Your Data Protection & Privacy

K88 Casino Privacy Policy — Your Data Is Safe in Our Hands

K88 Casino takes your privacy very seriously. This policy sets out transparently how we collect, use, store, and protect your personal information as a member of our platform – in accordance with Malaysia's Personal Data Protection Act (PDPA).

Updated: January 2026 Malaysia PDPA Compliant 256-bit SSL Encryption Bahasa Melayu (ms-MY)
Encryption standards
256-bit SSL
Comply with
Malaysia PDPA
Data sold to third parties
Never
Data request response
30 Days

6 Ways K88 Casino Protects the Privacy of Malaysian Players

Privacy is more than a legal document — it is a genuine commitment reflected in every system and process we have built at k88 casino.

Bank-Grade Encryption

All data transmitted between your device and k88 casino's servers is protected by 256-bit SSL encryption — the same standard used by major Malaysian banks such as Maybank and CIMB. Your personal information, payment details and gaming records cannot be intercepted by third parties.

Fully Compliant with Malaysia's PDPA

K88 casino fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). This means we only collect data that is genuinely necessary, inform you of the purpose for which it is collected, and respect your right to access, correct or delete your personal data at any time.

Data Never Sold to Third Parties

K88 casino has never sold, rented or traded players' personal data to any third party for marketing or commercial purposes, and never will. Your data belongs to you — we are merely its temporary custodians, entrusted to keep it safe.

Strict Internal Access Controls

Only k88 casino staff with a legitimate business need may access player data — and every instance of access is logged for audit purposes. All staff who handle personal data undergo privacy training and are bound by strict confidentiality agreements. Unauthorised access will result in immediate disciplinary action.

Marketing Controls in Your Hands

You have full control over the marketing communications you receive from k88 casino. You can unsubscribe from promotional emails or push notifications with a single click from your account settings or via the unsubscribe link at the bottom of every email. Unsubscribe requests are processed within 48 hours.

Immediate Data Breach Notification

In the unlikely event of a data breach involving your personal information, k88 casino is committed to notifying you within 72 hours of the breach being detected – in line with international data protection best practices. We will not conceal any security incidents that affect our players.

Important Note Before You Read

This Privacy Policy clearly outlines how k88 casino manages your personal data. By using the k88 casino platform, you agree to the terms set out in this document. This document should be read together with Terms & Conditions of ours. For enquiries, contact us at support@k88casino.best.

1Introduction and Scope of the Privacy Policy

Updated: 1 January 2026

This Privacy Policy ("Policy") is published by k88 casino ("we", "the platform" or "K88 Casino") and sets out in detail how we collect, process, store, protect and, in certain circumstances, disclose your personal information when you use our platform, accessible at https://k88casino.best.

K88 casino complies with Malaysia's Personal Data Protection Act 2010 (PDPA) in all matters involving players' personal data. As a data controller, k88 casino is responsible for ensuring that all personal data we handle is managed in a manner that is secure, transparent and respectful of your privacy rights.

This Policy applies to all individuals who access or use the k88 casino platform, including registered players, prospective players visiting our website, and individuals who contact our customer support team. If you are using the platform on behalf of another person, you are responsible for ensuring that individual is aware of and agrees to this Privacy Policy.

Quick Summary: We collect data you provide directly and data generated automatically through your usage. This data is used to operate the platform, process payments, and improve our services. We do not sell your data. You may request access, correction, or deletion of your data at any time.

2Types of Personal Data We Collect

K88 casino collects your personal data through two main methods: data you provide to us directly, and data collected automatically while you use the platform.

Data you provide directly:

Data Category Sample Information Primary Purpose
Identity Information Full name, date of birth, MyKad number Account registration & age verification (KYC)
Contact Information Malaysian phone number, email address, residential address Communications, verification & customer support
Financial Information E-wallet account details (TNG, GrabPay, DuitNow), FPX information Deposit & withdrawal processing in MYR
KYC Documents Copy of MyKad/passport, utility bill, bank statement Identity verification & AML compliance
Support Information Live chat conversation records, support emails Troubleshooting & service improvement

Automatically collected data:

  • IP address and approximate location information based on IP
  • Device type, operating system, and web browser version
  • Gaming session records, including games played, bet amounts, and outcomes
  • Cookie and tracking technology data (detailed in Section 6)
  • Logs of access times, pages visited and navigation patterns within the platform
k88 casino does not collect sensitive information such as health data, religious beliefs or political affiliations. We only collect data that is necessary to operate the platform and fulfil our legal compliance obligations.

