KK8 Online Privacy Policy – Malaysia Member Data Protection Comes First

1Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") is published by KK8 Online ("Platform", "we", "us") and applies to all users, visitors and registered members of kk8online.best and all associated mobile applications. This Policy describes our practices for the collection, use, disclosure, transfer and storage of your personal data.

KK8 Online is committed to operating in full compliance with the Personal Data Protection Act 2010 (PDPA) Malaysia and all its implementing regulations. We recognise that privacy is a fundamental right of every individual and take our responsibilities as a data controller seriously.

By registering an account, accessing or using any part of the kk8 online platform, you agree that your personal data will be processed in the manner described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform.

2Types of Personal Data We Collect

KK8 Online collects your personal data through a variety of channels — directly from you during registration, automatically as you use the platform, and in some cases from legitimate third-party sources. The following are the categories of data we collect:

Data You Provide Directly:

• Identity information: Full name, MyKad or passport number, date of birth and gender.
• Contact information: Malaysian mobile number, email address, and residential address.
• Financial information: Malaysian bank account numbers, bank names, and e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) used for deposits and withdrawals.
• Account information: Your chosen username, password (stored in encrypted form — we are unable to read it), and your account preferences.
• Verification documentation: A copy of your identity document as requested during the KYC (Know Your Customer) process.

Automatically Collected Data:

• Technical data: IP address, browser type, operating system, screen resolution, and device information.
• Usage data: Pages visited, games played, session duration, click actions, and navigation patterns within the platform.
• Transaction data: A complete record of all deposits, withdrawals, bets and winnings in your account.
• Communication data: Live chat session records with the support team, emails sent and received, and other interaction logs with the platform.

3Purpose & Legal Basis for Data Use

KK8 Online uses your personal data only for purposes that are lawful, relevant and proportionate. Below are the primary purposes for which your data is used, along with the legal basis that authorises each type of processing:

• Member account management and maintenance — covering registration, identity verification, account record maintenance and management of your account settings on kk8 online. (Basis: Performance of contract)
• Financial transaction processing — including deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as withdrawals of winnings to your Malaysian bank account. (Basis: Performance of contract)
• Delivery of gaming services — enabling you to access and play all games on kk8 online, including live baccarat, slots, lottery, football and badminton betting. (Basis: Performance of contract)
• Fraud detection and prevention — monitoring account activity to detect and prevent fraudulent activity, money laundering or platform abuse. (Basis: Legitimate interests & legal obligations)
• Regulatory compliance and audit — meeting applicable legal and regulatory requirements, including reporting to authorities as mandated by Malaysian law. (Basis: Legal obligation)
• Customer support — handling enquiries, complaints, and assistance requests from kk8 online members efficiently and effectively. (Basis: Performance of contract & legitimate interests)
• Personalisation of user experience — using usage data to offer relevant game recommendations and personalise the platform experience according to your preferences. (Basis: Legitimate interests)
• Marketing communications — sending information about bonuses, promotions and platform updates via email or app notifications — only where you have given explicit consent to receive such communications. (Basis: Consent)

4Data Sharing & Disclosure to Third Parties

KK8 Online does not sell, rent, or commercialise members' personal data to any third party. However, in the ordinary course of business operations, we may need to share certain data with the following parties under strict controls:

• Payment providers: Payment service providers — including FPX gateway operators, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and DuitNow — receive only the transaction data necessary to process your deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Game providers: Third-party game providers that supply live baccarat, slots, lottery and Sports Betting on the kk8 online platform may process certain gameplay session data to ensure continuity and fairness of play.
• Technology service providers: Companies that provide cloud computing, hosting, analytics and technical infrastructure services required for the operation of the kk8 online platform.
• Regulatory authorities and law enforcement agencies: kk8 online will disclose data to the relevant authorities when required by Malaysian law, court order, or for the purposes of financial crime prevention.
• Professional advisors: Lawyers, accountants, auditors, and other advisors providing professional services to kk8 online under strict obligations of confidentiality.

All third parties that receive data from kk8 online are bound by strict confidentiality terms and are only permitted to use that data for the specific purposes agreed upon with kk8 online. They are not allowed to use kk8 online member data for their own purposes.

5Data Security Measures

The security of members' personal data is kk8 online's highest priority. We implement multiple layers of technical and organisational protection to ensure your data remains secure at all times:

• Data encryption in transit: All communications between your device and kk8 online servers are protected by 256-bit TLS/SSL encryption — the highest security standard used by banking institutions in Malaysia.
• Data encryption at rest: Sensitive data such as bank account details, identification numbers, and passwords are stored in encrypted form on our servers. Your password is processed through a one-way hashing algorithm that cannot be decrypted by anyone — including the kk8 online team itself.
• Internal access controls: Access to member data within kk8 online's systems is restricted to staff with a legitimate business need, based on the principle of least privilege. All access is automatically audited and logged.
• Independent security audits: kk8 online's security systems are independently audited by third-party cybersecurity firms at least twice a year to identify and address any vulnerabilities.
• 24/7 Threat Monitoring: kk8 online's cybersecurity team monitors all systems continuously, 24 hours a day, 7 days a week, to detect and respond to any security threats immediately.
• Staff training: All kk8 online staff who handle member data receive regular privacy and data security training to ensure ongoing compliance and awareness.

