Privacy Policy kl888 – Our Commitment to Protecting the Personal Data of Malaysian Members

KL888 collects several categories of personal information when you register and use our platform. This is done solely for legitimate purposes necessary to deliver our services to you effectively and securely.

The categories of information we collect include:

• Identity Information: Full name, national identification number (where required for verification), date of birth, and gender.
• Contact Information: Malaysian mobile number, email address, and city or state of residence.
• Account Information: Username, password (stored in encrypted form), login history, and account settings.
• Financial Information: Information on the payment method used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u or CIMB Clicks), deposit and withdrawal history, and account balance. KL888 does not store full bank account numbers — only the information required to process transactions.
• Activity Information: Betting history, games played, session times and duration, as well as bonus usage records and VIP programme history.
• Technical Information: IP address, device and browser type, operating system, cookie data, and platform performance information for technical troubleshooting purposes.

KL888 uses the personal data collected for lawful purposes directly related to the provision of our platform services. The following are the primary purposes for which your data is used:

• Account Management: Creating and managing your KL888 account, verifying your identity, and enabling secure access to the platform.
• Transaction Processing: Processing deposits via e-wallet and FPX Malaysia, managing withdrawal of winnings, and maintaining complete and accurate transaction records.
• Bonus and VIP Management: Calculating VIP points, crediting weekly rebates, and ensuring bonuses and promotions are awarded in accordance with eligibility criteria and applicable terms.
• Security and Fraud Prevention: Identifying and preventing fraud, money laundering, duplicate accounts, and platform abuse.
• Service Improvement: Analysing usage patterns to improve the interface, platform speed, and game selection relevant to Malaysian players.
• Service Communications: Sending account-related notifications, transaction confirmations, security alerts, and information about promotions or platform updates.
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including maintaining transaction records as required under Malaysian law.

Kl888 will not use your personal data for any purpose beyond those stated above without first obtaining your additional consent.

KL888 does not sell, rent, or disclose members' personal information to third parties for marketing purposes under any circumstances. However, there are limited situations where KL888 may need to share certain information with other parties for legitimate service purposes:

• Payment Service Providers: Necessary transaction information is shared with e-wallet and online banking providers — including Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and banks offering FPX services — solely for the purpose of processing your deposits and withdrawals.
• Game Providers: Session information required for gameplay may be shared with approved game software providers for technical purposes, fairness auditing, and technical support.
• Legal Authorities: kl888 will disclose personal information to competent authorities when required by Malaysian law, court order, or a legitimate official investigation.
• Security Audit: Independent audit or security firms engaged in reviewing kl888's systems may be granted limited access to necessary data — subject to strict confidentiality agreements.

All third parties that receive kl888 member data are bound by strict data protection agreements and are prohibited from using that information for any purpose other than the specific service requested by kl888.

Kl888 implements comprehensive technical and organisational security measures to protect members' personal data from unauthorised access, loss, alteration, or unintended disclosure.

Key security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and KL888's servers is encrypted using the latest TLS protocol. This ensures that even if the data is intercepted, it cannot be read by any unauthorised party.
• Encrypted Passwords: KL888 account passwords are never stored in their original form — they go through a one-way cryptographic hashing process, meaning your actual password cannot be recovered even by KL888 staff.
• Two-Factor Authentication (2FA): KL888 uses OTP (One-Time Password) via SMS to your registered Malaysian mobile number as an additional verification step during login or high-value transactions.
• Suspicious Activity Monitoring: KL888's automated intrusion detection system monitors all account activity in real time and will alert and take immediate action whenever suspicious activity patterns are detected.
• Internal Access Controls: Access to kl888 member data within our organisation is restricted to staff who require it to perform their specific duties, based on the principle of least privilege.

Kl888 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit the kl888 platform. The following are the types of cookies we use:

You can manage your cookie preferences through your browser. However, disabling essential cookies may affect how the kl888 platform functions, and you may be unable to log in or use certain features properly.

As a kl888 member and an individual protected under Malaysia's Personal Data Protection Act (PDPA) 2010, you have several important rights regarding your personal data, all of which kl888 is fully committed to honouring:

To exercise any of these rights, please contact the KL888 support team via live chat or email at support@kl888.click. We will process your request within 10 business days and inform you of the outcome.

Kl888 retains members' personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law. The following are our general data retention guidelines:

• Active Account Data: For the duration your KL888 account is active, and for 12 months following the last period of inactivity.
• Financial Transaction Records: Retained for 7 years in accordance with Malaysian legal requirements relating to accounting and financial records.
• Security Logs: Retained for 12 months for fraud detection and security audit purposes.
• Support Communication Records: Retained for 24 months to allow reference should any related issues arise at a later date.
• Deleted Data: Once deleted, your data will be fully removed from our active systems within 30 days, and from backup systems within 90 days.

Once the applicable retention period has elapsed, your personal data will be securely deleted or anonymised — meaning all personally identifiable information is removed — so it can no longer be linked back to you.

The kl888 platform is exclusively for individuals aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. Should kl888 discover that personal data of an individual under 21 has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question.

Parents or guardians who believe their minor child has registered a KL888 account without authorisation should contact our support team immediately via live chat or email at support@kl888.click. We will investigate and take appropriate action within 24 hours.

KL888 reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. The date of the most recent update is indicated at the top of this document.

For material amendments — particularly those involving changes to how we collect or use members' personal data — KL888 will notify members via in-platform notifications or email at least 7 days before the changes take effect. Continued use of the KL888 platform after the effective date of any amendment constitutes acceptance of the revised policy.

We encourage you to review this Privacy Policy periodically. If you disagree with any amendments, you have the right to close your account before the changes take effect by contacting our support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how KL888 handles your personal data, we encourage you to reach out to us directly. Our privacy team takes every enquiry seriously and is committed to providing a satisfactory response.

You can reach the kl888 support team through:

• Live Chat: Available 24 hours a day, 7 days a week within the KL888 platform. Average response time is under two minutes in Bahasa Melayu.
• Email: support@kl888.click — for detailed privacy enquiries requiring further review. Response within 1 business day.

For complaints that cannot be resolved satisfactorily through our support channels, members have the right to file a complaint with the Department of Personal Data Protection under Malaysia's Ministry of Communications and Digital, in accordance with the procedures set out under the PDPA 2010.