3How We Use Your Personal Data

K88 casino uses your personal data only for legitimate, stated purposes. We will not use your data for any other purpose without first obtaining fresh consent from you:

  • Account Management: Creating and managing your account, processing registrations, verifying your identity, and managing passwords and security settings.
  • Financial Transaction Processing: Processes deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX Maybank2u, and FPX CIMB Clicks, and handles withdrawal requests in Malaysian Ringgit (RM).
  • Gaming Service Provision: Allows you to access and play all games available at k88 casino, including live casino, poker, blackjack, slots, Sports Betting and e-sports.
  • Security & Fraud Prevention: Detecting and preventing fraud, money laundering, bonus abuse, multi-accounting, and other illegal activities that threaten the integrity of the platform.
  • Legal Compliance: Fulfilling KYC (Know Your Customer), AML (Anti-Money Laundering) and other reporting obligations mandated by Malaysian law.
  • Customer Support: Providing technical assistance and customer support, resolving complaints, and improving service quality based on feedback.
  • Service Communications: Sending important account-related notifications, policy updates, security alerts and transaction information that you need to be aware of.
  • Marketing (with consent): Sending promotional information, bonus offers and the latest k88 casino news — only if you have given consent to receive marketing communications.
Legal Basis: All data processing by k88 casino is based on one of the following grounds: (a) your explicit consent, (b) contractual necessity to provide the services you have requested, (c) legal compliance obligations, or (d) legitimate interests that do not override your fundamental rights.

4Data Sharing and Disclosure to Third Parties

K88 casino does not sell, rent, or trade your personal data to third parties for marketing purposes under any circumstances. That said, there are limited situations where we may need to share your data with carefully selected third parties:

  • Local Payment Providers: Transaction data required for processing is shared with payment providers such as DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and Malaysian banks to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
  • Game Software Providers: Certain technical information is required by our gaming software providers to keep the platform running. These providers are not permitted to use your data for any other purpose.
  • Malaysian Authorities: K88 casino complies with all lawful directives from Malaysian authorities, including Bank Negara Malaysia, the Royal Malaysia Police or the courts, where required by law. Such disclosures are made reluctantly and only when legally mandated.
  • Professional Service Providers: Law firms, auditors or consultants engaged by k88 casino for legitimate business purposes, subject to professional confidentiality obligations.

All third parties receiving data from k88 casino are bound by data processing agreements that require them to protect your information to the same or higher standards that we apply.

We never share your data with third-party advertising companies, data brokers, or any entity that would use it for marketing purposes without your explicit consent. This is an absolute commitment by k88 casino.

5Data Security Measures We Have in Place

Data security is k88 casino's highest priority. We continuously invest in modern security infrastructure to protect your personal information from unauthorised access, disclosure, alteration, or destruction:

  • 256-bit SSL Encryption: All data communications between your browser and k88 casino's servers are encrypted using TLS 1.3 protocol with 256-bit keys – the highest security standard in the industry.
  • Data-at-Rest Encryption: Sensitive data stored in our databases — including financial information and identity documents — is encrypted at rest using AES-256.
  • Two-Factor Authentication (2FA): We strongly encourage you to enable 2FA on your account, which adds an extra layer of security by requiring an additional verification code each time you log in.
  • 24/7 Security Monitoring: Our automated monitoring system operates around the clock to detect suspicious activity, intrusion attempts, or unusual access patterns.
  • Role-Based Access Control: k88 casino staff can only access data that is relevant to their job responsibilities – no one has full access to all data without high-level authorisation.
  • Regular Security Testing: The k88 casino platform undergoes regular independent penetration testing and security audits to identify and address any vulnerabilities before they can be exploited.
Shared Responsibility: While k88 casino implements comprehensive security measures, the safety of your account also depends on you. Please use a strong, unique password, never share your login credentials, enable 2FA, and contact us immediately if you suspect any suspicious activity on your account.

