Privacy Policy — KClub88

This Privacy Policy (hereinafter referred to as the "Policy") is issued by KClub88 (hereinafter referred to as "KClub88", "We", "Us", or "Our") and governs the collection, processing, storage, and disclosure of personal data in connection with your use of the KClub88 platform accessible at kclub88.cam (hereinafter referred to as the "Platform").

KClub88 operates as Malaysia's online casino and sports betting platform, serving registered members across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia. The handling of your personal data is taken seriously, and this Policy sets out in plain, structured terms exactly what information we hold, on what basis, and for what purpose.

By registering an Account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact us to arrange the closure of your Account.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and digital identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, whether by automated means or otherwise, including collection, recording, storage, retrieval, use, disclosure, and deletion.
• "Data Controller" means KClub88, the entity that determines the purposes and means of Processing of Personal Data collected through the Platform.
• "Member" or "User" means any individual who has registered an Account on the KClub88 Platform.
• "Account" means the registered member account held on the KClub88 Platform.
• "KYC" refers to Know Your Customer — the identity and address verification process required of all Members prior to their first withdrawal.
• "Cookie" means a small data file placed on a user's device by a website to record preferences and session information.
• "Third Party" means any entity other than the Member and KClub88.

KClub88 collects the following categories of Personal Data from Members and Platform visitors:

KClub88 applies the principle of data minimisation — we collect only the Personal Data that is necessary for the stated purposes, and we do not request or retain information beyond what is required.

KClub88 collects Personal Data through the following channels:

• Direct Submission: Information you voluntarily provide during Account registration, KYC document upload, deposit and withdrawal transactions, live chat support interactions, and contact form submissions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, server logs, and session tracking technologies.
• Third-Party Payment Processors: Transaction confirmation data received from payment service providers when you deposit or withdraw via FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or cryptocurrency networks.
• Identity Verification Services: Where KClub88 engages third-party KYC verification providers to supplement or validate identity documents submitted by Members, data may be cross-referenced with authoritative databases.
• Public Sources: In limited cases, and solely for AML or fraud-prevention purposes, KClub88 may cross-reference your information against publicly available records or regulatory watchlists.

KClub88 processes Personal Data one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between KClub88 and the Member — including account management, deposit and withdrawal processing, and delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, KYC verification mandates, and age-verification requirements.
• Legitimate Interests: Processing necessary for KClub88's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gambling monitoring — provided such interests are not overridden by the rights and freedoms of the Member.
• Consent: Where KClub88 relies on your consent to process data (for example, for optional marketing communications), you retain the right to withdraw that consent at any time without prejudice to the lawfulness of prior processing.

KClub88 uses your Personal Data for the following purposes:

• To create, maintain, and manage your Member Account on the Platform;
• To verify your identity and age (21+ requirement) in compliance with KYC obligations;
• To process deposits and withdrawals in MYR via your chosen payment method;
• To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct;
• To provide 24/7 customer support in English, Bahasa Melayu, and Mandarin;
• To communicate account-related notifications, security alerts, and service updates;
• To administer and settle bets, wagers, and casino game outcomes accurately;
• To monitor gaming patterns for responsible gambling purposes and to apply protective measures where necessary;
• To enforce the KClub88 Terms & Conditions and all associated policies;
• To improve the Platform's functionality, user interface, and game offerings based on aggregated usage data; and
• To send promotional communications and offers, where you have provided consent or where permitted under applicable law — subject always to your right to opt out.

KClub88 does not share your Personal Data with third parties except in the following circumstances, and only to the extent necessary:

• Payment Service Providers: We share transaction-relevant data with payment processors (including FPX banks such as Maybank, CIMB, Public Bank, and Hong Leong, as well as e-wallet operators Touch 'n Go eWallet, Boost, GrabPay, and DuitNow) solely to facilitate your financial transactions on the Platform.
• Identity Verification Partners: KClub88 may engage third-party KYC service providers to assist in document verification. Such providers process data solely under contractual instruction from KClub88 and are bound by confidentiality obligations.
• Game Technology Providers: Certain game studios that supply games to the Platform may collect limited technical data (such as session and gameplay data) as part of their game delivery infrastructure. Such processing is governed by contractual data protection obligations.
• Legal and Regulatory Authorities: KClub88 may disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction — including in connection with AML investigations.
• Corporate Transactions: In the event of a merger, acquisition, or business restructuring involving KClub88, Member data may be transferred as part of that transaction, subject to equivalent privacy protections being maintained.

All third parties with whom KClub88 shares Personal Data are required to implement appropriate technical and organisational security measures and to process data only for the specific purposes for which it was shared.

