kfc88 Privacy Policy — How We Collect, Use & Protect Your Personal Data

kfc88 is committed to protecting the personal data of every player, visitor, and prospective account holder who interacts with the kfc88 platform. This Privacy Policy describes the personal data kfc88 collects, the purposes for which it is processed, the lawful bases relied upon, with whom it may be shared, and the rights you hold in connection with your information.

This Policy applies to all data processing activities carried out by kfc88 through its website, account registration system, game platform, payment facilities, customer support channels, and any other service through which personal data is submitted to or collected by kfc88.

By registering an account, depositing funds, accessing games, or otherwise using the kfc88 platform, you acknowledge that you have read this Privacy Policy. Where consent is the lawful basis for a processing activity, we will seek your explicit agreement before that activity begins.

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Subject" — the individual to whom the personal data relates, which in most cases means the kfc88 account holder or website visitor.
• "Controller" — the party that determines the purposes and means of processing. For this Policy, the Controller is kfc88.
• "Processor" — a third party that processes personal data on kfc88's behalf and under kfc88's written instructions.
• "KYC" — Know Your Customer: regulatory procedures requiring verification of identity, age, address, and, where applicable, source of funds.
• "Third Party" — any entity other than the data subject and kfc88.

The data controller responsible for personal data collected through kfc88 is the kfc88 platform operator. For data-related enquiries, correction requests, deletion requests, or any concern about how your personal information is handled, contact the team using the details provided in Section 16 of this Policy.

Where kfc88 engages third-party service providers to process data on its behalf — such as payment processors, KYC verification providers, or fraud-detection services — those parties act as data processors under contractual arrangements that require them to handle personal data only in accordance with kfc88's instructions and to implement appropriate security measures.

kfc88 collects the following categories of personal data depending on how you interact with the platform:

kfc88 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records beyond those directly relevant to a responsible gambling concern, or biometric data for identification, unless it is provided voluntarily as part of a support enquiry or legally required for KYC.

kfc88 processes personal data on one or more of the following lawful bases:

• Performance of a Contract: Processing is necessary to provide the gaming account, process deposits and withdrawals, apply bonuses, settle wagers, and deliver customer support — all obligations arising from the agreement between kfc88 and the account holder.
• Legal Obligation: Processing is required to comply with anti-money laundering (AML) regulations, responsible gambling obligations, KYC requirements, tax reporting duties, or responses to lawful regulatory or law enforcement enquiries.
• Legitimate Interests: Processing is necessary for kfc88's legitimate interests in fraud prevention, platform security, abuse detection, dispute resolution, service improvement, and responsible gambling monitoring, provided those interests are not overridden by the data subject's rights and interests.
• Consent: Where kfc88 relies on consent — for example, to send optional marketing communications — a clear and specific consent request will be presented. Consent may be withdrawn at any time without penalty on the underlying account.

kfc88 processes personal data for the following purposes:

• creating, managing, and securing your kfc88 account;
• verifying your identity, age (21+), address, and right to participate;
• processing MYR deposits and withdrawals through DuitNow, FPX, local bank transfers, e-wallets, and cryptocurrency channels;
• settling sports wagers, game results, bonuses, and promotions;
• detecting, investigating, and preventing fraud, money laundering, identity theft, account abuse, and cheating;
• supporting responsible gambling monitoring, intervention, self-exclusion, and deposit-limit management;
• delivering live chat and email customer support, handling complaints, and maintaining support records;
• complying with applicable AML, KYC, and data protection obligations;
• operating and improving platform infrastructure, game performance, and user experience;
• communicating service updates, security alerts, and — where consent is given — promotional messages.

kfc88 uses cookies and similar technologies to enable essential platform functionality, maintain login sessions, remember display preferences, and support security monitoring. Some technical analytics may be collected to understand aggregate platform performance — for example, load times or error rates — without identifying individual users.

Session cookies expire when you close your browser. Persistent cookies remain on your device for a defined period unless deleted manually. Your browser settings allow you to manage or delete cookies; however, disabling essential cookies may prevent certain kfc88 functions from operating correctly.

kfc88 does not deploy third-party advertising trackers or behavioural advertising cookies that build cross-site profiles for retargeting purposes.

kfc88 does not sell, rent, or share your personal data with unrelated third parties for their own marketing purposes. kfc88 may share personal data in the following circumstances:

• Service Providers and Processors: Payment processors (including operators of DuitNow, FPX, Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency networks), KYC and identity-verification services, fraud-detection providers, and IT hosting providers who process data under binding contractual data processing agreements.
• Regulatory and Law Enforcement Bodies: Where required by applicable law, court order, or the legitimate request of a competent regulatory or law enforcement authority.
• Responsible Gambling Authorities: Where applicable regulations or self-exclusion scheme obligations require disclosure to a recognised responsible gambling register or authority.
• Fraud Prevention and AML Networks: Where disclosure is necessary to prevent or investigate fraud, money laundering, or other financial crime, and sharing is proportionate to the risk involved.
• Business Succession: In the event of a merger, acquisition, or sale of all or part of the kfc88 operation, subject to the successor being bound by equivalent data protection obligations.

