KM8 takes your privacy seriously. This document clearly explains how we collect, process, store, and protect your personal data — all in full compliance with applicable data protection laws.
Welcome to the km8 Privacy Policy page. At km8, we understand that privacy is more than just a word in a document — it is a real responsibility we take seriously every day. When you entrust your personal data to us, we are committed to handling it with care, transparency, and security. This Privacy Policy explains exactly what data we collect, why we need it, how it is used, and the full rights you hold as our player. This document applies to all users of km8.plus and the km8 mobile app, regardless of whether you are simply browsing, registering an account, or actively playing.
KM8 collects information through several different channels, each with a specific purpose. We do not collect data covertly or without your knowledge — all data collection is conducted openly and for legitimate reasons.
Account Registration: When you register a KM8 account, we collect information you provide directly, such as your full name, email address, phone number, date of birth, and password. This information is required to establish a unique account identity and ensure the security of your account.
Platform Usage: While you use the km8 platform — whether placing bets, checking results, or browsing promotions — our systems automatically record those activities as part of transaction records and security logs.
KYC (Know Your Customer) Process: To meet compliance requirements and enable fund withdrawals, you will need to submit an identity document such as a MyKad or passport, along with proof of current address. These documents are collected securely through an encrypted upload portal within our platform.
Financial Transactions: Every time you make a deposit or withdrawal via FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, GrabPay, Boost, or USDT, our system records the transaction details for audit, legal compliance, and security purposes.
Device & Network: We automatically collect technical information including IP address, browser type, operating system, screen resolution, and session data. This information is used to detect suspicious activity and ensure a consistent user experience.
We never purchase email lists or collect your data from external sources without your explicit consent. All data we hold comes directly from your interactions with the KM8 platform.
For greater clarity, here is a detailed table of the data categories collected by km8:
| Data Category | Example Information | Basis for Collection |
|---|---|---|
| Identity Data | Full name, MyKad number, date of birth, gender | KYC & legal compliance |
| Contact Data | Email address, phone number, residential address | Account management & communications |
| Financial Data | Deposit, withdrawal, bank name, and digital wallet type records | Transaction processing & audit |
| Technical Data | IP address, device type, OS version, session cookies | Platform security & performance |
| Activity Data | Betting history, games played, and login timestamps | Personalised services & compliance |
| Communication Data | Live chat conversation, support ticket, and email records | Customer service improvement |
We only collect data that is strictly necessary for platform operations and legal compliance. Any data that is no longer required will be deleted in accordance with our data retention schedule as outlined in Section 8.
KM8 uses collected data solely for legitimate and transparent purposes. We never use your data for purposes unrelated to platform services without obtaining your separate consent.
Account Management & Security: Your identity and contact data is used to verify your identity, protect your account from unauthorized access, and ensure that only you can access the funds and personal information within the account.
Transaction Processing: Every deposit and withdrawal requires accurate financial records to ensure funds reach the correct destination within the promised timeframe. Your financial data is also used to verify the source of funds where required by law.
Legal Compliance & Anti-Money Laundering (AML): KM8 is required to comply with legal obligations related to anti-money laundering and counter-terrorism financing. Your data is used to monitor suspicious transaction patterns and report to the relevant authorities when required by law.
User Experience Enhancement: Activity and technical data enable the KM8 team to understand how players use the platform, identify areas for improvement, and deliver relevant game or promotion recommendations to you.
Communications & Support: We use your email address and phone number to send important account notices, policy updates, and customer support responses. You may opt out of marketing communications at any time.
Responsible Gaming: Your betting activity data is used by our systems to detect patterns that may indicate problem gambling, and to activate deposit limit or self-exclusion tools that you have requested.
KM8 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is our non-negotiable commitment. However, there are certain situations where data sharing is necessary and legally permissible:
Every third-party provider we work with has undergone a security assessment process and is bound by a Data Processing Agreement (DPA) that obligates them to protect your data to the same or higher standard as km8 itself.
