kk918 Privacy Policy

This Privacy Policy ("Policy") applies to all personal data processed by kk918 ("we", "us", "our") in connection with the operation of the kk918 online gaming platform, accessible at kk918.net and any mobile-optimised versions thereof ("the Platform"). It applies to all registered players, prospective players who have initiated but not completed registration, and casual visitors to the Platform.

kk918 acts as the data controller in respect of personal data collected through the Platform. This means that kk918 determines the purposes and means by which your personal data is processed. Where kk918 engages third-party processors to handle personal data on its behalf, those processors are bound by contractual obligations consistent with this Policy.

This Policy should be read in conjunction with kk918's Terms and Conditions, which govern the contractual relationship between you and kk918. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, you should not use the Platform.

This Policy was last reviewed and updated on 1 January 2026. We encourage you to review this Policy periodically to remain informed of how kk918 handles your personal data.

kk918 collects personal data from you directly (information you provide) and automatically (information generated by your use of the Platform). The categories of data we collect include:

kk918 does not collect special category data (such as health information or biometric data) except where expressly required by applicable regulation or where you voluntarily provide such information in the context of a responsible gaming self-disclosure.

kk918 uses the personal data it collects for the following purposes:

• Account registration and management: To create and maintain your kk918 account, verify your identity, and administer your relationship with the Platform.
• Transaction processing: To process deposits and withdrawals, verify payment methods, and maintain accurate financial records.
• Platform delivery: To provide access to games, betting markets, and all Platform features; to maintain session continuity; and to personalise your Platform experience.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, money laundering, and unauthorised account access.
• Regulatory compliance: To fulfil obligations under applicable gaming regulations, anti-money laundering (AML) requirements, and KYC frameworks, including reporting obligations to regulatory bodies where legally required.
• Responsible gaming: To monitor gaming patterns for indicators of problem gambling and to administer responsible gaming tools, limits, and self-exclusion requests.
• Customer support: To respond to your enquiries and resolve complaints submitted via live chat, email, or other support channels.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and improve the design and functionality of the Platform.

kk918 will not use your personal data for any purpose materially different from those set out above without first providing you with notice and, where required, obtaining your consent.

kk918 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and kk918, including account management, game access, and financial transaction processing.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and regulatory reporting.
• Legitimate interests: Processing conducted for the legitimate interests of kk918, including fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing conducted on the basis of your freely given, specific, and informed consent — primarily in the context of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

5.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store information about your preferences and session.

5.2 How kk918 Uses Cookies. kk918 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session management, login authentication, and security functions. These cookies cannot be disabled without materially impairing Platform functionality.
• Performance Cookies: Collect anonymised information about how visitors use the Platform, including pages visited and error messages encountered, to help kk918 improve platform performance.
• Functional Cookies: Remember your preferences (such as language settings and game lobby layout) to provide a more personalised experience on return visits.
• Analytics Cookies: Used to understand aggregate user behaviour patterns on the Platform. Data collected via analytics cookies is not used to identify individual users.

5.3 Managing Cookies. You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications before cookies are placed. Note that disabling certain categories of cookies may affect Platform functionality. Instructions for managing cookies in common browsers are available through the respective browser's help documentation.

kk918 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. kk918 shares personal data only in the following circumstances:

• Game and Platform providers: kk918 shares necessary account and session data with licensed game providers (such as Evolution Gaming, Pragmatic Play, and PG Soft) to deliver the game experience. These providers are permitted to use this data only for platform delivery purposes.
• Payment processors: Financial data is shared with payment processors (Maybank, CIMB, Public Bank, Touch 'n Go, Boost, FPX) to the extent necessary to execute deposit and withdrawal transactions.
• Identity verification services: Identity and document data is shared with third-party KYC verification services engaged by kk918 for the purpose of satisfying regulatory identity verification requirements.
• Regulatory and law enforcement authorities: kk918 will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. kk918 will notify you of any such disclosure where legally permitted to do so.
• Fraud prevention and AML services: Transaction and identity data may be shared with third-party fraud prevention and AML screening services to fulfil kk918's legal obligations under applicable AML frameworks.
• Business transfers: In the event of a merger, acquisition, or transfer of all or part of kk918's business, personal data held by kk918 may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments.

