KKBet Privacy Policy

1. Introduction

KKBet takes the privacy of its members seriously. We operate an online gaming platform serving eligible adult users, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other parts of Malaysia. The handling of your personal data is governed by the principles set out in this Policy and by applicable data protection obligations under our international operating licence framework.

This Policy should be read alongside the KKBet Terms & Conditions and Responsible Gambling Policy. Together, these documents form the complete framework governing your relationship with the KKBet platform.

If you have any questions about this Policy or your personal data, please contact our Data Protection team using the details provided in Section 15.

2. Definitions

• "Personal Data" means any information that identifies or could reasonably identify a natural person, including name, email address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" means KKBet, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of KKBet under a written contractual arrangement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data.
• "Sensitive Data" means Personal Data revealing racial or ethnic origin, political opinions, religious beliefs, health information, or financial account credentials, requiring a heightened level of protection.
• "Cookies" means small data files placed on your device by the Platform for functional, analytical, or performance purposes.

3. Categories of Data We Collect

KKBet collects the following categories of Personal Data in the course of providing its services:

KKBet does not collect unnecessary Personal Data. Where a specific data category is no longer required for its stated purpose, it will be deleted or anonymised in accordance with the retention schedule in Section 9.

4. How We Collect Your Data

KKBet collects Personal Data through the following channels:

4.1 Direct Collection

Data provided directly by you during the registration process, identity verification (KYC), deposit or withdrawal requests, promotional participation, customer support interactions, and voluntary survey responses.

4.2 Automated Collection

Technical and usage data collected automatically as you interact with the Platform, including via cookies, server logs, session tracking, and device fingerprinting for security purposes.

4.3 Third-Party Sources

Identity verification data obtained from accredited third-party KYC service providers. Payment confirmation data received from authorised Malaysian payment processors, including Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX. Fraud and sanctions screening data from compliance databases maintained by licensed third-party providers.

5. How We Use Your Data (Data Processing)

KKBet processes your Personal Data for the following purposes:

1. 5.1 Account Management: To create, maintain, and administer your KKBet account, including authentication, balance management, and account history.
2. 5.2 Identity and Age Verification: To confirm that all registered members meet the minimum age requirement of 21 years and to verify identity as required by KYC obligations.
3. 5.3 Payment Processing: To facilitate MYR deposits and withdrawals through approved Malaysian payment channels and to maintain accurate financial records.
4. 5.4 Responsible Gambling: To monitor account activity for indicators of problem gambling behaviour, to apply member-requested deposit limits and self-exclusion tools, and to fulfil responsible gambling obligations under our operating licence.
5. 5.5 Fraud Prevention and Security: To detect and prevent fraudulent account activity, money laundering, identity theft, and other prohibited conduct as defined in the KKBet Terms & Conditions.
6. 5.6 Regulatory Compliance: To meet anti-money laundering (AML), counter-terrorism financing (CTF), and other applicable legal and licensing obligations.
7. 5.7 Customer Support: To respond to enquiries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
8. 5.8 Platform Improvement: To analyse usage patterns and platform performance data in aggregate form to improve the KKBet user experience.
9. 5.9 Marketing Communications: To send promotional offers, bonus notifications, and relevant platform updates to members who have not opted out of marketing communications. Marketing preferences can be updated at any time through account settings.

6. Legal Basis for Processing

KKBet relies on the following legal bases to process your Personal Data:

• Contractual Necessity: Processing required to fulfil our obligations under the KKBet Terms & Conditions, including account management, payments, and service delivery.
• Legal Obligation: Processing required to comply with AML, CTF, KYC, age verification, and other applicable regulatory requirements.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gambling monitoring, and platform improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where your explicit opt-in consent has been obtained. You may withdraw consent at any time.

7. Data Sharing and Disclosure

KKBet does not sell, rent, or trade your Personal Data to any third party for commercial purposes. Personal Data may be shared only in the following limited circumstances:

7.1 Service Processors

KKBet engages third-party processors to assist with payment processing (including Malaysian e-wallet and banking integrations), identity verification, fraud screening, platform hosting, and customer support infrastructure. All processors are bound by contractual data protection agreements that restrict them from using your data for any purpose beyond the specific service they provide to KKBet.

