kj168 Privacy Policy

This Privacy Policy ("Policy") describes how kj168 ("kj168", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("you", "your") who access or use the kj168 online casino and sportsbook platform at https://kj168.co and any associated mobile interface (the "Platform"). This Policy is issued pursuant to the requirements of Malaysia's Personal Data Protection Act 2010 (Act 709) ("PDPA") and applicable international data protection principles. By registering a kj168 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

1. Introduction

1.1 kj168 is committed to protecting the privacy and security of the personal data entrusted to us by our players, visitors, and other users of the Platform. This Policy sets out in transparent terms the personal data we collect, the lawful bases on which we process it, how long we retain it, and the rights available to you in relation to your personal data.

1.2 This Policy should be read together with the kj168 Terms and Conditions and the Responsible Gaming Policy, each of which is published separately on the Platform. In the event of any conflict between this Policy and the Terms and Conditions on matters relating to data privacy, this Policy shall prevail.

2. Data Controller

2.1 For the purposes of applicable data protection law, kj168 is the data controller in respect of personal data collected through the Platform. As data controller, kj168 determines the purposes and means by which your personal data is processed.

2.2 For all privacy-related enquiries, data subject access requests, or complaints, please contact kj168 using the contact details set out in Section 16 of this Policy.

3. Personal Data We Collect

3.1 kj168 may collect and process the following categories of personal data:

• Identity Data — full name, date of birth, gender, nationality, and identity document details (MyKad, passport) provided during account registration or KYC verification;
• Contact Data — registered mobile number, email address, and residential address;
• Financial Data — bank account details, eWallet identifiers (Touch n Go, Boost), transaction history, deposit amounts, and withdrawal records processed in MYR;
• Technical Data — IP address, browser type and version, device type and identifiers, operating system, time zone, and Platform access logs;
• Usage Data — pages visited, game sessions played, betting history, session duration, and navigation paths within the Platform;
• Communications Data — records of live chat interactions, email correspondence, and support ticket history with kj168;
• Responsible Gaming Data — deposit limits, session limits, self-exclusion status, and related account restriction records.

3.2 kj168 does not collect special category data (as defined under applicable data protection law) unless expressly required by a legal obligation and with your explicit consent where required.

4. How We Collect Your Data

4.1 kj168 collects personal data through the following means:

• Direct interactions — data you provide when registering a kj168 account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or completing any form on the Platform;
• Automated technologies — technical and usage data collected automatically through cookies, server logs, and similar tracking technologies when you access and navigate the Platform;
• Third-party sources — identity verification data from KYC service providers, fraud prevention data from anti-fraud systems, and payment confirmation data from FPX and eWallet processors.

5. Purpose and Legal Basis for Processing

5.1 kj168 processes your personal data only where a valid lawful basis exists under applicable data protection law. The following table summarises the primary processing purposes and their corresponding lawful bases:

• Account registration and management — performance of a contract with you;
• Processing deposits and withdrawals in MYR — performance of a contract; legal obligation (anti-money laundering requirements);
• Identity verification (KYC) — legal obligation; legitimate interests (fraud prevention);
• Customer support and communications — performance of a contract; legitimate interests;
• Fraud detection and prevention — legitimate interests; legal obligation;
• Responsible gaming management — legal obligation; legitimate interests (player protection);
• Platform analytics and improvement — legitimate interests;
• Marketing communications (where opted in) — consent.

6. Sharing Your Personal Data

6.1 kj168 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes.

6.2 kj168 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors — Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank FPX, for the purpose of processing deposits and withdrawals;
• KYC and identity verification providers — for the purpose of verifying your identity in compliance with anti-money laundering obligations;
• IT and platform infrastructure providers — cloud hosting, security, and technical support providers engaged by kj168 under data processing agreements;
• Regulatory and law enforcement authorities — where kj168 is required by law, court order, or regulatory direction to disclose personal data;
• Professional advisors — lawyers, auditors, and compliance consultants, under obligations of confidentiality.

6.3 All third parties to whom kj168 discloses personal data are required to maintain appropriate technical and organisational security measures and to process such data only in accordance with kj168's instructions.

