kk8my Privacy Policy

1. Introduction

kk8my ("kk8my", "we", "us", "our") operates the online gaming platform accessible at kk8my.app. As the data controller for personal information collected through this platform, kk8my is committed to protecting the privacy and security of every member's personal data.

This Privacy Policy applies to all personal data collected from: (a) visitors to the kk8my website; (b) registered kk8my members, regardless of their location within Malaysia or elsewhere; and (c) individuals who contact kk8my support. This Policy forms part of the kk8my Terms & Conditions, which you accepted upon registration.

kk8my processes personal data in accordance with the principles of transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity — the same standards applied under international data protection frameworks. Malaysian players should note that kk8my also operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) principles where applicable to the collection of Malaysian residents' personal data.

2. Personal Data We Collect

kk8my collects personal data in three primary ways: information you provide directly, information generated by your use of the platform, and information received from third parties for verification and compliance purposes.

kk8my does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where identity document photographs are required as part of regulated KYC processes and then only retained for compliance purposes.

3. How We Use Your Personal Data

kk8my uses personal data collected from members and visitors for the following purposes:

• Account Registration & Management: To create, verify, and administer your kk8my member account, including processing your login credentials and account settings preferences
• Transaction Processing: To process deposits and withdrawals via Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, USDT TRC20, and 7-Eleven Cliqq, and to maintain accurate financial records of your kk8my account activity
• Identity & Age Verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with kk8my's licensing obligations and anti-money laundering requirements
• Platform Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, collusion, bonus abuse, money laundering, and other prohibited activities on the kk8my platform
• Regulatory Compliance: To meet kk8my's obligations under its international gaming licence, including record-keeping, reporting, and audit requirements
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling and to enforce responsible gaming tools including deposit limits, self-exclusion, and the 21+ age restriction
• Customer Support: To respond to your enquiries, resolve disputes, and provide ongoing support services via live chat and email
• Platform Improvement: To analyse aggregate usage patterns, improve the kk8my user interface, and develop new platform features
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications

4. Legal Basis for Processing

kk8my processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and kk8my — including account management, transaction processing, and the delivery of gaming services — is carried out on the basis that it is necessary for the performance of that contract
• Legal Obligation: Processing required to comply with kk8my's legal and regulatory obligations, including KYC, AML screening, and gaming licence compliance requirements
• Legitimate Interests: Processing carried out to pursue kk8my's legitimate business interests, including fraud prevention, platform security, and product improvement, where those interests are not overridden by your fundamental rights and freedoms
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit prior consent. You may withdraw consent for marketing communications at any time by contacting kk8my support

5. Data Sharing & Third Parties

kk8my does not sell your personal data to third parties. kk8my may share your personal data with the following categories of recipients where necessary and proportionate:

• Payment Processors: Licensed payment service providers who process your deposits and withdrawals, including e-wallet operators and Malaysian banking partners. These providers receive only the data necessary to process your specific transaction
• Identity Verification Providers: Licensed KYC and AML screening service providers engaged to verify your identity and screen your account against applicable sanctions and watchlists
• Game Providers: Third-party game studios (such as JILI, PG Soft, Evolution Gaming, and others) whose games are integrated into the kk8my platform. These providers may receive session data necessary to deliver the game experience and maintain their own compliance obligations
• Regulatory Authorities: kk8my's licensing authority and relevant law enforcement or regulatory bodies, where disclosure is required by law, court order, or regulatory directive
• Technology Service Providers: Cloud hosting, content delivery, and platform analytics providers engaged under data processing agreements that require them to process data only on kk8my's instructions

All third parties with whom kk8my shares personal data are required to process that data only for the purposes described, to maintain appropriate security standards, and to comply with applicable data protection laws.

6. Data Retention

kk8my retains personal data only for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods required by kk8my's gaming licence and applicable law:

• Account & Identity Data: Retained for the duration of your active kk8my membership and for a minimum of 5 years following account closure, in accordance with gaming licence and AML record-keeping requirements
• Transaction & Financial Records: Retained for a minimum of 7 years following each transaction, in line with financial record-keeping obligations
• Gaming Activity Logs: Retained for a minimum of 5 years for compliance audit purposes
• Communications Data: Live chat and email support records retained for 2 years, or longer where relevant to a pending dispute or regulatory matter
• Marketing Consent Records: Retained for the duration of consent and for 3 years following withdrawal of consent, as evidence of compliance

After the applicable retention period expires, kk8my will securely delete or anonymise your personal data in accordance with its data destruction procedures.

7. Cookies & Tracking Technologies

The kk8my website uses cookies and similar tracking technologies to deliver its services, maintain session security, and improve the platform experience. Cookies are small text files stored on your device when you access kk8my.

kk8my uses the following categories of cookies:

• Strictly Necessary Cookies: Required for core platform functions including your authenticated login session, security tokens, and load balancing. These cannot be disabled without impairing your ability to use kk8my
• Functional Cookies: Retain your preferences such as language settings and game lobby display options across sessions
• Analytics Cookies: Collect aggregated data on how visitors use the kk8my platform to help improve navigation, game discovery, and overall user experience. These are deployed only with your consent
• Security Cookies: Detect and prevent fraudulent activity, bot access, and unauthorised account access attempts

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use kk8my's core features.

8. Data Security

kk8my implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the kk8my platform
• Encrypted storage for sensitive personal data fields including identity documents and financial data
• Role-based access controls ensuring that kk8my staff can only access personal data necessary for their specific function
• Two-factor authentication (2FA) support for all kk8my member accounts
• Regular third-party security audits and penetration testing as required under kk8my's gaming licence
• Automated monitoring for suspicious access patterns and anomalous transaction activity

In the event of a personal data breach that poses a risk to your rights, kk8my will notify affected members and the relevant supervisory authority within the timeframes required by applicable law. kk8my maintains an incident response plan specifically for data security events.

9. Your Data Rights

As a kk8my member, you have the following rights in relation to your personal data, subject to applicable legal exemptions:

To exercise any of these rights, contact kk8my support with a written request identifying yourself and the specific right you wish to exercise. kk8my will respond within 30 days. Identity verification will be required before any data access or deletion request is fulfilled to protect against fraudulent access to your personal information.

10. Children & Minors

The kk8my platform is strictly intended for users aged 21 years and above. kk8my does not knowingly collect or process personal data from individuals under 21 years of age. If kk8my becomes aware that personal data has been submitted by or on behalf of a person under 21, that account will be immediately suspended, all data will be securely deleted, and any deposits associated with the underage account will be returned to the originating payment source.

If you are a parent or guardian and believe a minor has registered on kk8my using false age information, please contact kk8my support immediately. We treat underage access as a serious platform safety matter and will investigate and act promptly on all such reports.

11. International Data Transfers

kk8my's platform infrastructure and some of its third-party service providers operate in jurisdictions outside Malaysia. Where personal data is transferred to servers or processors located outside Malaysia, kk8my ensures that appropriate safeguards are in place — including contractual data processing agreements that impose equivalent data protection standards to those under which kk8my operates.

kk8my does not transfer personal data to countries or organisations that do not provide an adequate level of data protection without implementing appropriate transfer mechanisms as required by applicable data protection law.

12. Updates to This Privacy Policy

kk8my may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, kk8my will notify registered members via the email address on their account or through a prominent notification on the kk8my platform at least 7 days before the updated policy takes effect.

The version date displayed at the top of this document indicates when the Policy was last revised. Your continued use of the kk8my platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically.

13. Contact & Data Enquiries

For all privacy-related enquiries, data subject rights requests, or concerns about how kk8my handles your personal data, please contact kk8my through the following channel: