kj168 Privacy Policy

1. Introduction

kj168 ("kj168", "we", "us", "our") is committed to protecting the privacy and personal data of all players who access or use the kj168 platform at kj168.win. This Privacy Policy ("Policy") describes the personal data kj168 collects from players in Malaysia and other jurisdictions, the purposes for which that data is processed, the legal bases for processing, how data is stored and protected, and the rights available to players in respect of their personal data.

This Policy applies to all personal data collected through the kj168 website, mobile platform, customer support channels, and any other interaction you have with the kj168 platform. By registering a kj168 account or continuing to use the platform, you acknowledge that you have read and understood this Policy.

This Policy should be read in conjunction with the kj168 Terms & Conditions, which govern the general use of the kj168 platform.

2. Personal Data We Collect

2.1 Registration Data

When you register a kj168 account, we collect the information you provide directly, including:

• Full legal name (as it appears on your government-issued identification document);
• Date of birth (to verify the minimum age requirement of 21 years);
• Email address;
• Malaysian mobile phone number;
• Preferred username and account password (stored in hashed, non-recoverable form);
• Residential address (as required for KYC verification).

2.2 Identity Verification (KYC) Data

To comply with our international gaming licensing obligations and anti-money laundering requirements, kj168 collects identity verification documentation from all players prior to processing withdrawals. KYC data collected includes:

• Copy of Malaysian MyKad (front and back) or valid international passport;
• Proof of address documentation (utility bill, bank statement, or equivalent);
• Source of funds documentation where required by our compliance obligations;
• Selfie or video verification where additional identity confirmation is required.

2.3 Transaction and Gaming Data

kj168 records all financial transactions and gaming activity on the platform, including deposit amounts, payment methods used (e.g. Touch 'n Go eWallet, Boost, DuitNow, FPX), withdrawal requests and processing records, bet history, game session duration and stakes, bonus claims and wagering progress, and account balance history.

2.4 Technical and Device Data

When you access the kj168 platform, we automatically collect certain technical information including IP address, device type and operating system, browser type and version, referring URL, pages visited and session duration, and device identifiers (for fraud prevention purposes).

2.5 Communications Data

kj168 retains records of all communications between you and the kj168 support team, including live chat transcripts, email correspondence, and any complaints submitted through official kj168 channels.

2.6 Data You Choose to Provide

kj168 may collect additional personal data that you voluntarily provide in connection with promotions, surveys, responsible gaming self-assessments, or other optional platform features.

3. How We Use Your Personal Data

kj168 uses the personal data collected for the following purposes:

Purpose	Data Used
Account registration and management	Registration data, KYC data
Age and identity verification (21+ compliance)	Date of birth, KYC documents
Processing deposits and withdrawals	Transaction data, KYC data
Fraud prevention and anti-money laundering compliance	All data categories
Platform security and access control	Technical data, device identifiers
Customer support and complaint resolution	Communications data, account data
Responsible gaming monitoring and intervention	Gaming data, transaction data
Marketing communications (where consented)	Registration data, gaming preferences
Platform analytics and improvement	Technical data, anonymised gaming data
Regulatory reporting and licensing compliance	All data categories as required

4. Legal Basis for Processing

kj168 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between kj168 and the player, including account registration, gaming services, deposit and withdrawal processing, and KYC verification.
• Legal obligation: Processing required to comply with kj168's obligations under its international gaming licence, anti-money laundering regulations, and applicable data protection law — including age verification, transaction monitoring, and regulatory reporting.
• Legitimate interests: Processing undertaken for the purposes of fraud prevention, platform security, responsible gaming monitoring, platform analytics, and the prevention of prohibited conduct, where such processing does not override the rights and interests of players.
• Consent: Processing undertaken for optional purposes where kj168 has obtained your explicit prior consent, including direct marketing communications and optional platform features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

5.1 kj168 does not sell, rent, or trade your personal data.

kj168 does not share your personal data with third parties for their own marketing or commercial purposes. Your data is shared only in the following limited circumstances:

• Payment processors: To process deposits and withdrawals, kj168 shares necessary financial data with authorised payment service providers including Touch 'n Go eWallet operator, Boost, DuitNow infrastructure operators, and Malaysian banking partners. These providers are contractually obligated to process your data only for payment purposes.
• KYC and identity verification partners: kj168 may use licensed third-party identity verification services to process KYC documents. These providers are bound by strict data processing agreements and may not use your data for any purpose other than identity verification on kj168's behalf.
• Game providers: Where game providers require session data to deliver real-time gaming experiences, minimal technical data is shared under strict data processing agreements. Game providers do not receive your full personal profile.
• Regulatory and licensing authorities: kj168 may be required to disclose player data to its licensing authority or other competent regulatory bodies in connection with regulatory reporting, investigation of suspected prohibited activity, or compliance with lawful information requests.
• Law enforcement: kj168 may disclose personal data in response to a valid court order, subpoena, or lawful request from a competent law enforcement authority, including in connection with anti-money laundering or fraud investigations.
• Corporate transactions: In the event of a merger, acquisition, or sale of assets involving kj168, player data may be transferred to the relevant successor entity, subject to the same privacy protections described in this Policy.

