Kz8my Privacy Policy – Personal Data Protection for Malaysian Players

Kz8my collects your personal data through several different channels. Here is a comprehensive overview of the types of data we collect and where it comes from:

Kz8my no automatically collects identity card numbers (MyKad) or passport numbers during standard registration. Identity verification documents are only requested in specific cases, such as account verification for withdrawals exceeding a certain limit or when required by fraud prevention procedures.

The personal data we collect is used solely for legitimate purposes directly related to delivering kz8my's services to you. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying, and maintaining your kz8my account. This includes processing your registration OTP, password resets, and login session management.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks), as well as processing winnings withdrawals to the same methods in Malaysian Ringgit (MYR).
• Gaming Services Provision: Running all games you participate in — Sports Betting, Live Casino, poker, slots, and other sports wagers — including recording results and updating account balances.
• Security & Fraud Prevention: Detecting and preventing fraud, multi-account usage, collusion in poker games, bonus abuse, and other security threats to the platform and its members.
• Customer Support: Handling enquiries, complaints, and support requests you submit to the kz8my team via live chat or email.
• Legal Compliance: Fulfilling obligations required by applicable Malaysian laws and regulations, including reporting requirements related to suspicious financial activity where applicable.
• Platform Improvements: Analysing usage patterns on an aggregated and anonymised basis to understand how Malaysian players interact with kz8my, with the aim of improving the user experience, tailoring game offerings, and resolving technical issues.
• Service Communications: Sending important account-related notifications such as transaction confirmations, security alerts, and policy updates. This is not marketing — it is essential communication required to operate your account safely.
• Marketing (with your consent): If you have opted in to receive marketing communications, kz8my may send you information about promotions, bonuses, and new offers. You can withdraw this consent at any time from your account settings.

Kz8my no using your personal data to make automated decisions that significantly affect you without human review, except for preliminary fraud detection, which is always reviewed by our security team.

Kz8my does not sell, rent, or share your personal data with third parties for their own marketing purposes. However, in operating the platform, kz8my works with several categories of carefully selected third parties:

• Payment Service Providers: kz8my shares the necessary transaction information with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and banks (FPX – Maybank, CIMB) solely for the purpose of processing your deposits and withdrawals. These providers are subject to their own privacy policies and Bank Negara Malaysia regulations.
• Game Software Providers: Some games on kz8my are provided by licensed third-party software providers. Minimum data required to run the game (such as a session ID) may be shared with these providers, but not your full personal information such as your name or phone number.
• Technology Infrastructure Providers: kz8my uses cloud computing services and server infrastructure from accredited technology providers. Your data is stored on secure servers, and these providers are bound by strict confidentiality agreements with kz8my.
• Legal Authorities: kz8my may be required to disclose certain information to Malaysian authorities (such as the police or courts) if lawfully directed to do so through proper legal process. kz8my will not disclose data to authorities beyond what is legally required.

All third parties working with kz8my are required to sign data processing agreements ensuring they handle your information to security standards equivalent to kz8my's and in compliance with applicable Malaysian law.

Kz8my invests seriously in data security. The following are the layers of protection we apply to safeguard your personal and financial information:

• Data-in-Transit Encryption: All data transmitted between your browser or app and kz8my's servers is protected using TLS 1.3 with 256-bit encryption. This means that even if someone were to intercept your network traffic, they would be unable to read its contents.
• Stored Data Encryption: Sensitive data stored in kz8my's databases — including account information and transaction records — is encrypted to industry standards. Your password is never stored in plain text; it is stored as an irreversible hash.
• Internal Access Controls: Not all kz8my staff have access to all data. A role-based access control system ensures that each staff member can only access the data required for their specific duties. All access to sensitive data is logged and reviewed on a regular basis.
• 24/7 Security Monitoring: kz8my's cybersecurity team continuously monitors the platform for suspicious activity, intrusion attempts, and anomalies that may indicate security threats. All security incidents are handled in accordance with our established incident response procedures.
• Periodic Security Testing: kz8my undergoes regular penetration testing and security audits conducted by independent security experts. Any identified vulnerabilities are remediated promptly.
• Two-Factor Authentication: kz8my uses SMS OTP verification during registration, when logging in from a new device, and for sensitive transactions. This adds an extra layer of security beyond your password alone.

Kz8my uses cookies and similar tracking technologies to enhance your experience on the platform. Here are the types of cookies we use:

• Essential Cookies (Required): Required for the platform to function correctly. This includes session cookies that maintain your login status while browsing kz8my, security cookies to verify your identity, and cookies that store your language preferences. These cookies cannot be disabled as the platform will not function without them.
• Performance Cookies: Collecting anonymous information about how users interact with the kz8my platform — which pages are visited most frequently, time spent in each section, and any technical errors that occur. This data helps us identify areas of the platform that need improvement.
• Functional Cookies: Saving your preferences such as display settings, last played game, and other personal settings so you don't have to reconfigure them every time you use kz8my.

Kz8my no using third-party cookies for advertising or cross-site tracking purposes. All cookies we use are first-party cookies operated directly by kz8my.

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the kz8my platform. For more information on how to manage cookies in your browser, please refer to the help section of the browser you are using.

As a kz8my user in Malaysia, you have the following rights regarding your personal data, in accordance with the Personal Data Protection Act 2010 (PDPA):

Kz8my retains your personal data for as long as necessary to fulfil the purposes set out in this policy, or as required under Malaysian law. The following are general data retention guidelines:

• Active Account Data: For as long as your kz8my account remains active, and for a reasonable period after it becomes inactive, to facilitate reactivation should you wish to return.
• Financial Transaction Records: A minimum of 7 years from the date of transaction, in line with Malaysian accounting and financial legal requirements. This covers all deposit and withdrawal records in MYR.
• Security Logs & Activity: 12 months from the date of the record, to allow for investigation of any security incidents or complaints that may arise.
• Support Communication Records: 24 months from the date of communication, for quality control purposes and as a reference should you contact us again regarding the same issue.
• Gaming Data: Game history is retained for the duration of the active account and for 12 months after account closure, after which it is anonymised or deleted.

When the retention period expires or when data is no longer needed, kz8my will delete or anonymise it using appropriate security procedures. Deletion means the data is permanently removed from our systems. Anonymisation means all information that could identify you is stripped away, and the remaining data cannot be traced back to you.

For accounts terminated due to a breach of kz8my's terms (such as fraud or the use of multiple accounts), relevant records may be retained for a longer period to prevent re-registration by the same party.

Kz8my reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. When we make material changes to this policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a prominent notice on the kz8my homepage for at least 30 days following any changes.
• Sending notifications to the email address or phone number registered with your account for significant changes that affect your privacy rights.
• Displaying an in-platform notice upon your first login after the policy has been updated.

It is your responsibility to review this page periodically. Continued use of the kz8my platform following any changes to this Privacy Policy will be considered acceptance of the updated version.

For any questions, concerns, or requests relating to your data privacy at kz8my, please contact us: