Privacy Policy

1. Who We Are & Data Controller

kkslot operates the online casino and sportsbook platform accessible at kkslot.club. For the purposes of this Privacy Policy, kkslot acts as the Data Controller in respect of personal data collected from registered players and visitors to the Platform.

As Data Controller, kkslot determines the purposes and means by which your personal data is processed. Where kkslot engages third-party service providers to process data on its behalf, those parties act as Data Processors and are bound by contractual obligations to process data only on kkslot's instructions and in accordance with applicable data protection standards.

Questions about this Privacy Policy or your personal data may be directed to our Data Protection contact at [email protected] (plain text — please copy and paste into your email client; this is not a clickable link).

2. Personal Data We Collect

kkslot collects the following categories of personal data in the course of operating the Platform and providing its Services to Malaysian players:

kkslot does not collect Special Category Data (such as racial or ethnic origin, health data, or biometric data) as a standard part of its registration or verification process, unless voluntarily disclosed by the Player in the context of a responsible gaming request (e.g. medical documentation in support of a self-exclusion).

3. How We Collect Your Data

kkslot collects personal data through the following means:

• Direct Collection: Data you provide at registration, during KYC verification, when making deposits or withdrawals, when contacting support, or when completing responsible gaming requests.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, via server logs, session tracking, and analytics tools. This includes your IP address, device identifiers, and browsing behaviour within the Platform.
• Cookies & Tracking: Cookies and similar technologies deployed on the Platform collect data about your session and preferences. See Section 6 for full details.
• Third-Party Sources: kkslot may receive data from payment processors (e.g. transaction status and reference numbers from Touch n Go eWallet or Maybank FPX), identity verification services, and fraud prevention providers, for the purposes of completing transactions and verifying identity.

4. Why We Use Your Data (Legal Bases)

kkslot processes personal data on the following legal bases:

• Contractual Necessity: Processing required to create and maintain your Account, process deposits and withdrawals, deliver gaming Services, and resolve disputes. Without this processing, kkslot cannot provide the Platform to you.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, age verification requirements (21+), Know Your Customer (KYC) obligations, and data retention requirements under relevant regulatory frameworks.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, technical troubleshooting, and improving Platform functionality, where such interests are not overridden by your privacy rights.
• Consent: Where kkslot seeks your consent for specific processing activities — such as sending promotional communications — you may withdraw that consent at any time by contacting support or updating your communication preferences in Account settings.

5. Data Sharing & Third Parties

kkslot does not sell your personal data to third parties. We share personal data only in the following circumstances and with the following categories of recipients:

• Payment Processors: Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and USDT processing services receive necessary financial data to process your deposits and withdrawals.
• Identity Verification Providers: KYC and age verification service providers receive identity documents and personal data to perform verification checks as required by our licensing and AML obligations.
• Gaming Software Providers: Game providers (e.g. Pragmatic Play, NetEnt, Jili) may receive anonymised session and technical data to operate their games within the Platform. These providers do not receive your identity or financial data.
• Fraud Prevention & Security: Specialist fraud detection and cybersecurity service providers who assist in protecting the Platform and player accounts from unauthorised access and fraudulent activity.
• Regulatory Authorities: kkslot may be required to disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or other competent authorities where required by law or pursuant to a valid legal order.
• Professional Advisers: Legal, accounting, and compliance advisers bound by professional confidentiality obligations, where disclosure is necessary to obtain professional advice or in the context of legal proceedings.

All third-party Data Processors engaged by kkslot are subject to contractual data processing agreements requiring them to implement appropriate technical and organisational security measures and to process personal data solely on kkslot's instructions.

6. Cookies & Tracking Technologies

The kkslot platform uses cookies and similar tracking technologies. Cookies are small data files placed on your device when you visit the Platform. They serve the following purposes:

• Essential Cookies: Required for the Platform to function — maintaining your login session, preventing cross-site request forgery, and enabling secure communications. These cannot be disabled without impairing Platform functionality.
• Analytical Cookies: Used to understand how players use the Platform — which pages are visited, how long sessions last, and which features are most used. This data is used in aggregate to improve Platform performance and user experience.
• Functional Cookies: Remember your preferences — such as preferred language or last-played game category — to personalise your Platform experience.
• Security Cookies: Support fraud detection and new-device recognition, including triggering OTP prompts when an unrecognised device attempts to log in to your Account.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair Platform functionality and may prevent you from accessing your Account.

7. Data Retention

kkslot retains personal data for as long as necessary to fulfil the purposes for which it was collected, including the following minimum retention periods:

• Account Data: Retained for the duration of the Account's existence and for a minimum of five (5) years following Account closure, to comply with AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of seven (7) years in compliance with international AML standards and applicable financial record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following Account closure or the completion of the relevant verification process.
• Support Communications: Retained for three (3) years following resolution of the relevant enquiry or dispute.
• Technical Logs: Retained for a rolling period of twelve (12) months unless extended for the purposes of an ongoing investigation.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to an identified individual.

8. Data Security

kkslot implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the kkslot platform;
• Encryption of stored sensitive data including financial and identity information;
• Access controls ensuring that personal data is accessible only to kkslot personnel and Data Processors who require it to perform their functions;
• Regular security assessments and penetration testing of Platform infrastructure;
• OTP-based new-device authentication to prevent unauthorised account access;
• Incident response procedures for the detection, investigation, and notification of data security breaches.

While kkslot takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. Players are responsible for maintaining the security of their own devices and Account credentials. Any suspected unauthorised access should be reported to kkslot support immediately.

9. Your Rights

Subject to applicable law and kkslot's legal obligations, you have the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data kkslot holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where kkslot no longer has a legal basis for retaining it, subject to applicable retention obligations (see Section 7).
• Right to Restriction: You may request that kkslot restrict the processing of your data in certain circumstances, such as while a rectification request is pending.
• Right to Data Portability: Where processing is based on your consent or a contract, and carried out by automated means, you may request a structured, machine-readable copy of your data.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. kkslot will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact kkslot via live chat or by emailing [email protected]. kkslot will respond to verified requests within thirty (30) calendar days. We may request proof of identity before processing a data rights request.

10. Children & Minors

The kkslot platform is strictly intended for adults aged 21 years and older. kkslot does not knowingly collect personal data from persons under the age of 21. Age verification is performed at registration and at the point of withdrawal as part of kkslot's KYC process.

If kkslot becomes aware that personal data has been collected from an individual under the age of 21, all associated data will be deleted and the Account will be immediately closed. If you believe an underage individual has registered on the Platform, please contact our support team immediately.

11. Cross-Border Data Transfers

As an internationally licensed online gaming operator serving Malaysian players, kkslot may transfer personal data to servers, service providers, or group entities located outside of Malaysia. Where such transfers occur, kkslot takes steps to ensure that appropriate safeguards are in place, including contractual data transfer protections consistent with applicable data protection standards.

By using the kkslot platform, you acknowledge that your personal data may be transferred, stored, and processed in countries outside Malaysia. kkslot will only transfer data to jurisdictions or recipients that provide an adequate level of data protection, or where appropriate safeguards are contractually in place.

12. Changes to This Policy

kkslot reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they substantively affect how we collect, use, or share your personal data — kkslot will notify registered Players via email or in-Platform notification with reasonable advance notice prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage Players to review this Privacy Policy periodically. Continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms.

13. Contact & Data Enquiries

For all privacy-related enquiries, data rights requests, or concerns about how kkslot handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 on the kkslot platform — the fastest route for urgent data or account concerns.
• Email: [email protected] — please mark your subject line "Privacy / Data Request" for expedited routing to the relevant team. (Plain text only — not a clickable link.)

kkslot will acknowledge all privacy-related communications within 72 hours and provide a substantive response within thirty (30) calendar days of identity verification where applicable.