7. International Data Transfers

7.1 Some of kj168's service providers and infrastructure partners may process personal data outside of Malaysia. Where personal data is transferred to a jurisdiction outside Malaysia, kj168 will ensure that appropriate safeguards are in place to protect such data, consistent with the requirements of the PDPA and applicable data protection principles.

7.2 By using the kj168 Platform, you acknowledge and consent to such international data transfers where they are necessary for the delivery of the Platform services.

8. Cookies and Tracking Technologies

8.1 The kj168 Platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain your login session, analyse Platform usage, and detect fraudulent activity.

8.2 The following categories of cookies are used on the kj168 Platform:

• Strictly necessary cookies — required for the Platform to function correctly, including session management and security tokens. These cannot be disabled.
• Functional cookies — remember your preferences, such as language settings and remembered login details, to improve your experience across sessions.
• Analytics cookies — collect anonymised data about how users interact with the Platform, enabling kj168 to improve performance and content.

8.3 You may configure your browser settings to refuse or delete cookies; however, disabling strictly necessary cookies may affect the functionality of your kj168 account.

9. Data Retention

9.1 kj168 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law, including anti-money laundering and record-keeping obligations.

9.2 As a general guide, kj168 retains account and transaction records for a minimum of five (5) years following the closure of an account, in accordance with applicable financial services regulations. Communication records and support tickets are retained for a minimum of two (2) years.

9.3 Where personal data is no longer required and no legal obligation to retain it exists, kj168 will securely delete or irreversibly anonymise that data.

10. Your Data Subject Rights

10.1 Subject to the provisions of the PDPA and applicable data protection law, you have the following rights in relation to the personal data kj168 holds about you:

• Right of access — you may request a copy of the personal data kj168 holds about you;
• Right of correction — you may request that inaccurate or incomplete personal data be corrected;
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal;
• Right to restrict processing — in certain circumstances, you may request that kj168 restricts the processing of your personal data;
• Right to erasure — in certain circumstances, you may request deletion of your personal data; this right is subject to legal retention obligations.

10.2 To exercise any of the above rights, please contact the kj168 support team via 24/7 live chat or by email using the address in Section 16. kj168 will respond to valid requests within thirty (30) days. kj168 reserves the right to verify your identity before processing any data subject request.

11. Security Measures

11.1 kj168 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL encryption across all Platform pages, secure server environments, role-based access controls, and regular security assessments.

11.2 While kj168 takes reasonable steps to protect your personal data, no transmission over the internet or electronic storage system is entirely secure. kj168 cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, kj168 will notify the relevant authority and, where required, the affected individuals in accordance with applicable law.

12. Children's Privacy

12.1 The kj168 Platform is strictly for use by individuals aged 21 years and above. kj168 does not knowingly collect or process personal data relating to minors. If kj168 becomes aware that personal data has been collected from a person under the age of 21, such data will be deleted immediately and the account closed.

12.2 If you believe that kj168 may have inadvertently collected personal data from a minor, please contact us immediately using the details in Section 16.

13. Marketing Communications

13.1 kj168 may send you promotional communications about Platform offers, new games, and kj168 services where you have provided your consent to receive such communications at the time of account registration or subsequently.

13.2 You may opt out of receiving marketing communications from kj168 at any time by contacting our support team. Opting out of marketing communications does not affect transactional and account-related notifications, which are sent as a necessary part of operating your kj168 account.

14. Third-Party Links

14.1 The kj168 Platform does not contain links to third-party websites. This Policy applies solely to personal data collected and processed by kj168 in connection with your use of the Platform.

15. Changes to This Privacy Policy

15.1 kj168 reserves the right to update or revise this Privacy Policy at any time. Any changes will be posted on this page with an updated "Last Updated" date. Where changes are material, kj168 will notify registered players via on-platform notification or email. Your continued use of the Platform following publication of revised terms constitutes your acceptance of the updated Policy.

16. Contact Us

If you have any questions, requests, or complaints relating to this Privacy Policy or the processing of your personal data by kj168, please contact our Data Privacy team through the 24/7 live chat facility on the Platform, or by writing to us at the email address displayed in the footer of this page. kj168 aims to acknowledge all data privacy enquiries within five (5) business days and to resolve them within thirty (30) days.