Privacy Policy k888 — Personal Data Protection

This Privacy Policy ("Policy") is published by k888 ("we", "Platform") and applies to all individuals who register, browse, or use k888 services through the official website at k888.ad or our Android and iOS mobile apps.

We are committed to ensuring your privacy is protected at every stage of platform use. This Policy has been drafted in compliance with the requirements of Malaysia Personal Data Protection Act 2010 (PDPA) and international best practices in personal data management.

By using the k888 platform, you agree to the data collection and processing practices described in this Policy. If you do not agree, you are requested to discontinue use of the Services and close your account.

This Privacy Policy should be read together with Terms and Conditions k888, which constitutes the entire agreement between you and our platform.

K888 collects your personal data through two primary methods: data you provide directly during registration and platform use, and data collected automatically through browsing technology.

We only collect data that is strictly necessary to provide our Services. Data that is no longer required will be deleted or anonymised in accordance with our retention policy.

K888 processes your personal data on valid legal bases, including contract fulfilment, legal obligations, the platform's legitimate interests, and your consent. The following are the primary purposes of our data processing:

• Identity verification (KYC): Ensuring every member is a verified adult and complying with mandatory anti-money laundering (AML) requirements.
• Account management: Creating, maintaining, and managing your member account, including betting records, balances, and transaction history.
• Payment processing: Verifying and processing deposit and withdrawal transactions through approved payment gateways.
• Platform security: Detecting, investigating, and preventing fraud, unauthorised access, and other suspicious activities.
• Customer support: Effectively handling your enquiries, complaints, and support requests.
• Legal compliance: Complying with reporting obligations to the relevant authorities when required by law.
• Product improvement: Analysing aggregated usage patterns to improve platform features and user experience.
• Marketing communications: Sending promotional information, bonus offers, and platform updates — subject to your notification preferences, which can be updated at any time via account settings.

K888 not sell, rent, or transfer your personal data to any third party for their own marketing purposes. Data disclosure occurs only under the following limited circumstances and strict controls:

• Payment service providers: Payment gateways and processing banks required to execute your financial transactions. They are bound by strict confidentiality agreements and PCI-DSS standards.
• Game software providers: Integrated gaming technology companies within the k888 platform receive only the minimum technical data required to deliver games — they do not receive your personal financial information.
• Identity verification service: Approved third-party KYC providers for verifying your identity documents in compliance with AML requirements.
• Cloud infrastructure: Certified cloud service providers storing data in controlled environments with full encryption.
• Legal obligations: Law enforcement authorities, courts, or regulatory bodies when k888 is legally required to do so.

All third parties receiving personal data of k888 members are bound by data processing agreements requiring them to protect that information to a standard equal to or higher than k888's own.

K888 consistently invests in the latest security infrastructure to ensure your personal data is always protected against unauthorised access, loss, misuse, or accidental disclosure.

The technical and organisational security measures we employ include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and k888's servers is fully encrypted. You can verify this via the padlock icon in your browser's address bar.
• Data encryption at rest: Data stored in our databases is protected with AES-256 encryption — the same standard used by world-class financial institutions.
• Role-based access control: Only specifically authorised k888 staff may access members' personal data, and all such access is fully logged for audit purposes.
• Two-factor authentication (2FA): Available to all member accounts as a highly recommended additional security layer.
• 24/7 security monitoring: A real-time threat detection system monitors for unusual activity and triggers immediate alerts to our security team.
• Regular penetration testing: k888 conducts regular independent security testing to identify and patch any vulnerabilities before they can be exploited.
• Secure data backup: Data backups are performed automatically to geographically separate locations to ensure service continuity.

While k888 takes all reasonable steps to protect your data, no system can guarantee absolute security. You also play an important role in protecting your account — ensure your password is strong, unique, and not shared with anyone.

K888 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how members interact with our platform.

There are four types of cookies we use:

• Essential cookies (required): Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled as the platform will not function without them.
• Performance cookies: Collecting information on how members use the platform — pages visited, time spent, errors encountered — to help us improve site performance.
• Functional cookies: Saving your preferences such as language, display settings, and game preferences to ensure a more personalised experience on future visits.
• Analytics cookies: Helping us understand aggregated, anonymised usage patterns for product improvement and internal business planning.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect some platform functionality.

K888 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy or as required by applicable law.

Upon expiry of the retention period, data will be permanently deleted or anonymised so that it can no longer be linked to your identity. The deletion process is carried out securely in accordance with NIST SP 800-88 standards.

Under Malaysia's PDPA and this Privacy Policy, you have the following rights regarding your personal data held by k888. All requests will be processed within 14 working days:

To submit any request relating to the above rights, please contact our data protection team via 24/7 Live Chat within the platform or via support email. We may require additional identity verification before processing your request for security purposes.

K888 is an online entertainment platform that exclusively for individuals aged 18 and above. We do not intentionally collect, process, or store any personal data from individuals under the age of 18.

All account registrations require age verification through a valid government-issued identity document. Should k888 discover that personal data of a minor has been collected unintentionally, we will immediately take the following steps:

• Immediately terminating the relevant account.
• Permanently deleting all associated personal data.
• Returning any financial balance where applicable in accordance with established compliance procedures.
• Reporting the case to the relevant authorities if required.

If you are a parent or guardian and have reason to believe that your minor child has registered an account with k888, please contact our customer support immediately for prompt action. We encourage the use of parental control tools on shared devices to prevent access by minors.

K888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. The "Updated" date at the top of this page indicates when the latest amendment took effect.

For material amendments — those that significantly change how we collect or use your data — k888 will:

• Sending a notification to the registered email address at least 14 days before the amendment takes effect.
• Displaying a clear notice on the platform's home page and within the mobile app.
• In cases of highly significant changes, request your renewed consent before continuing to use the Services.

Your continued use of the k888 platform after any amendments to this Policy take effect constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how your data is protected.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how k888 handles your personal data, please contact us through the following channels:

• 24/7 Live Chat: The fastest way — directly within your k888 platform or app.
• Data Protection Email: [email protected] (reply within 2 business days)
• FAQ: Visit page k888 FAQ for quick answers to common questions about privacy and your account.

We take every privacy-related complaint seriously and are committed to providing a meaningful response within the stipulated timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia as the relevant regulatory authority.

For further reading on your rights and responsibilities as a k888 platform user, we encourage you to visit the following documents:

• k888 Terms and Conditions — the comprehensive platform usage agreement.
• Responsible Gaming — self-control tools and support resources.
• About Us — k888's background and core values.