This Privacy Policy explains how ok8 collects, processes, stores, and protects the personal data of players accessing the Platform at ok8.casa. We are committed to handling your information responsibly, transparently, and in accordance with applicable data protection standards. Please read this document carefully.
Our Privacy Commitments
These six principles summarise ok8's approach to player data. The full legal detail follows below — these cards are provided as a reader-friendly overview only.
ok8 collects only the personal data that is strictly necessary to operate your account, process your transactions, and fulfil our legal and regulatory obligations. We do not collect data speculatively or beyond what is required for the stated purpose.
ok8 does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your data exists solely to serve your ok8 account and fulfil the purposes described in this Policy.
All data transmitted between your device and the ok8 Platform is protected by 256-bit SSL/TLS encryption. Financial credentials processed through payment partners — including Touch'n Go eWallet, Boost, Maybank, and CIMB — are handled exclusively by those respective providers and are never stored on ok8 servers.
You have the right to access, correct, and request deletion of your personal data held by ok8. Requests are handled promptly and without undue barrier. A full description of your data rights is set out in Section 8 of this Policy.
ok8 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Transaction records are retained in accordance with financial regulatory requirements. Inactive account data is reviewed periodically for deletion eligibility.
ok8 is transparent about the legal bases under which your data is processed. We process data only where we have a legitimate purpose — namely, the performance of your account agreement, compliance with legal obligations, or a clearly identified legitimate interest.
ok8 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with the ok8 Platform, accessible at ok8.casa. This Privacy Policy ("Policy") sets out in detail how ok8 collects, uses, stores, discloses, and otherwise processes personal data in connection with the provision of online casino, sports betting, and related services to players based primarily in Malaysia.
This Policy applies to all Users of the ok8 Platform, including registered account holders and any individuals who access the Platform without completing full registration. It should be read in conjunction with ok8's Terms & Conditions, which govern the overall relationship between ok8 and its Users.
By creating an account with ok8 or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood the practices described herein. If you do not accept this Policy, you must immediately cease use of the Platform.
This Policy is written in plain English to ensure Malaysian players can clearly understand how their data is handled. Where technical or legal language is unavoidable, we have provided explanatory context.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
| Term | Definition |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living natural person, directly or indirectly — including name, identification number, contact details, IP address, device identifiers, and financial information. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, alteration, retrieval, transmission, erasure, or destruction, whether by automated or manual means. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data — in this case, ok8 in respect of all player data collected via the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of and under the instruction of ok8 — for example, payment processors, KYC verification providers, and cloud hosting services. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their Personal Data for a stated purpose. |
| "User" / "Player" | Any natural person who accesses or uses the ok8 Platform, whether or not they hold a registered account. |
| "Sensitive Data" | A special category of Personal Data attracting heightened protection — including health-related information such as self-exclusion or problem gambling disclosures provided to ok8. |
ok8, operating the Platform at ok8.casa, acts as the Data Controller in respect of all Personal Data collected from Users via the Platform. As Data Controller, ok8 determines the purposes for which Personal Data is collected and the manner in which it is processed.
ok8 engages a limited number of third-party Data Processors to support the delivery of its services — including payment processing partners, identity verification providers, cloud infrastructure providers, and customer support tools. All such processors are engaged under written agreements that impose data protection obligations no less stringent than those observed by ok8 itself.
For all matters relating to this Privacy Policy, data subject rights, or data protection concerns, Users may contact ok8 via the details provided in Section 13 of this Policy.
ok8 collects Personal Data from Users through a number of channels. The categories of data collected, and the context in which they are collected, are described below.
ok8 does not collect or store full payment card numbers, internet banking passwords, or Touch 'n Go / Boost / GrabPay account credentials. Financial authentication is handled entirely within the respective payment provider's secure environment.
ok8 processes Personal Data only where there is a lawful basis for doing so. The table below sets out the primary purposes for which your data is processed and the corresponding legal basis in each case.
| Purpose of Processing | Legal Basis |
|---|---|
| Account creation and management | Performance of contract — necessary to establish and maintain your ok8 account |
| Processing deposits and withdrawals in MYR | Performance of contract — necessary to deliver the requested financial transaction |
| Identity and age verification (KYC) | Legal obligation — required to verify 21+ age compliance and satisfy anti-money laundering obligations |
| Fraud detection and prevention | Legitimate interest — protecting ok8 and its players from financial crime and account abuse |
| Responsible gambling monitoring and intervention | Legal obligation and legitimate interest — identifying indicators of problem gambling and applying appropriate protections |
| Customer support and dispute resolution | Performance of contract and legitimate interest — resolving queries and complaints in a timely manner |
| Platform improvement and analytics | Legitimate interest — analysing aggregated usage data to improve the Platform experience for Malaysian players |
| Promotional communications (where opted in) | Consent — only where the User has expressly opted in to receive marketing communications from ok8 |
| Regulatory reporting and record-keeping | Legal obligation — maintaining transaction records as required by applicable financial regulations |
Where ok8 relies on legitimate interest as the legal basis for processing, we have conducted a balancing assessment to confirm that our legitimate interests are not overridden by the rights and interests of the Data Subject. Users may request further information regarding these assessments by contacting ok8 as described in Section 13.
ok8 does not sell, rent, or share Personal Data with third parties for their own independent marketing purposes. We may share your Personal Data with third parties only in the circumstances described below:
Some of ok8's third-party processors may be located outside Malaysia. Where Personal Data is transferred internationally, ok8 takes appropriate steps to ensure that adequate safeguards are in place — including contractual data protection clauses equivalent to internationally recognised standards — to protect your data to the same standard applied within Malaysia.
ok8 retains Personal Data for only as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following general retention principles apply:
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.
