Privacy Policy

1. Introduction

This Privacy Policy (hereinafter referred to as the "Policy") sets out how KK8MY (hereinafter referred to as "KK8MY", "we", "us", or "our") collects, uses, stores, shares, and protects personal data submitted by users (hereinafter referred to as "User", "Member", or "you") when accessing or using the online gambling and sports betting platform operated at https://kk8my.cam (the "Platform").

KK8MY takes data privacy seriously. We are committed to handling all personal data in a manner consistent with applicable data protection legislation, our international gaming licence obligations, and globally recognised privacy standards. This Policy is incorporated by reference into our Terms & Conditions and forms part of the overall agreement governing your use of the Platform.

By registering an account, accessing the Platform, or using any of our Services — including live casino games, sports betting markets, payment facilities, and customer support — you acknowledge that you have read, understood, and consented to the data processing practices described in this Policy.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including but not limited to name, identification number, contact details, financial information, IP address, and device identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means KK8MY, being the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of KK8MY pursuant to written instructions.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their Personal Data.
• "KYC Data" means identity and verification documents submitted by a Member in connection with KK8MY's Know Your Customer obligations, including government-issued identification, proof of address, and payment method verification.
• "Sensitive Personal Data" means categories of Personal Data that warrant enhanced protection, including financial account details, identity document numbers, and data relating to a Member's gambling history.
• "Cookie" means a small text file placed on a User's device by the Platform for the purposes of session management, analytics, and personalisation.

3. Personal Data We Collect

3.1 Data Provided Directly by You

KK8MY collects the following categories of Personal Data that you provide directly when registering or using the Platform:

Data Category	Specific Data Points	Collection Point
Identity Data	Full legal name, date of birth, nationality, gender, government ID number (MyKad, passport)	Registration & KYC verification
Contact Data	Email address, mobile phone number, residential address (city, state, postcode)	Registration form
Financial Data	Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), USDT wallet addresses, transaction history	Cashier & payment processing
KYC Documents	Scanned copies of identity documents, proof of address, selfie verification images	Identity verification process
Communications Data	Live chat transcripts, email correspondence, support ticket content, WhatsApp messages	Customer support interactions

3.2 Data Collected Automatically

When you access the Platform, KK8MY automatically collects certain technical and behavioural data:

• Device & Technical Data: IP address, device type and operating system, browser type and version, screen resolution;
• Usage Data: Pages visited, time spent on each page, game sessions played, bets placed, wagers settled, login timestamps, and session durations;
• Location Data: Approximate geographic location inferred from IP address (used for compliance screening and fraud prevention — we do not collect precise GPS coordinates);
• Cookie and Tracking Data: Cookie identifiers, session tokens, and analytics data collected via first-party tracking mechanisms (see Section 7 for full cookie details).

4. How We Use Your Personal Data

KK8MY processes your Personal Data for the following purposes:

• Account Administration: Creating and managing your registered account, verifying your identity, and processing your KYC documentation in compliance with anti-money laundering (AML) and counter-terrorism financing (CTF) requirements;
• Service Provision: Enabling access to casino games, sports betting markets, live dealer tables, lottery products, and payment facilities;
• Transaction Processing: Facilitating deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB, and USDT TRC20, as well as processing withdrawal requests;
• Fraud Prevention & Security: Monitoring transactions and account activity for signs of fraudulent behaviour, money laundering, multiple account creation, or other prohibited activities;
• Regulatory Compliance: Fulfilling mandatory reporting obligations under our gaming licence, responding to lawful requests from regulatory authorities, and maintaining statutory records;
• Customer Support: Responding to enquiries, resolving disputes, processing complaints, and providing multilingual assistance in English, Bahasa Melayu, and Mandarin;
• Responsible Gambling: Administering deposit limits, loss limits, session reminders, self-exclusion requests, and cool-off periods at the Member's request or where required by our responsible gambling obligations;
• Platform Improvement: Conducting internal analytics to improve the user experience, optimise platform performance, and personalise content shown to you;
• Marketing Communications: Where you have provided explicit consent, sending you information about promotions, bonuses, and new features. You may withdraw consent at any time.

5. Legal Basis for Processing

KK8MY processes your Personal Data on the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to perform the contract you have entered into with KK8MY by registering an account and using the Platform;
• Legal Obligation: Processing necessary to comply with KK8MY's obligations under applicable gaming licence conditions, AML/CTF legislation, and other applicable laws;
• Legitimate Interests: Processing undertaken for fraud prevention, platform security, and internal analytics, where such interests are not overridden by your privacy rights;
• Consent: Processing for direct marketing communications and non-essential cookies, where you have provided explicit and freely given consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

KK8MY does not sell your Personal Data. We may share your data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: Malaysian e-wallet operators (Touch 'n Go, Boost, GrabPay), banking partners (Maybank, CIMB, Public Bank, Hong Leong, RHB), DuitNow/FPX network operators, and cryptocurrency payment processors — solely for the purpose of processing your deposits and withdrawals;
• Identity Verification Partners: Third-party KYC service providers engaged to assist with identity verification and AML screening. These providers process your data under strict confidentiality obligations;
• Game Technology Providers: Licensed game studios whose software is integrated into the Platform. These providers may receive aggregated or anonymised session data for technical support purposes only;
• Regulatory Authorities: Gaming licence regulators, financial intelligence units, law enforcement agencies, and courts — where disclosure is required by applicable law or a lawful order;
• Professional Advisers: Lawyers, auditors, and accountants engaged by KK8MY in connection with legal proceedings, compliance reviews, or corporate transactions, subject to professional confidentiality obligations.

