k888 Privacy Policy

k888 ("we", "us", "our" or "the Platform") operates an English-language online gaming information and entertainment service designed for adult players in Malaysia. In the course of providing this service, k888 necessarily collects and processes certain categories of personal information about individuals who access, register with or transact on the platform.

This Privacy Policy sets out the types of personal data we collect, the reasons we collect it, how it is stored and protected, with whom it may be shared, how long it is retained and the rights available to individuals regarding their information. This policy applies to all users of the k888 platform regardless of the device or connection method used to access it, including players accessing the site from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other locations across Malaysia.

This Privacy Policy should be read alongside the k888 Terms & Conditions, which set out the broader rules governing platform participation. Where this policy uses terms defined in the Terms & Conditions, those definitions apply here as well.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living natural person, directly or in combination with other data.
• "Data Subject" means the individual to whom Personal Data relates — in the context of k888, this is primarily the registered player.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, k888.
• "Processor" means any entity that processes Personal Data on behalf of the Controller under a contractual arrangement and on the Controller's documented instructions.
• "KYC Data" means identity, age, address and payment-ownership documentation submitted by a player to satisfy Know Your Customer verification requirements.
• "Cookies" means small text files placed on a device by a web server when a user visits a site, used to retain session and preference information.

k888 collects personal data through three primary channels: information you provide directly, information generated by your activity on the platform, and information received from third-party service providers involved in payment processing or identity verification.

4.1 Contract Performance

Where you register a k888 account and participate in platform activities, processing your identity, contact and payment data is necessary to fulfil contractual obligations including account creation, deposit facilitation, withdrawal processing and eligibility verification.

4.2 Legal Compliance

k888 is required to collect and retain certain categories of data to comply with applicable legal obligations. These include age verification and KYC checks required before gaming activity and financial transaction records necessary for accounting and audit purposes.

4.3 Legitimate Interests

k888 processes technical and usage data on the basis of legitimate interests, including preventing fraud, detecting prohibited multi-account behaviour, improving platform performance, analysing how Malaysian players engage with different sections of the site, and maintaining the security of player accounts and payment transactions.

4.4 Consent

Where k888 sends promotional communications or places non-essential cookies, we rely on your consent as the legal basis. You may withdraw consent at any time by contacting support or adjusting your browser cookie settings, as applicable. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5.1 Account Management

Personal data submitted at registration and during KYC is processed to create and maintain your k888 account, verify your identity and age, and ensure that only eligible players aged 21 and above access gaming features. This data is linked to your account record for the duration of the account's active life.

5.2 Payment Processing

Transaction data is processed to execute MYR deposits and withdrawals via selected Malaysian payment channels. This includes communicating with payment processors for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX and major Malaysian banks. Payment data is handled in accordance with the standards applicable to those processors and is not stored by k888 in a form that could enable unauthorised access to your financial accounts.

5.3 Security and Fraud Prevention

Technical and usage data is processed to identify suspicious login patterns, detect multiple account registrations from the same device or IP range, review unusual withdrawal requests and flag potential account takeover attempts. This processing is necessary to protect the integrity of the k888 platform and the funds of legitimate players.

5.4 Customer Support

Communication data submitted through the k888 support channel is processed to respond to enquiries, investigate disputes and maintain a record of outcomes. Support records may be retained for internal quality review and training purposes.

k888 does not sell, rent or trade personal data to third parties for their own marketing purposes. Data may be disclosed in the following circumstances only:

• Payment processors and banking partners: Data necessary to complete MYR deposits and withdrawals is shared with the relevant financial service providers, including e-wallet operators and Malaysian banks, under contractual data-processing arrangements.
• Identity verification services: KYC documentation may be shared with accredited verification providers to confirm the authenticity of identity documents and cross-reference against relevant databases.
• IT and hosting providers: Technical data is processed by infrastructure providers operating under confidentiality obligations and data-processing agreements with k888.
• Legal and regulatory requirements: Where k888 is required to disclose data by law, court order or regulatory direction, it will comply with such requirements. Where legally permissible, k888 will notify the affected player before disclosure.
• Business reorganisation: In the event of a merger, acquisition or asset transfer, personal data may be transferred to a successor entity under equivalent privacy protections.

k888 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any extended retention required by applicable law. The following general retention guidelines apply:

• Account and KYC data: Retained for the life of the account and for a minimum period thereafter as required by relevant financial and anti-money-laundering regulations.
• Transaction records: MYR payment and withdrawal records are retained for a minimum of seven years from the date of the transaction to satisfy accounting and audit obligations.
• Support communications: Retained for up to three years from the date of the last communication in a given matter, unless a longer period is required for unresolved disputes.
• Technical and usage data: Anonymised or aggregated after a period not exceeding thirteen months, following which individual-level records are deleted.

Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised.

8.1 Types of Cookies Used

k888 uses the following categories of cookies and similar technologies on its platform:

• Strictly necessary cookies: Required for the platform to function correctly, including session management, login state persistence and security token handling. These cookies cannot be disabled without affecting core functionality.
• Functional cookies: Used to remember preferences such as language settings, display options and previously viewed sections of the platform.
• Analytical cookies: Used to collect anonymised usage data that helps k888 understand how players navigate the site, which sections generate the most engagement and where technical improvements may be beneficial.

8.2 Managing Cookies

You may configure your browser to decline non-essential cookies or to alert you when a cookie is being placed. Disabling strictly necessary cookies will impair platform functionality, including account login. For analytical and functional cookies, declining them will not prevent you from using the platform but may reduce the personalisation of your experience.

k888 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data it processes. These measures are designed to protect against unauthorised access, accidental loss, alteration or disclosure. They include, but are not limited to:

• Encryption of data in transit using current transport layer security protocols.
• Access controls restricting staff access to personal data on a need-to-know basis.
• Logging and monitoring of administrative access to data systems.
• Regular review of security configurations and software patching procedures.

No security system is entirely infallible. While k888 takes reasonable precautions, we cannot guarantee that personal data will never be accessed without authorisation. In the event of a data breach that is likely to result in a risk to affected individuals, k888 will take appropriate notification steps in accordance with applicable law.

k888 is strictly intended for individuals aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If k888 becomes aware that personal data has been collected from a minor, that data will be deleted promptly and the associated account will be closed without processing any pending withdrawals derived from gaming activity during the period of underage access.

Parents and guardians who believe that a minor in their care has provided personal data to k888 should contact support immediately using the website email address provided in Section 14 of this policy.

Subject to applicable law and identity verification, k888 players may exercise the following rights in relation to their personal data:

• Right of access: You may request confirmation of whether k888 holds personal data about you and receive a copy of that data.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held about you.
• Right to erasure: You may request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to restrict processing: You may request that processing of your data be restricted in certain circumstances, such as while the accuracy of data is being verified.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. k888 will cease such processing unless compelling grounds override your objection.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request that your data be provided to you in a structured, commonly used format.

To exercise any of these rights, submit a written request to the support email address listed in Section 14. k888 will respond within a reasonable period and may request identity verification before fulfilling the request.

Personal data collected from players in Malaysia may be processed on infrastructure located in jurisdictions outside Malaysia where k888's service providers operate. Where such transfers occur, k888 takes steps to ensure that appropriate safeguards are in place to maintain a level of protection for personal data consistent with the protections applicable in Malaysia. These safeguards may include contractual clauses between k888 and the relevant processor, or reliance on recognised transfer mechanisms under applicable data protection frameworks.

k888 reserves the right to update this Privacy Policy from time to time to reflect changes in data practices, platform features or applicable legal requirements. Material changes will be communicated by updating the "Last updated" date at the top of this policy. Where a change significantly affects how your personal data is used, k888 may provide additional notice by email to the address registered on your account. Continued use of the k888 platform following notification of a material change constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy, wish to exercise a data subject right, or want to raise a concern about how your personal information is handled by k888, please contact us in writing. The website support email address is [email protected]. This address is displayed as plain text and is not a clickable link. Please include your registered account details, a clear description of your request and, where relevant, the specific section of this policy you are enquiring about.

k888 will acknowledge privacy-related enquiries within a reasonable period and will aim to provide a substantive response or resolution within thirty days of receipt, subject to the complexity of the request and the need for identity verification.