24/7
Customer Support
<5 min
Withdrawal Time
Bahasa Melayu