Kclub8 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy ("Policy") is published by kclub8, an online entertainment platform operated under the domain kclub8.best. This document outlines our privacy practices — how we collect, use, disclose, transfer, and protect your personal information when you use the kclub8 platform.

This Policy is drafted to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and its subsidiary regulations. As a responsible data controller, kclub8 is committed to ensuring that all processing of members' personal data is carried out in a lawful, fair, and transparent manner.

By registering an account with kclub8 or using our platform, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree with any part of this Policy, you should not use the kclub8 platform.

Kclub8 collects several categories of personal data from its members. Below is a summary table describing the data types, the basis for collection, and the legal ground for each category:

Kclub8 does not collect sensitive data such as health information, religious beliefs, political views, or biometric data. We also do not collect your identity card number or passport number unless required for identity verification in cases involving large withdrawals or fraud complaints.

Kclub8 collects personal data through several different channels. It is important that you understand how and when your data is collected so you can make informed decisions about your use of our platform.

Direct collection — data you provide to us voluntarily:

• When filling out the kclub8 account registration form
• When making a deposit using Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX
• When submitting a withdrawal request to your bank account or e-wallet
• When contacting the kclub8 support team via live chat or email
• When filling out complaint forms, feedback submissions, or satisfaction surveys
• When participating in promotions or contests that require separate registration

Automatic collection — data collected automatically while you use the platform:

• Platform activity logs — games played, time spent playing, bet amounts, wins and losses
• Device and connection information — phone model, operating system, web browser, screen resolution
• IP address and approximate location based on IP for security and fraud prevention purposes
• Cookie data and other tracking technologies — described in further detail in Section 9
• Timestamps of all transactions, logins, and in-platform actions

Kclub8 does not purchase, acquire, or receive your personal data from third-party sources without your knowledge and consent. All personal data we hold comes directly from your interactions with our platform.

Kclub8 uses members' personal data solely for legitimate, stated purposes. We do not process your data in any way that is inconsistent with the original purpose of collection. The following is a complete list of purposes for which personal data is used at kclub8:

• Account management: Creating, verifying, and maintaining your member account on the kclub8 platform. This includes the OTP verification process during login and password resets.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, and other accepted payment methods; as well as processing fund withdrawals to your account.
• Service fulfilment: Enables you to access and enjoy all games and services on the kclub8 platform — including slots, live baccarat, football betting, badminton, progressive jackpots, and exclusive promotions.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, multiple account creation, bonus abuse, and other unlawful activities that may harm the platform or other members.
• Customer support: Processing and resolving complaints, enquiries, and assistance requests submitted to the kclub8 support team.
• Important communications: Sending important notifications related to your account, such as transaction confirmations, security alerts, and notices regarding changes to our Terms or Privacy Policy.
• Marketing communications: With your consent, we may send you information about kclub8 promotions, bonuses, new games, and exclusive offers. You may opt out of marketing communications at any time.
• Platform improvements: Analysing platform usage patterns to identify technical issues, understand the preferences of Malaysian players, and plan improvements to the user experience.
• Legal compliance: To fulfil the legal and regulatory obligations applicable to our platform's operations, including compliance with PDPA 2010 and anti-money laundering laws.

Kclub8 does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes. However, there are limited situations where sharing data with certain parties is necessary to operate the kclub8 platform effectively:

• Payment providers: Payment processing platforms such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX receive the transaction information required to process your deposits and withdrawals. These providers maintain their own privacy policies and security standards that they are obligated to comply with.
• Game providers: Companies such as Pragmatic Play, PG Soft, NetEnt, and other game software providers may process your game session data to enable gameplay. Data shared is limited strictly to what is required for game functionality.
• Technology service providers: Server infrastructure providers, cybersecurity services, and other technology vendors that help us operate the platform may process your technical data within a limited scope and subject to strict confidentiality agreements.
• Legal authorities: kclub8 will disclose your personal data to the relevant authorities if required by Malaysian law, a court order, or a valid official investigation. We will not disclose more data than is required by such an order.

Any third party that receives kclub8 members' personal data is bound by a data processing agreement that restricts them from using that data for any purpose other than what has been mutually agreed upon. kclub8 conducts due diligence checks on all third-party vendors before sharing any member data.

Kclub8 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure. The key security measures we employ include:

• 256-bit SSL/TLS encryption: All communications between your browser or app and kclub8's servers are encrypted using the highest encryption standards — the same standard used by Maybank, CIMB, and other leading Malaysian financial institutions.
• Data encryption at rest: Sensitive data such as passwords and payment information is stored in encrypted form using cryptographic hashing algorithms that cannot be reversed to their original form.
• Role-based access control: Access to systems containing members' personal data is strictly limited to staff who require it to carry out their job responsibilities. All access is logged and audited.
• Two-factor authentication: All internal kclub8 staff accounts with access to member data are protected with two-factor authentication (2FA) to prevent unauthorised access even in the event of a compromised password.
• 24/7 security monitoring: kclub8's automated security monitoring system operates around the clock to detect suspicious activity, intrusion attempts, or unusual usage patterns.
• Regular penetration testing: kclub8 conducts regular security assessments and penetration tests by independent security experts to identify and address system vulnerabilities before they can be exploited.
• Secure data backup: Member data is backed up regularly and stored in a secure, separate location to ensure data recovery is possible in the event of a technical incident.

