Privacy Policy — kk8my7

This Privacy Policy (hereinafter referred to as "Policy", "Privacy Notice", or "this document") is issued by kk8my7 (hereinafter referred to as "kk8my7", "the Company", "We", "Us", or "Our"), the operator of the online gaming platform accessible at kk8my7.cam.

kk8my7 is committed to handling the personal data of all registered players, prospective users, and website visitors (collectively referred to as "you", "User", "Data Subject", or "Player") with the utmost care, transparency, and in full accordance with applicable data protection legislation and internationally recognised privacy standards.

This Policy describes the categories of personal data we collect, the purposes for which that data is processed, the legal bases upon which we rely to process your data, the parties with whom we may share your information, your rights as a Data Subject, and how you may exercise those rights.

This Privacy Policy is to be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, all of which together govern your relationship with kk8my7. By registering an account or continuing to use the kk8my7 platform, you acknowledge that you have read and understood this Privacy Policy in its entirety.

For the purposes of this Privacy Policy, the following terms shall carry the meanings ascribed to them below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, location data, IP address, or any factors specific to the physical, economic, or social identity of that person.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, restriction, or deletion.
• "Data Controller" means kk8my7, the entity that determines the purposes and means of processing personal data on this platform.
• "Data Processor" means any third party that processes personal data on behalf of kk8my7, subject to a data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication by the Data Subject of their agreement to the processing of their personal data.
• "Sensitive Data" means personal data revealing racial or ethnic origin, health data, financial data, or any other category of data warranting heightened protection under applicable law.
• "Cookies" means small text files placed on a User's device by the kk8my7 platform to facilitate functionality, analytics, and personalisation as described in Section 8 of this Policy.
• "Platform" means the kk8my7 website at kk8my7.cam and all associated services, pages, and features.

kk8my7 collects and processes the following categories of personal data from Users of the platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for mandatory age verification — minimum age 21 years).
• Gender (optional, where provided).
• Nationality and country of residence.
• Residential address, including city, postcode, and state.

3.2 Contact Data

• Email address registered to the account.
• Mobile phone number.
• Preferred communication language.

3.3 Identity Verification (KYC) Data

• Copy of government-issued photo identification (Malaysian IC / MyKad, Driver's Licence, or Passport).
• Proof of residential address (utility bill or bank statement dated within 3 months).
• Selfie photograph holding identification document (where required for enhanced verification).
• Source-of-funds documentation where required for AML compliance purposes.

3.4 Financial & Transaction Data

• Deposit and withdrawal transaction history, including amounts, dates, and payment method identifiers.
• Payment method details (e-wallet account identifiers for Touch 'n Go, GrabPay, Boost, DuitNow; bank account details for Maybank, CIMB, Public Bank, Hong Leong; cryptocurrency wallet addresses for BTC/USDT).
• Note: kk8my7 does not store full payment card numbers. Payment processing is handled by regulated third-party payment processors.

3.5 Gaming & Betting Activity Data

• Gameplay history, including games played, bet amounts, outcomes, and session durations.
• Sports betting activity, including markets selected, wager amounts, and settlement outcomes.
• Bonus and promotion claim history.
• Account balance history and net gaming activity over defined periods.

3.6 Technical & Usage Data

• IP address and approximate geolocation derived from IP data.
• Device type, operating system, and browser information.
• Session timestamps, login history, and platform usage patterns.
• Referral source and affiliate tracking identifiers (where applicable).

kk8my7 collects personal data through the following channels and mechanisms:

• Directly from you: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to promotional communications.
• Automatically through the Platform: Technical data collected passively when you access or use the kk8my7 website, including IP address, device identifiers, browser type, and session activity, via server logs and analytics tools.
• Cookies and tracking technologies: As described in Section 8 of this Policy, kk8my7 uses cookies and similar technologies to collect data about your interactions with the platform.
• Third-party verification services: Where we engage regulated KYC and identity verification providers to assist with document authentication and fraud screening.
• Payment processors: Transaction confirmation data received from our regulated payment processing partners upon completion of deposit and withdrawal instructions.

kk8my7 processes your personal data for the following defined purposes. We do not process data beyond what is necessary for these stated purposes.

kk8my7 relies on the following legal bases for the processing of your personal data:

• Contractual Necessity: Processing required to perform our obligations under the contract formed when you register an account with kk8my7, including account management, game provision, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) legislation, KYC regulatory requirements, responsible gambling obligations, and reporting requirements imposed by licensing authorities.
• Legitimate Interest: Processing carried out in pursuit of kk8my7's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your freely given, specific, informed consent for processing activities such as direct marketing communications. You may withdraw consent at any time by contacting our support team or updating your account communication preferences.

kk8my7 does not sell, rent, or otherwise trade your personal data to any third party. Your data may be shared with the following categories of recipients only where strictly necessary and subject to appropriate data protection agreements:

