kk8my Privacy Policy – How We Handle Your Data

kk8my operates the online casino and sports betting platform accessible at kk8my.win. For the purposes of this Privacy Policy, kk8my acts as the data controller in respect of personal data collected from registered players and platform visitors.

kk8my is licensed by an international gaming authority and is subject to both the data protection provisions of its licensing jurisdiction and, where applicable, the Personal Data Protection Act 2010 (PDPA) of Malaysia in respect of data processing activities relating to Malaysian data subjects.

Questions, requests, or complaints relating to this Privacy Policy should be directed to the kk8my Data Protection team at [email protected] — this address is provided as plain text only and is not a clickable link.

kk8my collects personal data in the categories set out in the table below. The data collected depends on the nature of your interaction with the platform.

kk8my does not collect special category data (as defined under applicable data protection law, including health data, biometric data for identification purposes, or data revealing racial or ethnic origin) except where specifically required by law or explicitly consented to by you.

kk8my collects personal data through the following means:

Data you provide directly when registering an account, completing KYC verification, making deposits or withdrawals, redeeming bonuses, contacting customer support, or updating your account settings. This is the primary source of personal data held by kk8my.

Technical data — including IP addresses, device identifiers, browser type, and session activity — is collected automatically each time you access the kk8my platform. This data is collected using server logs, cookies, and similar tracking technologies as described in Section 6 of this Policy.

kk8my may receive personal data from third-party identity verification providers and payment processors engaged to assist with KYC compliance, fraud detection, and transaction processing. Data received from third-party sources is used only for the specific purpose for which it was shared and is subject to appropriate data sharing agreements.

kk8my processes personal data only where there is a lawful basis to do so. The principal purposes for which kk8my uses your personal data are:

• Contract performance: To create and manage your account, process deposits and withdrawals, credit bonuses, and provide the gaming services you have requested;
• Legal obligation: To verify your identity and age (21+ requirement), comply with AML and counter-terrorism financing regulations, and fulfil reporting obligations to our licensing authority;
• Legitimate interest: To detect and prevent fraud, protect platform security, improve the kk8my product, analyse gaming patterns for responsible gaming purposes, and manage customer relationships;
• Consent: To send you marketing communications (email newsletters, promotional offers, bonus alerts) where you have opted in. You may withdraw marketing consent at any time from your account settings.

kk8my does not sell your personal data. We share personal data with third parties only in the following circumstances:

• Payment processors: Your financial data is shared with the payment service providers necessary to process your deposits and withdrawals (e.g., FPX operators, Touch 'n Go, Boost, GrabPay, DuitNow, and USDT network processors). These providers process data under their own privacy policies and are subject to contractual data protection obligations with kk8my;
• Identity verification providers: Personal identification documents and data may be shared with third-party KYC and AML verification service providers engaged by kk8my to fulfil its legal obligations;
• Game providers: Game studios and live casino providers (such as Evolution Gaming and Pragmatic Play) may receive gameplay session data in order to deliver games and resolve disputes;
• Legal and regulatory authorities: kk8my will disclose personal data to law enforcement, regulators, or our licensing authority where required by applicable law, a valid court order, or where kk8my reasonably believes disclosure is necessary to protect the safety of any person or to report suspected criminal activity;
• Professional advisers: Legal, financial, and compliance advisers engaged by kk8my may access personal data as necessary and subject to professional confidentiality obligations.

All third parties with whom kk8my shares personal data are required to handle that data securely and in accordance with applicable data protection law. kk8my does not permit third-party service providers to use player data for their own marketing purposes.

The kk8my platform uses cookies and similar technologies to operate certain essential platform functions and to understand how players use the site. The types of cookies used are:

These cookies are essential for the kk8my platform to function correctly, including maintaining your login session, remembering your language preferences, and ensuring secure authenticated access. These cookies cannot be disabled without affecting platform functionality.

These cookies collect anonymised information about how visitors use the kk8my website, including which pages are visited most frequently, session duration, and navigation paths. This data is used to improve platform performance and user experience. These cookies do not identify individual users.

These cookies remember your preferences and settings — such as your preferred game lobby view, deposit method, or promotional banner dismissals — to provide a more personalised experience on return visits.

You may control cookies through your browser settings. Note that disabling certain cookies may impair the functionality of the kk8my platform, including the ability to maintain a login session across pages.

kk8my retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and contractual obligations. The following retention periods apply as a guide:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with AML regulatory requirements;
• Transaction records: Retained for a minimum of 5 years from the date of the transaction;
• Support communications: Retained for 3 years following resolution of the relevant inquiry or complaint;
• Marketing preference records: Retained until you withdraw consent or for 2 years following your last platform interaction, whichever is earlier;
• Technical / log data: Generally retained for 12 months from collection.

When personal data is no longer required for any legitimate purpose, kk8my will securely delete or anonymise it in accordance with our data disposal procedures.

kk8my implements a layered security framework to protect personal data against unauthorised access, accidental loss, and unlawful destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and kk8my servers;
• AES-256 encryption for personal data stored at rest in kk8my databases;
• Role-based access controls restricting personal data access to authorised personnel with a genuine operational need;
• Multi-factor authentication required for all kk8my staff accounts with access to player data systems;
• Regular penetration testing and vulnerability assessments by independent security specialists;
• Incident response procedures for the detection, containment, and notification of data security breaches.

As a data subject, you have the following rights in respect of personal data held by kk8my, subject to applicable legal limitations and regulatory retention obligations:

• Right of access: You may request a copy of the personal data kk8my holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of personal data where it is no longer necessary for any legitimate purpose, subject to legal retention requirements;
• Right to restriction: You may request that processing of your personal data be restricted in certain circumstances, for example while a dispute about accuracy is resolved;
• Right to object: You may object to processing of your personal data on grounds relating to your particular situation where kk8my relies on legitimate interest as the legal basis;
• Right to withdraw consent: Where processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact kk8my at [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 days. Where requests are complex or numerous, the response period may be extended by up to a further 30 days, with prior notice.

kk8my employs age verification procedures at registration and at withdrawal to detect and prevent underage access. If kk8my becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted promptly and the associated account will be closed.

If you are the parent or guardian of a minor and believe that your child has registered on the kk8my platform, please contact our support team immediately at [email protected] so that the account can be investigated and closed.

kk8my reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our platform services. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where changes are material — for example, changes to the categories of data collected, the introduction of new processing purposes, or changes to data sharing arrangements — kk8my will notify registered players via email to their registered address at least 14 days before the revised Policy takes effect. For non-material changes, continued use of the platform following the update constitutes acceptance of the revised Policy.

For all privacy-related queries, data access requests, corrections, deletion requests, or complaints, contact the kk8my Data Protection team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week from any page on the kk8my.win platform
• Response time: Acknowledgement within 5 business days; substantive response within 30 days

If you are dissatisfied with kk8my's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. Malaysian data subjects may contact the Personal Data Protection Department (JPDP) of Malaysia for guidance.

This Privacy Policy was last updated in June 2026. It supersedes all prior versions of the kk8my Privacy Policy.