PDPA 2010 Compliant

KC88 Privacy Policy – Our Commitment to Protecting Your Personal Data

At KC88, your privacy is more than a legal obligation — it is a moral responsibility we take to heart. Find out exactly how we collect, use and protect the personal data of every Malaysian member.

Updated: 1 January 2026  ·  Malaysia – PDPA 2010
256-bit SSL
Full Encryption
PDPA 2010
Full Compliance
No Data Selling
To Third Parties
Full Control
In Your Hands
Fully Encrypted Data
500,000+ Members Protected
Regular Security Audits
24/7 Privacy Support
KC88's Six Core Privacy Protection Principles

The principles behind every decision we make regarding our members' personal data.

Minimum Data Collection
KC88 only collects personal data that is strictly necessary for the stated purposes. We do not collect information that is excessive or irrelevant to the services we provide to Malaysian members.
Full Transparency
We don't hide how your data is used. This KC88 Privacy Policy is written in plain, easy-to-understand language — not confusing legal jargon — so every member knows exactly what happens to their data.
Advanced Technical Protection
All KC88 data is protected by 256-bit SSL encryption, multi-layered firewall systems, real-time threat monitoring, and strict access controls. KC88's server infrastructure is audited periodically by independent security parties.
Guaranteed Member Rights
As a KC88 member, you have the full right to access, correct, transfer or request the deletion of your personal data at any time — in accordance with the provisions of Malaysia's Personal Data Protection Act 2010.
No Sale of Data to Third Parties
KC88 has never and will never sell, rent, or disclose members' personal data to any third party for commercial purposes. Your data belongs to you — it is not our business commodity.
Data Retention & Deletion Policy
KC88 does not retain data longer than necessary. Accounts that have been inactive for 5 years will have their data automatically deleted, unless a longer retention period is required by applicable Malaysian law.
1
Introduction – KC88's Commitment to Your Privacy

Welcome to the KC88 Privacy Policy page. This document clearly and comprehensively explains how KC88 ("we", "the Platform") collects, processes, stores and protects the personal data of every individual who uses our platform, including all registered members in Malaysia.

KC88 understands that you trust us with your personal information when you register and play on our platform — whether you're enjoying live baccarat, jackpot slots, poker, blackjack, or placing bets on the Malaysia Super League and EPL. We take that trust seriously.

This Privacy Policy takes effect on 1 January 2026 and applies to all users of the KC88 platform, including website visitors, registered members, and former members whose data remains within the permitted retention period. This Policy should be read together with KC88 Terms & Conditions.

Legal Basis: The KC88 Privacy Policy is prepared in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and the Personal Data Protection Principles established thereunder. Compliance with PDPA 2010 is KC88's foremost priority in every aspect of data handling.

2
Personal Data We Collect

KC88 collects your personal data in various situations when you interact with our platform. The following are the types of data we may collect:

Data CategoryExample InformationPurpose of Collection
Identification DataFull name, IC/passport number, date of birth, genderIdentity verification (KYC), fraud prevention
Contact DataEmail address, phone number, residential addressAccount communications, transaction notifications
Financial DataBank account number, eWallet details (TNG, GrabPay, DuitNow), transaction historyProcessing deposits & withdrawals, AML compliance
Usage DataGame history, betting records, account activity logsService improvement, fraud detection
Technical DataIP address, browser type, operating system, device IDAccount security, unauthorised access detection
Cookie DataSession cookies, preference cookies, analytics cookiesPlatform functionality, user experience improvement

KC88 does not collect information falling under sensitive data categories — such as health data, religious beliefs, sexual orientation or criminal records — unless specifically required by applicable Malaysian law.

3
How KC88 Uses Your Personal Data

KC88 uses your personal data only for legitimate purposes that you have consented to, or as permitted under Malaysian law. The following are the primary purposes for which your data is used:

  • Account Management: Creating, maintaining and managing your KC88 account, including the login process, identity verification and profile updates.
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX (Maybank2u, CIMB Clicks), as well as your withdrawal requests.
  • KYC & AML Verification: To fulfil Know Your Customer (KYC) requirements and Anti-Money Laundering (AML) compliance obligations as prescribed under Malaysian law.
  • Customer Support: Enables KC88's 24/7 support team to assist you more effectively with enquiries, complaints, or technical requests.
  • Platform Communications: Sending important account notifications, relevant KC88 promotions, terms updates and security information.
  • Fraud Prevention & Security: Detecting and preventing fraudulent activity, multi-account usage, collusion or any other misuse of the KC88 platform.
  • Service Improvement: Analysing aggregated usage patterns to improve platform design, speed and the overall member experience.
  • Legal Compliance: To comply with legal obligations, regulations, or directives issued by relevant Malaysian regulatory authorities.

