Kj168 Privacy Policy — How We Protect the Personal Data of Malaysian Members

KJ168 only collects personal data that is genuinely necessary to provide and improve our services to you. We do not collect excessive data or data that lacks a clear and legitimate purpose. The following outlines the categories of data we collect and the reasons for doing so:

Account Registration Data: When you register as a kj168 member, we collect your full name, Malaysian phone number, email address, and date of birth. This data is required to create your account, confirm that you meet the minimum age requirement of 21 years, and to allow us to contact you regarding your account.

Identity Verification Data (KYC): In certain circumstances — including when you request a withdrawal above a specified threshold or when our systems detect activity that requires verification — we may request a copy of an official Malaysian identity document such as your National Identity Card (MyKad) or passport. KYC data is stored with additional security layers and is accessible only to specifically authorised personnel.

Financial Transaction Data: kj168 records all deposit and withdrawal transactions made through your account — including the payment method used (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and others), the amount, timestamp, and transaction status. These records are maintained for financial accountability, dispute resolution, and anti-money laundering compliance.

Technical Data: When you use the kj168 platform, our systems automatically collect technical information such as your IP address, browser type, device type (Android, iOS), operating system, and session timestamps. This data is used for security purposes, detecting unauthorised access attempts, and improving platform performance.

Kj168 uses your personal data only for legitimate purposes that are directly related to delivering our platform services. We do not use your data for purposes you would not reasonably expect or for which you have not given consent.

• Account Management: Creating and maintaining your member account, processing registrations, verifying identity, and enabling secure access to the kj168 platform.
• Transaction Processing: Processing deposits via Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as processing withdrawals to your registered account.
• Platform Security: Detecting and preventing fraud, money laundering, bonus abuse, multiple account usage, and activities that violate KJ168's Terms & Conditions.
• Rewards Programme: Calculating and crediting weekly cashback, VIP rebates, and other promotions based on your actual gameplay activity on the kj168 platform.
• Customer Support: Enables the KJ168 support team to identify your account and provide accurate assistance when you reach out via Live Chat or email.
• Service Communications: Sending important account-related notifications such as transaction confirmations, security alerts, and service updates. These are not marketing emails — they are necessary operational communications.
• Platform Improvements: Analysing usage patterns on an aggregated (not individual) basis to understand how Malaysian players use the platform and to make relevant improvements.
• Legal Compliance: Meeting the reporting and compliance requirements set out under applicable Malaysian law, including anti-money laundering obligations.

Kj168 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. This is a non-negotiable commitment. However, there are limited situations where we are required to share your personal data with certain parties for legitimate operational purposes.

Payment Service Providers: When you make a deposit or withdrawal, the necessary transaction details are shared with the relevant payment provider — for example, Touch 'n Go eWallet, GrabPay, or your bank via DuitNow or FPX. This data sharing exists solely to enable your financial transaction to be processed securely. These payment providers maintain their own independent privacy policies and data protection practices.

Game Providers: To provide access to games from leading providers such as Pragmatic Play, Spadegaming, PG Soft, and others, limited account information — typically a player ID without your full name — must be transmitted to the provider's system to initiate a game session. These providers do not receive your full financial information or personal identification details.

• Legal Requirements: KJ168 will disclose members' personal data if required to do so by a court order, Malaysian authorities, or in the course of a legitimate criminal investigation. We will not disclose data without a valid legal basis.
• Protection of KJ168's Rights: In cases where kj168 is required to take legal action to protect the rights, property, or safety of the platform and its members, relevant data may need to be shared with legal counsel or the appropriate legal authorities.
• Business Transitions: Should kj168 be involved in any merger, acquisition, or sale of assets, member data may be transferred as part of those business assets — however, any acquiring party will be bound by this Privacy Policy or an equivalent standard.

Kj168 invests seriously in data security because we understand that the trust of Malaysian players depends not only on fast payouts, but also on the confidence that their information is in safe hands. Below are the technical and operational security measures we have in place.

256-bit SSL Encryption: All communications between your browser or app and kj168's servers are encrypted using TLS with 256-bit encryption. This means that even if someone were to intercept your network traffic while you are using kj168 on a public Wi-Fi network, they would not be able to read the data.

Internal Access Controls: Member personal data may only be accessed by kj168 staff with a legitimate operational need who have completed data protection training. Access is governed by a need-to-know principle — for example, a customer support representative assisting you with a deposit enquiry does not have access to your KYC documents.

• Account passwords are stored in hashed form using a secure algorithm — KJ168 staff cannot view your password in plain text.
• KJ168's security monitoring system operates 24/7 to detect unauthorised access attempts, brute force attacks, and suspicious activity patterns.
• Two-factor authentication is available and strongly encouraged for all kj168 members as an additional layer of account security.
• Kj168's servers are housed in a secured environment with strict physical and cybersecurity controls, supported by regular data backups to ensure continuity of service.
• Internal security audits are conducted on a regular basis to identify and address any vulnerabilities before they can be exploited.

While kj168 takes comprehensive measures to protect your data, no system can guarantee absolute 100% security. You also play an important role in keeping your account safe — never share your password with anyone, use a strong and unique password for your kj168 account, and contact us immediately if you suspect any unauthorised activity on your account.

The kj168 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how Malaysian players use our platform. This section explains the types of cookies we use and how you can manage them.

Session Cookies: Session cookies are temporary cookies created when you log in to kj168 and are automatically deleted when you log out or close your browser. They are fundamental to how the platform works — storing your login session so you do not need to re-authenticate each time you navigate between pages. Without session cookies, the kj168 platform cannot function.

Preference Cookies: These cookies store your preference settings, such as your selected language and display preferences. They allow KJ168 to present the platform in your preferred configuration each time you return. Preference cookies do not contain sensitive personal information.

• Analytics Cookies: KJ168 uses aggregated analytics data to understand how members interact with the platform — which pages are visited most frequently, which games are most popular, and where users encounter difficulties. This data is used in aggregated form that cannot identify any specific individual.
• Security Cookies: Certain cookies serve a dedicated security function — detecting suspicious login attempts, preventing cross-site request forgery (CSRF), and ensuring your session cannot be hijacked by unauthorised parties.
• You may configure your browser to block or delete cookies. However, blocking session cookies and security cookies will affect the functionality of the kj168 platform and you may be unable to log in or use the service properly.

As an individual whose data is processed by kj168, you have certain rights under Malaysia's Personal Data Protection Act 2010 (PDPA). kj168 respects these rights and provides straightforward mechanisms for you to exercise them.

To exercise any of the above rights, please contact the KJ168 privacy team by email at support@kj168.asia by specifying the particular right you wish to exercise along with your account details (full name and registered email address). We will verify your identity before processing any privacy-related request, to safeguard the security of your data.

KJ168 does not retain your personal data longer than necessary for the purposes set out in this Privacy Policy, or as required under Malaysian law. The following provides a general overview of our data retention periods.

• Active Account Data: For as long as your kj168 account remains active, we retain all account data, transaction records, and gaming activity history. This data is necessary for ongoing account management, cashback calculations, and effective customer support.
• Financial Records: Financial transaction records — including deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and withdrawals — are retained for a minimum of seven years in accordance with Malaysian legal requirements on financial record-keeping and anti-money laundering. This period may be extended if records are linked to an active investigation or legal proceedings.
• KYC Documents: Identity verification documents such as MyKad copies are retained for the period required by applicable compliance obligations — generally no less than five years from the date of verification or the date of account closure, whichever is later.
• Technical Log Data: Technical logs such as IP addresses and access logs are retained for a shorter period, typically no longer than 12 months, unless required for an active security investigation.
• Account Closed: When your account is closed at your request or by kj168, personal data that is no longer required for operational or legal purposes will be deleted or anonymised within a reasonable timeframe. Data that must be retained for legal reasons will be stored with restricted access.

KJ168 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or the services we offer. We are committed to notifying you of any significant changes in a timely manner.

When we make material changes to this Privacy Policy, we will display a prominent notice on the kj168 platform homepage. If the changes directly affect how we process your data, we will also send a notification via email or an in-account notice. The "Last updated" date at the top of this page will be revised to reflect the date of the latest amendment.

• Continued use of the kj168 platform after any amendments to the Privacy Policy take effect will be considered acceptance of the revised policy.
• If you do not agree with any changes to the Privacy Policy, you have the right to close your account by contacting our support team before the changes come into effect.
• We retain previous versions of our Privacy Policy in our internal archives. If you require a copy of an earlier version for any legitimate purpose, please contact us at support@kj168.asia.
• All amendments to this Privacy Policy will be published in full on this page — we will not obscure changes in footnotes or sections that are difficult to find.

If you have any questions, concerns, or complaints regarding how kj168 handles your personal data, we encourage you to contact us first at support@kj168.asia. We will make every effort to resolve your concerns within 5 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, the authority responsible for enforcing the PDPA in Malaysia.