Privacy Policy kclub88 – Personal Data Protection for Malaysian Members

This Privacy Policy applies to all users of the kclub88 platform, including website visitors, prospective members, and registered members. It covers all personal data collected through our website, mobile app, email communications, customer support services, and any other channels we operate.

Kclub88 is a responsible data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). This means we are accountable for ensuring that all personal data we hold is processed in accordance with the principles set out in the PDPA, including lawful processing, legitimate purpose, adequate security, and respect for user rights.

This Policy does not apply to third-party websites or services that may be linked from the kclub88 platform. We encourage you to read the privacy policies of any other services you use separately.

Kclub88 only collects data necessary to deliver our services safely, efficiently, and in compliance with legal requirements. The following are the categories of data we may collect:

Your personal data is collected through various channels related to your use of the kclub88 platform:

• Account Registration: When you complete the registration form on kclub88, we collect basic information such as your name, phone number, and date of birth.
• KYC Process (Identity Verification): To meet legal requirements, we may request documents such as a copy of your MyKad or bank statement to verify your identity and source of funds.
• Financial Transactions: Every time you make a deposit using Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks), your transaction data is automatically recorded in our system.
• Gaming Activity: The kclub88 system records your gaming activity, including bets placed on football (Malaysia Super League, EPL), badminton, cricket, slots, live casino, baccarat, blackjack, and e-sports.
• Communications with Us: When you contact customer support, send an email, or use live chat, that information is stored for reference and service improvement purposes.
• Automatic Collection (Cookies & Logs): Our platform automatically collects technical data when you access the website, including IP address, browser type, and pages visited.

Kclub88 uses your personal data solely for legitimate and relevant purposes. The table below outlines the primary purposes for which your data is used:

Kclub88 does not sell your personal data to any third party for marketing or other commercial purposes. We only share data in the following limited circumstances:

• Payment Service Providers: To process your deposit and withdrawal transactions via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, CIMB Clicks, and other FPX banks. Data is shared only to the extent necessary to complete those transactions.
• Game Software Providers: Third-party gaming platform providers may receive the minimum data required for game functionality, subject to strict confidentiality agreements with kclub88.
• Legal Authorities: kclub88 will disclose personal data to the relevant authorities when required to do so by Malaysian law, court order, or regulatory compliance obligations.
• Anti-Fraud Services: To safeguard the security of the platform and all members, kclub88 may share necessary information with fraud detection services that have undergone security vetting.

All third parties that receive data from kclub88 are bound by strict confidentiality agreements and are required to use that data solely for the specified purposes.

The security of your personal data is kclub88's highest technical and operational priority. We have implemented multiple layers of protection to keep your data safe at all times:

• 256-bit SSL Encryption: All communications between your browser and kclub88's servers are protected with industry-grade TLS/SSL encryption. No data can be intercepted in transit.
• Stored Data Encryption: Sensitive data such as financial information and passwords is stored in encrypted form using secure hashing algorithms. kclub88 staff are unable to view your password.
• Two-Factor Authentication (2FA): We offer two-factor authentication to add an extra layer of security to your account. Strongly recommended for all kclub88 members.
• 24/7 Monitoring: kclub88's security team monitors platform activity around the clock to detect any suspicious behaviour or unauthorised access attempts.
• Internal Access Controls: Only authorised kclub88 staff with a legitimate operational need may access personal data — and every access is logged and monitored.

The kclub88 platform uses cookies — small text files stored on your device — to enhance your user experience and ensure the platform runs smoothly. The following are the types of cookies we use:

You can manage or delete cookies through your web browser settings. Please note, however, that disabling essential cookies may affect the full functionality of the kclub88 platform, including your ability to log in to your account.

As a Malaysian user, you have the following rights under the Personal Data Protection Act 2010 (PDPA), all of which kclub88 fully respects:

In the course of operating the kclub88 platform, there are certain situations where your personal data may be processed or stored on servers located outside Malaysia — particularly in connection with the international game software providers and cloud services we use.

In all such cases, kclub88 ensures:

• Data transfers are only permitted to countries or entities that offer data protection equivalent to or greater than Malaysia's PDPA.
• Comprehensive data transfer agreements are established with all recipients of data outside Malaysia, ensuring your data is protected to the same standard.
• Any data transfer is subject to applicable legal requirements and is carried out in a manner that minimises exposure of your data.

Kclub88 retains your personal data only for as long as necessary for the purpose it was collected, or as required under Malaysian law:

• Active Account Data: Retained for the duration of your active account and for a period of 7 years following account closure, in accordance with Malaysian financial regulatory requirements.
• Financial Transaction Data: Transaction records in MYR are retained for a minimum of 7 years in accordance with Malaysia's AML requirements and tax legislation.
• KYC Data: Identity verification documents are retained for the period required under applicable anti-money laundering laws.
• Support Communication Data: Customer support conversation records are retained for 2 years for service improvement and dispute resolution purposes.
• Cookie: Refer to the cookie table above for the specific retention period of each cookie type.

Once the applicable retention period has expired, your data will be securely deleted or anonymised so that it can no longer be identified.

The kclub88 platform is strictly restricted to users who are 21 years of age and above only. We do not knowingly collect or store personal data from children or minors.

If you are a parent or guardian and believe your child who is a minor has provided personal data to kclub88, please contact us immediately at support@kclub88.ws. We will take immediate steps to delete the relevant data and close any associated accounts.

If you have any questions, concerns, or wish to exercise your rights under PDPA, you may contact the kclub88 Data Protection Officer through the following channels:

• Privacy-Dedicated Email: privacy@kclub88.ws
• General Support Email: support@kclub88.ws
• Live Chat: Available 24/7 within the kclub88 platform — select the "Privacy & Data" category

We are committed to responding to all privacy enquiries within 5 business days. For data access or deletion requests, the process may take up to 30 days depending on the complexity of the request.

This Privacy Policy may be updated from time to time to reflect changes in our practices or legal requirements. Members will be notified of any material changes via email or in-platform notification.