1.Introduction
kk8my1 ("kk8my1", "we", "us", "our") operates the online gaming platform accessible at kk8my1.app. This Privacy Policy describes how kk8my1 collects, processes, stores, and protects the personal information of individuals who register accounts, visit the Platform, or interact with kk8my1's services.
kk8my1 is committed to protecting the privacy and personal data of all users in accordance with applicable data protection legislation and international best practices for online gaming platforms. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall framework governing your use of the kk8my1 Platform.
By registering an account or otherwise using the kk8my1 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.
2.Personal Data We Collect
kk8my1 collects the following categories of personal data from users of the Platform:
2.1 Identity & Registration Data
- Full legal name as per government-issued identification
- Date of birth (for age verification — 21+ requirement)
- Malaysian IC (MyKad) number or passport number
- Nationality and country of residence
- Username and encrypted password credentials
2.2 Contact Data
- Email address (primary account communication channel)
- Mobile phone number (used for 2FA and account recovery)
- Residential address (required for KYC verification)
2.3 Financial Data
- Payment method details: e-wallet account identifiers (Touch n Go eWallet, Boost), bank account numbers (Maybank, CIMB, Public Bank), card numbers (Visa/Mastercard, stored as masked tokens), and USDT wallet addresses
- Transaction records: deposit amounts, withdrawal amounts, dates, and statuses
- Balance history and gaming transaction logs
2.4 Technical & Usage Data
- IP address and approximate geolocation derived from IP
- Device type, operating system, and browser information
- Session logs, login timestamps, and session duration
- Pages visited, games played, and features accessed on the Platform
- Cookies and similar tracking identifiers (see Section 9)
2.5 Communications Data
- Support ticket content and live chat transcripts
- Email correspondence with the kk8my1 support team
- Survey responses and feedback submitted voluntarily
2.6 KYC Documentation
- Copies of government-issued identity documents (MyKad, passport)
- Proof of address documents where requested
- Selfie photographs submitted for identity verification purposes
3.How Personal Data Is Collected
kk8my1 collects personal data through the following means:
- Direct submission: Information you provide during account registration, KYC verification, deposit and withdrawal requests, support contact, and survey participation.
- Automated collection: Technical and usage data collected automatically when you access the Platform via cookies, server logs, and analytics tools.
- Third-party sources: Identity verification data received from KYC verification partners; transaction data received from payment processors and e-wallet providers; fraud detection signals from third-party security services.
- Public sources: Information available in public records where relevant to legal compliance obligations, such as sanctions screening databases.
4.How We Use Your Personal Data
kk8my1 uses the personal data described above for the following purposes:
- Account management: Creating and maintaining your kk8my1 account, authenticating your identity on login, and enabling access to all Platform features.
- KYC & age verification: Verifying that you meet the 21+ age requirement and satisfy identity verification requirements before enabling real-money activity.
- Payment processing: Processing deposits and withdrawals via your chosen payment method, including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, Visa/Mastercard, and USDT.
- Service delivery: Operating and improving the Platform, including live casino, slots, and sportsbook services.
- Legal & regulatory compliance: Meeting obligations under applicable anti-money laundering (AML) regulations, know your customer (KYC) requirements, and gaming authority regulations, including the retention of records as required by law.
- Responsible gaming: Monitoring account activity to identify patterns consistent with problem gambling; applying player-set limits and self-exclusion requests; conducting proactive outreach where responsible gaming concerns are identified.
- Fraud prevention & security: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, and other prohibited conduct.
- Customer support: Responding to support queries, complaints, and dispute resolution requests.
- Communications: Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have consented, promotional communications about kk8my1 offers and new features.
- Analytics & platform improvement: Analysing usage patterns in aggregate to improve Platform performance, user experience, and content relevance.
5.Legal Basis for Processing
kk8my1 processes personal data on the following legal bases:
- Contract performance: Processing necessary to provide the services you have contracted for by registering an account and agreeing to the kk8my1 Terms & Conditions.
- Legal obligation: Processing required to comply with applicable AML laws, KYC requirements, gaming authority regulations, and any lawful order from a competent authority.
- Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, and Platform analytics, where these interests are not overridden by your data protection rights.
- Consent: Processing for optional promotional communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6.Data Sharing & Disclosure
kk8my1 does not sell personal data to unaffiliated third parties. kk8my1 may share personal data with the following categories of recipient, strictly for the purposes described in this Policy:
- KYC and identity verification providers: Third-party services that assist in verifying identity documents and age in accordance with kk8my1's compliance obligations.
- Payment processors and e-wallet operators: Including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and Visa/Mastercard acquiring banks, as necessary to process financial transactions.
- Game providers: Third-party game studios and live casino operators whose games are accessible via the kk8my1 Platform. Game providers may receive session and transaction data necessary to operate their games and detect fraud.
- Fraud prevention and security services: Third-party providers of anti-fraud, anti-money laundering screening, and cybersecurity services.
- Regulatory and law enforcement authorities: Where kk8my1 is required to disclose personal data by law, court order, or regulatory requirement, or where disclosure is necessary to protect the rights and safety of kk8my1 or its users.
- Professional advisers: Lawyers, auditors, and other professional advisers where necessary in connection with legal proceedings, compliance audits, or corporate transactions.
All third-party processors engaged by kk8my1 are subject to data processing agreements that require them to process personal data only on kk8my1's documented instructions and to implement appropriate security measures.
7.Data Retention
kk8my1 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the duration of the account relationship and for any subsequent period required to comply with legal obligations. Specifically:
- Account and KYC data is retained for a minimum of five (5) years following account closure, as required by applicable AML and gaming regulations.
- Transaction records are retained for a minimum of five (5) years following each transaction.
- Support communications are retained for up to three (3) years following resolution of the relevant query.
- Technical and usage data collected via cookies and analytics is retained for up to twenty-four (24) months, depending on the specific data type.
On expiry of the applicable retention period, personal data is securely deleted or anonymised. Where deletion is not technically feasible (for example, data held in backup archives), kk8my1 ensures such data is isolated from further processing until it can be deleted.
8.Data Security
kk8my1 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include:
- SSL/TLS encryption for all data transmitted between your device and the kk8my1 Platform.
- Encryption of sensitive data fields (including payment method tokens and identity document data) at rest.
- Multi-factor authentication (2FA) available to all account holders for login security.
- Role-based access controls limiting internal staff access to personal data on a need-to-know basis.
- Regular security audits, penetration testing, and vulnerability assessments.
- Incident response procedures for detecting, assessing, and notifying affected individuals of any personal data breach.
Notwithstanding these measures, no method of data transmission over the internet or electronic storage is completely secure. kk8my1 cannot guarantee the absolute security of your personal data. You are responsible for maintaining the security of your own account credentials and for notifying kk8my1 immediately of any suspected unauthorised access to your account.
9.Cookies & Tracking Technologies
The kk8my1 Platform uses cookies and similar tracking technologies to operate the Platform, personalise your experience, and gather analytics data. The categories of cookies used include:
- Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state and security cookies. These cannot be disabled without affecting core Platform functionality.
- Functional cookies: Remember your preferences such as language settings, responsible gaming limits display, and game lobby layout preferences.
- Analytics cookies: Collect aggregated data about how users interact with the Platform, used to improve performance and content. kk8my1 uses analytics tools that process this data in a privacy-preserving manner.
- Marketing cookies: Used only where you have explicitly consented, to deliver relevant promotional content about kk8my1 features and offers on the Platform.
You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled.
10.Your Data Rights
Subject to applicable law and kk8my1's legal obligations, you have the following rights in respect of your personal data held by kk8my1:
- Right of access: Request a copy of the personal data kk8my1 holds about you.
- Right to rectification: Request correction of inaccurate or incomplete personal data.
- Right to erasure: Request deletion of personal data where retention is no longer necessary for the purposes collected, subject to kk8my1's legal retention obligations.
- Right to restrict processing: Request that kk8my1 restrict the processing of your personal data in certain circumstances.
- Right to data portability: Receive a structured, machine-readable copy of personal data you have provided to kk8my1, where processing is based on consent or contract.
- Right to object: Object to processing based on legitimate interests, including direct marketing.
- Right to withdraw consent: Withdraw any consent previously given for optional processing (such as marketing communications) at any time without affecting prior lawful processing.
To exercise any of these rights, contact the kk8my1 data team at [email protected]. kk8my1 will respond to requests within 30 days. Identity verification may be required before fulfilling a data request.
11.Minors
The kk8my1 Platform is strictly for individuals aged 21 years and above. kk8my1 does not knowingly collect personal data from persons under the age of 21. Age is verified through mandatory KYC document checks at registration. If kk8my1 becomes aware that personal data has been collected from a person under 21, such data will be deleted promptly and the account closed. Parents or guardians who believe a minor has registered on the kk8my1 Platform should contact [email protected] immediately.
12.International Data Transfers
As an internationally operating online gaming platform, kk8my1 may transfer personal data to countries outside Malaysia in connection with the services of third-party processors (including game providers, KYC vendors, and payment processors) whose infrastructure is located in other jurisdictions. Where such transfers occur, kk8my1 ensures that appropriate safeguards are in place — including contractual protections — to ensure the data receives an equivalent level of protection to that afforded in Malaysia.
13.Changes to This Privacy Policy
kk8my1 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via email and/or a prominent notice on the Platform, with a minimum of seven (7) days' notice prior to the changes taking effect. The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision. Your continued use of the kk8my1 Platform following the effective date of any revision constitutes acceptance of the updated Policy.