King888 – Privacy Policy & Personal Data Protection for Malaysian Members

This Privacy Policy is published by King888, an online sports betting and casino platform operating in Malaysia through king888.club ("platform", "we", "King888"). This document explains how King888 collects, processes, stores, discloses, and protects your personal data as a user or member of our platform.

King888 is fully committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection legislation in force in Malaysia. We understand that the trust you place in us to handle sensitive information is not something to be taken lightly — and we will always strive to show that your trust is well-founded.

This policy applies to all individuals who register an account, access the website, use any King888 services, or simply browse our platform. By using the King888 platform, you agree to the terms set out in this Privacy Policy.

King888 only collects personal data that is necessary for legitimate purposes related to platform operations. We do not collect excessive or irrelevant data. The following are categories of data we may collect from you:

• Identity Data: Full name, MyKad or passport number, date of birth, gender, nationality, and identity verification photo (only when KYC verification is required).
• Contact Data: An active Malaysian phone number, email address, and residential address (if required for large withdrawal verification).
• Financial Data: E-wallet account information (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) or FPX bank account numbers (Maybank2u, CIMB Clicks) used for deposits and withdrawals in MYR.
• Platform Activity Data: Your betting history, deposit and withdrawal records, games played, session duration, and gaming preferences on the King888 platform.
• Technical Data: IP address, web browser type, operating system, device type, session data, and platform cookies required for King888's technical operations.
• Communications Data: Records of live chat conversations, emails, and all communications between you and the King888 customer support team for issue resolution and quality control purposes.

The personal data we collect is used solely for legitimate and transparent purposes. King888 will not use your data for any purpose beyond what is stated here without first obtaining your consent:

• Account Management: Creating, verifying, and managing your member account on the King888 platform, including the login process, identity verification (KYC), and password resets.
• Transaction Processing: Processing deposits via your preferred Malaysian payment method (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks) and securely managing withdrawals to your registered account.
• Service Provision: Enables you to access all King888 platform features, including Sports Betting (Malaysia Super League, EPL, cricket, badminton), Live Casino, blackjack, lottery, and e-sports.
• Service Communications: Sending important notifications related to your account, winnings, withdrawals, changes to Terms & Conditions, and security updates you need to know about.
• Fraud Control & Security: Detecting and preventing fraudulent activity, money laundering, multiple account ownership, and other security threats to the platform and its members.
• Responsible Gambling: Monitoring betting patterns to identify signs of problem gambling and providing appropriate support, including enforcing the limits you set for yourself.
• Platform Improvements: Analysing aggregated (not individual) usage data to understand how players use King888 and to make meaningful improvements to the user experience.
• Marketing Communications: Sending relevant King888 promotional information, bonuses, and offers — but only if you have given your consent to receive marketing communications and only through the channels you have selected.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), King888 processes your personal data on the following lawful bases:

• Contract Performance: Processing necessary to fulfil the agreement between you and King888 — that is, to provide the platform services you registered for. This includes transaction processing, account management, and the provision of games.
• Legitimate Interests: Processing required for King888's legitimate business interests — such as fraud prevention, platform security, product improvement, and risk management — provided these interests do not override your fundamental privacy rights.
• Legal Obligations: Processing required to comply with applicable Malaysian law, including KYC/AML (Anti-Money Laundering) requirements, reporting to relevant authorities, and financial regulatory compliance.
• Consent: For marketing communications and the use of optional cookies, King888 obtains your explicit consent beforehand. You have the right to withdraw this consent at any time without affecting the core services you use.

King888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. This is a commitment we hold firmly. However, there are limited situations where King888 may need to share your data with certain parties, and we want to be transparent about those situations:

• Payment Service Providers: To process deposits and withdrawals, the necessary data is shared with the relevant e-wallet providers and banks (such as Touch 'n Go eWallet, GrabPay, and FPX institutions). This sharing is strictly limited to the information required to complete each transaction.
• Technical Service Providers: Companies that help us operate the King888 platform — such as cloud hosting providers, security analytics systems, and fraud detection services — may have limited access to data necessary for carrying out their functions. All such parties are bound by strict confidentiality agreements.
• Legal Authorities: King888 will disclose personal data to Malaysian authorities (such as the police, courts, or regulatory bodies) when required by law, court order, or in the course of a legitimate financial crime investigation.
• Business Transfer: In the event of a merger, acquisition, or sale of King888's assets, member data may be transferred to the acquiring entity — but only on the condition that the entity agrees to be bound by a Privacy Policy at least equivalent to the current one.

