Privacy Policy — KK918
At KK918, we treat the privacy and security of your personal data with the same seriousness as we treat the security of your funds. This Privacy Policy explains what personal information we collect from users of the KK918 platform, why we collect it, how we use and protect it, and the rights you have in relation to your data. Please read this document carefully before registering an account or providing any personal information to KK918.
Our Privacy Commitments
How KK918 Protects Your Data
Six core data protection commitments that underpin every aspect of how KK918 handles your personal information.
All data transmitted between your device and the KK918 platform is encrypted using TLS 1.3 with AES-256 cipher suites. Data stored on our servers is encrypted at rest. Your personal and financial information is protected at every stage of its journey.
KK918 does not sell, rent, or trade your personal data to third parties for marketing purposes. Your information is used only for the purposes described in this Privacy Policy — principally account management, payment processing, fraud prevention, and regulatory compliance.
You have the right to access, correct, export, and request deletion of your personal data at any time. KK918 maintains clear processes for handling all data subject requests and commits to responding within 30 calendar days of receipt.
Personal data collected by KK918 is used strictly for the purposes disclosed at the time of collection. We do not repurpose your data for unrelated activities without obtaining your explicit consent in advance.
KK918 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and anti-money laundering obligations. We publish our standard data retention schedule in Section 9 of this Policy.
In the unlikely event of a confirmed personal data breach that poses a risk to the rights and freedoms of affected users, KK918 will notify impacted individuals without undue delay and will take all reasonably practicable steps to mitigate the breach and prevent recurrence.
1Introduction
This Privacy Policy (hereinafter referred to as "the Policy" or "this Policy") is issued by KK918 (hereinafter referred to as "KK918", "we", "us", or "the Platform") and governs the collection, processing, storage, disclosure, and protection of personal data in connection with your use of the KK918 online gaming platform, accessible at kk918.cam, and all associated services (collectively, "the Services").
KK918 is committed to handling personal data responsibly, transparently, and in accordance with applicable international data protection standards. We recognise that the trust you place in us when you provide your personal information is something we must earn and maintain through consistent and ethical data management practices.
This Policy should be read alongside our Terms and Conditions, which govern the overall use of the KK918 platform. By registering an account, depositing funds, or otherwise using any part of the KK918 Services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein.
2Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, government-issued identification number, payment account details, device identifiers, and IP address. |
| "Processing" | Any operation performed on personal data, whether automated or manual, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction. |
| "Data Controller" | KK918, as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | Any third-party service provider that processes personal data on behalf of KK918 in accordance with documented instructions and data processing agreements. |
| "Data Subject" | Any identified or identifiable natural person whose personal data is processed by KK918 — in most cases, a registered User of the KK918 Platform. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of a data subject's agreement to the processing of their personal data for one or more specific purposes. |
| "KYC" | Know Your Customer — the identity verification process by which KK918 confirms the identity, age, and eligibility of registered Users, as required by applicable anti-money laundering and regulatory standards. |
3Personal Data We Collect
KK918 collects personal data that is necessary and proportionate to the purposes for which it is collected. The categories of personal data we collect include:
- Full legal name as it appears on your government-issued identity document
- Date of birth (for age verification — minimum age is 21)
- Gender (optional, for personalisation purposes)
- Nationality and country of residence
- Government-issued ID number (MyKad, Passport, or Driver's Licence — collected during KYC verification)
- Username and encrypted password hash
- Email address
- Mobile phone number
- Residential address (collected during KYC — may include street address, city, postcode, and state/region)
- Payment method details (e-wallet account identifiers for Touch 'n Go eWallet, Boost, or GrabPay; bank account name and number for FPX/DuitNow transactions; cryptocurrency wallet addresses for BTC, ETH, USDT, or LTC deposits)
- Transaction history — deposit and withdrawal records, including amounts in MYR, timestamps, and method used
- Source-of-funds declarations where requested for AML compliance
- IP address and approximate geolocation derived from IP
- Device type, operating system, browser type and version
- Session duration, pages visited, and interaction data on the KK918 Platform
- Betting and gaming history — wagers placed, games played, outcomes, and balance changes
- Login and logout timestamps
- Scanned copy or photograph of government-issued photo ID (MyKad, Passport, or Driver's Licence)
- Proof of address document (utility bill, bank statement, or official correspondence dated within three months)
- Selfie photograph of the User holding their identity document
- Records of communications between you and KK918 customer support, including live chat transcripts, WhatsApp messages, and email correspondence
- Feedback, complaints, and survey responses submitted to KK918
4How We Collect Personal Data
KK918 collects personal data through the following channels and mechanisms:
- Direct provision by you: When you register an account, complete KYC verification, submit a deposit or withdrawal request, contact customer support, or participate in a promotion, you provide data to us directly.