7. Cookies & Tracking Technologies

KK8MY uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. They do not contain executable code and cannot access other files on your device.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your login state, security tokens, and load-balancing cookies. These cannot be disabled without impairing core Platform functionality;
• Performance & Analytics Cookies: Collect aggregated, anonymised data about how Members use the Platform — including which pages are visited most frequently and where errors occur — to help us improve the user experience;
• Functional Cookies: Remember your preferences, such as language selection, preferred display settings, and notification preferences, to provide a more personalised experience;
• Marketing Cookies: Used only where you have provided explicit consent to receive personalised promotional content. These cookies track your interaction with promotional materials so that we do not show you the same promotion repeatedly.

7.2 Managing Cookies

You may control cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and alert you when a new cookie is set. Please note that disabling strictly necessary cookies will impair your ability to use the Platform's core features, including account login. Withdrawing consent for marketing cookies will not affect your ability to access gambling services.

8. Data Retention

KK8MY retains your Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods imposed by our gaming licence and applicable law. The following indicative retention periods apply:

• Account & Identity Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations;
• Transaction & Financial Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial regulatory requirements;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later;
• Customer Support Communications: Retained for a maximum of two (2) years from the date of the interaction, unless the communication relates to an open dispute or legal claim;
• Marketing Preferences & Consent Records: Retained for the duration of your account plus three (3) years, to demonstrate compliance with consent obligations;
• Technical & Usage Logs: Retained for up to twelve (12) months for platform security and fraud prevention purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents re-identification.

9. Data Security

KK8MY implements a layered suite of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and KK8MY's servers is encrypted using industry-standard TLS (Transport Layer Security) with 256-bit encryption. Personal Data stored in our databases is encrypted at rest;
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis, governed by role-based access controls and multi-factor authentication requirements for all staff with system access;
• Intrusion Detection: KK8MY employs continuous network monitoring, intrusion detection systems, and automated anomaly alerts to identify and respond to potential security incidents in real time;
• Data Minimisation: We collect only the minimum amount of Personal Data necessary for each specific processing purpose, reducing the volume of data held at any given time;
• Incident Response: KK8MY maintains a formal data breach response plan. In the event of a confirmed breach affecting your Personal Data, we will notify affected Members and relevant regulatory authorities within the timeframes required by applicable law.

10. Your Data Rights

Subject to applicable law and the limitations imposed by our gaming licence obligations, you hold the following rights in relation to your Personal Data held by KK8MY:

To exercise any of the above rights, please contact the KK8MY Data Protection team via the contact details provided in Section 15 of this Policy. KK8MY will respond to all verified requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, KK8MY may extend this period by an additional two (2) months, with written notification of the extension provided within the initial thirty-day period.

11. Minors & Age Verification

The KK8MY Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect Personal Data from any person under the age of 21. All accounts are subject to mandatory age verification as part of KK8MY's KYC process prior to any real-money activity being permitted.

Where KK8MY identifies or has reasonable grounds to suspect that Personal Data has been submitted by an individual under the age of 21, the relevant Account will be immediately suspended, all Real-Money Funds will be returned through an appropriate channel (subject to verification), all Bonus Funds will be forfeited, and all Personal Data associated with the minor will be deleted from KK8MY's systems upon confirmation of the individual's age.

12. International Data Transfers

KK8MY's primary data processing infrastructure is hosted in secure data centres with appropriate certifications. Where it is necessary to transfer your Personal Data to service providers or infrastructure located outside of your country of residence, KK8MY will ensure that such transfers are made subject to appropriate safeguards, including:

• Standard contractual clauses approved by relevant data protection authorities;
• Binding corporate rules applicable to intra-group transfers;
• Transfers to jurisdictions recognised as providing an adequate level of data protection by the applicable supervisory authority.

13. Third-Party Services & External Links

The KK8MY Platform does not contain links to third-party websites or external services. However, the Platform integrates third-party payment processors and game technology providers as described in Section 6. KK8MY is not responsible for the privacy practices of these third parties in their capacity as independent data controllers. Where you interact directly with a third-party payment provider — for example, by logging into your Touch 'n Go eWallet or Maybank account to complete a transaction — that interaction is governed by the respective provider's own privacy policy.

14. Amendments to This Policy

KK8MY reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Where amendments are material, we will provide reasonable advance notice to registered Members via the email address associated with their account or by publishing a prominent notice on the Platform prior to the amendment's effective date.

The effective date of the most current version of this Policy is stated at the top of this page. Your continued use of the Platform following any amendment constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how KK8MY protects your Personal Data.

15. Contact Us & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or KK8MY's data processing practices, or if you wish to exercise any of your data rights described in Section 10, please contact our team using the details below. All contact details are provided as plain text only and are not clickable links.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the Platform's live chat feature
• Response Commitment: Data rights requests will be acknowledged within 48 hours and fully responded to within 30 calendar days
• Languages: English, Bahasa Melayu, and Mandarin

If you are dissatisfied with KK8MY's response to a data-related complaint, you have the right to escalate the matter to the relevant data protection supervisory authority or the complaints department of our gaming licence regulator.