7.2 Regulatory Authorities

KKBet may disclose Personal Data to relevant regulatory bodies, licensing authorities, law enforcement agencies, or financial intelligence units where required by applicable law or where KKBet has reasonable grounds to believe disclosure is necessary to prevent, detect, or report a crime.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of business assets, Personal Data held by KKBet may be transferred to a successor entity, subject to equivalent data protection standards. Members will be notified of any such transfer that materially affects their data rights.

8. Cookies and Tracking Technologies

KKBet uses cookies and similar tracking technologies to support platform functionality, security, and analytical purposes. The following cookie categories are in use:

• Essential Cookies: Required for basic platform functionality, including session authentication, payment gateway integration, and security protocols. These cannot be disabled without impairing platform use.
• Performance Cookies: Used to collect aggregated and anonymised data about how members interact with the Platform, enabling KKBet to identify performance issues and make improvements.
• Functional Cookies: Store member preferences such as language settings, preferred game categories, and session options to provide a more personalised experience.
• Security Cookies: Support device fingerprinting and anomaly detection to prevent account takeover and fraudulent login attempts.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core KKBet platform but may reduce personalisation features.

9. Data Retention

KKBet retains Personal Data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of the active account relationship.
• Closed Account Data (Identity and Financial Records): Retained for a minimum of five (5) years following account closure, in compliance with AML and KYC retention obligations.
• Transaction Records: Retained for a minimum of five (5) years in accordance with applicable financial record-keeping requirements.
• Support Communications: Retained for three (3) years from the date of the last interaction, or longer where required for ongoing dispute resolution.
• Technical and Usage Data: Retained in identifiable form for up to twelve (12) months; thereafter anonymised or deleted.
• Marketing Preferences: Retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, Personal Data is securely deleted, anonymised, or archived in a non-retrievable format.

10. Data Security

KKBet implements appropriate technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption across all data transmission channels.
• Access controls restricting Personal Data to authorised personnel on a need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability management processes.
• Two-factor authentication options for member account access.
• Encrypted database storage for sensitive identity and financial records.
• Incident response procedures for timely detection, containment, and notification of data security incidents.

No data transmission over the internet can be guaranteed as entirely secure. While KKBet takes all reasonable precautions, members are also responsible for maintaining the security of their own account credentials.

11. Your Data Rights

Subject to applicable legal constraints, KKBet recognises and supports the following personal data rights for all registered members:

To exercise any of the above rights, please submit a written request to the KKBet support team via live chat or email. KKBet will respond within 30 days of receiving a valid request. We may require identity verification before fulfilling a data rights request to protect against unauthorised disclosure.

12. Children's Privacy and Age Restrictions

The KKBet platform is strictly intended for adults aged 21 years and above. KKBet does not knowingly collect, process, or retain Personal Data relating to individuals under the age of 21. Age verification is conducted as part of the KYC registration process.

If KKBet becomes aware that Personal Data has been collected from an individual under the age of 21, that data will be deleted immediately and the associated account will be closed. Any funds deposited by an underage individual will be returned through the original payment channel, subject to applicable verification procedures.

13. Cross-Border Data Transfers

KKBet's platform infrastructure and data processing operations may involve the transfer of Personal Data to servers or service providers located outside Malaysia. Where such transfers occur, KKBet takes steps to ensure that appropriate safeguards are in place, including:

• Binding contractual data protection clauses with all international processors;
• Transfer only to processors operating in jurisdictions with recognised data protection standards;
• Restriction of transferred data to the minimum necessary for the stated processing purpose.

Malaysian payment data processed through local channels — including Maybank2u, CIMB Clicks, Public Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay — is handled in accordance with applicable Malaysian banking and payment system regulations.

14. Amendments to This Policy

KKBet reserves the right to update or amend this Privacy Policy at any time. Where material changes are made to the way your Personal Data is processed, KKBet will provide notice through a platform notification, an account email, or an updated "Last Updated" date on this page.

Your continued use of the KKBet platform following publication of an updated Policy constitutes acceptance of the revised terms. If you disagree with a material amendment, you should cease using the platform and submit a data deletion request as described in Section 11.

15. Contact Us

For all privacy-related enquiries, data rights requests, or concerns regarding KKBet's handling of your Personal Data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the KKBet platform.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line.
• Response Commitment: KKBet aims to acknowledge all privacy-related contacts within 72 hours and to provide a substantive response within 30 calendar days.

KKBet's support team serves members across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions. All privacy communications are handled in English.