kk918 Privacy Policy

1. Introduction

kk918 ("the Company", "we", "us", "our") operates the online gaming platform accessible at kk918.app and is committed to protecting the privacy and personal data of its Members and visitors ("you", "your", "the User").

This Privacy Policy ("Policy") explains what personal data kk918 collects from you, the purposes for which it is collected and used, the circumstances under which it may be disclosed to third parties, and the rights available to you in respect of your personal data. This Policy should be read together with the kk918 Terms & Conditions, which governs your use of the Platform.

By registering an Account on the kk918 Platform or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read, understood, and consent to the data practices described in this Policy to the extent that consent is the applicable legal basis for processing.

2. Data Controller

For the purposes of applicable data protection legislation, kk918 is the data controller in respect of personal data collected through the Platform. kk918 is an internationally licensed online gaming platform operating under its gaming authority licence.

Queries regarding this Policy and requests to exercise data subject rights should be directed to kk918 using the contact details set out in Section 12 of this Policy.

3. Data We Collect

kk918 collects personal data in the following categories:

kk918 does not collect sensitive personal data (such as race, religion, health data, or political opinions) except where specifically required by applicable anti-money laundering regulations.

4. How We Use Your Data

kk918 uses the personal data collected for the following purposes:

• Account management: To register, maintain, and administer your kk918 Account, including identity and age verification (21+ compliance).
• Service delivery: To provide access to the Platform's games, sportsbook, live casino, and e-sports betting services.
• Payment processing: To process deposits and withdrawals via Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, USDT TRC20, and 7-Eleven Cliqq.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct as defined in the Terms & Conditions.
• Regulatory compliance: To meet obligations imposed by our international gaming authority licence, including Know Your Customer (KYC) requirements and transaction monitoring.
• Responsible gaming: To administer deposit limits, session timers, cool-off periods, and self-exclusion requests made by Members.
• Customer support: To respond to enquiries, resolve disputes, and improve support quality.
• Platform improvement: To analyse aggregated usage data and improve the functionality, performance, and design of the kk918 Platform.
• Communications: To send account-related notifications and, where you have opted in, promotional communications. You may opt out of promotional communications at any time by contacting support.

5. Legal Basis for Processing

kk918 processes personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services you have contracted for through registration and use of the Platform.
• Legal obligation: Processing required to comply with our gaming licence conditions, anti-money laundering regulations, and applicable data protection laws.
• Legitimate interests: Processing for fraud prevention, security monitoring, Platform analytics, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for optional communications and non-essential cookies, where your consent has been freely given and may be withdrawn at any time.

6. Data Sharing & Disclosure

6.1 kk918 does not sell, rent, or share your personal data with third parties for their own commercial purposes.

6.2 kk918 may share personal data with the following categories of third party, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment service providers: Including Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and USDT TRC20 processors, solely for payment processing purposes.
• Identity verification providers: Third-party KYC and document verification services engaged to fulfil age and identity verification obligations under our gaming licence.
• Game content providers: Licensed game studios such as Pragmatic Play, Microgaming, and Evolution Gaming receive only the technical session data required to deliver game content; they do not receive personally identifiable information beyond what is technically necessary.
• Regulatory authorities: Relevant gaming authority bodies, financial intelligence units, and law enforcement agencies where disclosure is required by law or regulation.
• IT infrastructure providers: Hosting, cloud storage, and cybersecurity service providers engaged under strict confidentiality and data processing terms.

6.3 kk918 requires all third-party processors to maintain appropriate technical and organisational security measures and to process data only in accordance with our instructions.

7. Cookies & Tracking Technologies

kk918 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Session authentication, load balancing, and security tokens required for the Platform to function. These cannot be disabled without preventing you from using the Platform.
• Functional cookies: Remembering your language preference, login state, and display settings to improve your experience across sessions.
• Analytics cookies: Aggregated, anonymised data on how Members navigate the Platform, used to identify usability issues and improve Platform design. No individual user profiles are built for advertising purposes.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the Platform. kk918 does not use third-party advertising or retargeting cookies.

8. Data Retention

kk918 retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal obligations. In practice, this means:

• Account data and transaction records are retained for a minimum of five (5) years following Account closure, as required by anti-money laundering regulations applicable to gaming operators.
• Identity verification documents are retained for the period required by our gaming licence conditions, typically five years from the date of verification.
• Communication records (live chat logs, email correspondence) are retained for three (3) years for quality assurance and dispute resolution purposes.
• Aggregated, anonymised analytics data is not subject to a maximum retention period as it does not constitute personal data.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction methods.

9. Security Measures

kk918 implements the following technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and kk918 servers;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
• Regular third-party penetration testing and security audits of the Platform infrastructure;
• Automated anomaly detection systems to identify and respond to unusual access patterns or potential breaches;
• Incident response procedures meeting international gaming authority requirements, including breach notification obligations where applicable.

Notwithstanding the above measures, no data transmission over the internet is completely secure. kk918 cannot guarantee the absolute security of data transmitted to the Platform. You transmit data at your own risk, and you are responsible for maintaining the security of your login credentials.

10. Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by kk918:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to us, where processing is based on consent or contract.
• Right to object: You may object to processing based on legitimate interests, including profiling, and to the use of your data for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact kk918 via 24/7 live chat or the email address in Section 12. We will respond to verified requests within thirty (30) days. We may require identity verification before processing data rights requests.

11. Children and Minors

The kk918 Platform is strictly intended for adults aged 21 years and over. kk918 does not knowingly collect personal data from individuals under 21 years of age. If we become aware that a minor has registered an Account or provided personal data, we will immediately suspend the Account, delete the associated data, and take appropriate action in accordance with our Terms & Conditions.

If you believe a minor has accessed or registered on the Platform, please notify us immediately via live chat or the contact email in Section 12.

12. Contact Us

For privacy-related enquiries, data rights requests, or concerns regarding the handling of your personal data by kk918, please contact us using the following channels:

Please include your registered username and Account email address in all privacy-related correspondence. Identity verification may be required before personal data is disclosed or deleted.

13. Changes to This Privacy Policy

kk918 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. The revised Policy will be published on the Platform with an updated effective date. Where amendments are material, kk918 will make reasonable efforts to notify registered Members via on-site notification.

Continued use of the kk918 Platform following publication of an amended Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically. The current version of this Policy is dated 1 June 2026.