Official Document Updated: January 2026

Privacy Policy BM8 — Our Commitment to Protecting Your Data

At BM8, your privacy is more than a legal obligation — it is a responsibility we take seriously. Find out exactly how we collect, use, and protect your personal information.

Your Data Is Secure
256-bit SSL encryption active

BM8 complies with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards.

PDPA 2010 256-bit SSL No Data Selling

BM8's Six Data Protection Principles

BM8 takes a proactive approach to protecting member privacy. These are the six core principles that shape how we handle your data.

Minimum Data Collection

BM8 only collects data that is strictly necessary to provide services to you. We do not collect excessive or irrelevant information. Each type of data collected has a clear, defined purpose established before collection takes place.

High-Grade Data Encryption

All your personal data and financial transactions are protected with 256-bit SSL encryption — the same security technology used by leading banking institutions. Data stored in our databases is also encrypted using AES-256 for layered protection.

Data Not Sold to Third Parties

BM8 has never and will never sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data belongs to you — we only use it to improve your experience on the BM8 platform.

Data Control in Your Hands

You have the full right to access, correct, or request deletion of your personal data at any time. Through your BM8 account settings or by contacting our support team, you can manage your privacy preferences easily and without any bureaucratic barriers.

Cookie Usage Transparency

BM8 uses cookies solely to improve the user experience, enable secure login functionality, and analyse usage patterns in aggregate. You can manage cookie settings through your web browser at any time without affecting the platform's core functions.

Continuous Security Monitoring

The BM8 security team monitors the platform infrastructure 24 hours a day, 7 days a week to detect and address any data security threats. Independent security audits are conducted quarterly to ensure our data protection systems remain at the highest standard.


| Updated: 1 January 2026 | PDPA 2010 Compliance
Note: This Privacy Policy applies to all information collected through the BM8 website at bm8.plus, the BM8 mobile app, and all related services we offer to members in Malaysia.

1. Introduction

BM8 ("we," "platform," or "BM8") deeply values the trust you place in us when you register and use our services. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information while you use the BM8 platform.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing personal data protection in the country. We also adhere to international data protection standards to ensure your data receives the highest level of protection possible.

This Privacy Policy is to be read together with Terms and Conditions BM8. By using our platform, you agree to the practices described in this document. If you do not agree, please discontinue use of the BM8 platform and contact us to request deletion of your data.

2. Information We Collect

BM8 collects information from you in several ways. Below is a full breakdown of the types of data we collect and their sources:

A. Information You Provide Directly

  • Full name as it appears on your official identity document.
  • Email address and mobile phone number.
  • Date of birth and gender for age verification purposes.
  • KYC information including copies of your identity card, passport, or other identity verification documents.
  • Bank account or e-wallet information used for deposits and withdrawals.
  • Any communications you send to the BM8 support team.

B. Automatically Collected Information

  • IP address and location data based on the network used.
  • Device type, operating system, and web browser version.
  • Activity logs include pages visited, access times, and session duration.
  • Game data including bets placed, games played, and transaction history.
  • Cookie data and device identifiers for security and session verification purposes.
Data Type Purpose of Collection Retention Period
Identity Information Account verification & KYC Throughout the membership period + 7 years
Transaction Data Payment processing & audit 7 years (legal requirement)
Activity Logs Security & fraud prevention 24 months
Game Data Dispute resolution & audit 36 months
Cookie Data User experience improvement 12 months or until deleted

3. How We Use Your Data

BM8 uses the information collected solely for legitimate, pre-defined purposes. The following are the primary uses of your data on our platform:

  • Account management — Creates and maintains your member account, including identity verification and required KYC processes.
  • Transaction processing — Processes deposits, withdrawals, and all other financial transactions accurately and securely.
  • Platform security — Detects and prevents fraud, money laundering, duplicate account usage, and other suspicious activities.
  • Customer support — Addresses inquiries, handles complaints, and provides the technical assistance you need.
  • Legal compliance — Fulfils reporting obligations to relevant authorities in accordance with Malaysian law.
  • Service improvement — Analyzes aggregated usage patterns to improve platform features and the overall user experience.
  • Service communications — Sends important notifications related to your account, transactions, and changes to terms or policies.
BM8 does not use your data to make fully automated decisions that could materially affect you without any human involvement in the evaluation process.

4. Information Sharing

BM8 does not sell or trade members' personal data to any third party. However, there are specific situations where we need to share your data with trusted parties, all within strict and limited boundaries:

  • Payment service providers — Payment gateways and financial institutions that process your deposit and withdrawal transactions. They only receive the data necessary to complete those transactions.
  • Technology service providers — Companies that provide hosting infrastructure, cloud processing, and other technical services required to operate the bm8 platform securely.
  • Regulatory authorities — Bank Negara Malaysia, the Malaysian Communications and Multimedia Commission (MCMC), or any other relevant authority as required by law.
  • Analytics service providers — Aggregated and anonymized data used to understand platform usage trends. No information that can individually identify you is shared for this purpose.

