Privacy Policy

1. Introduction

kk88 ("we", "us", "our" or the "Platform") operates the online gaming and entertainment platform accessible at kk88.casa. In providing our services to registered members and visitors, we necessarily collect, process and store certain categories of personal data.

This Privacy Policy (the "Policy") sets out the basis on which personal data is collected from you, or that you provide to us, will be processed by k88. It applies to all users of the k88 platform, including registered account holders and unregistered visitors browsing the site.

This Policy should be read alongside the k88 Terms & Conditions, which govern your overall use of the platform and are incorporated herein by reference. By continuing to use the k88 website or by registering an account, you acknowledge that you have read and understood this Policy.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

3. Data We Collect

k88 collects personal data across several categories, depending on the nature of your interaction with the platform. The categories include:

3.1 Identity and Registration Data

This data is collected during account registration and is required to verify your identity, confirm that you meet the 21+ age requirement and comply with applicable KYC obligations.

3.2 Financial and Payment Data

Payment data is collected to process deposits and withdrawals via supported Malaysian payment methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong and supported cryptocurrency networks.

3.3 Technical and Usage Data

Technical data is collected automatically when you visit k88.casa and is used to maintain platform stability, detect suspicious activity and improve the mobile-first experience for players across Malaysia.

3.4 Communications Data

Communications between you and the k88 support team may be recorded and retained for quality assurance, dispute resolution and regulatory compliance purposes.

4. How Data Is Collected

k88 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, submitting a withdrawal request or contacting customer support.
• Automated collection: Technical and usage data gathered automatically through cookies, log files and similar tracking technologies when you access the platform.
• Payment partners: Transaction confirmation data received from Malaysian payment partners including DuitNow, FPX, Touch 'n Go eWallet, Boost and supported banks when processing deposits or withdrawals.
• Identity verification services: Data returned by third-party KYC and identity verification providers used to confirm document authenticity and age eligibility.
• Fraud prevention systems: Risk signals and device fingerprint data collected by fraud detection tools to protect both the platform and its users.

5. Purposes of Processing

kk88 processes personal data for the following specific, legitimate purposes:

• Account management: Creating, maintaining and securing registered member accounts on the k88 platform.
• Identity verification: Confirming that all registered players are aged 21 and above and that account details are accurate and genuine.
• Payment processing: Facilitating deposits and withdrawals through supported Malaysian payment methods and cryptocurrency channels.
• Fraud and security: Detecting, investigating and preventing fraudulent transactions, account takeovers and money laundering activity.
• Legal compliance: Meeting obligations under applicable anti-money laundering, data protection and gaming regulatory frameworks.
• Customer support: Responding to account queries, payment issues and dispute resolution requests submitted by players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and across Malaysia.
• Platform improvement: Analysing usage patterns to improve navigation, load speed and the overall mobile experience.
• Responsible gambling: Monitoring for patterns associated with problem gambling and applying appropriate safeguards where indicated.

6. Legal Basis for Processing

k88 relies on the following legal bases when processing personal data:

• Contractual necessity: Processing required to fulfil the obligations set out in the k88 Terms and Conditions, including account creation, payment processing and bonus management.
• Legal obligation: Processing required to comply with applicable anti-money laundering, KYC and identity verification requirements.
• Legitimate interests: Processing carried out for fraud prevention, platform security, technical improvement and responsible gambling monitoring, where such interests are not overridden by the rights and freedoms of the data subject.
• Consent: Where consent is the applicable basis, it will be sought clearly and separately. Consent may be withdrawn at any time, although withdrawal will not affect the lawfulness of processing carried out prior to withdrawal.

7. Sharing of Personal Data

kk88 does not sell, rent or trade personal data to third parties for their own marketing purposes. Personal data may be shared with the following categories of recipients only where necessary and under appropriate data protection safeguards:

• Payment processors: Malaysian banking partners, e-wallet operators (such as Touch 'n Go eWallet, Boost and GrabPay) and DuitNow / FPX infrastructure providers, strictly to process financial transactions.
• Identity verification providers: Third-party KYC services used to authenticate government-issued documents and confirm player age eligibility.
• Game providers: Licensed game studios that power the k88 casino, live dealer and sports betting sections, where session and account identifiers are shared for game integrity purposes.
• Fraud prevention services: Specialist providers that analyse device and behavioural signals to detect fraudulent or abusive activity.
• Legal and regulatory authorities: Competent authorities, law enforcement agencies or courts where k88 is legally required to disclose personal data.
• Professional advisers: Legal, audit and compliance professionals bound by confidentiality obligations where disclosure is necessary for k88's legitimate operational and legal interests.

All third parties with whom personal data is shared are required to handle that data in a manner consistent with this Policy and applicable data protection principles.

8. Data Retention

kk88 retains personal data only for as long as is necessary for the purposes for which it was collected, and as required by applicable legal, regulatory and compliance obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with k88's internal data lifecycle procedures.

9. Data Security

kk88 implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These measures include, but are not limited to:

• Encryption of data in transit using industry-standard TLS protocols;
• Access controls limiting staff access to personal data on strict need-to-know basis;
• Secure storage of KYC documentation and financial records;
• Regular security assessments and monitoring of platform infrastructure;
• Fraud detection systems that flag anomalous account behaviour for investigation.

Despite these measures, no internet-based platform can guarantee absolute security. Players are reminded to safeguard their own login credentials and to contact the kk88 support team immediately if they suspect unauthorised access to their account.

10. Cookies and Tracking Technologies

kk88 uses cookies and similar tracking technologies to support the operation of the platform and improve user experience. The categories of cookies used are as follows:

• Strictly necessary cookies: Essential for platform functionality including session management, login authentication and security operations. These cannot be disabled without impairing platform use.
• Functional cookies: Used to remember user preferences such as language settings and to maintain session continuity across pages.
• Analytical cookies: Used to collect aggregated, anonymised data about how visitors interact with k88.casa, enabling platform performance analysis and improvement.
• Fraud prevention cookies: Used to detect and investigate potentially fraudulent sessions by identifying device characteristics and behavioural patterns.

11. Your Rights

Subject to applicable data protection law and the specific circumstances of your request, you have the following rights in relation to your personal data held by kk88:

• Right of access: You may request a copy of the personal data k88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overiding legal obligations.
• Right to restrict processing: You may request that k88 restrict the processing of your data in certain circumstances, such as where accuracy is contested.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, subject to k88's overiding grounds for such processing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the kk88 support team through the account interface. k88 will respond to verifiable data rights requests within a reasonable timeframe. Identity verification may be required before a request is processed. Certain retention obligations under applicable law may limit k88's ability to comply with erasure requests in full.

12. Protection of Minors

kk88 is strictly an adults-only platform. Our services are available exclusively to individuals aged 21 and above. We do not knowingly collect personal data from any person under the age of 21.

Age verification is applied during the account registration and KYC process. Where k88 becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, that account will be suspended immediately and all associated personal data will be deleted or anonymised in accordance with applicable law.

13. International Data Transfers

In the course of providing services, personal data may be transferred to and processed in countries outside Malaysia, including by game providers, verification services and other operational partners. Where such transfers occur, k88 takes reasonable steps to ensure that appropriate safeguards are in place to protect transferred data, including through data processing agreements with relevant third parties.

14. Amendments to This Policy

k88 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated via a notice on the platform or through the registered account contact details. The date of last review is displayed at the top of this document.

Continued use of the k88 platform following notification of a material amendment constitutes acceptance of the revised Policy. Players are encouraged to review this document periodically.

15. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by kk88, please contact our support team. We will endeavour to respond promptly and in accordance with applicable data protection requirements.