Section 1
Definitions
In this Privacy Policy, "personal data" means any information that directly identifies, or could reasonably be used to identify, a natural person. "Processing" includes collection, recording, storage, use, disclosure, transfer and deletion. "Player" or "you" refers to the registered kclub8 account holder. "kclub8" or "we" refers to the operator of the website at kclub8.cam. "Third-party service providers" refers to payment processors, identity verification partners, game studios, analytics tools and other entities that assist in delivering kclub8 services under data-processing arrangements.
Section 2
Categories of Data Collected
kclub8 may collect the following categories of personal data, depending on the service and the purpose:
| Category |
Examples |
Primary purpose |
| Identity data |
Full name, date of birth, national identification |
Account registration, KYC, age verification |
| Contact data |
Email address, phone number, residential address |
Account management, verification, support |
| Payment data |
Transaction amounts (MYR), payment method reference, wallet identifiers |
Deposit and withdrawal processing, AML checks |
| Account activity |
Login history, game sessions, wager records, bonus activity |
Security, responsible gambling monitoring, dispute resolution |
| Technical data |
IP address, device identifier, browser type, session logs |
Security, fraud detection, platform performance |
| Communication data |
Support messages, email correspondence |
Issue resolution, quality and compliance review |
Players located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and elsewhere in Malaysia provide the same categories of data. Payment-method references may include identifiers associated with Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or BTC and USDT crypto wallets as applicable to the transaction.
Section 3
Data Processing and Lawful Bases
kclub8 processes personal data only where a lawful basis exists. The applicable bases for typical processing activities are described below:
- Contract performance — account creation, transaction execution, game participation and withdrawal processing are necessary to deliver the services a player has requested.
- Legal obligation — identity and age verification, anti-money laundering review, responsible gambling checks and record-keeping may be required by applicable law or regulation.
- Legitimate interest — fraud prevention, security monitoring, abuse detection, service improvement and communications about material changes to the kclub8 platform may be processed on this basis where it does not override the player's privacy interests.
- Consent — where kclub8 requests consent for a specific purpose (such as optional marketing communications), that consent may be withdrawn at any time by contacting kclub8 at the plain-text email address in the footer.
Age and responsible gambling checks: kclub8 processes identity and account data to verify that players are at least 21 years of age and to monitor activity for responsible gambling indicators. This processing is a condition of account registration and cannot be opted out of while maintaining an active account.
Section 4
Data Sharing and Third Parties
kclub8 does not sell personal data to third parties. Data may be disclosed in the following circumstances:
- Payment processors — deposit and withdrawal transactions involve sharing necessary payment reference data with the relevant provider (e.g., FPX, DuitNow, e-wallet operators). Those providers operate under their own privacy terms.
- Identity verification partners — KYC documents may be reviewed through a contracted verification service operating under a data-processing arrangement with kclub8.
- Game and platform providers — game session data may be processed by the contracted studio or live-dealer operator to deliver the relevant content. No more data than necessary for that purpose is shared.
- Legal and regulatory disclosure — kclub8 may disclose personal data where required by a court order, lawful demand, regulatory authority or other binding legal obligation.
- Security and fraud prevention — where there is reasonable evidence of fraud, money laundering or serious criminal activity, relevant data may be disclosed to appropriate authorities without prior notice.
Any third-party service provider engaged by kclub8 for data-processing purposes is subject to contractual obligations that restrict the use of personal data to the agreed purpose and require reasonable security standards.
Section 5
Cookies and Technical Tracking
kclub8 may use cookies and similar technologies on its website. These may include session cookies necessary for account login and platform function, security tokens used to verify requests, and analytics identifiers that help kclub8 understand how players navigate the site. Players may configure their browser to refuse certain cookies, though doing so may affect the functionality of account features.
Technical data such as IP addresses, device identifiers and session logs are collected automatically when a player accesses kclub8. This data is used for security monitoring, fraud detection and platform performance review, and is not used to identify players for commercial profiling purposes beyond what is stated in this policy.
Section 6
Retention of Personal Data
Personal data is retained for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. In practice:
- Account and transaction records may be retained for the period required under applicable financial, anti-money laundering or record-keeping obligations from the date of the relevant transaction or account closure.
- Support correspondence is retained for the period reasonably necessary to resolve disputes and demonstrate compliance with service obligations.
- Security and session logs are retained for fraud detection purposes and may be shorter in duration than account-level records.
- Identity verification documents are retained for the minimum period required by applicable verification and regulatory standards.
Where data is no longer required for any lawful purpose, kclub8 will delete or irreversibly anonymise it within a reasonable period.
Section 7
Security of Personal Data
kclub8 applies technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration and unlawful destruction. These measures are reviewed as the platform develops. No method of electronic transmission or storage is completely secure, and kclub8 cannot guarantee absolute security.
Players are responsible for maintaining the confidentiality of their account credentials. A unique password should be used for kclub8 and must not be shared with another person. If you believe your account has been accessed without your authorisation, you should notify kclub8 immediately through the plain-text website email in the footer.
Crypto transaction security: For BTC or USDT transactions, kclub8 displays the network, wallet address and conversion amount before any transfer is confirmed. Blockchain transfers are generally irreversible. Players are responsible for verifying all details before initiating a cryptocurrency payment.
Section 8
User Rights and Data Requests
Depending on the applicable data protection law, you may have rights in relation to personal data kclub8 holds about you. These may include:
- Right of access — to request a copy of personal data held about you and information about how it is processed.
- Right of correction — to request correction of inaccurate or incomplete personal data.
- Right of deletion — to request deletion of personal data where it is no longer needed, subject to overriding legal obligations and active dispute or security requirements.
- Right to restrict processing — to request that certain processing is paused while a concern is reviewed.
- Right to withdraw consent — where processing relies on consent, to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
Requests should be submitted to the plain-text website email address in the footer with your account reference and a description of the request. kclub8 will acknowledge the request and respond within a reasonable period. Verification of identity may be required before a request is actioned. Rights are subject to applicable exemptions under Malaysian or other relevant data protection law.
Section 9
Minors and Age Verification
kclub8 services are intended exclusively for adults aged 21 and above. kclub8 does not knowingly collect personal data from individuals under the age of 21. Identity verification processes are applied to confirm age compliance at the point of registration and during enhanced review. Where kclub8 becomes aware that personal data has been collected from a minor, that data will be deleted and the account will be closed subject to applicable transaction review obligations.
Parents or guardians who believe a minor may have registered or interacted with kclub8 should contact the plain-text website email address in the footer as soon as possible.
Section 10
Changes to This Privacy Policy
kclub8 may update this Privacy Policy from time to time to reflect changes in services, data practices, applicable law or regulatory guidance. The revised effective date will be shown at the top of this page. Where a change materially affects how kclub8 processes your personal data, notification may be provided through the account-notification channel where operationally feasible.
Continued use of kclub8 services after a revised policy takes effect constitutes acknowledgement of the updated terms. Players who do not agree with a material change should cease using kclub8 services and may request account closure through the support contact below.
Section 11
Contact Us
Questions, concerns or requests regarding this Privacy Policy or the handling of your personal data by kclub8 may be directed to the website email address displayed as plain text in the footer of this page. Please include your account reference where applicable, and describe your question or request clearly. Do not include your password or full payment credentials in any message sent to kclub8.
For information about how kclub8 manages your account participation, wagering conditions and platform rules, please review the Terms & Conditions page. For guidance on responsible gambling tools and self-management options, visit the Responsible Gambling page.