kc88 Privacy Policy

1 Introduction

kc88 ("we", "us", "the Operator", "kc88") operates the online casino and sportsbook platform accessible at kc88.bio ("the Platform"). As the data controller for personal data processed in connection with the Platform, kc88 is committed to protecting the privacy and personal data of all players and visitors ("you", "the Data Subject").

This Privacy Policy ("Policy") explains what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you have in relation to your data. This Policy applies to all data processed in connection with your use of the kc88 platform, including account registration, deposits and withdrawals, gameplay, customer support interactions, and browsing of the kc88 website.

By registering an account on kc88 or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the kc88 Terms & Conditions.

2 Personal Data We Collect

kc88 collects personal data that is necessary to provide its services and comply with applicable regulatory obligations. The categories of personal data we collect include:

3 How We Use Your Personal Data

kc88 uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your kc88 player account, including login authentication and account security.
• Service delivery: To provide access to casino games, sportsbook, live dealer tables, and other Platform features as described in the kc88 Terms & Conditions.
• Payment processing: To process deposits and withdrawals via your selected payment method (e.g. Touch n Go eWallet, Maybank, CIMB, Public Bank), and to maintain accurate financial records.
• Identity and age verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in compliance with AML obligations and the platform's licensing requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, account takeover attempts, and other prohibited conduct as defined in the Terms & Conditions.
• Regulatory compliance: To fulfil obligations under applicable anti-money laundering legislation, gaming regulations, and to respond to lawful requests from regulatory authorities and law enforcement.
• Customer support: To respond to your queries, complaints, and support requests, and to maintain records of communications for quality assurance and dispute resolution purposes.
• Responsible gaming: To implement deposit limits, session limits, self-exclusion, and other responsible gaming measures you activate, and to proactively monitor for indicators of problem gambling behaviour.
• Platform improvement: To analyse aggregated usage data (anonymised where possible) for the purposes of improving the kc88 platform, fixing technical issues, and optimising the user experience.
• Direct marketing (where consented): To send you information about kc88 promotions, bonuses, and offers where you have provided separate consent to receive such communications. You may withdraw this consent at any time.

4 Legal Basis for Processing

kc88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the kc88 Terms & Conditions — including account creation, payment processing, and game access.
• Legal obligation: Processing required to comply with applicable laws, including AML legislation, gaming licensing requirements, and tax obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregate analytics, where our legitimate business interests are not overridden by your rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have provided freely given, specific, informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Disclosure

kc88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipient, solely as necessary to operate the Platform and fulfil our obligations:

• Payment service providers: Banks, eWallet operators (Touch n Go, Boost, GrabPay), and payment gateways necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification services used to confirm your identity and eligibility to use the Platform.
• Game providers: Licensed gaming software providers (including Evolution Gaming, Pragmatic Play, PG Soft, and others) whose platforms are integrated into kc88. These providers may receive session data necessary to deliver the game service.
• Fraud and AML screening services: Third-party services used to screen for suspicious activity, match against sanctions lists, and verify the legitimacy of financial transactions.
• Regulatory authorities: Gaming regulatory bodies, financial intelligence units, and law enforcement agencies where kc88 is legally required to make disclosures.
• Professional advisers: Legal counsel, auditors, and compliance consultants bound by professional confidentiality obligations.

6 Cookies & Tracking Technologies

kc88 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us operate the platform efficiently, remember your preferences, and analyse usage patterns.

You may control cookie settings through your browser. Note that disabling strictly necessary cookies will prevent login and core Platform functionality.

7 Data Retention

kc88 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Communications and support records: Retained for three (3) years from the date of the relevant communication.
• Technical and log data: Retained for up to twelve (12) months for security and fraud investigation purposes.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised.

8 Data Security

kc88 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Security measures include:

• 256-bit TLS (Transport Layer Security) encryption for all data transmitted between your device and the kc88 servers.
• Bcrypt hashing for all stored passwords — plain-text passwords are never stored in kc88's databases.
• Segregated storage of player financial data with restricted access controls and audit logging.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Staff access to personal data limited to those with a legitimate business need, subject to confidentiality obligations.

9 Your Data Rights

Subject to applicable law and the conditions of kc88's operating licence, you have the following rights in respect of your personal data held by kc88:

• Right of access: You may request a copy of the personal data kc88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to restriction: You may request that we restrict the processing of your data in certain circumstances, such as while a complaint is under investigation.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, and to direct marketing at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, contact kc88 at the details in Section 13. kc88 will respond to verified requests within 30 days. Note that certain rights may be limited where kc88 has overriding legal obligations — for example, AML record-keeping requirements take precedence over erasure requests for transaction data within the mandatory retention period.

10 International Data Transfers

kc88 may transfer personal data to game providers, payment processors, and infrastructure providers located outside Malaysia. Where such transfers occur, kc88 takes appropriate steps to ensure your data is protected to a standard equivalent to applicable data protection requirements, including through the use of standard contractual clauses or ensuring the recipient operates in a jurisdiction with an adequate level of data protection. You may request information about the safeguards applied to specific transfers by contacting kc88 at the details in Section 13.

11 Children's Privacy

The kc88 Platform is strictly prohibited for persons under 21 years of age. kc88 does not knowingly collect personal data from persons under 21. If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to close the account, return any deposited funds through the original payment method, and delete the associated personal data. If you believe a minor has registered a kc88 account, please notify us immediately at the contact details in Section 13.

12 Changes to This Privacy Policy

kc88 reserves the right to update or amend this Privacy Policy at any time. Changes will be effective from the date of publication on the Platform. Where changes are material, kc88 will use reasonable efforts to notify registered players via email or in-platform notification prior to the changes taking effect. Your continued use of the kc88 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. The date of the most recent revision is stated at the top of this Policy.

13 Contact & Data Subject Requests

For any queries regarding this Privacy Policy, to exercise your data rights, or to raise a privacy concern, please contact the kc88 Data Protection team:

Email: [email protected] (plain text — not a clickable link)
Subject line: Privacy Policy Enquiry / Data Subject Request
Support hours: 09:00 – 02:00 MYT daily

kc88 will acknowledge your request within five (5) business days and respond in full within thirty (30) days. Where a request is complex or involves multiple data types, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.