Updated: January 2026

Kz8my Privacy Policy – Personal Data Protection for Malaysian Players

This Privacy Policy clearly explains how kz8my collects, uses, stores and protects your personal information as a player. We are committed to safeguarding your privacy in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices.

Last Updated: 1 January 2026

Your personal data is protected by kz8my in accordance with Malaysia's PDPA 2010 and 256-bit SSL encryption.

PDPA 2010 Compliant
256-bit SSL Encryption
Data Not Sold
Data Access Rights
24/7 Privacy Support
kz8my's Privacy Commitment to You

Six core principles that shape how kz8my handles the personal data of every Malaysian player

Layered Data Protection
All personal data you share with kz8my is protected using 256-bit SSL encryption — the same security technology used by leading Malaysian banking institutions such as Maybank and CIMB. Our systems are designed to prevent unauthorised access to your data.
Data Not Sold or Rented
kz8my never sells, rents, or discloses your personal information to third parties for marketing purposes without your explicit consent. Your information is only shared with service providers necessary for platform operations — and all of them are bound by strict confidentiality agreements.
Malaysia PDPA 2010 Compliance
kz8my's Privacy Policy is built entirely in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means every instance of personal data processing has a valid legal basis, is carried out transparently, and gives you clear rights over your own data.
Minimum Data Collection
kz8my only collects data that is strictly necessary to provide services to you. We do not collect personal data that is excessive or irrelevant to the platform's operational purposes. This "minimum necessary" principle ensures your data footprint at kz8my remains as small as possible.
You Control Your Data
As a kz8my player, you have full rights to access the personal data we hold about you, correct inaccurate information, request data deletion, and withdraw consent for specific processing activities. All such requests can be submitted by email to support@kz8my.biz.
Clear Data Retention Periods
kz8my retains your personal data only for as long as necessary for the stated purposes or as required by Malaysian law. Once the retention period expires, data is securely deleted in accordance with established data deletion procedures. You may enquire about your data retention period at any time.
1 Introduction

Welcome to the kz8my Privacy Policy. This document transparently explains how the kz8my platform ("kz8my", "we", or "the platform") collects, uses, stores, protects, and discloses your personal information as a user or registered member of our platform.

Kz8my takes the privacy of your personal data extremely seriously. As an online betting platform serving Malaysian players exclusively, we understand that your trust in how we handle your personal information is the foundation of our relationship. Without that trust, nothing else can be built.

This Privacy Policy is drafted in full compliance with the requirements of Malaysia Personal Data Protection Act 2010 (PDPA) as well as international data protection best practices. By registering for or using the kz8my platform, you confirm that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein.

Important Note: This Privacy Policy forms part of kz8my's Terms and Conditions. If you do not agree with any part of this policy, please discontinue use of the kz8my platform. For any privacy-related enquiries, you may reach us at support@kz8my.biz.

2 Personal Data We Collect

Kz8my collects the following categories of personal data from you when you use our platform:

Identity Data:

  • Full name as it appears on your Malaysian MyKad or passport.
  • Date of birth and age.
  • National identity card number (MyKad) or passport number for identity verification (KYC) purposes.
  • Gender.

Contact Data:

  • An active Malaysian mobile number.
  • A valid email address.
  • Malaysian residential address (for certain verification purposes).

Financial Data:

  • Details of the payment method used — e-wallet account number (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow ID, or bank name and FPX account details (Maybank2u, CIMB Clicks and other banks).
  • Deposit and withdrawal transaction records including date, time, amount in MYR, and transaction status.
  • Betting and game records.

Technical & Usage Data:

  • The IP address of your device when accessing the kz8my platform.
  • Device type, operating system and web browser used.
  • Session data including pages visited, time spent and actions taken within the platform.
  • Cookie information and similar tracking technologies.
Data Category Example Legal Basis for Processing
Identity Verification Full name, MyKad number, date of birth KYC & Contracts
Relationship Phone number, email Contract & Communications
Financial E-wallet account, transaction records Contract & Legal
Technical IP address, device type Legitimate interests & Security
3 How Data Is Collected

Kz8my collects your personal data through several methods depending on how you interact with the platform:

Directly from You: This is kz8my's primary source of data. Data is collected when you complete the registration form, go through the KYC process, make a deposit or withdrawal, contact customer support, or fill in feedback forms and surveys.