While we take all reasonable precautions, no security system can guarantee complete protection in every scenario. We encourage members to play their part in keeping their accounts secure — use a strong password, never share your login credentials, and notify us immediately if you suspect any suspicious activity on your kk8 online account.

6Member Rights Under Malaysia's PDPA

As a kk8 online member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

• Right to access: You have the right to request a copy of the personal data we hold about you. We will fulfil valid access requests within 21 business days.
• Right to rectification: If your personal data is inaccurate, outdated or incomplete, you have the right to request a correction. We will verify and update the relevant data within a reasonable timeframe.
• Right to withdraw consent: Where data processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the validity of any processing carried out prior to that withdrawal.
• Right to object: You have the right to object to the processing of your personal data where such processing is carried out on the basis of kk8 online's legitimate interests, in certain circumstances.
• Right to erasure: Under certain circumstances, you may request the deletion of your personal data. Please note that kk8 online may be required to retain certain data in order to fulfil ongoing legal or contractual obligations.

To exercise any of the rights above, please contact the kk8 online data protection team by email at support@kk8online.best stating your full name, account number and the type of request. We will verify your identity before processing any data-related request to ensure your account remains protected.

7Cookies, Tracking & Similar Technologies

KK8 Online uses cookies and similar tracking technologies to enhance the user experience, analyse usage patterns and maintain platform security. The following are the types of cookies we use:

• Essential cookies: Required for the core functionality of the kk8 online platform, including login session management, account security, and platform navigation. These cookies cannot be disabled as they are essential to platform operations.
• Performance cookies: Collecting information on how you use the kk8 online platform — pages visited, time spent on each page and any errors encountered — to help us continuously improve the overall user experience.
• Functional cookies: Remembering your preferences and settings on kk8 online — such as your chosen language, username (for the "remember me" function), and display preferences — so you do not have to reconfigure them each time you visit.
• Analytics cookies: Helping kk8 online understand platform usage patterns in an aggregated and anonymised form to make better, more relevant product development decisions for Malaysian users.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality of the kk8 online platform and your overall gaming experience.

8Child Protection

The kk8 online platform is intended solely for individuals aged 18 years of age and above. We do not knowingly collect, store or process the personal data of individuals under the age of 18.

KK8 Online employs a strict age verification process at registration to ensure our platform remains inaccessible to minors. Should we discover that personal data of a minor has been collected inadvertently, we will take immediate steps to delete that data and close the account with no refund issued.

We encourage parents and guardians to monitor their children's online activity and to use appropriate parental control software to prevent access to online gambling platforms such as kk8 online.

9Cross-Border Data Transfers

In the course of its operations, kk8 online may transfer members' personal data to servers located outside Malaysia — particularly in connection with the use of cloud computing services and partnerships with international game providers.

Any cross-border data transfers carried out by kk8 online are conducted in compliance with Malaysia's PDPA requirements, namely:

• The recipient country or territory has a level of data protection equivalent to or greater than that of Malaysia, or
• Data transfers are carried out under contractual protections that ensure an equivalent level of data protection is applied to all transferred data.

Kk8 online does not transfer member data to any country or entity classified as high-risk by Malaysian authorities without appropriate additional safeguards in place.

10Data Retention Period

KK8 Online retains members' personal data only for as long as necessary for the purposes set out in this Privacy Policy, or for as long as required under Malaysian law. The following are our data retention guidelines:

• Active account data: For as long as your kk8 online account remains active and for two years following account closure, unless a longer retention period is required by law.
• Financial transaction records: A minimum of seven years from the date of transaction, in line with Malaysian legal requirements governing financial records and anti-money laundering.
• Customer support communication records: Two years from the date of the last interaction.
• Security and audit logs: One year for routine logs, and up to seven years for logs relating to identified security incidents.
• KYC and identity verification records: A minimum of five years from the date of verification or account closure, whichever is later.

When data is no longer required, kk8 online will securely delete or anonymise it using methods that ensure it cannot be recovered.

11Amendments to This Privacy Policy

KK8 Online reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legislative updates, or developments in the services we offer.

When material changes are made to this Privacy Policy, kk8 online will notify members via:

• An in-app notification on the kk8 online mobile app upon your next login.
• A notification email sent to the email address registered on your account.
• Clear notice displayed on the kk8online.best homepage.

The "Updated" date at the top of this page will always reflect the date of the latest version of this Privacy Policy. Your continued use of the kk8 online platform after any amendment takes effect will be considered your acceptance of the revised Privacy Policy.

12Contact Us – Data Protection Officer

If you have any questions, concerns or complaints regarding this Privacy Policy or the way kk8 online handles your personal data, please reach out to us through the following channels:

• Email: support@kk8online.best (please include "Privacy Inquiry" in the email subject line)
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the kk8 online platform
• Target response time: We aim to respond to all privacy enquiries within three business days

If you are not satisfied with kk8 online's response to your privacy enquiry, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia — the regulatory body responsible for enforcing the PDPA in Malaysia.