• Payment Processors: Regulated third-party payment processing partners who handle deposit and withdrawal transactions on our behalf, including providers facilitating Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, GrabPay, Boost, and cryptocurrency transactions.
• KYC and Identity Verification Providers: Specialist third-party providers engaged to assist with identity document verification, age verification, and fraud screening as part of our regulatory KYC obligations.
• Game Content Providers: Third-party game studios and live casino operators whose content is hosted on or integrated within the kk8my7 platform, to the extent necessary to deliver gaming services to your account.
• Regulatory Authorities and Law Enforcement: Competent regulatory bodies, law enforcement agencies, and government authorities where we are required by applicable law, court order, or regulatory direction to disclose your information.
• Professional Advisers: Legal advisers, auditors, and compliance consultants where disclosure is necessary for the provision of professional services to kk8my7.
• Business Successors: In the event of a merger, acquisition, restructuring, or sale of kk8my7 or its business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection standards.

kk8my7 uses cookies and similar tracking technologies (including web beacons and local storage) to operate the platform, remember your preferences, analyse platform usage, and support security functions. The following categories of cookies are deployed on the kk8my7 platform:

• Strictly Necessary Cookies: Essential to the operation of the platform, including session authentication, account security, and core functionality. These cookies cannot be disabled without materially impairing your ability to use the platform.
• Functional Cookies: Enable the platform to remember your preferences and settings, such as preferred language (English, Bahasa Melayu, or Mandarin), display options, and responsible gambling tool configurations.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the platform — pages visited, session duration, referral sources — to help us improve platform performance and user experience.
• Marketing & Personalisation Cookies: Where you have provided consent, these cookies allow us to personalise promotional content based on your gaming activity and preferences.

You may control your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the kk8my7 platform. Withdrawing consent for optional cookies will not affect the lawfulness of any processing that occurred prior to withdrawal.

kk8my7 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal, regulatory, and contractual retention obligations. The following general retention periods apply:

• Account and KYC Data: Retained for the duration of your account relationship with kk8my7, and for a minimum of five (5) years following account closure, in compliance with AML and regulatory record-keeping requirements.
• Transaction and Financial Data: Retained for a minimum of five (5) years following each transaction, in accordance with applicable financial record-keeping obligations.
• Gaming Activity Data: Retained for the duration of your account, and for a minimum of three (3) years following account closure, for dispute resolution and responsible gambling monitoring purposes.
• Technical and Log Data: Retained for a period of twelve (12) months from collection, unless a security incident or legal matter requires extended retention.
• Marketing Consent Records: Retained for the duration of the consent, and for a further period of three (3) years following withdrawal, to evidence the basis for any communications sent during the consent period.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

kk8my7 implements and maintains a comprehensive programme of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the kk8my7 platform is encrypted in transit using industry-standard 256-bit SSL/TLS protocols. HTTPS is enforced across all platform pages.
• Encryption at Rest: Sensitive personal data stored on kk8my7 systems is encrypted at rest using strong encryption algorithms.
• Access Controls: Access to personal data is restricted on a strictly need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular training on data protection requirements.
• Intrusion Detection and Monitoring: kk8my7's infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and security incidents.
• Regular Security Assessments: The platform undergoes periodic security testing, vulnerability assessments, and compliance reviews.

Subject to applicable data protection law and any overriding legal obligations binding upon kk8my7, you hold the following rights in respect of your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how that data is used and with whom it has been shared.
• Right to Rectification: You have the right to request the correction of any personal data we hold about you that is inaccurate, incomplete, or out of date.
• Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal obligations to retain certain data.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example whilst the accuracy of your data is disputed.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request its transfer to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests, including objection to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing undertaken prior to withdrawal.

To exercise any of the above rights, please submit your request in writing to our Data Protection contact via the live chat facility on kk8my7.cam or by email to [email protected]. We will respond to all valid requests within thirty (30) days of receipt. Where a request is complex or numerous, this period may be extended by a further two (2) months, of which you will be notified.

In the course of operating the kk8my7 platform and engaging third-party service providers, your personal data may be transferred to and processed in jurisdictions outside of Malaysia. Such transfers may occur where, for example, game content providers, cloud hosting infrastructure, or KYC verification services are operated from other countries.

Where personal data is transferred outside Malaysia, kk8my7 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that applicable within Malaysia. These safeguards may include contractual data transfer agreements, adequacy decisions, or equivalent protective mechanisms as recognised under applicable data protection law.

The kk8my7 platform is strictly intended for use by individuals who are at least 21 years of age. kk8my7 does not knowingly collect, process, or retain personal data from persons under 21 years of age.

If we become aware, through any means, that personal data has been submitted to or collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage individual will be returned, and any associated winnings will be forfeited.

Parents and guardians who become aware that a minor in their care has provided personal data to kk8my7 without authorisation are requested to contact our support team immediately via live chat or at [email protected].

kk8my7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable data protection law, regulatory guidance, or our data processing practices. Where material changes are made, we will notify registered players via the email address on file or by a prominent notice on the kk8my7 platform prior to the changes taking effect.

The effective date of the most recent version of this Policy is stated at the top of this page. We recommend that you review this Policy periodically to remain informed of how we collect and use your personal data. Continued use of the kk8my7 platform following publication of any amended Policy constitutes your acknowledgement of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your rights as a Data Subject, please contact the kk8my7 Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on kk8my7.cam — average response time under 5 minutes. Our agents are available in English, Bahasa Melayu, and Mandarin.
• Email (plain text — not a link): [email protected] — please mark the subject of your message with "Privacy Request" or "Data Subject Request" to ensure prompt routing to our Data Protection team.

We serve players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all of Malaysia. All privacy requests will be acknowledged promptly and responded to within the timeframes specified in Section 11 of this Policy.