Automatically During Platform Use: When you access and use the kz8my platform via a web browser or mobile application, our systems automatically record certain technical data including IP address, device type, session data and cookie information. This automatic collection is necessary for platform functionality, security and user experience improvement.

From Payment Providers: When you make a deposit via Touch 'n Go, GrabPay, DuitNow, FPX or other Malaysian payment methods, kz8my receives transaction confirmation from the respective service provider. This data is limited to the information required to verify and record the transaction.

From Identity Verification Providers: During the KYC process, kz8my may work with licensed third-party identity verification service providers to help verify the authenticity of the identification documents you submit. This process is carried out with strict security safeguards in place.

4 Purposes for Processing Personal Data

Kz8my processes your personal data for the following purposes only:

  • Account management — registration, identity verification (KYC), account management, and account recovery where required.
  • Service provision — giving you access to all kz8my platform features, including Sports Betting, Live Casino, slots, jackpots and e-sports.
  • Transaction processing — processing deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX and other Malaysian payment methods.
  • Security and fraud prevention — detecting and preventing fraudulent activity, money laundering, and platform usage that violates kz8my's Terms.
  • Legal compliance — fulfils Malaysian legal requirements including PDPA 2010, anti-money laundering (AML) obligations, and directives from relevant authorities.
  • Service communications — sending transaction notifications, security alerts, terms updates and other important service information.
  • Promotions and marketing (with your consent) — to keep you informed about relevant kz8my promotions, bonuses and offers, including special deals for Hari Raya, Deepavali, Christmas and other Malaysian celebrations.
  • Service improvements — analysing aggregated platform usage data to improve the interface, performance and overall experience for kz8my players.
  • Customer Support — enabling the kz8my support team to provide effective assistance whenever you need help.

Kz8my will not use your personal data for any purposes not mentioned above without first obtaining your consent.

5 Data Sharing with Third Parties

Kz8my does not sell, rent or disclose your personal data to third parties for marketing or commercial purposes without your consent. However, there are specific situations where kz8my needs to share your personal data with trusted parties to keep the platform running properly:

Payment Service Providers: When you make a deposit or withdrawal, the information needed to process the transaction is shared with the relevant payment service providers such as Touch 'n Go, GrabPay, ShopeePay, Boost, DuitNow, and FPX partner banks (Maybank2u, CIMB Clicks, and others). This sharing is limited strictly to data required for transaction processing.

Game Providers: Game platform providers such as Pragmatic Play, PG Soft, Evolution Gaming and others may receive limited session data necessary to deliver games to you. This data does not include sensitive financial information.

Technical Service Providers: Cloud storage, cybersecurity, and technical infrastructure service providers that assist kz8my in operating the platform may have limited access to data in the course of their services. All such providers are bound by strict data processing agreements.

Malaysian Authorities: kz8my will disclose your personal data to Malaysian authorities — including the police, courts or regulatory bodies — when required by Malaysian law or a valid court order.

All third parties that receive data from kz8my are required to meet confidentiality and data security standards equal to or exceeding those we uphold. kz8my takes responsibility for ensuring that the third parties we engage handle your data responsibly.

6 Personal Data Security

Protecting your personal data from unauthorised access, loss, misuse, or disclosure is a top priority for kz8my. We implement multiple layers of technical and organisational security measures to ensure robust data protection:

  • 256-bit SSL Encryption — all communications between your device and kz8my servers are encrypted using 256-bit TLS/SSL protocols. This means any data transmitted cannot be read by parties who intercept the communication.
  • Encrypted data storage — sensitive data such as passwords are stored in an irreversible hashed format. kz8my never stores your password in plain text.
  • Internal access controls — only kz8my staff who require access to specific data in order to carry out their duties are granted permission. All access is logged and continuously monitored.
  • Two-factor authentication (2FA) — available for player accounts and mandatory for kz8my internal system access.
  • 24/7 security monitoring — kz8my's automated monitoring systems and security team continuously oversee the platform around the clock to detect any suspicious activity or attempted breaches.
  • Regular security audits — kz8my conducts regular security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.

While kz8my takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. If you suspect your account or information has been compromised, please contact kz8my support immediately at support@kz8my.biz or via live chat.