As a User of the ok8 Platform, you have a number of rights in respect of the Personal Data we hold about you. These rights are described below. To exercise any of these rights, please contact ok8 via the details in Section 13. ok8 will respond to all verified data rights requests within a reasonable timeframe and in any event within 30 calendar days of receipt.
You have the right to request a copy of the Personal Data ok8 holds about you, along with information about how it is being processed and the legal basis for that processing.
You have the right to request the correction of inaccurate Personal Data held about you. If you believe any data on your account is incorrect, contact support to raise a rectification request.
You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing was unlawful — subject to legal retention obligations that may require us to retain certain records.
You may request that ok8 restrict processing of your data — for example, while accuracy is being contested — meaning the data is retained but not actively used pending resolution of the request.
Where data is processed on the basis of your consent or contractual necessity and by automated means, you may request a copy of your data in a structured, machine-readable format for transfer to another provider.
You have the right to object to processing based on legitimate interest grounds, including profiling. You also have the absolute right to object to processing of your data for direct marketing purposes at any time.
Please note that some rights are subject to conditions and exceptions. For example, ok8 cannot delete transaction records where retention is required by law. We will always explain clearly if and why a right cannot be fully exercised in a particular situation.
ok8 uses cookies and similar tracking technologies to operate certain Platform functions, enhance user experience, and gather analytical data. A "cookie" is a small text file placed on your device by a website when you visit it.
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Required for core Platform functions including user authentication, session management, and security token validation. Cannot be disabled without impairing Platform functionality. |
| Functional | Enable personalised features such as remembered language preferences, display settings, and game lobby filters. Disabled without loss of core functionality but with reduced personalisation. |
| Analytical | Used to collect aggregated, anonymised data about how Players use the Platform — such as most visited pages and session duration — to inform improvements to the ok8 experience. No individual Player is identified in analytical reports. |
| Responsible Gambling | Used to enforce self-exclusion status, session time reminders, and reality check intervals selected by the Player from their account dashboard. |
Strictly Necessary cookies are placed automatically as they are essential to Platform operation. Functional and Analytical cookies are placed only where you have provided consent via the cookie preference banner displayed on your first visit to the Platform. You may update your cookie preferences at any time from within your account settings.
Most browsers also allow you to control cookie storage through browser settings. Please note that disabling cookies may affect the performance and functionality of the ok8 Platform.
ok8 implements appropriate technical and organisational security measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Our security framework includes:
Despite these measures, no internet transmission or electronic storage system is entirely impervious to risk. ok8 cannot guarantee absolute security. In the event of a Personal Data breach that poses a risk to affected individuals, ok8 will take prompt action to contain the breach and will notify affected Users in accordance with applicable legal requirements.
Users are also responsible for their own account security. We strongly encourage the use of a strong, unique password for your ok8 account and recommend enabling two-factor authentication. If you suspect your account has been compromised, please contact support immediately via the on-site live chat.
The ok8 Platform is strictly restricted to individuals aged 21 years and above. ok8 does not knowingly collect or process Personal Data from individuals under the age of 21.
As part of our KYC process, ok8 verifies the age of all registered Users before enabling full account access, including the ability to make deposits or place wagers. Any account found to belong to an individual under the age of 21 will be immediately closed, all activity will be voided, and any deposited funds will be returned to the original payment method where their source can be confirmed.
If you are a parent or guardian and you believe that a person under 21 in your care has registered with ok8 or has accessed the Platform, please contact our support team immediately. We take underage access seriously and will investigate all such reports as priority.
ok8 is strictly for players aged 21 and above. No exceptions apply. Age verification is enforced at registration and prior to any withdrawal.
ok8 may update this Privacy Policy periodically to reflect changes in our data processing practices, the services we offer, or applicable legal requirements. Where changes are material — meaning they significantly affect the rights of Users or the manner in which their data is processed — ok8 will endeavour to provide advance notice via an on-site notification or an email to the address registered on the Player's account.
The "Last Updated" date at the top of this Policy reflects when the current version took effect. Users are encouraged to review this Policy periodically. Continued use of the Platform following the publication of an updated Policy constitutes acceptance of the revised terms.
If you have any questions about a specific change to this Policy, please contact ok8 using the details in Section 13 before continuing to use the Platform.
If you wish to exercise any of your data rights, have a question about this Privacy Policy, or wish to raise a concern about how ok8 has handled your Personal Data, please contact us through one of the following channels:
ok8 will acknowledge all formal privacy complaints within 5 business days and will provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days with prior notification.
If you are not satisfied with ok8's response to a data protection concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
This Privacy Policy was last reviewed and updated on 1 January 2026. The current version supersedes all prior versions of this document.
Play with confidence knowing your personal data is handled securely, responsibly, and transparently. Join thousands of Malaysian players who trust ok8 with their gaming experience.
Return to ok8 Homepage