Limited Purpose Principle: KC88 adheres to the principle of purpose limitation — we will not use your data for any purpose beyond those stated above without first obtaining your renewed consent.

4
Data Sharing with Third Parties

KC88 does not sell, rent or disclose your personal data to third parties for marketing or commercial purposes. However, in certain limited circumstances, KC88 may need to share your data with the following parties:

  • Payment Service Provider: Payment processors such as Touch 'n Go, DuitNow, GrabPay and the FPX network need to receive the relevant transaction details in order to process your deposits and withdrawals.
  • Technology Service Providers: Cloud server providers, cybersecurity services and game suppliers (such as Evolution Gaming, Pragmatic Play) that support KC88 in delivering our services — all subject to strict data protection agreements.
  • Malaysian Authorities: Law enforcement agencies, financial regulatory bodies or Malaysian courts when required by law, court order or valid legal process.
  • Fraud Investigation: Bodies or agencies involved in investigating fraud, money laundering, or other financial crimes where KC88 has reasonable grounds to suspect unlawful activity.

In all data-sharing instances described above, KC88 ensures that data is shared only to the extent necessary and that all recipients are bound by confidentiality obligations equivalent to or higher than KC88's own standards.

5
KC88 Data Security Measures

KC88 continuously invests in the latest security infrastructure to ensure your personal data is always protected against unauthorised access, loss, alteration or unlawful disclosure. Below are the key security measures we practise:

Technical Security
  • 256-bit SSL/TLS Encryption
  • Web application firewall (WAF)
  • 24/7 real-time threat monitoring
  • Two-Factor Authentication (2FA)
  • Periodic vulnerability scanning
Organisational Controls
  • Role-based data access controls
  • Regular staff security training
  • Independent third-party security audits
  • Clear incident response procedures
  • Staff activity audit logs

In the event of a material data breach, KC88 is committed to notifying affected members within 72 hours of confirming the incident, in line with industry best practices and applicable legal requirements.

6
Your Rights Under the KC88 Privacy Policy

As a KC88 member and data subject under Malaysia's Personal Data Protection Act 2010, you hold data protection rights that KC88 fully respects:

Right of Access
You have the right to request a copy of the personal data KC88 holds about you at any time. Requests will be processed within 21 business days.
Right to Rectification
If your data is inaccurate or out of date, you have the right to request a correction. You can update your profile information directly through your KC88 account settings at any time.
Right to Erasure
You may request the deletion of your personal data, subject to retention requirements prescribed under Malaysian law and AML compliance obligations.
Right to Data Portability
You have the right to receive your personal data in a machine-readable format for transfer to another service provider, where applicable.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time by contacting our KC88 privacy team.
Right to Restriction
In certain circumstances, you have the right to request that KC88 restrict how we process your data while a dispute or review is ongoing.

To exercise any of the above rights, please contact KC88's Data Protection Officer by email at privacy@kc88.cash with valid proof of identity. We will acknowledge receipt of your request within 3 business days.

7
Use of Cookies & Tracking Technologies

KC88 uses cookies and similar tracking technologies to enhance platform functionality and your gaming experience. Cookies are small text files stored on your device when you visit the KC88 website.

Cookie TypePurposeDuration
Essential Cookies Required for core platform functions — login, session security and transaction processing. Cannot be disabled. Session / 24 hours
Functional Cookies Saving your preferences such as language, game selections and display settings for a seamless experience on return visits. 30 days
Analytical Cookies Collects anonymised usage data to help KC88 understand how members use the platform for improvement purposes. 12 months

You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect KC88 platform functionality, including your ability to log in and process transactions.

8
Protection of Children's Data

KC88 strictly prohibits the use of our platform by individuals under the age of 18. Our platform is not designed for, nor does it knowingly collect personal data from, minors or underage individuals.

Should KC88 discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Any party found to have registered on behalf of a minor will be reported to the relevant Malaysian authorities.