You also have a responsibility to keep your account secure — use a strong password, never share your login details, and enable two-factor authentication for an added layer of protection.

7 Cookies & Tracking Technologies

The kz8my platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyse how the platform is used. Below are the types of cookies used by kz8my:

Essential Cookies: These cookies are required for the kz8my platform to function properly. They include login session cookies, security tokens and cookies that remember your language preference. Without them, many platform features will not work. These cookies cannot be disabled.

Performance Cookies: These cookies help kz8my understand how players use the platform — which pages are visited most, time spent and any technical issues encountered. This information is collected in aggregate and used solely to improve the platform. Individual users are not identified.

Functional Cookies: These cookies allow the kz8my platform to remember your preferences, such as your preferred bet size, display settings and game choices, making your experience smoother every time you return.

Analytics Cookies: kz8my uses analytics data from these cookies to understand overall platform usage trends — including the most popular games, peak usage times, and promotion performance. This data helps us plan more relevant content, promotions, and platform improvements for Malaysian players.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality or your experience on the kz8my platform.

8 Your Personal Data Rights

As a data subject under Malaysia's PDPA 2010, you have the following rights over the personal data held by kz8my. All requests can be submitted by email to support@kz8my.biz:

Right to Access

You have the right to request a copy of the personal data kz8my holds about you. kz8my will provide this information within 21 business days from the date of the request.

Right to Rectification

If the data kz8my holds about you is inaccurate or out of date, you have the right to request a correction. We will process the correction within a reasonable time.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data. Such requests are subject to applicable legal retention requirements.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time. kz8my will cease such processing immediately.

Right to Restrict Processing

In certain situations, you may request that kz8my temporarily restrict the processing of your data while a dispute is being resolved.

Data Portability Rights

You may request your personal data in a machine-readable format for transfer, subject to technical feasibility.

To submit any request relating to the rights above, please contact kz8my by email at support@kz8my.biz stating the type of request, your full name and your kz8my account number. We will verify your identity before processing any request relating to your personal data.

9 Data Retention Period

Kz8my retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy or as required by applicable Malaysian law. The following is a general guide to retention periods:

  • Active account data — retained for the duration your account remains active and for a defined period following account closure to comply with legal requirements.
  • Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).
  • KYC records and identity verification — retained for a minimum of 5 years after account closure or after the last transaction, whichever is later.
  • Customer support communication data — retained for 3 years for reference and dispute resolution purposes.
  • Technical data and system logs — retained for 12 months for security purposes and technical troubleshooting.
  • Marketing data (with consent) — retained until you withdraw consent or request deletion.

Once the retention period expires, your personal data will be securely deleted or anonymised in accordance with kz8my's established data deletion procedures. Deletion is carried out in a manner that ensures the data cannot be recovered or reconstructed.

If you close your kz8my account, your personal data will be retained for the period specified above for legal compliance purposes, then deleted according to the scheduled timeline. You may enquire about the status of your data deletion by contacting support@kz8my.biz.

10 Amendments to the Privacy Policy

Kz8my reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, Malaysian legal requirements or platform service improvements. Any material changes to this Privacy Policy will be communicated to you via:

  • Email notification to your registered email address.
  • In-platform notices on kz8my when you are logged in.
  • Updates to the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically so you are always aware of how kz8my handles your personal data. Your continued use of the kz8my platform after any amendments take effect constitutes your acceptance of the updated policy.

If any material amendment involves a change in how we use data you have previously provided, we will obtain your consent again before applying that change to your existing data.

This Privacy Policy is governed by and interpreted in accordance with the laws of Malaysia. Any dispute relating to your data privacy and this Privacy Policy will be resolved through the dispute resolution mechanisms prescribed under applicable Malaysian law.

11 Contact Us for Privacy Enquiries

If you have any questions, concerns or complaints regarding how kz8my handles your personal data, or if you wish to submit a request to exercise your rights under PDPA 2010, please contact us through the following channels:

Privacy Email: support@kz8my.biz — please include "Privacy Inquiry" or "Data Request" in the subject line for faster processing.
Live Chat: Available 24/7 on the kz8my platform — for general privacy enquiries requiring an immediate response.
WhatsApp: Number available after logging in to your kz8my account under the Support section.