- Automated technical collection: When you access and use the KK918 platform, certain technical and usage data is collected automatically by our servers and analytics infrastructure, including IP addresses, session data, and device information.
- Payment service providers: When you make a deposit or withdrawal via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or a Malaysian bank transfer, relevant transaction confirmation data is shared with KK918 by the payment provider to facilitate processing and reconciliation.
- Identity verification providers: Where KK918 uses third-party KYC service providers to assist with document verification, those providers may share verification results and associated data with KK918.
- Cookies and similar technologies: KK918 uses cookies and similar tracking technologies to collect session data, improve platform performance, and analyse user behaviour. For full details, see Section 11.
5Purposes of Processing
KK918 processes your personal data for the following specific purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Identity data, contact data, login credentials |
| Age and identity verification (KYC) | Identity data, KYC documents, date of birth |
| Payment processing and financial reconciliation | Financial data, identity data, contact data |
| Fraud prevention and anti-money laundering compliance | All categories where relevant |
| Customer support and complaint resolution | Communications data, identity data, financial data |
| Platform security and technical operations | Technical and usage data, IP address |
| Responsible gambling compliance | Gaming history, financial data, identity data |
| Promotion administration and VIP programme management | Identity data, financial data, gaming history |
| Marketing communications (with consent) | Contact data, preferences |
| Regulatory reporting and legal obligations | All categories where required by law |
6Legal Basis for Processing
KK918 processes your personal data on the following legal bases, as applicable to each category of processing activity:
- Contractual necessity: Processing required to perform the contract between KK918 and you — including account management, payment processing, and KYC verification — is carried out on the basis of contractual necessity. Without this processing, KK918 cannot provide the Services to you.
- Legal obligation: Processing required to comply with applicable law — including anti-money laundering (AML) obligations, identity verification requirements, and regulatory reporting — is carried out on the basis of legal obligation.
- Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gambling monitoring, and internal analytics is conducted on the basis of KK918's legitimate interests in operating a secure, compliant, and well-functioning gaming platform, provided those interests are not overridden by your fundamental rights and freedoms.
- Consent: Where KK918 seeks to send you optional marketing communications or to use non-essential cookies, we will obtain your prior consent. You may withdraw any consent you have given at any time by contacting our support team or updating your account preferences.
7Disclosure of Personal Data to Third Parties
KK918 does not sell your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to binding confidentiality and data processing obligations:
- Payment service providers: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong Bank, RHB Bank), and cryptocurrency network operators — to process your deposits and withdrawals.
- KYC and identity verification providers: Third-party providers engaged by KK918 to assist with document verification and identity authentication.
- IT and platform infrastructure providers: Cloud hosting, database management, and cybersecurity service providers who process data on our behalf under data processing agreements.
- Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory instruction, KK918 may disclose personal data to competent authorities without prior notice to you.
- Professional advisers: Legal counsel, auditors, and compliance advisers who require access to personal data in connection with the provision of professional services to KK918, subject to professional secrecy obligations.
8International Data Transfers
As an internationally licensed online gaming platform, KK918 operates infrastructure across multiple jurisdictions. This means that your personal data may be transferred to, stored in, and processed in countries outside of Malaysia. Where such transfers occur, KK918 ensures that appropriate safeguards are in place to protect your personal data, including the use of standard contractual clauses, data processing agreements, and transfers to jurisdictions that maintain adequate data protection standards.
By using the KK918 Platform and providing your personal data, you acknowledge that your information may be transferred internationally as described in this section. If you have questions about the specific safeguards applicable to your data, please contact our support team.
9Data Retention
KK918 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve disputes or enforce our agreements. Our standard data retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years after account closure |
| KYC verification documents | 5 years from the date of document submission or account closure (whichever is later), in accordance with AML requirements |
| Financial transaction records | 7 years from the date of the transaction, in accordance with applicable financial record-keeping obligations |
| Customer support communications | 3 years from the date of the last communication |
| Marketing preferences and consent records | Until consent is withdrawn, plus 1 year for evidential purposes |
| Technical and usage logs | 13 months from the date of collection |
| Cookie data (analytical) | Up to 13 months, as set out in Section 11 |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with KK918's data deletion procedures.