If You Suspect Misuse: If you suspect that a person under 18 years of age has registered a KC88 account, please notify us immediately at privacy@kc88.cash. KC88 will investigate and take prompt action.

9
Data Retention Period

KC88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian laws and regulations.

  • Active Account Data: Retained for the duration your account remains active and for 5 years following account inactivity.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with AML compliance requirements and Malaysian accounting laws.
  • KYC & Identity Verification Data: Retained for a minimum of 5 years after the business relationship is terminated.
  • Security & Access Logs: Retained for 12 months for security incident investigation purposes.
  • Support Communication Data: Retained for 2 years for customer support reference and dispute resolution.

When data is no longer needed, KC88 will delete or anonymise it securely and irreversibly.

10
Changes to This Privacy Policy

KC88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements in the security technologies we employ.

Any material changes to this Privacy Policy will be communicated to members via in-platform notifications or their registered email address at least 14 days before the changes take effect. The latest version of the Privacy Policy will always be available on this page, bearing an updated "Last Updated" date.

Your continued use of the KC88 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the changes, you may close your account and request data deletion as described in Section 6.

11
Contact the KC88 Data Protection Officer

KC88 has appointed a Data Protection Officer (DPO) responsible for ensuring KC88's compliance with Malaysia's Personal Data Protection Act 2010 and this Privacy Policy.

For any questions, concerns, or requests relating to your data privacy, please contact KC88's Data Protection Officer via:

  • Privacy Email: privacy@kc88.cash
  • General Support Email: support@kc88.cash
  • Live Chat: Available 24/7 within the KC88 platform

We are committed to responding to all privacy-related enquiries within 7 business days. For formal data access or deletion requests, please include a copy of a valid identification document for identity verification.

Complaints to Regulatory Authorities

If you are dissatisfied with how KC88 has handled your personal data after contacting us, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Digital. KC88 will cooperate fully with any investigation carried out by the JPDP.

Your Data Journey at KC88

From collection to deletion — every step is strictly governed.

1
Purpose-Based Collection
Data is collected solely for the stated purposes — registration, KYC, payment processing via TNG/DuitNow/FPX, and service improvement.
2
Encryption & Protection
All data received is immediately encrypted with 256-bit SSL and stored in a secure server environment protected by multi-layered firewalls.
3
Processing Controls
Only authorised KC88 staff may access data within the scope of their roles. Access logs are recorded and continuously monitored to detect anomalies.
4
Secure Deletion
Once the retention period expires, data is deleted using industry-standard methods — ensuring it cannot be recovered by any party.
FAQ – KC88 Privacy Policy

Yes, KC88 uses 256-bit SSL encryption — the same security standard adopted by Malaysia's major banks. Financial information such as your Touch 'n Go eWallet, DuitNow, GrabPay, and FPX details is never stored directly on KC88's servers. All financial transactions are processed through certified payment operators that comply with PCI-DSS security standards set by the international payments industry.

Yes, you may request the deletion of your personal data by contacting privacy@kc88.cash. Please note, however, that some data cannot be deleted immediately due to Malaysian legal requirements — particularly financial transaction records, which must be retained for a minimum of 7 years under AML and accounting laws. KC88 will inform you which data can be deleted and which must be retained in accordance with the law.

KC88 may send emails relating to promotions, new bonuses or platform updates to members who have consented to receive marketing communications during registration. To stop receiving promotional emails, you may click the "Unsubscribe" link in any KC88 email or update your communication preferences in your account settings. Please note that KC88 will still send important transactional emails such as deposit, withdrawal and account security notifications.

In the event of a merger, acquisition or business closure, your personal data will form part of the assets transferred. KC88 is nonetheless committed to ensuring that the new recipient is bound by data protection obligations equivalent to or greater than our own. Members will be notified of any material change in data ownership at least 30 days before the change takes effect, and you will be given the option to close your account and request data deletion if you do not agree to the change.
Your Data Is Protected. Now Play with Confidence at KC88.

KC88 has taken every necessary measure to safeguard your data privacy and security. Register for free today and enjoy 500+ games — from Live Casino and jackpot slots to Sports Betting — on a platform that truly puts your security first.

PDPA 2010 Compliant 256-bit SSL No Data Selling 2FA Available
Privacy enquiries? Email us at privacy@kc88.cash
Bahasa Melayu