The kz8my team will endeavour to respond to all privacy-related enquiries within seven (7) business days. For more complex data rights requests, the response period may extend to up to 21 business days in accordance with the requirements of PDPA 2010.

If you are dissatisfied with how kz8my has handled your privacy complaint, you have the right to file a complaint with the Department of Personal Data Protection under the Ministry of Communications and Digital Malaysia.

kz8my Privacy Commitment Summary

PDPA 2010 Compliant — all data processing complies with Malaysian legal requirements.
Data not sold — your information is never sold to third parties for marketing.
256-bit SSL Encryption — all data is transmitted with bank-grade encryption.
Data access right — you may request, correct, or delete your data at any time.
Minimal data — kz8my only collects data that is strictly necessary for the service.
24/7 Privacy Support — reach out to us at any time with any concerns about your data.
FAQ – kz8my Privacy Policy

The most frequently asked questions about privacy and data protection at kz8my

No. kz8my has never sold, rented or disclosed your personal information to advertisers or third parties for marketing purposes without your explicit consent. Your data is shared only with parties strictly necessary to operate the platform — such as payment providers (Touch 'n Go, DuitNow, FPX) and technical service providers — and all such parties are bound by strict confidentiality agreements. If you do not wish to receive marketing communications from kz8my, you may unsubscribe at any time through your account settings or by contacting support@kz8my.biz.

You may request a copy of the personal data kz8my holds about you (data access right) by sending an email to support@kz8my.biz. State "Data Access Request" in your email subject line and include your full name and kz8my account number. Our team will verify your identity before processing the request. kz8my will provide the requested data within 21 business days in accordance with Malaysia's PDPA 2010 requirements. Data will be delivered in a readable and easy-to-understand format.

When you close your kz8my account, your personal data will not be deleted immediately. kz8my is required under Malaysian law — in particular the Anti-Money Laundering Act (AMLA) and financial record-keeping requirements — to retain transaction records and identification information for a specified period following account closure (typically 5–7 years depending on the type of data). Once the mandatory retention period ends, your data will be securely deleted in accordance with established procedures. During this retention period, access to your data is strictly limited and solely for legal compliance purposes. To enquire about the status of your data after account closure, contact support@kz8my.biz.

kz8my does not store your full credit card number or complete bank account details in our systems. For payment methods such as Touch 'n Go, GrabPay, ShopeePay, Boost and DuitNow, transactions are processed directly through each provider's platform — kz8my only receives transaction confirmation and a reference ID. For FPX payments via Maybank2u, CIMB Clicks or other banks, the process is handled directly by the respective bank and kz8my has no access to your banking credentials. kz8my only retains information necessary to verify payment method ownership and process withdrawals — namely the account holder name and the e-wallet or bank account number you have registered for withdrawals.

Yes, you have the right to request deletion of your personal data from kz8my (the "right to be forgotten"). However, this right is not absolute — kz8my may be unable to fulfil a deletion request in full if the data in question is required to: (1) meet legal obligations such as financial record retention requirements under Malaysian law; (2) resolve disputes or claims that are still in progress; or (3) prevent fraud and maintain platform security. Data deletion requests can be submitted by email to support@kz8my.biz with "Data Deletion Request" stated in the subject line. kz8my will evaluate your request and communicate the outcome within 21 business days, including an explanation if any data cannot be deleted and the reasons why.
kz8my Terms & Conditions

This Privacy Policy forms part of the kz8my Terms & Conditions. To fully understand your rights and responsibilities as a player, please also read our Terms & Conditions in full.

Responsible Gaming at kz8my

In addition to protecting your personal data, kz8my is also committed to your wellbeing as a player. We provide a range of tools to help you play within your limits and enjoy the platform as a form of healthy entertainment.

Daily Deposit Limit

Set your own deposit limits in your kz8my account settings.

Self-Exclusion

A temporary or permanent break from the platform whenever you need it.

18+ Only

The kz8my platform is strictly for individuals aged 18 and above.

24/7 Support

The kz8my support team is available anytime you need assistance.

More information on the Responsible Gaming us.

Your Data Is Safe at kz8my – Join Now

Kz8my is fully committed to protecting your privacy. Register for free today and enjoy a safe, transparent and responsible betting experience.

Bahasa Melayu