All third parties with whom kk918 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond the specific purpose for which it was shared.

kk918 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory retention requirements. The following general retention principles apply:

• Account data: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, in accordance with AML and gaming regulatory requirements.
• Financial transaction records: Retained for a minimum of 7 years following the transaction date in compliance with financial record-keeping requirements.
• KYC documentation: Retained for a minimum of 5 years following the end of the customer relationship, or longer where required by applicable regulation.
• Communications records: Support interaction records are retained for a minimum of 2 years for quality assurance and dispute resolution purposes.
• Technical and usage data: Aggregated or anonymised usage data may be retained indefinitely. Individually identifiable technical data is retained for no longer than 12 months following collection.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with kk918's data deletion procedures.

kk918 implements comprehensive technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and kk918 servers;
• Encryption of sensitive data at rest, including financial credentials and identity documents;
• Role-based access controls restricting personal data access to authorised personnel;
• Regular security assessments and penetration testing of Platform infrastructure;
• Multi-factor authentication for administrative access to systems containing personal data;
• Secure data centre facilities with physical access controls;
• Incident response procedures for the detection, investigation, and notification of data breaches.

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, kk918 will notify affected individuals without undue delay, in accordance with applicable notification obligations.

While kk918 takes all reasonable steps to protect your data, no transmission over the internet or electronic storage system is completely secure. You play a role in data security by maintaining the confidentiality of your kk918 account credentials.

Subject to applicable law and certain conditions, you have the following rights in respect of your personal data held by kk918:

• Right of access: You may request a copy of the personal data kk918 holds about you and information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to kk918's legal obligation to retain certain data under applicable AML and gaming regulations.
• Right to restriction: You may request that kk918 temporarily restrict processing of your personal data in certain circumstances, for example where you contest the accuracy of the data.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request that kk918 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact kk918 customer support via live chat on the Platform. kk918 will respond to verified requests within 30 days. We may request proof of identity before processing a data subject request.

kk918 may send you promotional offers, bonus notifications, platform news, and other marketing communications where you have given your consent to receive such communications at the time of registration or subsequently through your account preferences.

You may opt out of marketing communications at any time by: (a) updating your communication preferences within your kk918 account settings; or (b) contacting kk918 customer support via live chat and requesting removal from marketing lists. Opt-out requests will be processed within 10 business days.

Note that opting out of marketing communications does not affect transactional or operational communications, such as deposit confirmations, withdrawal notifications, account security alerts, or mandatory communications required under our Terms and Conditions or applicable regulation.

kk918 is strictly an adult platform. The Platform is not intended for, directed at, or accessible to individuals under the age of 21. kk918 does not knowingly collect personal data from individuals under 21. Where kk918 becomes aware that personal data has been collected from an individual under 21, that data will be deleted and the associated account will be closed in accordance with kk918's Terms and Conditions.

If you are a parent or guardian and believe that a minor under your care has provided personal data to kk918 without your consent, please contact customer support immediately via live chat on the Platform. kk918 will investigate and take appropriate action promptly.

kk918 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or kk918's data processing practices. The "Last Updated" date at the top of this Policy will be revised whenever a change is made.

Where changes are material, kk918 will provide advance notice via a prominent notice on the Platform or by email to your registered address. For non-material changes, updated Policy terms will take effect upon publication on kk918.net. Your continued use of the Platform following any amendment constitutes your acknowledgment of the revised Policy.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have concerns about how kk918 handles your personal data, please contact our customer support team:

• Live Chat: Available 24/7 directly within the kk918 Platform. This is the fastest method for all privacy-related enquiries.
• Email: [email protected] — please include "Privacy Request" in the subject line and provide your registered account username for verification purposes.

kk918 is committed to resolving privacy-related complaints promptly. We aim to respond to all privacy enquiries within 14 business days and to fully resolve complaints within 30 days of receipt. Where a complaint cannot be resolved directly with kk918, you retain the right to escalate the matter to the applicable data protection supervisory authority.