Privacy Policy — KK888

Introduction

KK888 (hereinafter referred to as "KK888", "we", "us", or "the Platform") is committed to protecting the privacy and personal data of all individuals who access or use our online sports betting and live casino services at kk888.casa. This Privacy Policy (hereinafter "the Policy") sets out in clear, transparent terms how we collect, use, store, share, and protect your personal information in accordance with applicable data protection laws and regulations.

This Policy applies to all current and former registered players, prospective users who visit the KK888 Platform without registering an account, and any individual who communicates with KK888 through our customer support channels, including live chat, email, and messaging platforms.

By accessing the KK888 Platform, creating an account, or submitting personal information through any KK888 channel, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you should not access or use the KK888 Platform.

This Policy should be read alongside the KK888 Terms & Conditions and Responsible Gambling Policy, both of which form part of the overall agreement governing your use of the Platform.

Definitions

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

Personal Data We Collect

KK888 collects personal data across several categories, depending on the nature of your interaction with the Platform. The following table summarises the categories of personal data we collect and the context in which each is gathered:

How We Collect Your Data

KK888 collects personal data through the following primary methods:

• Direct Submission: Data you voluntarily provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser data, session information, and interaction logs via cookies and similar tracking technologies.
• Payment Processors: Transactional data received from Malaysian payment partners including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and partner banks (Maybank, CIMB, Public Bank, Hong Leong Bank, RHB) in connection with deposit and withdrawal processing.
• Identity Verification Services: Where KK888 uses third-party KYC or identity verification service providers, data may be received or verified through these channels to support compliance obligations.
• Third-Party Sources: Where permitted by law, KK888 may receive supplementary information from fraud prevention databases, credit reference agencies, or regulatory bodies to verify identity or to detect and prevent financial crime.

Data Processing & Use

KK888 processes your personal data only for specific, documented purposes. The following table sets out how we use each category of data and the primary purpose for which it is processed:

Legal Basis for Processing

KK888 processes your personal data only where a valid legal basis exists. The following legal bases apply to our processing activities:

• Contractual Necessity: Processing required to perform the contract between KK888 and you as a registered player — including account operation, payment processing, and customer support. This is the primary legal basis for most core processing activities.
• Legal Obligation: Processing required for KK888 to comply with applicable law, including anti-money laundering regulations, age verification requirements, regulatory reporting obligations, and law enforcement requests from competent authorities.
• Legitimate Interests: Processing carried out to pursue KK888's legitimate business interests, including fraud prevention, platform security, abuse detection, and analytics — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where KK888 relies on your consent — for example, for the sending of promotional communications or for the use of non-essential cookies — you may withdraw that consent at any time by contacting customer support or adjusting your cookie preferences.

Data Sharing & Disclosure

KK888 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only for the purposes set out in this Policy:

• Payment Service Providers: Malaysian payment processors including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and RHB Bank — solely for the purpose of processing your deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party identity verification service providers engaged by KK888 to fulfil its regulatory obligation to verify player identity and age as part of the KYC process.
• Fraud Prevention and AML Service Providers: Specialist providers engaged to assist KK888 in detecting and preventing fraudulent activity, money laundering, and other financial crimes.
• Regulatory Authorities and Law Enforcement: Competent authorities where disclosure is required by applicable law, court order, regulatory instruction, or where KK888 has a legitimate obligation to report suspicious activity.
• Game Content Providers: Third-party gaming studios and live dealer platform providers who supply game content accessible through KK888 may receive limited technical and session data required for game delivery. No identity data is shared for marketing purposes.
• Professional Advisers: Legal, financial, and compliance advisers engaged by KK888 on a strictly confidential basis where necessary for the operation of the business.

International Data Transfers

Some of KK888's technology infrastructure, service providers, and business operations may be located outside of Malaysia. Where personal data is transferred to, stored in, or processed in a jurisdiction outside Malaysia, KK888 takes appropriate measures to ensure that the transfer is conducted in compliance with applicable data protection law and that the receiving entity provides an adequate level of data protection.

