KK8 Privacy Policy – Data Protection Malaysian Player Privacy

Kk8 only collects the personal information necessary to provide a safe and fully functional online betting platform. We do not collect excessive or irrelevant data beyond the platform's intended use. Below are the categories of data we collect and the reason for collecting each:

Information you provide directly during registration:

• Username and password: Required for identity verification and account security
• Malaysia phone number: Used for account verification, essential service communications, and account recovery when needed
• Date of birth: Required to verify that you meet the minimum age requirement of 18 years
• Bank or eWallet details: Required to process deposits and withdrawals via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, or FPX

Information collected automatically when you use the platform:

• IP address and general location data: Used for fraud detection, account security, and compliance with applicable geo-restrictions.
• Device information: Device type, operating system, browser version — used to optimise your platform experience on your device
• Game activity records: Betting history, game results, deposit and withdrawal transactions — retained for dispute resolution, audit, and compliance purposes.
• Session data: Login and logout times, session duration, pages visited — used to detect suspicious activity and strengthen account security
• Cookie data: Interface preference settings and session data — explained further in Section 6

Information we receive from third parties (in limited circumstances):

• Identity verification from an approved KYC service provider when required for large withdrawals
• Payment verification information from payment processors working with kk8 to ensure transaction security

Every piece of data we collect has a clear and legitimate purpose. kk8 does not use your data for unrelated purposes or purposes you have not consented to without informing you first. Below are the primary ways we use your personal information:

For marketing communications such as promotions, new bonuses, or special kk8 offers, we only send messages to members who have consented to receive them. You may withdraw your marketing consent at any time through your account settings or by contacting kk8 support — and you will be removed from the list within 48 hours.

Kk8 does not sell, rent, or share your personal data with third parties for their commercial or marketing purposes. This is a non-negotiable commitment. However, there are limited situations where kk8 may need to share certain information with specific parties for legitimate operational purposes:

• Payment processors: Required transaction information is shared with payment service providers such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX operators to process your deposits and withdrawals. This sharing is limited strictly to the minimum information needed for each transaction.
• Game providers: The kk8 platform works with game providers such as Pragmatic Play, Evolution Gaming, and SA Gaming. These providers receive only the minimum technical data required to ensure games function correctly and win/loss records are calculated accurately. They do not receive any unnecessary personal identifying information.
• KYC service providers: Where identity verification is required for withdrawals above a certain threshold, the necessary information is shared with an approved KYC provider for verification purposes only. These providers are bound by strict confidentiality agreements.
• Regulatory bodies and law enforcement: Kk8 complies with all lawful requests from competent authorities such as licensing regulators or law enforcement agencies made through proper legal channels. Kk8 does not disclose data to authorities unless required by law or a valid court order.
• Technical partners providing infrastructure: Cloud service and technical infrastructure providers that process data on behalf of kk8 are bound by strict data processing agreements and are not permitted to use your data for their own purposes.

Kk8 continuously invests in security infrastructure to ensure your personal and financial data is protected at all times. Security is not just a single layer of protection — it is a multi-layered system that covers technical, operational, and human aspects.

On the technical side, all communications between your device and the kk8 platform are encrypted using the TLS 1.3 protocol. Member passwords are never stored in plain text — they are hashed using strong cryptographic algorithms, meaning even kk8 staff cannot view your password. kk8 servers are protected by multi-layered firewalls, real-time intrusion detection systems, and 24/7 security monitoring.

For internal access, only staff who require access to member data for their specific job functions are permitted to do so. All access is logged and audited regularly. kk8 employees undergo comprehensive security and privacy training as a condition of employment.

• Encryption at rest: Personal and financial data stored on kk8 servers is encrypted using AES-256 standards
• Two-factor authentication: kk8 accounts support two-factor authentication (2FA) for an added layer of security, which you can enable in your account settings.
• Suspicious activity monitoring: kk8's systems actively monitor for unusual login patterns and activity, and will send alerts or temporarily freeze an account upon detecting suspicious behaviour
• Independent security audits: kk8 undergoes independent security audits on a regular basis to identify and address system vulnerabilities before they can be exploited.
• Incident response plan: Kk8 has a comprehensive security incident response plan to ensure any incident is handled swiftly and effectively, minimising the impact on members

As a kk8 member, you have clearly defined rights regarding your personal data. kk8 is committed to respecting and facilitating the exercise of these rights without placing any unreasonable burden on you. Below are your rights and how to exercise them:

To exercise any of the rights above, you may contact the kk8 privacy team by email at support@kk8-play.com with the subject line "Privacy Rights Request" along with your account number. We will verify your identity before processing the request to ensure your data is not disclosed to unauthorised parties.

