prekk8 Privacy Policy

1. Introduction

1.1 prekk8 is committed to protecting the privacy and security of all personal data provided to us by our Members and website visitors. We recognise that Malaysian players trust us with sensitive information — including identity documents, financial data, and account activity — and we take that responsibility seriously.

1.2 This Policy is intended to be read in conjunction with the prekk8 Terms and Conditions. Terms defined in the Terms and Conditions carry the same meaning in this Policy unless otherwise specified.

1.3 We do not use personal data for any purpose beyond what is disclosed in this Policy. We do not sell personal data. We do not share personal data with third parties except as described in Section 6 below.

2. Data Controller

2.1 For the purposes of applicable data protection law, prekk8 acts as the Data Controller in respect of personal data collected from registered Members and website visitors. As Data Controller, we determine the purposes and means of processing personal data received through our platform.

2.2 Where we engage third-party service providers to process data on our behalf — for example, KYC verification service providers or payment processors — those parties act as Data Processors under our written instructions and are bound by contractual data protection obligations consistent with this Policy.

3. Personal Data We Collect

prekk8 collects personal data across several categories depending on the stage of the player relationship and the services used:

3.1 prekk8 does not collect full payment card numbers. Where card payments are processed, this occurs through a PCI-DSS compliant payment gateway and full card data is not transmitted to or stored on prekk8 systems.

3.2 Special categories of personal data (as defined under applicable data protection law, including health data or biometric data) are not collected by prekk8 unless expressly required for responsible gaming interventions with the Member's knowledge and consent.

4. How We Use Your Personal Data

prekk8 uses personal data for the following purposes:

• Account creation and management: registering your prekk8 account, maintaining account records, and authenticating your identity at login.
• Service delivery: processing deposits and withdrawals, providing access to games and betting markets, crediting bonus offers, and managing promotional participation.
• KYC and regulatory compliance: verifying your identity and age (21+), conducting anti-money laundering (AML) screening, and fulfilling obligations under applicable international gaming authority requirements.
• Fraud prevention and security: detecting and preventing fraudulent account activity, money laundering, collusion, and other prohibited conduct described in the prekk8 Terms and Conditions.
• Responsible gaming: monitoring account activity for signs of problem gambling behaviour, enforcing player-set limits, and managing self-exclusion requests.
• Customer support: investigating and resolving support queries, complaints, and disputes.
• Platform improvement: analysing aggregated, anonymised usage data to improve the prekk8 platform, game selection, and user experience.
• Marketing communications: sending promotional emails, bonus notifications, and product updates where you have provided consent or where legitimate interest applies. You may opt out at any time.

5. Legal Basis for Processing

prekk8 processes personal data on the following legal bases:

• Contractual necessity: processing required to provide the services described in the prekk8 Terms and Conditions and to operate your registered account.
• Legal obligation: processing required to comply with applicable KYC, AML, and gaming licence regulatory requirements.
• Legitimate interests: fraud prevention, platform security, abuse detection, and aggregate analytics — where these interests do not override your fundamental privacy rights.
• Consent: direct marketing communications and any processing of special category data where consent is the appropriate basis. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Third Parties

6.1 prekk8 does not sell personal data to third parties. We share personal data only with the following categories of recipient where necessary for the purposes described in Section 4:

• KYC and identity verification providers: third-party services that verify identity documents and screen against AML watchlists on our behalf. These providers are bound by written data processing agreements.
• Payment processors: FPX payment gateway operators, Touch n Go eWallet, and Boost, solely for the purpose of processing your deposit and withdrawal transactions.
• Gaming software providers: game studios that supply content to the prekk8 platform may receive anonymised session identifiers for game integrity and fairness audit purposes.
• IT and hosting infrastructure: cloud hosting and content delivery providers operating under contractual data protection obligations.
• Regulatory and law enforcement authorities: where required by applicable law, court order, or the regulatory obligations of our gaming licence.

6.2 All third-party processors engaged by prekk8 are subject to written data processing agreements that impose data protection obligations consistent with applicable law and this Policy.

7. Cookies & Tracking Technologies

7.1 The prekk8 website uses cookies and similar tracking technologies to operate the platform, maintain session security, and analyse usage patterns.

