K888 Privacy Policy – Data Protection You Are Our Priority

01Introduction and Scope of Privacy Policy

This Privacy Policy ("Policy") explains how k888 ("we", "Platform") collects, uses, discloses, and protects your personal information when you use the k888.ooo website, the k888 mobile app, or any other services we offer (collectively referred to as the "Services").

This Policy applies to all registered members, website visitors, and any individuals who interact with the k888 platform. By using our Services, you agree to the terms set out in this Privacy Policy.

K888 is the data controller and processor responsible under Malaysia's Personal Data Protection Act 2010 (PDPA). We take this responsibility seriously and are committed to handling your personal data in a transparent, secure, and privacy-respecting manner.

02Types of Personal Data We Collect

2.1 Data You Provide Directly

When you register an account or use k888's services, we collect information you provide directly, including:

• Full name as per official identification document
• Email address and mobile number
• Date of birth (for age verification)
• Bank account or digital wallet details (for payment processing)
• KYC documents such as a copy of MyKad or passport
• Passwords stored in encrypted form

2.2 Automatically Collected Data

While you use the k888 platform, we automatically collect certain technical information for operational and security purposes:

03Purposes for Using Your Personal Data

K888 uses your personal data for the following legitimate and specific purposes:

1. Account Management — Creates and maintains your member account, processes registration, and manages the KYC process.
2. Transaction Processing — Processes deposits, withdrawals, and all financial transactions related to your k888 account.
3. Security and Fraud Prevention — Detects and prevents unauthorised access, fraud, money laundering, and other illegal activities.
4. Legal Compliance — Fulfils legal obligations including AML/KYC requirements and reporting to relevant authorities when required.
5. Customer Support — Provides technical assistance and resolves your complaints or enquiries.
6. Platform Improvements — Analyses usage patterns in aggregate (without identifying you individually) to improve the user experience.
7. Service Communications — Sends important notifications relating to your account, transactions, or policy changes.

04Data Sharing with Third Parties

K888 does not sell, rent, or disclose members' personal information to third parties except in the following circumstances required for platform operations:

4.1 Trusted Service Providers

K888 works with vetted and trusted third-party service providers, including payment processors, cloud service providers, and fraud detection software vendors. These providers are only permitted to use your data to the extent necessary to deliver services to k888, and are bound by strict data protection agreements.

4.2 Legal Requirements

K888 may be required to disclose your personal information to government authorities, law enforcement bodies, or courts when mandated by Malaysian law or a valid court order.

4.3 Business Transfers

In the event of a merger, acquisition, or asset transfer, member data may be transferred as part of the business assets. In such cases, k888 will ensure that the receiving party is committed to upholding equivalent or higher data protection standards.

05Data Security Measures

K888 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data communications between your device and k888 servers
• Encryption of sensitive data stored at the database level
• Two-factor authentication (2FA) available for all member accounts
• Round-the-clock security monitoring and real-time threat detection
• Strict internal access controls based on the principle of least privilege
• Periodic independent security audits by accredited third parties
• Mandatory data protection training for all k888 staff
• A comprehensive incident response plan for data breach situations

While k888 takes all reasonable steps to protect your data, no security system can guarantee 100% absolute protection. You therefore play an important role in keeping your own account secure.

06Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the k888 website. They help us remember your preferences, maintain your login session, and deliver a better experience every time you use the platform.

6.2 Types of Cookies Used by k888

• Session Cookies — A temporary cookie deleted when you close your browser. Used to maintain your login session.
• Preference Cookies — Saves your language settings, time zone, and display preferences.
• Security Cookies — Used to identify and prevent fraudulent activity and to maintain session security.
• Analytics Cookies — Collects aggregated, non-personally identifiable usage data to help us improve the platform.

6.3 Cookie Controls

You can manage or delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the k888 platform, particularly session cookies required for the login process.

07Your Rights Regarding Personal Data

As a user in Malaysia, you have the following rights under the PDPA 2010 regarding the personal data k888 holds about you:

To exercise any of the rights above, please contact the k888 support team via live chat. We will process your request within the timeframe required by applicable law.

08Data Retention Period

K888 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

• Active Account Data — Retained for the duration your account is active and for the required period following account closure.
• Transaction Records — Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• KYC Documents — Retained for a minimum of 5 years after the business relationship ends, in accordance with AML requirements.
• Security Logs — Retained for 12 months for security incident investigation purposes.
• Communication Data — Customer support conversation records are retained for 2 years.

When data is no longer needed, k888 will securely delete or anonymise it in accordance with established procedures.

09International Data Transfers

Some service providers used by k888 may operate outside Malaysia. In such cases, your personal data may be transferred to other countries for processing.

K888 ensures that any international data transfers are carried out with adequate safeguards, including:

• Data processing agreements that comply with recognised international standards
• Only selecting providers operating in countries with equivalent or higher levels of data protection
• Implementing recognised standard contractual clauses to protect data in international transfers

10Minor Protection

The k888 platform is restricted to individuals aged 18 and above. k888 does not knowingly collect personal data from underage children or minors.

If we discover that personal data belonging to someone under the age of 18 has been collected without our knowledge, k888 will immediately take the following steps:

• Suspend the relevant account immediately
• Delete all related personal data
• Refund any deposited funds where applicable

Parents or guardians who suspect their child has registered with k888 without permission are urged to contact our support team immediately.

11Changes to the Privacy Policy

K888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technologies used, or applicable legal requirements.

When material changes are made to this Privacy Policy, k888 will:

• Updating the "Last Updated" date at the top of this document
• Sending notifications to registered members via email or platform notification
• Displaying a clear notice on the platform for at least 14 days before the changes take effect

Continued use of the k888 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

12How to Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how k888 handles your personal data, please contact us via:

• 24/7 live chat on the k888 platform (the fastest way to get a response)
• Email our privacy team at: [email protected]

K888 is committed to responding to all privacy-related enquiries within 30 business days of receipt. For urgent account security issues, please use live chat for immediate assistance.

You also have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPDP) if you believe k888 has handled your data in a manner that violates PDPA 2010.