Privacy Policy

This Privacy Policy (hereinafter "Policy") is issued by 8kingclub (hereinafter "8kingclub", "we", "us", or "the Company"), the operator of the online casino and sports betting platform accessible at https://8kingclub.cam (the "Platform"). This Policy sets out how 8kingclub collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who access or use the Platform (hereinafter "Users", "Players", or "you").

8kingclub is committed to protecting the privacy and security of all personal information entrusted to us by our players, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere in Malaysia. This Policy is drafted in accordance with applicable data protection regulations and is intended to give you a clear, honest account of our data practices.

By registering an Account on the Platform or by continuing to use any of the services offered by 8kingclub, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

The following defined terms are used throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person; including name, email address, phone number, device identifiers, IP address, payment details, and any other data that can be used to identify you directly or indirectly.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure, and destruction.
• "Data Controller" means 8kingclub, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of 8kingclub under a contractual arrangement and subject to our instructions.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data.
• "KYC" means Know Your Customer — the identity and age verification process conducted by 8kingclub to confirm User eligibility and comply with applicable regulatory requirements.
• "Cookies" means small text files placed on your device by the Platform when you access it, used to remember preferences and collect analytical data.

For the purposes of applicable data protection law, the Data Controller in respect of personal data collected via the Platform is:

If you have any questions regarding the processing of your personal data or wish to exercise any of the rights described in Section 11, please contact us using the details above or as further specified in Section 15.

4.1 Data Provided Directly by You

When you register an Account, use the Platform, or communicate with 8kingclub, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, and a copy of your government-issued identification document (e.g., Malaysian MyKad or passport) as required during KYC verification.
• Contact Data: Email address, Malaysian mobile phone number, and residential address.
• Account Credentials: Username and encrypted password.
• Financial Data: Bank account details, e-wallet identifiers (for payment methods such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX), and transaction history.
• Communication Data: Records of your interactions with our customer support team via live chat or email, including the content of those communications.

4.2 Data Collected Automatically

When you access the Platform, certain technical and behavioural data is collected automatically:

• Device & Technical Data: IP address, device type, operating system, browser type and version, and screen resolution.
• Usage Data: Pages visited, time spent on each page, game sessions initiated, betting history, deposit and withdrawal activity, and session timestamps.
• Location Data: General geographic location derived from your IP address (country and city level). We do not collect precise GPS location data.
• Cookie Data: Data collected via cookies and similar tracking technologies as described in Section 8.

4.3 Data from Third Parties

We may receive limited personal data about you from third-party sources in specific circumstances:

• Identity verification agencies used to perform KYC checks.
• Payment service providers (such as FPX operators or Malaysian banks) for transaction verification purposes.
• Fraud prevention and anti-money laundering (AML) screening services.

The table below summarises the primary purposes for which 8kingclub processes your personal data, the legal basis relied upon for each processing activity, and the categories of data involved.

8kingclub does not sell your personal data. We may share your personal information with third parties only in the following circumstances:

6.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process personal data on our behalf and under our instructions, subject to binding contractual data processing agreements. These include:

• Payment processors and Malaysian banking partners (Maybank, CIMB, Public Bank, Hong Leong, and e-wallet operators including Touch 'n Go eWallet, Boost, and GrabPay) for transaction processing.
• KYC and identity verification providers for age and identity confirmation.
• AML and fraud screening services.
• Cloud hosting and infrastructure providers.
• Customer support platform providers.
• Analytics and platform performance monitoring tools.

6.2 Legal and Regulatory Disclosures

We may be required to disclose personal data to governmental authorities, law enforcement agencies, financial intelligence units, or regulatory bodies where we are legally obligated to do so — for example, in connection with anti-money laundering obligations, court orders, or regulatory investigations. Such disclosures will be made only to the extent required by law and will not exceed the scope of the legal requirement.

6.3 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or substantially all assets of 8kingclub, personal data held by the Company may be transferred to the acquiring entity, subject to the acquiring entity assuming obligations equivalent to those contained in this Privacy Policy.

6.4 Aggregated and Anonymised Data

We may share aggregated, anonymised statistical data (from which individual users cannot be identified) with industry partners, analytics providers, and for the purpose of producing market research. Such anonymised data does not constitute personal data and is not subject to this Policy.

8kingclub supports a range of Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, and Visa/Mastercard card payments. The processing of payment data is handled through secure, encrypted connections.

8kingclub does not store full card numbers on its servers. Card payment data is handled directly by PCI-DSS compliant payment gateway providers. For bank transfer and e-wallet transactions, only the minimum necessary account identifiers are retained for reconciliation and withdrawal verification purposes.

