Km8 Privacy Policy – Personal Data Protection Malaysian Players

This Privacy Policy is published by km8 ("we", "Platform", "km8") and applies to all users who access or use the km8.run website, the km8 mobile app, and all related services. This document outlines our privacy practices in a thorough and transparent manner.

We understand that your trust is our most valuable asset. As such, we take a serious and responsible approach to every aspect of managing your personal data — from how it is collected to how it is securely deleted when no longer needed.

This Privacy Policy should be read together with Terms and Conditions km8. Together, both documents form the complete agreement between you and km8 regarding your use of the platform and the management of your data.

If you are under 18 years of age, you are not permitted to use the km8 platform, and we do not knowingly collect any data from minors. If you believe we may be holding data belonging to someone under 18, please contact us immediately so that appropriate action can be taken.

Km8 collects several categories of data depending on how you interact with our platform. Below is a summary of the types of data we may collect:

We only collect data that strictly necessary for the stated purposes. We do not collect sensitive data such as your health information, religious beliefs, or political views.

The personal data we collect is used solely for the following purposes:

• Account Management: Creating, verifying and maintaining your km8 account, including the KYC process required for legal compliance.
• Transaction Processing: Processing deposits, withdrawals and any other financial transactions you make on the km8 platform securely and accurately.
• Platform Security: Detecting and preventing fraudulent activity, money laundering, unauthorised access and any other security threats to your account.
• Customer Support: Responding to inquiries, resolving complaints and providing the technical assistance you need.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offering appropriate support when needed.
• Service Improvement: Analysing aggregate (not individual) usage patterns to improve the user experience and platform features.
• Marketing Communications: Sending promotional offers and the latest news about km8 – only if you have given consent to receive such communications.
• Legal Compliance: Meeting applicable legal and regulatory obligations, including responding to inquiries from competent authorities.

Km8 will not use your data for any purpose other than those stated above without first obtaining your consent.

Km8 does not sell or rent your personal data to any third party. However, under certain circumstances, we may share your data with the following parties:

• Payment Service Providers: Financial institutions and payment processors that partner with km8 to enable deposit and withdrawal transactions to be processed securely.
• Technical Service Providers: Companies that provide technical infrastructure, cloud services, and cybersecurity to km8 — all bound by strict data confidentiality agreements.
• Regulatory Authorities: Where required by Malaysian law or a valid court order, we may be required to disclose certain information to the relevant authorities.
• Game Providers: Minimum data required to ensure games function correctly may be shared with third-party game providers integrated within the km8 platform.

All third parties that receive your data from km8 are required to process that data in accordance with security and privacy standards equivalent to or higher than those we uphold.

Km8 implements comprehensive technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

• Data Encryption in Transit: All communications between your device and km8's servers are protected with 256-bit SSL/TLS encryption.
• Data Encryption at Rest: Sensitive data such as banking information and identification card numbers is stored in encrypted form using the latest encryption algorithms.
• Access Control: Access to user personal data is restricted to staff with a legitimate business need who have completed privacy training.
• Continuous Monitoring: A 24/7 security monitoring system is active to detect any unauthorised access attempts or suspicious activity.
• Regular Auditing: km8 conducts regular internal and external security audits to ensure data protection systems remain up to date.

Your personal data will be retained for the duration your account is active, plus any period required by Malaysian law for audit and legal compliance purposes (typically seven years for financial records). After this period, your data will be securely deleted from our systems.

Km8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled as they are essential for the platform to operate correctly.
• Performance Cookies: Collecting information about how you use our platform (for example, the most frequently visited pages) to help us improve our services.
• Functional Cookies: Saving your preferences such as language, region and display settings so you do not have to re-configure them every time you log in.
• Analytics Cookies: Helping us understand aggregate traffic and usage patterns through analytics tools that do not expose individual user identities.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience of the km8 platform.

As a km8 user, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA):

To exercise any of the rights above, contact the km8 privacy team via live chat or support email. We will process your request within three (3) business days and provide a full response within 21 business days.

The km8 platform is for users aged 18 and above only. We do not knowingly or intentionally collect, process, or store personal data of individuals under the age of 18.

All new registrants are required to confirm that they are at least 18 years of age during the registration process. Our KYC process also helps detect and prevent registration by underage individuals.

If we discover that personal data of someone under 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account. Parents or guardians with concerns about this matter may contact us via 24/7 live chat.

The km8 platform is integrated with certain third-party services such as game providers and payment processors. Each of these providers has its own Privacy Policy governing how they handle user data.

Km8 is not responsible for the privacy practices or content of third-party platforms integrated within our services. However, we only work with providers that comply with strict privacy and data security standards.

Before sharing any personal information with any party claiming to be associated with km8, please ensure you are only interacting through official km8 channels — the km8.run website or the official km8 mobile app.

Km8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or the addition of new platform features.

When material changes are made to this Privacy Policy, we will notify you via:

• In-platform notification on km8 when you next log in.
• A notification email to the email address registered to your account.
• Update of the "Last Updated" date at the top of this page.

Your continued use of the km8 platform after an updated Privacy Policy is published will be considered your acceptance of those changes. If you do not agree with any changes, you have the right to close your account and request deletion of your personal data.

If you have any questions, concerns, or complaints regarding how km8 handles your personal data, or wish to exercise any of your privacy rights, please contact our Privacy Officer through the following channels:

• 24/7 Live Chat: Available directly within the km8 platform — the fastest way to get an immediate response.
• Privacy Email: [email protected] — for more detailed written enquiries.
• General Support: [email protected] — for general enquiries related to your account and privacy.

We are committed to responding to all privacy-related enquiries within three (3) business days. For more complex cases requiring further investigation, we will provide a full response within 21 business days and keep you regularly updated on the progress of your case.