10Security Measures
KK918 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
- TLS 1.3 encryption for all data transmitted between your device and the KK918 platform
- AES-256 encryption at rest for all stored personal and financial data
- Multi-factor authentication options for account access
- Regular penetration testing and vulnerability assessments conducted by independent security specialists
- Role-based access controls limiting staff access to personal data on a strict need-to-know basis
- Segregated player fund accounts ensuring financial data separation from operational accounts
- Incident response procedures including defined breach notification processes
While KK918 takes all reasonably practicable steps to protect your personal data, no system of data transmission or storage can be guaranteed to be completely secure. You are responsible for maintaining the security of your own account credentials and for ensuring that your device is not accessible to unauthorised users.
11Cookies & Tracking Technologies
KK918 uses cookies and similar tracking technologies (such as web beacons and pixel tags) to operate the Platform, improve user experience, and analyse usage patterns. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies are widely used to enable websites to function correctly and to provide analytical and functional information to site operators.
| Cookie Type | Category | Purpose |
|---|---|---|
| Session cookies | Maintain your logged-in session and enable core platform functionality. These cookies are deleted when you close your browser. | |
| Authentication cookies | Verify your identity during each session to prevent unauthorised access to your account. | |
| Security cookies | Support fraud detection and prevention mechanisms, including monitoring for unusual login patterns. | |
| Analytics cookies | Collect aggregated information about how users interact with the KK918 Platform to help us improve usability and performance. Data collected is anonymised where possible. | |
| Preference cookies | Remember your preferences such as language settings and preferred payment method to provide a more personalised experience on return visits. |
You can control the use of non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. However, please note that disabling essential cookies may impair the functionality of the KK918 Platform and prevent you from accessing certain features, including logging into your account. Essential cookies cannot be disabled without affecting core platform operations.
12Your Data Protection Rights
Subject to applicable law and any overriding legitimate interests or legal obligations of KK918, you have the following rights in respect of your personal data:
Request a copy of the personal data KK918 holds about you, along with information about how it is being processed.
Request correction of any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Request that we restrict processing of your data in certain circumstances, such as while we investigate a rectification request.
Request receipt of your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
Object to processing based on KK918's legitimate interests, including direct marketing, where your interests override ours.
Withdraw consent for any processing activity based solely on consent (such as optional marketing) at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact our data protection team at the email address listed in Section 15. KK918 will respond to all data subject requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, with prior notice to you.
Please note that some rights may be limited where KK918 is required to retain data to comply with AML regulations, licensing obligations, or other legal requirements that override your data subject rights.
13Data Protection for Minors
The KK918 Platform is strictly intended for adults aged 21 and above. KK918 does not knowingly collect personal data from individuals under the age of 21. Registration by minors is expressly prohibited and constitutes a breach of the KK918 Terms and Conditions.
Where KK918 becomes aware or reasonably suspects that personal data has been collected from an individual under the age of 21 — whether through age verification anomalies, third-party reports, or any other mechanism — the following actions will be taken without undue delay:
- The relevant account will be immediately suspended pending investigation.
- All personal data associated with the account will be reviewed and, where the minor status is confirmed, deleted in accordance with our data deletion procedures.
- Any funds in the account will be returned via the original deposit method.
- The incident will be reported to relevant authorities where required by applicable law.
If you are aware of any individual under the age of 21 who has registered on the KK918 Platform, please notify our customer support team immediately.
14Amendments to This Policy
KK918 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing activities, or business practices. Material changes to this Policy — particularly those that affect your rights or the scope of data processing — will be communicated to registered Users via the email address associated with their account, or through a prominent notice on the KK918 Platform, at least seven (7) days prior to the changes taking effect.
The "Last Updated" date at the top of this Policy will be revised each time a change is made. We encourage you to review this Policy periodically to remain informed of how KK918 handles your personal data. Your continued use of the Platform after the effective date of any amended Policy constitutes your acknowledgement of the changes.
The current version of this Privacy Policy is always available at kk918.cam/privacy-policy.
15Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by KK918, please contact us using the details below. Our team handles all privacy-related enquiries with priority and responds within 30 calendar days.
Data Protection Enquiries
For all data subject requests, privacy concerns, and consent withdrawals, please email our support team clearly marked "Privacy Request" in the subject line.
Email: [email protected]
24/7 Live Support
For urgent privacy concerns — such as suspected unauthorised account access — our live chat support team is available around the clock in English, Bahasa Melayu, and Mandarin.
Average response time: under 5 minutes via live chat.
Your Privacy is in Good Hands
Questions about how KK918 handles your data? Our support team is available 24/7 in English, Bahasa Melayu, and Mandarin. Strictly for players aged 21 and above only.