All financial transactions are recorded in our systems for audit, AML compliance, and dispute resolution purposes. These records are retained for the period required by applicable financial regulations. Withdrawal requests are only processed to accounts registered in your own name and matching the identity information held on your 8kingclub account, in accordance with our KYC and AML procedures.

8.1 What Are Cookies?

Cookies are small text files placed on your browser or device by the Platform when you visit. They allow the Platform to remember your preferences, maintain your login session, and collect analytical data about how you use the site.

8.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies and security tokens. Without these, core features such as login and account access would not work.
• Functional Cookies: Used to remember your preferences, such as language settings and display configurations.
• Analytical Cookies: Used to understand how Users interact with the Platform — which pages are visited most, where users drop off, and how platform performance can be improved. Data collected is aggregated and not used to identify you individually.
• Security Cookies: Used to detect and prevent fraudulent activity and unauthorised account access.

8.3 Managing Cookies

You may control cookie settings through your browser preferences. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for specific sites. Please note that disabling essential cookies may impair the functionality of the Platform, including your ability to log in and manage your account.

We do not use cookies to serve third-party advertising or to track your behaviour on external websites.

8kingclub retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for such longer periods as are required by applicable law. The table below summarises our standard retention approach by data category:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our data deletion procedures. Where deletion is not immediately possible due to technical constraints (for example, backup systems), we will ensure the data is isolated from further processing until deletion can be completed.

8kingclub implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or unlawful disclosure. Our security programme includes, but is not limited to:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive stored data (including KYC documentation and financial records) is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. Administrative access requires multi-factor authentication.
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and 24/7 security monitoring.
• Security Audits: The Platform undergoes regular penetration testing and security audits conducted by independent third-party specialists.
• Incident Response: We maintain a documented data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant regulatory authorities within the timeframes required by applicable law.

Subject to applicable data protection law, you hold the following rights in respect of personal data that 8kingclub holds about you:

Right of Access

You have the right to request a copy of the personal data we hold about you, along with information about how it is used, who it is shared with, and the legal basis for processing. We will respond to access requests within 30 days.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account information directly via your Account settings. For KYC documentation updates, please contact our support team.

Right to Erasure ("Right to be Forgotten")

You may request that we delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis exists. Please note that erasure requests may not be fulfilled where we are under a legal obligation to retain the data (for example, AML record-keeping requirements).

Right to Restriction of Processing

You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing pending verification of our legitimate grounds.

Right to Data Portability

Where processing is based on consent or contract performance and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, though we may be entitled to continue processing where we demonstrate compelling legitimate grounds that override your interests.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We may be required to verify your identity before processing your request. We will respond within 30 days and will not charge a fee for standard requests.

The 8kingclub Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Registration by minors is expressly prohibited under our Terms and Conditions.

We enforce age verification as part of our KYC process. Where we have reasonable grounds to believe that a registered Account holder is under the age of 21, we will immediately suspend the Account, conduct an investigation, and where the suspicion is confirmed, permanently close the Account, forfeit any associated winnings, and return only the verifiable deposit amounts where legally required to do so.

If you believe that a minor has accessed or registered on the Platform, or that a minor may be using your account, please contact us immediately at [email protected]. We take all such reports seriously and will act promptly.

In the course of operating the Platform, personal data may be transferred to and processed in jurisdictions outside of Malaysia, for example where our cloud infrastructure providers or KYC partners are located in other countries. Where such transfers occur, 8kingclub takes appropriate steps to ensure that your personal data is afforded a level of protection consistent with the standards set out in this Privacy Policy.

Safeguards employed for international data transfers may include:

• Contractual data processing agreements incorporating recognised standard data protection clauses with all service providers handling personal data outside Malaysia.
• Transfers only to jurisdictions that maintain data protection frameworks considered adequate under applicable international standards.
• Technical and organisational security measures applied consistently regardless of the location of data processing.

If you would like further information regarding international data transfers and the specific safeguards in place, please contact us at the address provided in Section 15.

8kingclub reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or operational requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they affect your rights or the fundamental nature of how we use your data — we will provide advance notice to registered Account holders via the email address associated with their Account, with a minimum of fourteen (14) days' notice prior to the changes taking effect.

For non-material updates (such as clarifications or editorial corrections), we may update the Policy without individual notification, relying on the prominent display of the updated effective date on this page.

Your continued use of the Platform following the effective date of an amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any amendments, you should cease using the Platform and contact us to close your Account.

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to raise a concern about how 8kingclub processes your personal data, please contact us through any of the following channels:

When submitting a data rights request, please clearly state the nature of your request (access, erasure, correction, etc.) and include sufficient information to allow us to identify your Account. We may need to verify your identity before actioning the request.

If you are not satisfied with our response, you have the right to raise a complaint with the relevant data protection supervisory authority in the jurisdiction applicable to you.