The security of your personal data is a core technical priority at King888 — one we never compromise on. We invest continuously in security infrastructure to ensure your data is always protected against unauthorised access, alteration, or loss.

• 256-bit SSL Encryption: All communications between your device and King888's servers are encrypted using the latest TLS/SSL protocol with a 256-bit key length — the same standard adopted by Malaysia's major banks, including Maybank and CIMB.
• Secure Password Storage: Your password is never stored in plain text. We use the bcrypt hashing algorithm with a unique salt for each user, making it practically impossible to reverse-engineer.
• Internal Access Controls: Access to member data within King888's systems is restricted to staff who require that information to perform their roles, based on the principle of least privilege.
• 24/7 Monitoring: King888's security systems are monitored around the clock to detect anomalies, suspicious access attempts, or any signs of a potential data breach.
• Regular Security Audits: King888 undergoes periodic independent security audits by third-party cybersecurity specialists to identify and address potential vulnerabilities before they can be exploited.

Data Retention Period: King888 retains your personal data for as long as your account is active or as long as necessary to fulfil the purposes for which it was processed. Financial transaction data is retained for a minimum of seven (7) years in accordance with Malaysia's accounting and anti-money laundering legal requirements. When data is no longer needed, it will be securely deleted or anonymised.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by King888. We respect these rights and will respond to your requests within a reasonable timeframe:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a clear, easy-to-understand format within 21 days of receiving your request.
• Right to Rectification: If you find that any personal data King888 holds about you is inaccurate, incomplete, or out of date, you have the right to request a correction. Most personal information can be updated directly in your account panel.
• Right to Erasure: You may request deletion of your personal data when it is no longer needed for the original purpose it was collected, or when you withdraw the consent on which the processing was based. Please note that certain data may need to be retained for legal purposes.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.
• Data Portability Right: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider, where processing is based on your consent.
• Right to Restrict Processing: In certain circumstances (for example, while we are verifying the accuracy of your data or assessing your objection), you may request that we temporarily restrict the processing of your data.

To exercise any of the above rights, please contact us at support@king888.club with the email subject line "Personal Data Rights Request", along with a description of your request and a copy of your identification document for verification purposes. We will not charge any fee for reasonable requests.

The King888 platform uses cookies and similar tracking technologies to enhance your experience, ensure platform security, and understand how the platform is used. Cookies are small text files stored on your device when you visit the King888 website.

We use several categories of cookies, and we want to be transparent about each of them. Essential cookies cannot be disabled as they are required for core platform functionality, while optional cookies can be managed through your browser settings.

The King888 platform may contain links to third-party websites in certain contexts. However, in line with our policy, such links exist solely for necessary service purposes — such as payment providers — and not for general navigation to external sites.

King888 is not responsible for the privacy practices or content of any third-party websites. If you access a third-party website via a link on our platform, we recommend reading that website's Privacy Policy separately, as ours does not apply there.

King888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to our services. Any material amendments will be communicated to you via your registered email or platform notification at least seven (7) days before taking effect.

The "Updated" date at the top of this document indicates when the last amendment was made. We recommend reviewing this page periodically to stay informed about how we protect your data. Your continued use of the King888 platform after any amendments take effect constitutes your acceptance of the latest version of the Privacy Policy.

For any enquiries, concerns, or requests relating to this Privacy Policy or the management of your personal data, please contact King888's Data Protection Officer through the following channels:

• Email: support@king888.club (subject: "Privacy Policy Enquiry")
• Live Chat: Available 24 hours a day, 7 days a week via the live chat button within the King888 platform

We are committed to responding to all privacy-related enquiries within three (3) business days. For more serious complaints, we will prioritise resolution within 14 business days.