All bm8 third-party partners are required to comply with data protection standards equal to or higher than our own, and they are not permitted to use your data for any purpose other than what has been specified.

5. Data Security

BM8 continuously invests in data security infrastructure to ensure your information is always protected. Key security measures we employ include:

  • 256-bit SSL/TLS encryption for all data transmitted between your device and BM8 servers.
  • AES-256 encryption for all sensitive data stored in our databases.
  • Two-factor authentication (2FA) available for all member accounts for added security.
  • Real-time threat monitoring by the BM8 cybersecurity team around the clock.
  • Independent security audits by a certified third-party audit firm every quarter.
  • Strict access controls ensure that only authorised staff can access sensitive member data.
  • A comprehensive incident response plan to ensure members are promptly notified in the event of any data breach.
Security Reminder: While bm8 maintains strict security measures, no system is 100% risk-free. You also play an important role — make sure your password is strong, unique, and never shared with anyone.

6. Use of Cookies

BM8 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

  • Essential Cookies — Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform functionality.
  • Preference Cookies — Saves your preferences such as language, display settings, and other personal configurations for your convenience.
  • Analytics Cookies — Collects aggregated and anonymized usage data to help us understand how members interact with the platform and where improvements are needed.
  • Security Cookies — Helps detect suspicious activity, unauthorized login attempts, and other security threats.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling essential cookies may affect your ability to log in and use certain features of the BM8 platform.

7. Your Rights Under PDPA

As a BM8 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

Right of Access
Request a copy of all personal data we hold about you within 21 working days.
Right to Rectification
Request correction of inaccurate or incomplete data in your records at BM8.
Right to Erasure
Request deletion of your personal data, subject to applicable legal retention obligations.
Right to Object
Object to the processing of your data for specific purposes such as direct marketing at any time.
Right to Data Portability
Receive your personal data in a machine-readable format for transfer to another provider.
Right to Restrict Processing
Request restriction of your data processing in certain situations, such as during a data dispute.

To exercise any of the above rights, please contact the bm8 Data Protection Officer via email at [email protected]. bm8 will process your request within the timeframe prescribed by PDPA law.

8. Data Retention

BM8 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law. Generally, active account data is retained for the duration of your membership.

After your account is closed, whether at your request or by bm8, your data will be retained for an additional period to fulfil legal obligations — typically between five and seven years depending on the type of data, in accordance with the requirements of the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFA).

Once the retention period expires, your data will be securely deleted or anonymized so that it can no longer be associated with you as an individual.

9. Third-Party Links

The BM8 platform may contain links to third-party websites or services in certain contexts. Please note that BM8's Privacy Policy does not apply to any such third-party websites or services.

BM8 is not responsible for the privacy practices or content of any external websites. We encourage you to read the Privacy Policy of each website you visit separately, especially before providing any personal information to third parties.

10. Child Protection

BM8 is an adult entertainment platform intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

If we discover that personal data of a person under the age of 18 has been collected without our knowledge, that data will be deleted immediately and the account in question will be closed. Parents or guardians who suspect their child has registered on the bm8 platform are urged to contact our support team immediately.

Youth Protection: If you are a parent or guardian concerned about your child's online activity, we encourage you to use parental control software and have an open conversation about responsible gambling. Visit Responsible Gaming page us for more information.

11. Changes to Privacy Policy

BM8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, current legal requirements, or improvements to the services we offer.

You will be notified of any significant changes via the email registered to your account or through a prominent notice on the BM8 platform, at least 14 days before the changes take effect. Your continued use of the BM8 platform after the effective date of such changes will be considered your acceptance of the updated Privacy Policy.

The date of the latest update is always displayed at the top of this document. We encourage you to review this page periodically to ensure you stay informed about how we handle your personal data.

12. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how bm8 handles your personal data, please contact us through the following channels:

The BM8 Data Protection Team is committed to responding to all privacy-related inquiries within three (3) working days. For formal complaints, we will provide a full response within 21 working days as required by the PDPA.

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the official channels of the Department of Personal Data Protection.


Ready to Play with Full Confidence?

Now you know how BM8 carefully protects your personal data. Register a free account today and enjoy a safe, fair, and entertaining online experience.

256-bit SSL Encryption PDPA 2010 Compliance Data Not Sold 24/7 Support
Bahasa Melayu