Protecting your data is the highest technical priority in KM8's operations. We continuously invest in security infrastructure to ensure your data remains safe at all times, whether in transit or at rest.
Encryption in Transit: All communication between your device and km8's servers is encrypted using TLS 1.3 protocol with 256-bit SSL encryption. This means that even if someone manages to intercept your network traffic, the data they see is nothing but unreadable text.
Storage Encryption: Sensitive data such as identification numbers, bank details, and passwords are stored in databases encrypted with the AES-256 algorithm. Your password is stored as a one-way hash that cannot be decrypted, even by KM8 staff.
Internal Access Controls: Only KM8 staff who require access to specific data to perform their duties will be granted access permissions. Our systems operate on the principle of least privilege — each employee has access only to the data necessary for their role.
24/7 Security Monitoring: Our automated threat detection system monitors all platform activity at all times to detect any unauthorised access attempts, cyberattacks, or suspicious behaviour in real time.
Incident Response: In the event of a data breach affecting your personal information, KM8 will notify you and the relevant authorities within 72 hours of becoming aware of it, in accordance with applicable legal requirements.
KM8 uses cookies and similar tracking technologies to ensure the platform functions correctly, improve performance, and deliver a better experience for you. The following are the types of cookies we use:
You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect platform functionality or prevent login.
KM8 does not use third-party advertising cookies or tracking pixels to monitor your activity outside our platform. Our tracking is limited to activity within the km8.plus ecosystem only.
As a km8 platform user, you have clear rights regarding your personal data. We fully respect these rights and provide straightforward mechanisms for you to exercise them:
To exercise any of the above rights, please contact the km8 support team via live chat or email at [email protected]. All requests will be processed seriously and you will be notified of the outcome within the stipulated timeframe.
KM8 retains your personal data only for as long as necessary for the stated purposes or as required by law. The following are our data retention guidelines:
Once the retention period expires, your data will be securely deleted using an irreversible deletion method, or anonymized if it is still needed for aggregate analytics.
KM8 is an online gambling platform intended exclusively for individuals aged 21 and above. We do not knowingly collect or process personal data of minors or individuals below the stipulated age limit.
During the registration process, we require date of birth verification and KYC verification to ensure all users meet the age requirement. Our system automatically rejects registrations that do not meet the minimum age limit.
If you believe a minor has successfully registered an account, or if you are a parent or guardian who has discovered that a child under your care has accessed this platform, please contact us immediately. We will investigate and close the account in question, and delete all associated data without delay.
KM8 maintains a zero-tolerance policy towards participation by minors. Any account suspected of belonging to an individual under 21 will be immediately suspended and fully investigated.
If you have any questions, concerns, or requests regarding this Privacy Policy or how KM8 handles your personal data, our team is ready to assist through multiple channels:
KM8 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be communicated to you at least 7 days before taking effect, via an in-platform notice or email to your registered address.
Our commitment to your privacy is ongoing and unconditional. This Privacy Policy is more than a legal document — it is our promise to you as a user who has entrusted your data to KM8.
Six core pillars that form the foundation of data protection and player privacy on the KM8 platform.
Every bit of data travelling between your device and km8's servers is protected by banking-grade TLS 1.3 encryption, ensuring no third party can intercept your information.
KM8 has never and will never sell, rent, or share players' personal data with advertisers or data brokers. Your information remains exclusively within the KM8 ecosystem.
Our systems operate on a minimum privilege principle — only staff who genuinely require access to specific data are permitted to do so, and every access is logged for internal audit purposes.
Km8's automated threat detection system operates around the clock to identify any suspicious activity, intrusion attempts, or anomalies in account access patterns in real time.
You have full control — the right to access, correct, transfer, or request deletion of your data at any time through KM8's always-available customer support.
The KM8 privacy policy is designed to comply with Malaysia's data protection laws and international standards, giving you confidence that your data is managed responsibly and lawfully.