Summary: syok8 collects personal data to operate its platform, verify your identity, process payments, and comply with legal obligations. We do not sell your personal data to third parties for marketing purposes. You have the right to access, correct, and request deletion of your data, subject to applicable legal and regulatory retention requirements.
1 Introduction
syok8 ("the Platform," "we," "us," "our") operates an online casino and sports betting platform serving members across Malaysia, including players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and beyond. In the course of providing the syok8 Services, we collect and process personal data about our members and visitors.
This Privacy Policy ("Policy") explains in plain terms what personal data syok8 collects, the purposes for which it is processed, with whom it may be shared, and the rights that data subjects hold in relation to their personal data. This Policy applies to all personal data collected through the syok8 website, its subdomains, and any related services or communications.
By registering a syok8 account or using the Services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy should be read alongside the syok8 Terms & Conditions, which govern your use of the platform as a whole.
2 Data Controller
For the purposes of applicable data protection law, syok8 is the data controller in respect of personal data collected through the syok8 platform and Services. Questions, requests, and complaints relating to the handling of personal data under this Policy should be directed to the syok8 Data Privacy team via the contact details set out in Section 14 of this Policy.
3 Personal Data We Collect
syok8 collects personal data from you in three primary ways: data you provide directly during registration and account use; data collected automatically through your use of the platform; and data obtained from third parties as part of verification and compliance processes.
3.1 Data You Provide Directly
- Registration data: Full legal name, date of birth, email address, and chosen account credentials;
- KYC verification data: Government-issued photo identification (Malaysian MyKad or passport), including name, ID number, date of birth, and photograph — submitted to verify your identity and confirm you are aged 21 or above;
- Payment data: Details of payment instruments used to make deposits or receive withdrawals, including e-wallet account identifiers (Touch n Go eWallet, Boost, GrabPay), bank account references (Maybank, CIMB, Public Bank), and cryptocurrency wallet addresses (USDT TRC20). Note: full card or bank account numbers are handled exclusively by syok8's payment processors and are not stored on syok8 servers;
- Communications data: Content of messages sent to syok8 via live chat, email, or any other support channel.
3.2 Data Collected Automatically
- Technical data: IP address, browser type and version, operating system, device identifiers, and connection data;
- Usage data: Pages visited, games played, wagers placed, session duration, login timestamps, and navigation paths within the platform;
- Transaction data: Complete records of all deposits, withdrawals, wagers, winnings, bonus credits, and account balance changes;
- Cookies and tracking data: As described in Section 9 of this Policy.
3.3 Data from Third Parties
- Identity verification providers: Results of automated document verification and biometric liveness checks conducted through syok8's KYC service providers;
- Payment processors: Transaction confirmation data and payment instrument verification results from syok8's payment processing partners;
- Fraud and AML screening: Risk scoring and screening results from third-party anti-money laundering and fraud prevention services.
4 How We Use Your Personal Data
syok8 uses personal data for the following purposes:
- Account creation and management: To register your account, authenticate your identity on login, and maintain your account in accordance with the syok8 Terms & Conditions;
- Age and identity verification: To confirm you are 21 years of age or older and that the account is registered in your true identity, as required by our responsible gaming obligations and operational standards;
- Payment processing: To process deposits, settle withdrawals, and maintain accurate financial records of your account transactions;
- Service delivery: To enable access to casino games, live dealer tables, slots, and the sportsbook, and to personalise your platform experience;
- Customer support: To respond to your queries, complaints, and requests submitted via live chat, email, or other support channels;
- Legal and regulatory compliance: To comply with applicable anti-money laundering legislation, responsible gaming requirements, tax reporting obligations, and other legal duties;
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and terms violations;
- Responsible gaming: To monitor wagering patterns for indicators of problem gambling and to administer self-exclusion, deposit limits, session alerts, and other responsible gaming tools;
- Platform improvement: To analyse aggregate usage data (in anonymised or pseudonymised form where possible) to improve the platform's performance, game catalogue, and user experience;
- Marketing communications: To send you promotional communications about syok8 offers and events where you have given valid consent or where we have a legitimate interest to do so. You may withdraw consent or opt out at any time.
5 Legal Basis for Processing
syok8 processes your personal data on the following legal bases:
- Contractual necessity: Processing required to fulfil our obligations to you under the syok8 Terms & Conditions, including account management, payment processing, and service delivery;
- Legal obligation: Processing required to comply with applicable law, including KYC/AML obligations, age verification requirements, and regulatory reporting;
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, where our interests are not overridden by your data protection rights;
- Consent: Processing for direct marketing communications, where consent is required and has been freely given. You may withdraw consent at any time without detriment to your account.
6 Data Sharing & Third Parties
syok8 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. syok8 may share personal data with third parties in the following circumstances:
- Service providers: Third-party vendors who process data on syok8's behalf under data processing agreements, including KYC/identity verification providers, payment processors, fraud screening services, cloud hosting providers, and customer support platform providers;
- Game providers: Game software providers whose games are available on the syok8 platform may receive limited technical data (such as session tokens and game result logs) required to deliver their games. These providers are bound by confidentiality and data protection obligations;
- Legal and regulatory authorities: syok8 may disclose personal data to competent legal, regulatory, or governmental authorities where required by applicable law, court order, or binding regulatory direction;
- Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of syok8's assets, personal data held by syok8 may be transferred to the relevant successor entity, subject to equivalent data protection obligations.
No Data Sales: syok8 does not and will not sell your personal data — including your name, contact details, financial data, or gaming history — to any third party for marketing, profiling, or any other commercial purpose.
7 Data Retention
syok8 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations.
As a general guide, syok8 applies the following retention periods:
- Account and KYC records: Retained for a minimum of five (5) years from account closure, as required by applicable AML and financial record-keeping obligations;
- Transaction records: Retained for a minimum of five (5) years from the date of each transaction;
- Responsible gaming records: Self-exclusion records and related responsible gaming documentation are retained for the duration of the exclusion period plus five (5) years;
- Support communications: Retained for three (3) years from the date of the interaction, unless a longer period is required in connection with an ongoing dispute or legal matter;
- Marketing consent records: Retained from the date of consent until withdrawal of consent, and for three (3) years thereafter as evidence of consent history.
At the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with syok8's data disposal procedures.
8 Data Security
syok8 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:
- Transport Layer Security (TLS) encryption for all data transmitted between your device and syok8 servers;
- Encryption of sensitive data at rest, including payment instrument references and identity document data;
- Role-based access controls limiting access to personal data to authorised personnel with a demonstrable business need;
- Intrusion detection, logging, and monitoring systems;
- Regular security assessments and penetration testing;
- Staff data protection training and confidentiality obligations.
You are responsible for maintaining the security of your own syok8 account credentials. syok8 will never ask you for your password via email, live chat, or any other channel. If you believe your account has been compromised, contact syok8 support immediately via live chat.
9 Cookies & Tracking Technologies
syok8 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit the syok8 platform.
Categories of Cookies Used
- Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your syok8 account. These cannot be disabled without preventing use of the platform;
- Functional cookies: Store your preferences such as language settings and lobby display preferences to personalise your experience;
- Analytics cookies: Collect anonymised or pseudonymised data about how members use the platform to help syok8 identify performance issues and improve the user experience. This data is not used to identify individual users;
- Security cookies: Used to detect and prevent fraud, bot activity, and other security threats.
syok8 does not use third-party advertising cookies or share cookie data with advertising networks. You can control cookie settings through your browser's settings, though disabling certain cookies may impair platform functionality.
10 Your Data Protection Rights
Subject to applicable law and regulatory constraints, you have the following rights in relation to personal data held by syok8:
- Right of access: You may request a copy of the personal data syok8 holds about you;
- Right of rectification: You may request correction of inaccurate or incomplete personal data;
- Right of erasure: You may request deletion of personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal and regulatory retention obligations;
- Right to restrict processing: You may request that syok8 limit processing of your personal data in certain circumstances, such as while a data accuracy dispute is being resolved;
- Right to data portability: You may request that syok8 provide your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contractual necessity and is carried out by automated means;
- Right to object: You may object to processing of your personal data for direct marketing purposes or processing based on legitimate interests, in which case syok8 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests;
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
How to Exercise Your Rights: Submit a data subject request via email to
[email protected] or through syok8's live chat support. syok8 will respond within thirty (30) days of receipt of a verified request. Identity verification may be required before a request is processed.
11 Minors
21+ Strictly Enforced: The syok8 platform is strictly restricted to individuals who are 21 years of age or older. syok8 does not knowingly collect personal data from individuals under the age of 21.
syok8 applies mandatory KYC age verification to all accounts. If syok8 becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted promptly and the account will be permanently closed. If you have reason to believe that a person under 21 has registered a syok8 account, please contact syok8 support immediately.
12 International Data Transfers
syok8 may transfer personal data to service providers or infrastructure located outside Malaysia where necessary to deliver the Services. Where personal data is transferred internationally, syok8 ensures that appropriate safeguards are in place to protect your data, which may include standard contractual clauses, data processing agreements, or transfer to jurisdictions that provide an adequate level of data protection.
13 Changes to This Privacy Policy
syok8 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material, syok8 will notify registered members by email to their registered address or by prominent notice on the platform, with reasonable prior notice before the updated Policy takes effect.
The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the syok8 platform following an update constitutes acceptance of the revised Policy. If you disagree with any change, you should close your account before the update takes effect.