The KClub88 Platform uses cookies and similar tracking technologies to enhance your user experience, maintain session continuity, and gather analytical data. The following cookie categories are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without materially impairing Platform functionality.
• Functional Cookies: Store your preferences, such as your preferred language (English / Bahasa Melayu / Mandarin), display settings, and last-visited game category. These are not essential but improve your experience significantly.
• Analytical Cookies: Used in aggregate and anonymised form to understand how Members navigate the Platform — which pages are most visited, where users encounter errors, and how game categories perform. This data informs Platform improvements.
• Security Cookies: Help detect suspicious activity, flag unusual login patterns, and support fraud prevention measures across Member sessions.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect Platform functionality or your ability to remain logged in during a session. Continued use of the Platform following the display of the cookie notice constitutes acceptance of our cookie usage as described in this Policy.

KClub88 retains Personal Data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law and regulatory obligations. The following retention principles apply:

• Active Account Data: Personal Data associated with an active Account is retained for the duration of the Member's relationship with KClub88, plus any additional period required by law following account closure.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure, in compliance with applicable anti-money laundering record-keeping obligations.
• Transaction Records: Financial transaction data (deposits, withdrawals, wager history) is retained for a minimum of five (5) years to meet regulatory and accounting requirements.
• Support Communications: Live chat transcripts and email correspondence are retained for up to three (3) years for quality assurance and dispute resolution purposes.
• Technical and Log Data: Server and access log data is typically retained for a period of twelve (12) months, after which it is deleted or anonymised.

Upon the expiry of applicable retention periods, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual.

KClub88 implements technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the KClub88 Platform is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols.
• Encrypted Storage: Sensitive data, including identity documents and financial information, is stored in encrypted form at rest on secured servers with restricted access controls.
• Access Control: Internal access to Personal Data is restricted to authorised KClub88 personnel on a strict need-to-know basis. Access is logged and audited.
• Two-Factor Authentication: Members are encouraged to enable two-factor authentication (2FA) on their Accounts to add an additional layer of protection against unauthorised login.
• Regular Security Audits: The Platform and its data infrastructure undergo regular security assessments to identify and remediate vulnerabilities.

While KClub88 implements robust security practices, no digital system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, KClub88 will notify affected Members and relevant authorities in accordance with applicable legal requirements.

As a Member of KClub88, you hold the following rights with respect to your Personal Data, subject to applicable law and any overiding legal obligations on KClub88:

• Right of Access: You may request a copy of the Personal Data that KClub88 holds about you, together with information about how that data is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held by KClub88. For identity-critical data, corrections may require supporting documentation.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to any overiding retention obligations under law (such as AML record-keeping requirements).
• Right to Restriction: You may request that KClub88 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is under dispute.
• Right to Data Portability: Where technically feasible and legally applicable, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your Personal Data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to KClub88 demonstrating compelling grounds for that processing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact KClub88 via live chat or at[email protected]. KClub88 will acknowledge your request within five (5) business days and aim to resolve it within thirty (30) days, subject to the complexity of the request.

The KClub88 Platform is strictly intended for adults aged21 years and above. KClub88 does not knowingly collect, process, or retain Personal Data from any individual under the age of 21.

Age verification is a mandatory component of the KClub88 KYC process. Any Account suspected of belonging to a person under 21 will be suspended pending verification. If it is confirmed that an Account belongs to an underage individual, the Account will be immediately closed, any funds will be returned to the depositing payment method where possible, and all associated Personal Data will be deleted.

If you believe a minor has registered an Account on the KClub88 Platform, please notify us immediately at [email protected] so that we may investigate and take appropriate action without delay.

The KClub88 Platform may contain references to third-party services, including payment processors and game providers. KClub88 is not responsible for the privacy practices, security standards, or content of any third-party platforms or services. This Policy applies solely to data processed by KClub88 in connection with the Platform.

Members are encouraged to review the privacy policies of any third-party services they interact with in connection with their KClub88 membership, in particular payment service providers used for deposits and withdrawals.

KClub88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or Platform operations. The most current version of this Policy will always be accessible at kclub88.cam/privacy-policy. The effective date and version number at the top of this page reflect the date on which the current version was published.

For material changes to this Policy — that significantly affect how your data is used or your rights as a Member — KClub88 will provide reasonable prior notice via the Platform interface or to your registered email address. Continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by KClub88, please contact our Data Privacy team through the following channels:

• Live Chat: Available 24/7 directly on the KClub88 Platform. Average response time: 3–5 minutes.
• Email: [email protected] (plain text — not a clickable link)
• Support Languages: English, Bahasa Melayu, Mandarin

KClub88 will acknowledge privacy-related requests within five (5) business days of receipt. Substantive responses to rights requests will be provided within thirty (30) days, subject to the nature and complexity of the request. In exceptional cases, this period may be extended by a further thirty (30) days, of which you will be informed.