Essential Cookies

Cookies strictly necessary to provide the prekk8 service — including session authentication cookies, security tokens, and load balancing cookies. These cannot be disabled without breaking core platform functionality.

Functional Cookies

Cookies that remember your preferences (language, notification settings, responsible gaming display preferences) to personalise your prekk8 experience across sessions.

Analytics Cookies

Anonymised analytics data collected to help us understand how Malaysian players use the prekk8 platform — which features are most used, where navigation friction occurs, and how the platform performs across different device types. No individual player is identified in analytics reporting.

7.2 You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing your prekk8 account or placing bets.

8. Data Retention

8.1 prekk8 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active account data: retained for the duration of the Member relationship and for a period of five years following account closure, in compliance with AML record-keeping requirements.
• KYC documents: retained for a minimum of five years from the date of last account activity, as required under applicable gaming authority standards.
• Transaction records: retained for a minimum of five years from the date of each transaction.
• Marketing data: retained until you withdraw consent or opt out of marketing communications, after which marketing data is removed from active campaign lists promptly.
• Technical logs: typically retained for 90 days for security and fraud investigation purposes, after which they are deleted or anonymised.

8.2 At the end of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be attributed to you individually.

9. International Data Transfers

9.1 The prekk8 platform and its associated data infrastructure may involve the transfer of personal data to servers or processors located outside Malaysia. Where such transfers occur, prekk8 takes appropriate safeguards to ensure that the data receives a level of protection consistent with this Policy and applicable data protection standards.

9.2 Safeguards applied to international transfers include contractual clauses requiring recipient parties to maintain data protection standards equivalent to those described in this Policy, and the selection of processor partners who hold recognised data protection certifications.

10. Your Data Rights

As a prekk8 Member whose data is processed by us, you have the following rights in respect of your personal data:

• Right of access: to request a copy of all personal data held about you. Requests are responded to within 30 calendar days.
• Right to rectification: to request correction of inaccurate or incomplete personal data held on your prekk8 account.
• Right to erasure: to request deletion of personal data where processing is no longer necessary, consent has been withdrawn, or the data was unlawfully processed — subject to legal retention obligations.
• Right to restriction: to request that we restrict processing of your data in certain circumstances while a dispute is under review.
• Right to data portability: to receive a copy of your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Right to object: to object to processing based on legitimate interests, including direct marketing — which will be honoured immediately in respect of marketing.
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact the prekk8 support team via live chat. Identity verification will be required before any data access, amendment, or deletion request is actioned.

11. Security Measures

11.1 prekk8 implements a range of technical and organisational security measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. These include:

• TLS/SSL encryption for all data in transit between the Member's device and prekk8 servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial data.
• Multi-factor authentication requirements for internal staff accessing Member data.
• Role-based access controls ensuring staff access only the data necessary for their specific function.
• Regular security vulnerability assessments and penetration testing by independent third-party security specialists.
• Automated anomaly detection systems monitoring for unusual access patterns indicative of data breaches or account compromise.

11.2 In the event of a personal data breach that poses a risk to your rights or interests, prekk8 will notify affected Members and any relevant regulatory authority within the timeframe required by applicable law, and no later than 72 hours of becoming aware of the breach where technically feasible.

12. Children's Privacy

12.1 The prekk8 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, that account will be closed immediately and all associated data deleted, except where retention is required by law for the purposes of recording the breach.

12.2 If you believe that a person under 21 has registered a prekk8 account, please notify us via the support team immediately.

13. Changes to This Privacy Policy

13.1 prekk8 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. The current version of this Policy is always published at prekk8.app/privacy-policy with the effective date clearly displayed at the top of the page.

13.2 Where changes are material — meaning they significantly alter how we collect or use your personal data or affect your rights — we will notify registered Members via the email address on their account no fewer than 14 days before the changes take effect. Continued use of the prekk8 platform after the effective date of the updated Policy constitutes acceptance of the revised terms.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by prekk8, please contact our support team:

• Live Chat: Available 24/7 inside your prekk8 member dashboard — the fastest way to reach us.
• Email: [email protected] — written queries are typically responded to within 24 business hours (MYT).

Please state clearly in your communication that the subject relates to a privacy or data protection matter. Where your request involves accessing, amending, or deleting personal data, please include your registered prekk8 username to expedite verification.