While kclub8 takes all reasonable steps to protect your data, no online security system can be guaranteed to be 100% secure at all times. In the event of a data breach affecting members, kclub8 is committed to notifying affected members within a reasonable timeframe and taking immediate steps to contain and remediate the situation.

Kclub8 does not retain your personal data longer than is necessary for the purpose for which it was collected. Different retention periods apply to different categories of data:

• Active account data: Retained for as long as your account remains active on kclub8. "Active" means you have logged in or made a transaction within the past 24 months.
• Financial transaction data: Retained for seven (7) years following each transaction, in line with Malaysian accounting and anti-money laundering legal requirements.
• Security and audit logs: Retained for two (2) years to enable investigation of security incidents if required.
• Customer support records: Retained for three (3) years after a case is resolved, for reference should the issue recur.
• Inactive accounts: Personal data for accounts that have been inactive for more than 24 months will be anonymised or deleted, subject to any applicable legal retention obligations.
• Marketing data: Retained until you withdraw consent to receive marketing communications, after which your data will be removed from our mailing list within 30 days.

Once the applicable retention period has lapsed, your personal data will be securely deleted or anonymised in a manner that ensures it can no longer be linked back to you as an individual. The deletion process uses methods that ensure the data cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010, you as a data subject have legally protected rights regarding your personal data processed by kclub8. kclub8 fully respects these rights:

To exercise any of the rights above, contact kclub8's Privacy Officer by email at support@kclub8.best or via the platform's live chat. Include your account username and specific details of your request. kclub8 will process valid requests within 14 business days.

If you believe kclub8 has not processed your personal data in accordance with applicable law, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia.

The kclub8 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and collect analytics data for platform improvements. The following explains the types of cookies used:

• Essential session cookies: These cookies are required for the platform to function properly. They manage your login session, maintain game state, and ensure transactions are processed securely. This type of cookie cannot be disabled without affecting the platform's core functionality.
• Preference cookies: Saving your preferences such as preferred language, display settings, and favourite games so you don't have to reconfigure them each time you log in.
• Analytics cookies: Collecting information about how you use the platform — pages visited, time spent, and features used — to help us understand and improve the user experience.
• Security cookies: Helps detect suspicious activity, unauthorised login attempts, and usage patterns that may indicate fraud or platform abuse.

You can manage your cookie settings through your web browser. Most browsers allow you to view, delete, or block cookies. However, disabling certain cookies may affect the functionality of the kclub8 platform and your gaming experience.

The kclub8 platform is strictly for adults aged 18 and above. kclub8 does not knowingly collect or process personal data from individuals under the age of 18.

During the registration process, you are required to confirm that you are 18 years of age or older. Should kclub8 discover that we have inadvertently collected data from an underage individual, we will take immediate steps to:

• Suspend access to the account in question immediately
• Delete all personal data associated with the individual
• Refunding any funds remaining in that account
• Report the incident to the relevant authorities where required

Parents or guardians who discover that their minor child has registered an account on kclub8 are advised to contact our support team immediately at support@kclub8.best so that immediate action can be taken.

Kclub8 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or new platform features. We will notify you of significant changes through:

• A clear in-platform notification upon your next login
• Updating the "Last updated" date displayed at the top of this page
• Email or SMS to members affected by significant policy changes (where applicable)

Continued use of the kclub8 platform after an amended Privacy Policy takes effect constitutes acceptance of the updated Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your data before the amendment's effective date.

Previous versions of this Privacy Policy are available upon request through kclub8 customer support for your reference.

Kclub8 has appointed a Privacy Officer responsible for ensuring compliance with PDPA 2010 and handling all privacy-related enquiries, requests, and complaints. For any matter relating to this Privacy Policy or your rights as a data subject, you may contact us via:

• Live Chat: Available 24/7 within the kclub8 platform — the fastest way to reach us for urgent enquiries. Please indicate that your enquiry relates to the "Privacy Policy" or "Data Request" so it can be directed to our Privacy Officer.
• Email: support@kclub8.best — include "Privacy Request" in your email subject line. Responses are provided within 2 to 4 hours on business days, and within 48 hours on weekends.

When submitting a personal data request, please include the following to help us process it faster: your kclub8 account username, the type of request (access, correction, deletion, etc.), and a brief description of your request. Identity verification may be required before we can process certain requests, particularly data deletion requests.