syok8 Privacy Policy

1. Introduction and Scope

syok8 ("syok8," "we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform at syok8.org ("the Platform"). This Privacy Policy ("Policy") describes how syok8 collects, uses, stores, discloses, and otherwise processes personal data in connection with our online casino, sportsbook, and related services.

This Policy applies to all users of the syok8 Platform, including registered account holders and visitors who browse the Platform without registering. It should be read together with our Terms and Conditions and Responsible Gaming Policy, which form part of the overall framework governing your use of syok8.

By registering an account or otherwise using the syok8 Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent to the terms of this Policy, you must not use the Platform.

2. Data Controller

For the purposes of applicable data protection legislation, syok8 is the data controller in respect of personal data collected through the Platform. As data controller, syok8 determines the purposes and means by which personal data is processed. Where syok8 engages third-party processors to handle personal data on its behalf, such processors are bound by contractual obligations to process data only in accordance with syok8's instructions and applicable law.

All data-related queries, access requests, and complaints may be directed to syok8's support team via Live Chat or by email at [email protected].

3. Personal Data We Collect

syok8 may collect the following categories of personal data from you, depending on how you interact with the Platform:

3.1 Identity Data: Full legal name, date of birth, nationality, government-issued identity document number (MyKad, passport), and photograph where provided for identity verification purposes.

3.2 Contact Data: Email address, mobile phone number, and residential address (including postcode, city, and state within Malaysia or other jurisdiction).

3.3 Financial Data: Payment method identifiers (e.g., Touch 'n Go eWallet account reference, bank account details for FPX or DuitNow transactions, USDT wallet addresses), transaction amounts, deposit and withdrawal history, and source of funds documentation where required.

3.4 Account Data: Username, account preferences, bonus history, responsible gaming settings (deposit limits, self-exclusion status), and customer support interaction records.

3.5 Gameplay Data: Game session records, bet history, wagering activity, game results, and associated timestamps.

3.6 Technical Data: IP address, device identifiers, browser type and version, operating system, referring URLs, and session activity logs.

3.7 Communications Data: Records of your communications with syok8 via Live Chat, email, or any other channel, including support tickets and query resolutions.

4. How We Collect Personal Data

syok8 collects personal data through the following means:

• Direct provision: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you visit or interact with the Platform, including via cookies and server-side logging (see Section 9).
• Third-party sources: Identity and address verification data from KYC/AML service providers; fraud screening data from risk management partners; payment transaction data from payment processors such as FPX gateway operators and e-wallet providers including Touch 'n Go eWallet and Boost.
• Regulatory sources: In limited circumstances, syok8 may receive or share data with regulatory or law enforcement authorities as required by applicable law.

5. Purposes and Legal Basis for Processing

syok8 processes personal data for the following purposes, each of which is supported by a corresponding legal basis:

• Account registration and management: Necessary for the performance of the contract between you and syok8.
• Identity verification and KYC compliance: Necessary for compliance with anti-money-laundering (AML) and know-your-customer (KYC) legal obligations.
• Payment processing: Necessary for the performance of the contract; also required for compliance with financial services regulations.
• Gameplay provision and account activity: Necessary for the performance of the contract.
• Fraud prevention and security: Necessary for the legitimate interests of syok8 in maintaining platform integrity and protecting users from fraud.
• Responsible gaming compliance: Necessary for compliance with applicable gaming regulations; also in syok8's legitimate interest in promoting safe gaming.
• Customer support: Necessary for the performance of the contract and for legitimate interests in improving service quality.
• Marketing communications: Based on your consent where required by applicable law. You may withdraw consent at any time by contacting syok8 support.
• Legal and regulatory compliance: Necessary to comply with applicable laws, regulations, and gaming licence conditions.

6. Disclosure of Personal Data to Third Parties

syok8 does not sell, rent, or trade your personal data to third parties for commercial purposes. syok8 may disclose personal data to the following categories of recipients:

• Payment processors: Including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, and USDT TRC20 infrastructure, solely for the purpose of processing your transactions.
• Identity verification providers: Third-party KYC and AML service providers who assist syok8 in verifying user identities and screening for prohibited persons.
• Game providers: Certified gaming studios whose products are offered on the syok8 Platform may receive session and gameplay data as necessary to deliver game content and resolve disputes.
• Regulatory and law enforcement authorities: Where syok8 is legally required to disclose personal data to government bodies, regulators, or law enforcement agencies in connection with legal proceedings, investigations, or compliance obligations.
• Professional advisers: Lawyers, auditors, and consultants under obligations of confidentiality, where necessary for the conduct of syok8's business.