Any third party receiving personal data from kfc88 is required to maintain appropriate security measures and to process that data only for the disclosed purpose.

kfc88 may transfer personal data to service providers or infrastructure located outside Malaysia in connection with KYC verification, payment processing, fraud prevention, or platform hosting. Where such transfers occur, kfc88 takes reasonable steps to ensure that the receiving party applies a level of protection that is consistent with applicable data protection principles, such as through contractual safeguards or adequacy-based transfer mechanisms.

If you have questions about specific international transfers or the safeguards in place, contact kfc88 using the details in Section 16.

kfc88 retains personal data for as long as is necessary for the purpose for which it was collected or as required by applicable legal obligations. The following general retention periods apply, though specific circumstances may justify longer retention:

• Account and Identity Data: Retained for the duration of the account and for a reasonable period after closure to address potential disputes, regulatory queries, or lawful requests. AML and KYC regulations may require retention for a minimum of five years after the end of a business relationship.
• Financial Transaction Records: Retained in accordance with AML and tax recordkeeping requirements, typically five years or longer where legally mandated.
• Customer Support Communications: Retained for a reasonable period sufficient to resolve related disputes or complaints, typically two to three years unless a longer period applies.
• Technical and Log Data: Retained for a limited period for security and diagnostic purposes, typically up to twelve months unless required for a specific investigation.
• Responsible Gambling Records: Self-exclusion and limit records are retained to support re-application reviews and to comply with responsible gambling programme requirements.

When personal data is no longer required and no legal obligation mandates its retention, kfc88 will securely delete or anonymise it.

kfc88 implements and maintains a range of technical and organisational security measures designed to protect personal data from unauthorised access, loss, disclosure, alteration, and destruction. These include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and kfc88 servers;
• encryption of sensitive data fields stored in kfc88 databases;
• role-based access controls limiting staff access to personal data to those with a documented need;
• optional two-factor authentication for player accounts;
• continuous security monitoring, intrusion detection, and anomaly alerting;
• regular security assessments of platform infrastructure and third-party integrations.

No security system is infallible. In the event of a personal data breach that presents a significant risk to affected individuals, kfc88 will take prompt action to contain and assess the incident and will communicate with affected players as required by applicable obligations.

Subject to applicable law and lawful retention obligations, you have the following rights in connection with your personal data held by kfc88:

• Right of Access: Request confirmation that kfc88 holds personal data about you and obtain a copy of that data, along with information about how it is processed.
• Right to Rectification: Request correction of inaccurate or incomplete personal data. You may update many details directly through your account settings.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn, or where processing was unlawful — subject to overriding retention obligations.
• Right to Restriction: Request that processing of your data be restricted in certain circumstances, such as while the accuracy of the data is contested.
• Right to Object: Object to processing carried out on the basis of legitimate interests, including profiling for responsible gambling monitoring, subject to kfc88 demonstrating compelling legitimate grounds that override your interests.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, receive your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where kfc88 processes data based on your consent, withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact kfc88 via live chat or the support email listed in Section 16 with your account identifier and a clear description of the request. kfc88 will respond within a reasonable timeframe. Identity verification may be required before processing a data access or deletion request.

kfc88 is strictly intended for persons aged 21 and above. kfc88 does not knowingly collect, retain, or process personal data from individuals below the age of 21. Age is verified at registration and during the KYC process.

If kfc88 identifies or is credibly notified that personal data has been collected from a person below the minimum age, the relevant account will be suspended and the associated personal data will be deleted or anonymised after any legally required retention period or dispute-resolution process is complete.

If you believe that a minor has submitted personal data to kfc88, please contact the support team immediately using the details in Section 16.

The kfc88 platform may contain references to third-party services such as payment providers, responsible gambling support organisations, or identity verification services. Where these references involve links or redirection to third-party websites, kfc88 does not control the privacy practices of those third parties and is not responsible for their content or data handling.

You should review the privacy policy of any third-party service before submitting personal data to it. The kfc88 Privacy Policy governs only data processed directly by kfc88.

kfc88 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, platform features, or data processing practices. The revised Policy will be published at this URL with an updated effective date. Material changes — those that significantly affect your rights or the way kfc88 uses your personal data — will be communicated through a visible notice on the platform prior to taking effect.

Your continued use of kfc88 after a revised Policy becomes effective constitutes acceptance of the changes. If you do not accept the revised Policy, you should discontinue use of the platform and may request account closure through the support team.

For any privacy-related enquiry, data subject rights request, complaint, or clarification about this Privacy Policy, contact the kfc88 team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the kfc88 platform. This is the fastest channel for most enquiries.
• Support Email (plain text — not a link): [email protected]

Please include your account username or registered email address and a clear description of your request. For data subject rights requests that involve access to or deletion of personal data, identity verification will be required before the request is actioned. kfc88 aims to acknowledge all privacy enquiries within two business days and to resolve them within a reasonable period thereafter.