Please note that some rights may not be fully exercisable in certain circumstances — for example, data deletion may not be possible for records that must be retained under anti-money laundering compliance requirements. In such cases, kk8 will clearly explain why a request cannot be fulfilled in full and what alternatives are available.

The kk8 platform uses cookies and similar tracking technologies to keep the platform running properly, deliver a personalised experience, and help us understand how players use the platform so we can continue improving it.

Kk8 uses several types of cookies:

• Essential cookies (required): These are cookies required for the platform to function — including session cookies that keep you logged in as you navigate the platform, security cookies that protect your account from CSRF attacks, and cookies that store your language preferences. These cookies cannot be disabled as they are essential to the security and core functionality of the kk8 platform.
• Preference cookies (optional): This includes analytics cookies that help kk8 understand which games are most popular, average session duration, and pages that cause technical issues. This information is used in aggregate and does not identify you individually. You can disable analytics cookies via the cookie settings on the platform without affecting your core account functionality.
• Marketing cookies (optional): If you agree, marketing cookies allow kk8 to show you more relevant promotions on the platform based on your favourite games. You can withdraw this consent at any time.

Kk8 does not use third-party cookies for advertising purposes outside the platform. The tracking technologies we use are for internal purposes only and do not share your behavioural patterns with external ad networks.

Kk8 retains your personal data only for as long as necessary for the purpose it was collected, or as required by applicable legal and compliance obligations. The following are retention period guidelines for different data categories:

• Active account data: For as long as your account is active with kk8, all account data is retained to allow the platform to operate properly and provide the services you need.
• Data after account closure: After an account is closed, kk8 retains basic account records and transaction history for a minimum of 5 years. This is a standard legal compliance requirement in the financial and betting industry for audit purposes, resolution of disputes that may arise after account closure, and AML compliance.
• Game session records: Game session recordings and activity logs are retained for a minimum of 180 days and a maximum of 3 years. This allows disputes relating to game outcomes to be resolved even if they arise after the session in question.
• Customer support communications: Records of conversations with the kk8 support team are retained for 2 years for reference, training, and service improvement purposes.
• KYC verification information: Identity verification documents submitted for KYC purposes are retained for 5 years from the date of verification, in accordance with industry-standard compliance requirements.

Once a retention period has lapsed and there is no legal requirement preventing deletion, kk8 will securely delete or destroy your data using procedures that ensure it cannot be recovered. You do not need to submit a special request for this — it happens automatically in accordance with kk8's data retention schedule.

If you have any questions, concerns, or complaints about how kk8 handles your personal data, we encourage you to reach out to us directly. The kk8 privacy and support team is available to assist you in Bahasa Melayu 24 hours a day, 7 days a week.

• In-platform live chat: The fastest way to get an immediate response — typically within 2–3 minutes during peak hours. Click the chat icon at the bottom right of the kk8 platform.
• Privacy email: For requests that require written documentation — such as data access applications, data deletion, or formal privacy complaints — send an email to support@kk8-play.com with a subject line starting with "Privacy:" followed by a brief description of your request.
• Response time: For general enquiries via live chat, we aim to respond within 5 minutes. For privacy rights requests submitted by email, we aim to acknowledge receipt within 48 hours and resolve the matter within 14 working days.

If you are not satisfied with kk8's response to your privacy complaint, you have the right to escalate the matter to the relevant regulatory authority in the jurisdiction where kk8 operates. The kk8 support team can provide information on the appropriate complaint channels based on your situation.

Kk8 is committed to treating all privacy-related enquiries with seriousness and professionalism. Member privacy is a responsibility we take with full awareness — not merely a box to tick on a compliance checklist.