All third-party recipients are required to handle personal data in accordance with applicable data protection law and syok8's data processing agreements.

7. International Transfers of Personal Data

syok8's operations involve the use of service providers and infrastructure located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, syok8 implements appropriate safeguards to ensure that your personal data receives a standard of protection consistent with Malaysia's PDPA and internationally recognised data protection standards. These safeguards include contractual data processing agreements incorporating standard data protection clauses and, where applicable, adequacy assessments of the receiving jurisdiction.

8. Data Retention

syok8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for such longer period as is required by applicable law or regulatory obligation. In particular:

• Account and identity data is retained for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements applicable to online gaming operators.
• Transaction records are retained for a minimum of seven (7) years to satisfy financial record-keeping obligations.
• Gameplay logs are retained for a minimum of two (2) years or such longer period as required by syok8's gaming licence conditions.
• Marketing data is retained until you withdraw consent or for a maximum of three (3) years following your last interaction with syok8, whichever is earlier.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with syok8's data disposal procedures.

9. Cookies and Tracking Technologies

syok8 uses cookies and similar technologies on the Platform. Cookies are small text files stored on your device that enable the Platform to recognise your browser and remember certain information about your session. syok8 uses the following categories of cookies:

• Strictly necessary cookies: Required for core Platform functionality, including maintaining your login session and processing transactions. These cookies cannot be disabled without affecting your ability to use the Platform.
• Analytics cookies: Used to understand how users interact with the Platform — which pages are visited, how long sessions last, and where users drop off. This data is used in aggregate to improve the Platform experience. syok8 uses privacy-respecting analytics tools that do not share individual-level data with third-party advertising networks.
• Preference cookies: Remember your display preferences and settings, such as language selection and responsible gaming limit configurations.

You may control cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the syok8 Platform. syok8 does not use third-party advertising or retargeting cookies on the Platform.

10. Security of Personal Data

syok8 implements a layered approach to data security, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and syok8's servers;
• Encryption of sensitive data at rest, including financial identifiers and identity documents;
• Role-based access controls limiting access to personal data to authorised personnel with a legitimate need;
• Regular penetration testing and security audits of the Platform infrastructure;
• Incident response procedures for detecting, containing, and reporting data security incidents in accordance with applicable legal requirements.

Notwithstanding these measures, no data transmission over the internet can be guaranteed to be completely secure. If you become aware of any suspected unauthorised access to your syok8 account, please contact our support team immediately via Live Chat.

11. Your Data Subject Rights

Subject to applicable law and syok8's legal retention obligations, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data syok8 holds about you.
• Right of rectification: You may request correction of any inaccurate or incomplete personal data we hold.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may request that syok8 restrict processing of your personal data in certain circumstances.
• Right to object: You may object to processing of your personal data where such processing is based on syok8's legitimate interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact syok8 support via Live Chat or by email at [email protected]. syok8 will respond to all data subject requests within thirty (30) days, or such longer period as permitted by applicable law where the request is complex.

12. Children and Minors

The syok8 Platform is strictly for persons aged 21 years and above. syok8 does not knowingly collect personal data from persons under the age of 21. If syok8 becomes aware that personal data has been collected from a person under 21, such data will be deleted promptly and the associated account closed. If you believe that a minor may have registered a syok8 account, please contact our support team immediately.

13. Links to Third-Party Content

The syok8 Platform may contain references to game providers and payment processors whose own privacy practices govern data collected through their respective systems. syok8 is not responsible for the privacy practices of third-party providers and encourages users to review the privacy policies of any third-party services they use in connection with the syok8 Platform. This Policy applies solely to personal data collected and processed by syok8 in connection with the Platform.

14. Amendments to This Policy

syok8 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be communicated to registered users by email notification or by prominent notice on the Platform. The "Last updated" date at the top of this Policy will be revised accordingly. Your continued use of the syok8 Platform following notification of material changes constitutes your acceptance of the updated Policy.

15. Contact and Data Requests

For all privacy-related enquiries, data subject access requests, or complaints regarding syok8's data practices, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week from the syok8 Platform — the fastest channel for urgent data security concerns.
• Email: [email protected] — for formal data subject requests and written complaints.

syok8 is committed to handling all privacy enquiries promptly, respectfully, and in full compliance with our obligations under Malaysia's Personal Data Protection Act 2010 and applicable international data protection standards. If you are unsatisfied with syok8's response to a complaint, you retain the right to escalate your concern to the relevant data protection authority in your jurisdiction.