6Cookies and Tracking Technologies

K88 casino uses cookies and similar tracking technologies to keep the platform running smoothly, personalise your experience, and understand how users interact with our platform. The types of cookies we use are as follows:

  • Essential Cookies: Required for core platform functions — login, session security and basic settings. These cookies cannot be disabled as they are essential for the platform to operate.
  • Performance Cookies: Collects aggregate information on how you use the platform – most visited pages, time spent, and errors encountered. This data is used to improve platform performance and is not used to personally identify you.
  • Functional Cookies: Storing your preferences such as language, game settings, last-used betting limits and login information (if you select "Remember Me"). This allows for a more personalised and seamless experience.
  • Analytics Cookies: Helps us understand aggregate usage patterns so we can make product improvement decisions based on real data, not assumptions.

You can manage your cookie settings through your web browser settings. Please note that disabling essential cookies will affect platform functionality — you may be unable to log in or use certain features properly. Disabling performance or analytics cookies will not affect the core functionality of your platform.

Cookie Duration: Session cookies are deleted when you close your browser. Persistent cookies remain for a set period — typically between 30 days and 1 year depending on their function — or until you delete them manually.

7Your Rights as a Data Subject Under the PDPA

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by k88 casino. We are committed to respecting and facilitating the exercise of all these rights:

Right of Access

You have the right to obtain a copy of all personal data we hold about you. Access requests will be fulfilled within 30 days and provided in a readable format.

Right to Rectification

If any of your personal data is inaccurate or out of date, you have the right to request that we correct it. Basic information can be updated directly from your account settings.

Right to Erasure

You may request deletion of your personal data under certain circumstances – for example, if you close your account and the data is no longer needed for the purpose it was collected. This is subject to legal retention requirements.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Objections to marketing-related processing will be honoured immediately, no questions asked.

Right to Restriction of Processing

In certain circumstances — such as when the accuracy of data is disputed or during an ongoing complaint investigation — you may request that we restrict how we use your data while the matter is being resolved.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if you wish.

How to Exercise Your Rights

To exercise any of the above rights, contact the k88 casino privacy team by email at support@k88casino.best with the subject line "Privacy Rights Request" along with your full name and account number. We will verify your identity before processing your request and will respond within 30 days from the date of receipt of the completed request.

8Data Retention Period and Deletion

K88 casino does not retain your personal data for longer than is necessary for the purposes for which it was collected, or longer than required under Malaysian law. Our retention policy is as follows:

  • Active Account Data: Retained for the duration that your k88 casino account remains active. This data allows us to provide uninterrupted service and address any account-related enquiries.
  • Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with the Malaysian Companies Act and anti-money laundering regulations. This includes all deposit and withdrawal records in MYR across all payment methods.
  • KYC Documents (Identity Verification): Retained for a minimum of 5 years after the business relationship ends or after the last transaction, in accordance with Malaysia's AML legal requirements.
  • Customer Support Records: Chat logs and complaint records are retained for 2 years to allow us to address follow-up enquiries and continually improve our service quality.
  • Marketing Data (with consent): Retained until you withdraw consent or request deletion. Once consent is withdrawn, marketing data is deleted within 30 days.
  • Closed Account: After account closure, basic personal data will be deleted within 90 days, except for data that must be retained to comply with the legal requirements stated above.
Secure Deletion: Once a retention period expires, k88 casino deletes or anonymises personal data using secure methods — including cryptographic erasure for encrypted data and secure physical destruction for any records held in physical format.

9Changes to This Privacy Policy

K88 casino reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements or changes to the services we offer. We are committed to implementing these changes transparently.

When we make material changes to this Privacy Policy, we will:

  • Updating the "Last Updated" date at the top of this document
  • Displaying a clear notice on the main page of the k88 casino platform
  • Sends notifications to your registered email address for any significant changes
  • For highly material changes, requesting your renewed consent before the changes take effect

Minor changes that do not affect your fundamental rights (such as language improvements or additional clarifications) may be made without proactive notification, but the last updated date will always be revised. We encourage you to review this page periodically.

Continued use of the k88 casino platform after the effective date of any notified Privacy Policy changes will be considered your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data in accordance with the procedure set out in Section 7 of this document.

