This Privacy Policy explains how KC88 collects, processes, stores, shares, and protects the personal data of players and visitors to the KC88 platform. Your privacy is a fundamental commitment — not a regulatory checkbox. Please read this document carefully.
All personal data transmitted between your device and KC88 servers is protected by 256-bit SSL/TLS encryption. Stored data is encrypted at rest using industry-standard protocols.
KC88 does not sell, rent, or trade your personal information to third parties for their own marketing purposes under any circumstances.
Registered players have the right to access, correct, restrict processing of, and request deletion of their personal data, subject to legal retention obligations.
Identity documents submitted for KYC verification are processed by authorised personnel only and are not retained beyond the period required by applicable anti-money laundering regulations.
KC88 does not store full payment card details. All financial transactions are processed through verified Malaysian payment partners including DuitNow, FPX, Maybank, CIMB, Touch 'n Go eWallet, and Boost.
In the event of a personal data breach that poses a risk to player rights, KC88 is committed to notifying affected players and relevant authorities within 72 hours of confirmed discovery.
This Privacy Policy (the "Policy") is published by KC88 (the "Platform", "we", "us", or "our"), the operator of the online gaming platform accessible at https://kc88.cam. This Policy applies to all registered players, visitors, and any other individuals whose personal data KC88 processes in connection with the operation of the Platform.
KC88 serves a primarily Malaysian user base, including players located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other cities and states across Malaysia. The personal data we collect and process is governed by applicable data protection legislation in the jurisdictions in which we operate, including, where applicable, the Malaysian Personal Data Protection Act 2010 (PDPA) and equivalent international frameworks.
By accessing the KC88 Platform, registering an account, or making a deposit, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to request account closure.
The following definitions apply throughout this Privacy Policy:
KC88 is the Data Controller in respect of all personal data collected and processed through the Platform. As Data Controller, KC88 is responsible for ensuring that your personal data is processed lawfully, fairly, and transparently, and that appropriate technical and organisational measures are in place to protect it from unauthorised access, loss, or misuse.
All data protection enquiries, access requests, and complaints should be directed to KC88's designated data protection contact. Contact details are provided in Section 15 of this Policy. KC88 is committed to responding to all formal data protection requests within 30 calendar days of receipt.
KC88 collects personal data through several channels, including the account registration process, KYC verification, payment transactions, Platform usage, customer support interactions, and automated technical means. The categories of personal data we collect are described below.
KC88 processes personal data only where a lawful basis exists under applicable data protection legislation. The following table summarises the primary legal bases on which KC88 relies for each category of processing activity:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract with the Player |
| Identity verification (KYC) | Legal obligation (anti-money laundering regulations) |
| Payment processing and fraud prevention | Performance of a contract; legitimate interests |
| Gaming activity records and bet settlement | Performance of a contract |
| Responsible gambling monitoring | Legal obligation; legitimate interests (player protection) |
| Customer support interactions | Performance of a contract; legitimate interests |
| Marketing communications (opt-in only) | Consent |
| Platform analytics and improvement | Legitimate interests |
| Security monitoring and fraud detection | Legitimate interests; legal obligation |
KC88 uses personal data collected from Players and Platform visitors for the following purposes. We do not use personal data for any purpose that is incompatible with the original collection purpose without first obtaining your explicit consent.
KC88 does not sell, rent, or trade your personal data to third parties. We share personal data only in the circumstances described below, and only to the extent necessary for the specified purpose.
KC88 engages third-party service providers to perform functions on our behalf, including payment processing, identity verification, fraud detection, IT infrastructure, and customer support technology. These providers are contractually bound to process personal data only on KC88's instructions and in accordance with applicable data protection law. They may not use your data for their own independent purposes.
Malaysian payment processors engaged by KC88 — including those facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX transactions — receive only the transaction-level data required to complete the relevant payment.
Game providers whose products are available on the KC88 Platform may receive session and gameplay data for the purposes of game functionality, technical support, and regulatory audit. No personally identifiable information beyond an anonymised player identifier is shared with game providers.
KC88 may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory obligation. KC88 will notify affected Players of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or part of KC88's business, personal data held by KC88 may be transferred to the acquiring entity. Affected Players will be notified of any material change to data controller identity arising from such a transaction.
