Privacy Policy KK8 — Your Data Protection is Our Priority

1 Information We Collect

In operating the KK8 platform, we collect various types of information to ensure a safe, fair, and high-quality service for all members. The information collected falls into several key categories:

Personal Identity Information: Full name, date of birth, gender, identification card number (MyKad) or passport, current residential address, and mobile phone number. This information is required for the registration and KYC verification process.

Financial Information: Bank account details and e-wallet numbers (Touch 'n Go, GrabPay, etc.) used for deposits and withdrawals. KK8 does not store credit or debit card numbers directly — all transactions are processed through encrypted, trusted payment gateways.

Platform Usage Information: Game activity records, transaction history, login records (including IP address, device type, and web browser), session times and duration, as well as your game preferences.

Communication Information: Correspondence with the customer support team, live chat content, feedback and complaints submitted through the platform.

2 Data Collection and Use Purposes

Every piece of information we collect has a clear and legitimate purpose. kk8 does not collect data beyond what is required for platform operations. The following are the primary purposes for which your data is used:

3 Data Storage & Protection

KK8 operates enterprise-grade server infrastructure with multi-layered protection to keep your data secure at all times. The following technical and organisational measures are in place:

• Data encryption in transit: All communications between your device and kk8 servers are secured by TLS 1.3 protocol with 256-bit encryption — ensuring no third party can intercept or read your data.
• Data encryption at rest: Sensitive information such as passwords and financial details is stored in encrypted format using strong hashing algorithms. Even in the event of a server breach, your data cannot be read without the decryption key.
• Strict access controls: Only staff with a legitimate operational need are permitted to access member data. All access is logged and periodically audited by the internal security team.
• Periodic data backups: KK8 platform data is automatically backed up at regular intervals to separate, secure server locations to prevent data loss due to technical failures.
• Penetration testing: KK8 conducts regular security testing by independent third parties to identify and remediate any vulnerabilities before they can be exploited.

Your data retention period depends on the purpose of collection. Active account data is retained for the duration of your membership. Following account closure, financial and transaction data is retained for the minimum period required by anti-money laundering (AML) legal requirements before being securely deleted.

4 Data Sharing with Third Parties

KK8 values member trust and does not share your personal data arbitrarily. However, in certain situations, sharing data with trusted parties is necessary to ensure smooth platform operation and legal compliance:

• Payment service providers: Payment gateways and e-wallet providers partnering with KK8 receive only the minimum transaction data required to process your deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Game software providers: Third-party game providers may receive your game session information for technical purposes and fairness verification. Data shared is limited and does not include full identity information.
• Regulatory authorities: KK8 complies with all reporting requirements to relevant regulatory authorities. This includes submitting suspicious transaction reports to the appropriate authorities when required by law.
• Analytics providers: The analytics platform we use to understand usage patterns only receives aggregated, anonymised data that cannot be linked to your personal identity.

Kk8 has never and will never sell members' personal information to any party for advertising, marketing, or any other commercial purpose without your explicit consent.

5 Cookie Policy

KK8 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website. The types of cookies we use are as follows:

• Essential cookies: Required for core platform functions such as maintaining your login session and remembering your security preferences. These cookies cannot be disabled as they are critical to platform operation.
• Performance cookies: Collecting information on how you use the platform — such as the most frequently visited pages and response times — to help us improve platform performance.
• Functional cookies: Remembering your preferences such as language, display theme, and account settings so you don't need to reconfigure them each time you log in.
• Analytics cookies: Helps us understand overall platform usage patterns in aggregate. Data collected is anonymized and cannot personally identify you.

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some platform features. For more information on managing cookies, refer to your browser's help documentation.

6 Your Rights as a User

As a kk8 member, you have several important rights regarding your personal data. We respect and facilitate the exercise of these rights in accordance with modern data protection principles:

• Right of access: You may request a complete copy of all personal data KK8 holds about you. Requests will be processed within 14 business days.
• Right to rectification: If any of your personal information is inaccurate or out of date, you have the right to request a correction. Some information can be updated directly through your account profile settings.
• Right to erasure: Under certain circumstances, you may request the deletion of your personal data. Please note that this right is subject to our legal obligations to retain certain records, particularly financial and transaction records.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time. To unsubscribe, use the unsubscribe link in any promotional email or contact our support team.
• Right to data portability: You have the right to request your data in a machine-readable format (JSON or CSV) for transfer to another service provider of your choice.

To submit any request relating to the rights above, please contact the kk8 customer support team via live chat or email at [email protected]. We will respond to and process your request within the stipulated timeframe.

7 Account Security & Shared Responsibility

The security of your information is a shared effort between kk8 and you as a member. While kk8 provides robust security infrastructure, there are several precautions you should take on your own to complement that protection:

• Use a strong, unique password — a combination of uppercase letters, lowercase letters, numbers, and symbols with a minimum length of 10 characters. Do not reuse your KK8 password on any other platform.
• Enable two-factor authentication (2FA) via your account security settings. This extra layer of protection ensures only you can access your account, even if your password is compromised.
• Never share your login credentials with anyone, including family members or friends. KK8 will never ask for your password via email, phone, or live chat.
• Be cautious of emails or messages that appear to come from KK8 but ask for your login credentials — these may be phishing attempts. Always access KK8 directly via the official URL.
• Log out of your account when using a shared device or public Wi-Fi network.
• Notify the kk8 support team immediately if you suspect your account has been accessed without authorization.

8 Links to Third-Party Websites

The kk8 platform may contain links or references to third-party websites or services, such as game software providers or payment platforms. It is important that you understand the following:

• KK8's privacy policy does not apply to third-party websites or services. Each third party has its own privacy policy, which you should review separately.
• Kk8 is not responsible for the privacy practices or content of any third-party websites you may access through our platform.
• We recommend reading the privacy policy of any third-party website you visit before providing any personal information.

However, all third-party service providers working directly with kk8 (such as payment gateways and game providers) have undergone a thorough vetting process and are subject to binding data confidentiality agreements.

9 Changes to This Privacy Policy

KK8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, legal requirements, or technological developments. When material changes occur, we will:

• Displaying a clear notice on the platform's home page regarding privacy policy updates.
• Sending notifications via registered email to all active members to inform them of important changes affecting their rights.
• Updating the "Last Updated" date shown at the top of this document.
• In cases of material changes requiring re-consent, we will ask you to review and accept the updated policy before continuing to use the platform.

Continued use of the kk8 platform after notification of privacy policy changes is considered acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how we manage your data.

10 Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how KK8 manages your personal data, our team is ready to assist:

• Privacy email: [email protected] — please indicate "Privacy Inquiry" in your email subject line.
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform.
• Response time: We are committed to responding to all privacy-related inquiries within 3 business days.

For formal data rights requests (access, deletion, correction), please contact us by email and include your registered full name and account ID number to facilitate identity verification and processing.