Kx8 Privacy Policy – How We Protect Your Data

Kx8 collects personal data from members in several ways — directly when you register or use the platform, and automatically through tracking technologies used in our app and website. Below is a summary of the data categories we collect:

We only collect data that is genuinely necessary for platform operations. kx8 does not request irrelevant information such as religion, political views, or other sensitive details unrelated to our services.

Every piece of data we collect has a clear and legitimate purpose. kx8 does not use your data for undisclosed purposes without obtaining your consent first. Below is the complete list of data usage purposes:

• Account Management: Creating and managing your member account, including the login process, identity verification, and account recovery when needed.
• Transaction Processing: Handling all deposits, withdrawals, and fund transfers between your account and your registered payment methods. Every transaction is recorded for accounting and security audit purposes.
• KYC & AML Compliance: Verifying member identity to fulfil legal requirements related to Know Your Customer (KYC) and Anti-Money Laundering (AML). This is a mandatory requirement under Malaysian legislation.
• Service Improvement: Analysing platform usage patterns to improve the user experience, introduce new features, and resolve technical issues faster.
• Service Communications: Sending important notifications related to your account, including transaction confirmations, security alerts, and platform policy updates.
• Consent-Based Marketing: If you have given your consent, we may use your email address or phone number to inform you about the latest promotions, new bonuses, and exclusive offers. You can withdraw this consent at any time through your account notification settings.
• Fraud Prevention: Monitoring suspicious activity to protect your account and the overall integrity of the platform against fraud, hacking, and system abuse.

Kx8 understands how sensitive your personal information is. We therefore take a highly restricted approach to sharing data with any external party. Your data may only be shared in the following circumstances:

• Payment Providers: Transaction information that must be shared with FPX, Touch 'n Go, GrabPay, Boost, and local banks to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements and PCI DSS security standards.
• Game Providers: Minimal technical data may be shared with third-party game software providers for game integration and technical troubleshooting purposes. This data does not include your financial information or full identity details.
• Legal Authorities: kx8 will disclose required data to Malaysian authorities if ordered by a court or a legitimate enforcement body in accordance with applicable law.
• Analytics Services: Anonymised usage data may be shared with analytics tools to understand usage patterns and improve the platform. This data cannot be traced back to any specific individual.

In all data sharing cases, kx8 ensures that recipients are bound by strict data protection agreements, and data is used only for the specified purposes.

Kx8 continually invests in security infrastructure to ensure your personal data is protected at all times. The key security measures we implement cover both technical and organisational aspects:

• Transmission Encryption: All communications between the kx8 app and our servers use TLS 1.3 protocol with AES-256 encryption. This ensures that any data transmitted cannot be read by any party intercepting the communication.
• Storage Encryption: Sensitive data stored in our databases — particularly financial information and passwords — is encrypted using irreversible hashing algorithms. Your password is never stored in plain text; no one at kx8 can read your password.
• Layered Access Control: Only staff who require access to specific data to perform their duties are authorised to access it. Every access is recorded in an audit log that is monitored on a regular basis.
• Two-Factor Authentication (2FA): kx8's internal systems require 2FA for all staff access to user data. We also encourage all members to enable 2FA on their own accounts for added protection.
• Regular Security Testing: The kx8 platform undergoes regular penetration testing and security audits by independent third parties to identify and address vulnerabilities before they can be exploited.
• Incident Response Plan: kx8 maintains a tested and verified security incident response procedure. In the event of a data breach, we will notify affected members and the relevant authorities within the timeframe required by law.

Kx8 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use and their purposes:

• Essential Cookies: Required for core platform functions such as maintaining your login session and ensuring session security. These cookies cannot be disabled as the platform will not function properly without them.
• Performance Cookies: Collecting information about how you use the platform — which pages you visit most often, page response times, and any error messages you encounter. This information is used to improve platform performance.
• Functional Cookies: Allows the platform to remember your preferences such as language, display settings, and other information that personalises your experience.
• Analytics Cookies: Helps us understand overall usage patterns for product development purposes. This data is collected in aggregate and cannot be traced back to any individual.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect platform functionality. For the kx8 mobile app, you can manage tracking permissions through your device's privacy settings.

Under Malaysia's Personal Data Protection Act 2010, you as a kx8 member have the following rights regarding your personal data:

To exercise any of the above rights, contact the kx8 support team via in-app live chat or email at [email protected]. We will process your request within 30 business days.

Kx8 does not retain your personal data longer than necessary. Retention periods depend on the type of data and relevant legal requirements:

• Active Account Data: Retained for the duration your account is active and for several years after account closure for audit and legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's tax and financial regulatory requirements.
• Support Communication Log: Retained for 3 years for customer service reference and dispute resolution purposes.
• Technical Log Data: Retained for 90 days before being automatically deleted, unless required for an ongoing security incident investigation.
• Marketing Data: Deleted within 30 days of you withdrawing your marketing consent.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered. For data stored on physical media, secure physical destruction procedures will be applied.

Kx8 may update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. Here are our commitments regarding any such changes:

• Any material changes to this Privacy Policy will be communicated to all members at least 14 days before taking effect via in-app notifications and your registered email address.
• The "Last Updated" date at the top of this page will be refreshed whenever changes are made to this policy.
• For changes that require new consent from you (such as using your data for a new purpose), we will obtain your active agreement before those changes take effect.
• Previous versions of this Privacy Policy will be retained and can be requested from our support team for reference purposes.

Continued use of the kx8 platform after the effective date of any policy change constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, please stop using the platform and contact us to close your account.