Such measures may include, but are not limited to: contractual data transfer agreements incorporating standard data protection clauses; verification that the recipient jurisdiction maintains an adequate level of protection; and technical and organisational security measures appropriate to the nature of the data being transferred.

If you have specific questions about the jurisdictions to which your personal data may be transferred or the safeguards in place, you may contact KK888's customer support team using the contact details set out in Section 15 of this Policy.

Data Retention

KK888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required to meet our legal and regulatory obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised in a manner that prevents reconstruction of the original data. Where data cannot be immediately deleted due to technical constraints, it will be restricted from active processing until deletion is feasible.

Cookies & Tracking Technologies

KK888 uses cookies and similar tracking technologies on the Platform to provide core functionality, enhance the user experience, and support security and analytics operations. The following categories of cookies are used on the KK888 Platform:

• Strictly Necessary Cookies: Essential for the basic operation of the Platform. These cookies enable core functions such as session management, secure login, and navigation. They cannot be disabled without affecting Platform functionality. No consent is required for these cookies.
• Functional Cookies: Used to remember your preferences and settings — such as preferred language, display preferences, and time zone settings — to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregated information about how players use the Platform — including pages visited, time spent, and navigation paths — to help KK888 understand usage patterns and improve the Platform. Analytics data is anonymised where technically feasible.
• Security and Fraud Detection Cookies: Used to detect and prevent fraudulent activity, unauthorised access attempts, and other security threats on the Platform. These cookies are essential for maintaining the integrity of player accounts and financial transactions.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies — particularly strictly necessary and security cookies — may impair your ability to use the Platform. Instructions for managing cookies are available in the help section of most major browsers.

Data Security

KK888 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and KK888 servers — the same standard used by Malaysian banks for online banking services.
• Encrypted storage of all sensitive personal and financial data within KK888's server infrastructure, with access restricted to authorised personnel only.
• Role-based access controls and multi-factor authentication for all internal systems containing personal data, with comprehensive audit logging of all access events.
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform's infrastructure and application layer.
• Formal data breach detection, notification, and response procedures, with obligations to notify affected players and, where required, regulatory authorities within applicable legal timeframes.

While KK888 takes all reasonable technical and organisational precautions to protect your personal data, no system of data transmission or storage over the internet can be guaranteed as completely secure. Players are responsible for maintaining the security of their own login credentials and are advised to use strong, unique passwords and to enable two-factor authentication on their accounts.

Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights in respect of the personal data that KK888 holds about you. To exercise any of these rights, please contact KK888 customer support using the details in Section 15.

KK888 aims to respond to all data subject rights requests within 30 calendar days of receipt. In complex or high-volume cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it. KK888 will not charge a fee for processing standard rights requests unless the request is manifestly unfounded or excessive.

Minors & Age Verification

KK888 strictly prohibits the use of its Platform by individuals under the age of 21 years. We do not knowingly collect, use, or store personal data from minors. Age verification is a mandatory component of the KK888 KYC process for all registered players, and accounts will be suspended pending verification where underage use is reasonably suspected.

If KK888 becomes aware that it has inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data from our records and to close the associated account. Any funds deposited by an underage player will be returned via the original payment method following verification of the refund recipient's identity.

Parents and guardians who believe that their minor child has registered an account on the KK888 Platform are encouraged to contact our customer support team immediately using the details set out in Section 15 below.

Amendments to This Policy

KK888 reserves the right to update, revise, or replace this Privacy Policy at any time. Material changes to this Policy — including changes to the categories of data collected, the purposes of processing, or the rights available to data subjects — will be communicated to registered players via the email address on record and by means of a prominent notice on the KK888 Platform.

The effective date of any revision will be clearly stated at the top of the updated Policy document. Your continued use of the KK888 Platform following the effective date of any amendment constitutes your acknowledgement of and consent to the revised Policy. If you do not agree to the updated Policy, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

We recommend that all registered players review this Privacy Policy periodically to remain informed of how KK888 collects and uses personal data. The current version of this Policy is always accessible at kk888.casa/privacy-policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by KK888, please contact our customer support team through the following channels. All privacy-related enquiries are handled with priority and in strict confidence.