Privacy Policy k888 — Member Personal Data Protection

1Information We Collect

This Privacy Policy describes how k888 collects, uses, and protects your personal information. By registering for or using the k888 platform, you agree to the practices described in this document. We only collect information that is strictly necessary for clearly stated purposes.

There are two main categories of information we collect from members:

A. Information You Provide Directly

• Full name as it appears on your identity document
• Date of birth for age verification purposes (18 and above)
• Active email address used for account communications
• Mobile number for two-factor authentication and notifications
• Current residential address for legal compliance purposes
• Bank account or digital wallet details for processing deposits and withdrawals
• Copies of identity documents (national ID, passport) for the KYC process
• Bank statements or other supporting documents if requested during an investigation

B. Information Collected Automatically

• IP address and general location information of your device
• Device type, operating system, and web browser version used
• Session activity logs including login time, logout time, and actions taken within the platform
• Game usage data including game type, frequency, and session duration
• Transaction data including amounts, payment methods, and dates
• Session cookies and tracking data to enhance the user experience

2How We Use Your Data

K888 uses collected personal information solely for legitimate and transparent purposes. We will not use your data for any purpose other than those stated below without first obtaining your separate consent.

For marketing and promotional purposes, you will only receive communications from k888 if you have consented to receive them during registration or later through your account settings. You may unsubscribe from marketing communications at any time with no effect on your membership.

3Information Sharing

K888 takes member confidentiality seriously. We do not sell, rent, or share your personal data with third parties for their own marketing purposes. However, there are limited situations where sharing information is necessary and legally permitted.

Third Parties That May Receive Your Information

• Payment providers: Transaction information required to securely process your deposits and withdrawals via FPX, digital wallets, or your chosen payment method.
• KYC service providers: Identity information required to carry out legally mandated identity verification.
• Technology providers: Companies providing technical infrastructure, hosting, and cybersecurity services for the k888 platform, subject to strict confidentiality agreements.
• Authorities: Law enforcement agencies, regulatory bodies, or courts when lawfully required under applicable law.
• Audit partners: Independent auditors appointed to ensure compliance and operational transparency of the platform.

4Cookies & Tracking Technologies

K888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you on subsequent visits and deliver a more personalised experience.

Types of Cookies Used by k888

• Essential cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled as they are critical to platform operation.
• Performance cookies: Collects information about how you use the platform, such as your most frequently visited pages. This data is used to improve platform functionality and does not personally identify you.
• Functional cookies: Saves your preferences such as language, display settings, and information you have entered during a session so you do not need to re-enter them.
• Analytics cookies: Helping us understand aggregate platform usage patterns for continuous improvement purposes.

5Data Security

Protecting your personal data is an absolute priority for k888. We implement a comprehensive range of technical and organisational security measures to ensure your information remains safe from unauthorised access, disclosure, alteration, or destruction.

• Data encryption in transit using TLS 1.3 protocol and AES-256 encryption for stored data
• Two-factor authentication (2FA) is available and encouraged for all members to protect their accounts
• Round-the-clock security monitoring by k888's dedicated cybersecurity team
• Role-based access control (RBAC) ensures staff can only access data required for their specific duties
• Regular third-party penetration testing by independent parties to identify vulnerabilities
• A tested incident response plan to ensure rapid action in the event of any security threat
• Regular encrypted data backups stored at separate locations for disaster recovery

6Your Rights

As a k888 member, you have clearly defined rights regarding your personal data. k888 respects and facilitates the exercise of these rights. Below are your key rights and how to use them.

To exercise any of the rights above, please contact the k888 support team by email at [email protected]. We will process your request within 30 business days.

7Data Retention & Deletion

K888 retains your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. Retention periods vary depending on the type of data and relevant legal requirements.

• Active account data: Retained for the duration of your active k888 membership plus any period required by law following account closure.
• Financial transaction records: Retained for a minimum of 5 years after each transaction, in compliance with anti-money laundering legal requirements.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in line with international industry standards.
• Activity and security logs: Retained for 12 months for security and fraud detection purposes.
• Customer support communications: Retained for 3 years for service reference and improvement purposes.

Once the retention period has expired, your data will be securely deleted or permanently anonymised so that it can no longer be associated with you.

8International Data Transfers

As k888 operates as a global online platform, your personal data may be transferred to and processed in countries other than Malaysia in certain situations. This includes when we engage technology service providers or infrastructure providers operating across multiple locations.

K888 ensures that any international data transfers are carried out with adequate safeguards in place. The protective measures we use include:

• Ensuring that recipient countries maintain a comparable level of data protection
• Using approved standard contractual clauses to safeguard data during transfers
• Conducting risk assessments on every data transfer to ensure ongoing security

9Children's Privacy

The k888 platform is strictly restricted to individuals aged 18 and above. k888 does not knowingly collect, use, or store any personal information from individuals under the age of 18.

If we find that we have inadvertently collected information from a minor, we will take immediate action to delete that information and close the associated account. Our age verification process at registration is our primary measure to prevent access by minors.

10Privacy Policy Changes

K888 reserves the right to update or amend this Privacy Policy from time to time in line with changes in law, technology, or our business practices. Any material changes will be communicated to you via your registered email or an in-platform notification at least 14 days before those changes take effect.

You are encouraged to review this Privacy Policy periodically to stay informed about how we protect your information. The "Last Updated" date at the top of this page will always reflect the latest version of this document.

Your continued use of the k888 platform following any changes to this Privacy Policy will be considered your acceptance of those changes. If you do not agree with any changes, you have the right to close your account and discontinue use of the platform.

11Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how k888 handles your personal data, our team is ready to assist. We are committed to responding to every enquiry in a timely manner.

You can reach the k888 Data Privacy Officer via:

• Email: [email protected]
• Live support: Through the live chat feature within the k888 platform
• FAQ: Browse our FAQ page for instant answers to frequently asked questions

We will endeavour to resolve every complaint or enquiry fairly and transparently. If you feel we have not addressed your concerns satisfactorily, you have the right to refer the matter to the relevant data protection authority.