6. International Data Transfers

kj168 operates under international gaming licensing and may process or store personal data on servers located outside Malaysia. Where personal data is transferred to jurisdictions that may not provide the same level of data protection as your home jurisdiction, kj168 will implement appropriate safeguards — including standard contractual clauses or equivalent mechanisms — to ensure that your data receives an adequate standard of protection.

By registering a kj168 account and using the platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia in accordance with this Policy.

7. Data Retention

kj168 retains personal data for as long as your account remains active and for such period thereafter as is required by kj168's licensing obligations and applicable law. In practice, kj168 applies the following general retention periods:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years following each transaction, in accordance with licensing and financial record-keeping obligations.
• Communications data: Retained for a minimum of two (2) years following the communication, or longer where required in connection with a dispute or complaint.
• Technical and device data: Retained for a maximum of thirteen (13) months in standard analytics systems, with aggregated anonymised data retained indefinitely for platform improvement purposes.

Following the expiry of applicable retention periods, personal data will be securely deleted or anonymised in accordance with kj168's data management procedures.

8. Cookies and Tracking Technologies

kj168 uses cookies and similar tracking technologies on the kj168 platform for the following purposes:

• Strictly necessary cookies: Required for the platform to function, including session authentication, security tokens, and login state management. These cannot be disabled without affecting core platform functionality.
• Performance and analytics cookies: Used to collect anonymised information about how players use the kj168 platform, enabling us to improve user experience, identify errors, and optimise page loading performance.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to improve your experience on return visits.

kj168 does not use third-party advertising cookies or behavioural tracking technologies for the purpose of serving targeted advertising to you on external platforms. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in to and use the kj168 platform.

9. Data Security

kj168 implements industry-standard technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL encryption for all data transmission between your device and kj168 servers;
• Bcrypt hashing of all account passwords — kj168 does not store passwords in recoverable form;
• Two-factor authentication (2FA) available and strongly recommended for all kj168 accounts;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Regular security audits and penetration testing by independent security specialists;
• Segregated storage of player funds, separate from operational accounts.

10. Your Data Protection Rights

Subject to applicable law and kj168's licensing obligations, you have the following rights in respect of your personal data held by kj168:

• Right of access: You may request a copy of the personal data kj168 holds about you. kj168 will respond to verified access requests within 30 days.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Certain data (such as KYC-verified name and date of birth) may only be corrected with supporting documentation.
• Right to erasure: You may request deletion of your personal data in circumstances where retention is no longer necessary, subject to kj168's legal and licensing retention obligations. Note that regulatory record-keeping requirements may prevent full erasure of certain data categories.
• Right to restriction of processing: You may request that kj168 temporarily restrict the processing of your data pending resolution of an accuracy dispute or objection.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to kj168, where processing is based on consent or contractual necessity.
• Right to object: You may object to processing based on legitimate interests and to direct marketing communications. Objections to direct marketing will be honoured immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, contact kj168 via the 24/7 Live Chat in your account dashboard. kj168 may require verification of your identity before processing any data rights request.

11. Children and Minors

The kj168 platform is strictly intended for adults aged 21 years and over. kj168 does not knowingly collect personal data from persons under the age of 21. If kj168 becomes aware that personal data has been collected from a person under 21, that data will be deleted and the relevant account permanently closed in accordance with kj168's responsible gaming policies and international licensing obligations.

If you are a parent or guardian and believe that a minor has registered an account with kj168, please contact our support team immediately via the 24/7 Live Chat. kj168 takes underage gambling prevention extremely seriously and will act promptly on any such report.

12. Changes to This Privacy Policy

kj168 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or our platform services. Material changes to this Policy will be communicated to registered players via the registered email address on record and/or via a notice posted on the kj168 platform homepage. The effective date of the current version of this Policy is displayed at the top of this page. Your continued use of the kj168 platform following notification of changes constitutes your acknowledgement of the updated Policy.

13. Contact and Data Enquiries

For all privacy-related enquiries, data subject access requests, or concerns about kj168's data processing practices, please contact the kj168 data compliance team:

• Live Chat: Available 24/7 from within your kj168 account dashboard — the fastest channel for all data rights requests.
• Email: [email protected] (plain text — not a clickable link). Please include "Data Privacy Request" in the subject line.

kj168 will acknowledge all written data enquiries within two (2) business days and aims to provide a substantive response within thirty (30) calendar days of identity verification.