10Contact Us for Privacy Enquiries

If you have any questions, concerns, or complaints regarding how k88 casino handles your personal data, or if you wish to exercise any of the privacy rights outlined in Section 7, please contact us through the following channels:

  • Privacy Email: support@k88casino.best (subject: "Privacy Enquiry")
  • Live Chat: Available 24/7 within the k88 casino platform — select the "Privacy & Data Security" category
  • Response Time: We will acknowledge receipt of your request within 48 hours and provide a full response within 30 days

For requests involving data rights (access, correction, deletion), please provide the following details to help us process your request promptly: your full name as registered on the account, your k88 casino account ID, the specific type of request, and your Malaysian phone number for identity verification.

If you are not satisfied with k88 casino's response to your privacy complaint, you have the right to escalate it to Malaysia's Department of Personal Data Protection (JPDP), the data protection regulatory authority in Malaysia.

Our Final Commitment: k88 casino believes that player trust is the most valuable asset we have. Protecting your personal data is not merely a legal obligation — it is our moral responsibility to each of the more than 500,000 registered members across Malaysia who place their trust in our platform every day.

Frequently Asked Questions About K88 Casino's Privacy Policy

Answers to the privacy questions most frequently asked by k88 casino players.

Absolutely not. k88 casino does not sell, rent or share player personal data with advertising companies, data brokers or any third party for external marketing purposes. This is an unconditional commitment that has never changed since k88 casino was founded. The only marketing communications you will receive from k88 casino are offers and promotions from k88 casino itself — and only if you have given your consent to receive them. You can unsubscribe from all k88 casino marketing communications at any time through your account settings.

The identity verification (KYC) process is a legal requirement under Anti-Money Laundering (AML) regulations that apply to all financial and gaming platforms in Malaysia. k88 casino is required to verify a player's identity before processing withdrawals above certain thresholds, or when unusual activity is detected. Your identity documents are stored securely using encryption and are only accessible to authorised KYC staff. The KYC process is a one-time requirement — once your account is verified, you will not need to repeat it for future withdrawals unless your information changes or a periodic review is required.

Yes, you have the right to request deletion of your personal data under Malaysia's PDPA. However, please be aware that k88 casino is legally required to retain financial records and transaction data for a specified period (a minimum of 5–7 years) even after an account is closed — this is a requirement under Malaysian company law and anti-money laundering regulations that we cannot waive. Data not subject to any legal retention requirement will be deleted within 90 days of your request. To submit a deletion request, email us at support@k88casino.best with the subject line "Data Deletion Request".

K88 casino has a comprehensive Security Incident Response Plan. In the event of a data breach involving your personal information, we are committed to: (1) detecting and containing the breach as quickly as possible, (2) assessing the scope and impact of the breach, (3) notifying you personally within 72 hours if your data is affected, (4) taking the necessary remediation steps including forced password resets, (5) reporting to the relevant Malaysian authorities where required by law. We will not conceal serious security incidents from affected players. Transparency in critical situations is part of our trust commitment to k88 casino players.

k88 casino uses IP addresses for several legitimate purposes: (1) security — detecting suspicious access attempts or logins from unusual locations, (2) compliance — ensuring the platform is accessed from Malaysia in accordance with our terms of service, (3) fraud detection — identifying potential multi-accounting based on IP address patterns. We use approximate IP-based location data (at city or state level) — not precise GPS coordinates. This location information is not shared with advertisers and is used solely for the security and compliance purposes described above. Using a VPN may affect your access to the platform if the VPN's IP address appears on our blocklist.

The security of financial transactions is k88 casino's top priority. When you make a deposit or withdrawal via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX (Maybank2u or CIMB Clicks), all data communications are encrypted with 256-bit SSL. k88 casino does not store your PIN, password, or full authentication details for any payment method – we only retain a unique token that represents your payment method for processing future transactions. All payment providers we work with are licensed in Malaysia and comply with PCI DSS standards for payment data security. Transaction records are stored securely and are accessible only to authorised finance personnel.

Your Data Is Safe — Register at K88 Casino Today

Over 500,000 Malaysian players trust k88 casino with their personal data. Register for free in 2 minutes and enjoy a safe, fair and enjoyable gaming experience.

By registering, you agree to Terms & Conditions and Privacy Policy of ours. Minimum age 18.

Bahasa Melayu