Privacy Policy
KK8 is committed to protecting your personal data. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, and the rights you hold as a player on our platform.
Our Privacy Commitments
A plain-English overview of how KK8 handles your data. These points summarise our approach — the full policy follows below.
We Do Not Sell Your Data
KK8 does not sell, rent, or trade your personal information to third-party advertisers or data brokers under any circumstances. Your data is used solely to operate the Platform and fulfil our obligations to you.
256-Bit SSL Encryption
All data transmitted between your device and the KK8 platform is protected by industry-standard 256-bit SSL encryption. Payment transactions are processed through PCI-DSS compliant payment gateways.
You Control Your Data
You have the right to access, correct, and request deletion of your personal data at any time. Submit a data request through our 24/7 Support channel and we will respond within the timeframes set out in this policy.
Minimal Data Collection
We collect only the personal data that is necessary to operate the Platform, verify your identity, process transactions, and comply with applicable legal and regulatory requirements. Nothing beyond what is needed.
Regulated Data Handling
KK8's data handling practices are designed to align with applicable data protection principles. We implement appropriate technical and organisational measures to safeguard personal information at every stage of processing.
Transparent Policy Updates
If we make material changes to this Privacy Policy, we will notify you via a prominent notice on the KK8 Platform at least 7 days before the changes take effect. Continued use constitutes acceptance of the updated policy.
Your Data Rights at a Glance
As a KK8 player, you hold the following rights over your personal data. Full details are in Section 8 of the policy below.
Right of Access
Request a copy of all personal data KK8 holds about you, including transaction records and communication logs.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your Account at any time.
Right to Erasure
Request deletion of your personal data, subject to our legal retention obligations and any outstanding account matters.
Right to Object
Object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Right to Portability
Receive a structured, machine-readable copy of your personal data that you have provided to KK8.
Right to Restriction
Request that KK8 restrict the processing of your data in certain circumstances, such as while a data accuracy dispute is being resolved.
1 Introduction
This Privacy Policy ("Policy") describes how KK8 ("KK8", "we", "us", "our"), the operator of the online gaming platform accessible at kk8.casa ("Platform"), collects, processes, stores, and protects the personal data of its registered users ("Players", "you").
KK8 is committed to handling all personal data responsibly and in a manner consistent with applicable data protection principles. This Policy applies to all data collected through the Platform, including data provided during registration, account usage, payment transactions, customer support interactions, and general browsing of the KK8 website.
This Privacy Policy should be read in conjunction with our Terms & Conditions. By registering an Account with KK8 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
Data Controller: KK8 acts as the data controller for all personal data collected through the Platform. For all data-related enquiries and requests, contact our Support team via the details in Section 14 of this Policy.
2 Definitions
For the purposes of this Privacy Policy, the following definitions apply:
- "Personal Data" — any information that identifies or could reasonably be used to identify a living natural person, directly or indirectly, including but not limited to name, identification number, contact details, and financial information.
- "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, and deletion.
- "Data Controller" — the entity that determines the purposes and means of personal data processing. KK8 is the Data Controller for all personal data collected through the Platform.
- "Data Processor" — a third party that processes personal data on behalf of the Data Controller under a written data processing agreement.
- "Consent" — a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
- "KYC" — Know Your Customer verification procedures, including identity and source-of-funds checks required under applicable regulations.
- "Cookies" — small text files placed on your device by the Platform to facilitate session management, analytics, and personalisation functions.
3 Data We Collect
KK8 collects the following categories of personal data from Players:
3.1 Identity & Registration Data
- Full legal name as it appears on your government-issued identification document
- Date of birth (to verify 21+ age eligibility)
- Malaysian MyKad number, passport number, or equivalent national identification number
- Nationality and country of residence
- Username selected at the time of Account registration
3.2 Contact Data
- Email address (primary communication channel)
- Malaysian mobile phone number
- Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
3.3 Financial & Transaction Data
- Deposit and withdrawal transaction records including amounts in MYR, timestamps, and payment method used
- Payment method identifiers (e.g., last four digits of a bank account, e-wallet registered phone number) — full payment credentials are not stored by KK8
- Wagering history and game activity records
- Bonus claims and promotion participation history
3.4 Technical & Usage Data
- IP address and approximate geolocation derived from IP
- Device type, operating system, and browser version
- Pages visited, session duration, and navigation patterns on the Platform
- Login timestamps and session activity logs
3.5 Communication & Support Data
- Live chat transcripts and email correspondence with KK8 Support
- Feedback, complaints, and dispute-related communications
3.6 KYC Verification Documents
- Copies of government-issued photo identification (Malaysian MyKad, passport)
- Proof of address documents
- Payment method ownership documentation
4 How Data Is Collected
KK8 collects personal data through the following channels:
- Direct submission: Information you provide when completing the Account registration form, submitting KYC documents, making deposit or withdrawal requests, or contacting Support.
- Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies, session trackers, and server logs.
- Payment processors: Transaction confirmation and status data received from third-party payment service providers including FPX, DuitNow, and e-wallet operators.
- Identity verification services: Data received from authorised third-party KYC verification providers used to confirm Player identity and age.
- Fraud detection systems: Risk signals and device fingerprint data generated by our security and fraud prevention infrastructure.
5 Data Processing
KK8 processes personal data for the following specific purposes:
| Purpose | Data Used | Basis |
|---|---|---|
| Account creation and authentication | Identity, contact, login data | Contract performance |
| Age verification (21+ compliance) | Date of birth, identity documents | Legal obligation |
| Processing deposits and withdrawals | Financial, transaction data | Contract performance |
| KYC and anti-money laundering checks | Identity, financial, KYC documents | Legal obligation |
| Fraud detection and security monitoring | Technical, usage, transaction data | Legitimate interests |
| Customer support and dispute resolution | Identity, contact, communication data | Contract performance |
| Responsible gambling monitoring | Wagering history, session data | Legal obligation / legitimate interests |
| Bonus and promotion administration | Identity, transaction, bonus history | Contract performance |
| Platform analytics and improvement | Technical, usage data (anonymised where possible) | Legitimate interests |
| Direct marketing communications | Contact data, preference data | Consent (opt-in only) |
KK8 does not use personal data for automated decision-making that produces significant legal effects on Players, except where required to fulfil KYC or AML obligations. Where automated processing is used for risk scoring, Players have the right to request human review of any automated decision.
6 Legal Basis for Processing
KK8 relies on the following legal bases for processing personal data:
- Contract Performance: Processing necessary to provide the services you have registered for, including account management, transaction processing, and customer support.
- Legal Obligation: Processing required to comply with applicable laws and regulations, including age verification (21+), anti-money laundering (AML) obligations, KYC requirements, and responsible gambling duties.
- Legitimate Interests: Processing for fraud prevention, platform security, analytics, and service improvement, where such interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for direct marketing communications, personalised promotions, and non-essential cookies, where you have provided explicit opt-in consent. You may withdraw consent at any time by contacting Support.
7 Data Sharing & Third Parties
KK8 does not sell, rent, or trade personal data. We may share personal data with the following categories of third parties, strictly limited to what is necessary for the stated purpose:
- Payment Service Providers: FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, RHB, and cryptocurrency processors — solely to facilitate deposit and withdrawal transactions.
- KYC & Identity Verification Providers: Authorised third-party verification services used to confirm Player identity and age — processing governed by data processing agreements.
- Game Providers: Third-party game suppliers whose software is hosted on the KK8 Platform may receive anonymised session identifiers necessary to operate game software.
- Fraud Prevention Services: Third-party security providers used for device fingerprinting, risk scoring, and transaction fraud detection.
- Legal & Regulatory Authorities: Where required by law, court order, or regulatory direction, KK8 will disclose personal data to competent authorities without prior notice to the Player.
- Professional Advisors: Legal counsel, auditors, and compliance advisors, bound by strict confidentiality obligations.
All third-party Data Processors engaged by KK8 are subject to binding data processing agreements requiring them to process personal data only on KK8's documented instructions and to implement appropriate technical and organisational security measures.
8 User Rights
You hold the following rights in respect of personal data that KK8 holds about you. To exercise any right, contact our Support team via live chat or at the email address set out in Section 14.
8.1 Right of Access
You may request a copy of all personal data KK8 holds about you, together with information on the purposes for which it is processed and the categories of third parties with whom it has been shared. We will respond within 30 calendar days of a verified request.
8.2 Right to Rectification
If you believe that personal data held by KK8 is inaccurate or incomplete, you may request that it be corrected or completed without undue delay. Account details may be updated directly within the Member Centre for certain fields.
8.3 Right to Erasure ("Right to Be Forgotten")
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. Note that we are required by law to retain certain transaction and identity records for a minimum period — erasure requests in conflict with these obligations will be partially fulfilled to the maximum extent legally permissible.
8.4 Right to Restriction of Processing
You may request that KK8 restrict the processing of your personal data in circumstances including: while the accuracy of the data is being contested; where processing is unlawful and you prefer restriction over deletion; or where KK8 no longer needs the data but you require it for the establishment of legal claims.
8.5 Right to Data Portability
Where processing is based on consent or contract performance and is carried out by automated means, you may request a structured, commonly used, machine-readable copy of the personal data you have provided to KK8.
8.6 Right to Object
You may object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests — KK8 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
KK8 will respond to all verified data rights requests within 30 calendar days. For complex requests, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for the delay within the initial 30-day period.
9 Data Retention
KK8 retains personal data only for as long as is necessary for the purposes for which it was collected, taking into account applicable legal, regulatory, and operational requirements.
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of account + 7 years from account closure |
| KYC and identity verification documents | Duration of account + 7 years from account closure |
| Transaction and financial records | 7 years from the date of each transaction |
| Wagering and game activity records | 7 years from the date of each activity |
| Customer support communications | 3 years from the date of the last communication |
| Technical and usage logs | 12 months from collection, then anonymised |
| Marketing consent records | Until consent is withdrawn + 2 years |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.
10 Cookies & Tracking Technologies
KK8 uses cookies and similar tracking technologies to operate the Platform effectively. Cookies are small text files stored on your device when you visit the KK8 website. We use the following categories of cookies:
- Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
- Performance & Analytics Cookies: Used to understand how Players interact with the Platform — including pages visited, session durations, and error rates — to improve user experience. These are deployed on a consent basis.
- Functionality Cookies: Store your preferences such as language, currency display, and interface settings to provide a personalised experience across sessions.
- Fraud Detection Cookies: Support device fingerprinting and risk scoring functions used to identify and prevent fraudulent account access and transaction manipulation.
You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform. For non-essential cookies, you may withdraw consent at any time by adjusting your browser settings or contacting Support.
11 Data Security
KK8 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. Our security infrastructure includes:
- 256-bit SSL/TLS encryption for all data transmitted between Players and the Platform
- Encrypted storage of sensitive data at rest, including KYC documents and payment identifiers
- Role-based access controls ensuring that internal staff access personal data only on a strict need-to-know basis
- PCI-DSS compliant payment processing — full payment credentials are never stored on KK8 servers
- Continuous security monitoring and intrusion detection systems
- Regular security assessments and penetration testing
- Formal incident response procedures with Player notification obligations in the event of a qualifying data breach
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, KK8 will notify affected Players without undue delay and will take all reasonable steps to contain and mitigate the breach.
12 Minors
KK8 strictly prohibits the use of its Platform by any individual under the age of 21. We do not knowingly collect personal data from persons under 21 years of age. Age verification is a mandatory step in the KYC process for all registered Accounts.
If KK8 becomes aware that personal data of a person under 21 has been collected, we will take immediate steps to close the relevant Account, void all associated wagers and balances, delete the personal data, and — where appropriate — report the matter to relevant authorities.
If you believe that a person under the age of 21 has registered an Account on KK8, please contact our Support team immediately via live chat so that appropriate action can be taken without delay.
13 Policy Changes
KK8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform operations. All changes will be published on this page with an updated effective date.
For material changes — those that significantly affect how we use your personal data or your rights under this Policy — KK8 will provide at least 7 days' advance notice via a prominent notice on the Platform. Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.
We encourage you to review this Policy periodically to stay informed about how KK8 handles your personal data.
14 Contact Us
For all privacy-related enquiries, data rights requests, or concerns regarding the handling of your personal data by KK8, please contact us through the following channels:
- 24/7 Live Chat: Available directly on the KK8 Platform — recommended for the fastest response, typically under 2 minutes.
- Email (plain text — not a clickable link):
- Response Commitment: We aim to acknowledge all privacy-related requests within 2 business days and to provide a substantive response within 30 calendar days.
When submitting a data rights request, please provide sufficient information to allow us to verify your identity and locate your Account. KK8 will not process data rights requests from unverified individuals.
For questions about our Terms & Conditions or responsible gambling tools, visit the respective pages. For gambling-related support, see our Responsible Gambling page.
Play with Confidence at KK8
Your data is protected, your privacy is respected, and your account is secured with 256-bit encryption. Join thousands of Malaysian players who trust KK8 for a safe, fair gaming experience.