KC88 uses cookies and similar tracking technologies to support the operation, security, and improvement of the Platform. The following categories of cookies are used:
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Session management, authentication, security functions — the Platform cannot operate without these. | No (exempt) |
| Functional | Remembering language preference (English, BM, Chinese), currency setting (MYR), and display options. | No (legitimate interest) |
| Analytics | Aggregated usage statistics to improve Platform design and performance. No individual profiling. | Yes (opt-in) |
| Marketing | Delivering relevant promotional content to Players who have opted in to marketing communications. | Yes (opt-in) |
You may adjust your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will impair Platform functionality. Disabling analytics or marketing cookies will not affect your ability to place wagers or manage your account.
KC88 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, and as required by applicable legal and regulatory obligations. The following retention principles apply:
Upon expiry of the applicable retention period, personal data is deleted or anonymised in a manner that prevents its reconstruction.
KC88 is an internationally operated platform and, as such, your personal data may be transferred to and processed in countries outside of Malaysia where KC88's infrastructure, service providers, or regulatory counterparts are located.
Where personal data is transferred to countries that may not provide an equivalent level of data protection to that applicable in Malaysia, KC88 implements appropriate safeguards to ensure adequate protection, including contractual clauses that impose data protection obligations on the recipient entity, and technical security measures equivalent to those applied to data processed within Malaysia.
KC88 does not transfer personal data to jurisdictions known for materially deficient data protection standards without implementing the contractual safeguards described above. Players may request further information about specific cross-border transfers applicable to their account data by contacting KC88's data protection contact (see Section 15).
Subject to applicable law and KC88's legal obligations, Players have the following rights in respect of their personal data. KC88 is committed to responding to all verified rights requests within 30 calendar days of receipt.
You have the right to request a copy of the personal data KC88 holds about you, together with information about how it is being used and shared.
You have the right to request correction of inaccurate or incomplete personal data. Account holders may update basic profile information directly through account settings.
You may request deletion of your personal data in certain circumstances. Note that KC88 is required by law to retain certain data (transaction records, KYC documents) for prescribed periods and cannot delete such data upon request alone.
You may request that KC88 restrict the processing of your personal data in specific circumstances, for example, while the accuracy of data is being contested.
Where processing is based on consent or contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
You have the right to object to the processing of your personal data where KC88 relies on legitimate interests as the legal basis, or to processing for direct marketing purposes.
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of the rights listed above, please contact KC88's data protection contact as set out in Section 15. KC88 may require you to verify your identity before processing a rights request to prevent unauthorised disclosure.
KC88 is strictly an adult platform. Registration and use of the KC88 Platform is prohibited for individuals under the age of 21 years. KC88 does not knowingly collect personal data from individuals under 21.
Age verification is applied at the point of registration and reinforced through the KYC process. Where KC88 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all associated data will be deleted, and any balance will be returned to the original payment source following identity confirmation.
The KC88 Platform may contain references to third-party services, including payment providers and game technology vendors, whose own privacy practices are independent of this Policy. KC88 is not responsible for the privacy practices of third-party entities and encourages Players to review the privacy policies of any external service they interact with directly.
KC88 does not host third-party advertising on the Platform that involves tracking players across unrelated websites for advertising targeting purposes.
KC88 reserves the right to revise this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing activities, or our business operations. Where material amendments are made that affect the rights of Players, KC88 will notify registered account holders by email or through a prominent notice on the Platform prior to the changes taking effect.
The version of this Policy bearing the most recent "Last Updated" date displayed at the top of this page supersedes all prior versions. Continued use of the Platform after the effective date of any revision constitutes acceptance of the revised Policy.
Players who wish to exercise their data rights, raise a data protection concern, or make a formal complaint regarding KC88's data handling practices should contact KC88 through the following channels:
Where a Player believes KC88 has failed to address a data protection concern adequately, they have the right to raise a complaint with the relevant data protection supervisory authority in their jurisdiction. Malaysian players may contact the Department of Personal Data Protection (JPDP) at the Ministry of Communications and Digital for guidance on exercising rights under the Personal Data Protection Act 2010.
Our support team can help clarify any aspect of how we handle your data. You can also explore our Terms & Conditions for the full picture.
KC88 is for players aged 21 and above only. Please gamble responsibly. Visit our Responsible Gambling page for support tools and resources.