KK8 Privacy Policy – Personal Data Protection for Malaysian Members

KK8 collects your personal data through several means — primarily when you register an account, interact with the platform, or contact our support team. The categories of data we collect are as follows:

The personal data we collect is used solely for legitimate purposes directly related to providing you with KK8's platform services. We do not use your data for any other purpose without your consent. The specific purposes for which your data is used are as follows:

• Account management: Creating, verifying, and managing your KK8 account — including the login process, password resets, and profile information updates.
• Transaction processing: Verifying and processing all deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u (FPX), CIMB Clicks (FPX), as well as all withdrawal requests for winnings.
• Identity verification (KYC): Compliant with Anti-Money Laundering (AML) regulations and mandatory age verification requirements under Malaysian law.
• Gaming service provision: Ensuring you can access and enjoy all games available on KK8 — slots, blackjack, roulette, lottery, jackpot, and Sports Betting.
• Customer support: Responding to enquiries, resolving technical issues, and handling your complaints effectively.
• Platform security: Detecting and preventing fraud, suspicious activity, money laundering, and violations of our terms of use.
• Service improvement: Analysing aggregated usage patterns (without identifying individuals) to improve the user experience, introduce new games, and enhance platform performance.
• Marketing communications: Sending information about promotions, new bonuses, and platform updates — only where you have consented to receive such communications. You may withdraw this consent at any time.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), KK8 processes your personal data on a valid legal basis. For each distinct processing purpose, the applicable legal basis is:

• Contract performance: Processing required to provide the platform services you have requested — including account management, transaction processing, and providing access to games.
• Legal obligation: Processing required to comply with Malaysian legal obligations — including AML requirements, age verification, and reporting to relevant authorities.
• Legitimate interests: Processing required for KK8's legitimate interests that does not unduly affect your rights and interests — including platform security, fraud prevention, and service improvement.
• Consent: Processing for marketing purposes and promotional communications — carried out only where you have given explicit, withdrawable consent.

KK8 will not process your personal data for any purpose not stated above without first informing you and, where required, obtaining your consent.

KK8 does not sell or trade your personal data to any third party. However, there are limited circumstances where we need to share your data with trusted third parties in order to provide our services to you:

• Payment service providers: Malaysian e-wallet operators (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) and banks providing FPX services (Maybank, CIMB, and others) receive the transaction data necessary to process your deposits and withdrawals. This data is strictly limited to what is required for the transaction.
• Game providers: Game providers (such as Pragmatic Play, PG Soft, and others) receive the session data required to run games within the KK8 platform. These providers are bound by strict confidentiality agreements with KK8.
• Security and fraud prevention services: Technology providers that assist KK8 in detecting and preventing fraud, money laundering, and suspicious activity — subject to data processing agreements compliant with the PDPA.
• Legal authorities: KK8 will disclose personal data to Malaysian authorities (such as Bank Negara Malaysia or the police) when required by law or a valid court order — and only to the extent necessary to satisfy that legal obligation.

KK8 takes data security infrastructure seriously to ensure your personal information is always protected against unauthorized access, disclosure, alteration, or destruction. Key security measures we have implemented include:

• Data encryption in transit: All communications between your device and KK8's servers are secured with TLS 1.3 protocol and 256-bit SSL encryption — ensuring data in transit cannot be intercepted or read by unauthorised parties.
• Data encryption at rest: Sensitive data stored in KK8's databases — including passwords, payment details, and identity verification documents — is encrypted using the latest industry-standard encryption algorithms.
• Access controls: Access to members' personal data within KK8's systems is restricted on a need-to-know basis — only staff who require access to carry out legitimate operational duties are permitted, with access logs recorded and monitored.
• Multi-layer firewall: KK8's server infrastructure is protected by a multi-layered firewall system, an intrusion detection system (IDS), and continuous 24/7 security monitoring by a dedicated cybersecurity team.
• Two-factor authentication (2FA): You are encouraged to enable two-factor authentication on your KK8 account as an added layer of protection — making unauthorised access virtually impossible even if your password is compromised.
• Regular security audits: KK8 conducts regular internal and external security audits to identify and patch any vulnerabilities before they can be exploited.

Despite all these security measures, no system can be guaranteed 100% secure in the digital age. In the unlikely event of a data breach affecting your information, KK8 is committed to notifying you within the timeframe required under Malaysia's PDPA and taking immediate remedial action.

KK8 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Below are the data retention periods we follow:

Once the relevant retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. This deletion process is carried out automatically by KK8's systems according to a pre-defined schedule.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data KK8 holds about you. KK8 fully respects and facilitates the exercise of these rights:

The KK8 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. The types of cookies we use are as follows:

• Essential cookies (required): Required for the KK8 platform to function correctly — including login session management, security, and language preference storage. These cookies cannot be disabled without affecting core platform functionality.
• Performance & analytics cookies: Helping us understand how members use the KK8 platform — which pages are visited most, how long sessions last, and where technical errors occur. This data is used in aggregated form to improve the platform.
• Functional cookies: Saving your personal preferences — such as interface language, display settings, and game choices — so you don't have to reconfigure them every time you log in.
• Security cookies: Used to detect and prevent unauthorised access, bot activity, and fraud attempts — protecting your account from misuse.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the KK8 platform. For non-essential cookies, you may opt out without impacting your core gaming experience on KK8.

The KK8 platform is intended solely for individuals aged 18 and above. KK8 does not knowingly collect or process personal data from individuals under the age of 18. If you believe your child or underage dependent has provided personal data to KK8 without your knowledge, please contact us immediately at support@kk8-app.net so that we may take the appropriate steps to delete that data and close the relevant account.

Parents and guardians concerned about children accessing the KK8 platform from shared devices are advised to:

• Enabling parental controls on shared devices.
• Do not store KK8 login credentials on devices accessible to children.
• Using a password or PIN to lock the app or web browser on shared devices.
• Contacting the KK8 support team if you need assistance with additional protection measures.

KK8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in Malaysian law, industry practices, or how we handle members' personal data. Whenever we make material changes to this Privacy Policy, we will notify you via:

• A visible notification within the KK8 platform when you log in after the effective date of the changes.
• An email to the address registered to your account, if the changes materially affect your rights.
• An update to the "Last Updated" date visible at the top of this document.

Your continued use of the KK8 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We recommend checking this page periodically to stay informed about how we protect your personal data.

If you have any questions, concerns, or requests regarding your personal data privacy at KK8, our team is ready to assist. You can reach us through the following channels: