KKSlots Privacy Policy – Personal Data Protection for Malaysian Players

KKSlots collects various types of personal information in the course of providing online entertainment services to players in Malaysia. All data collection is carried out on a minimum necessity basis — we only collect information that is strictly required to operate safely and effectively.

KKSlots does not collect sensitive data such as medical information, religious beliefs, political views, or sexual orientation. We also do not store credit card numbers directly — all card transactions are processed through licensed and registered third-party payment providers in Malaysia.

KKSlots collects your personal information through three main channels:

• Directly from you: Information you provide during account registration, identity verification (KYC), deposit form submission, withdrawal requests, or when contacting KKSlots customer support.
• Automatically: Technical data collected automatically when you use the KKSlots platform — including your device's IP address, browser type, pages visited, session duration, gameplay activity records, and cookie information.
• From legitimate third parties: In certain cases relating to identity verification or fraud prevention, KKSlots may receive information from licensed and trusted third-party verification service providers.

Each of these data collection methods is conducted transparently and in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). You have the right to know what data we hold about you at any time.

KKSlots uses the personal information collected solely for legitimate, specific purposes directly related to providing services to you. The following outlines the detailed purposes for data use:

• Account management: Creating, verifying, and managing your user account on the KKSlots platform — including secure login and identity verification.
• Financial transaction processing: Processing deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, or CIMB Clicks, as well as processing withdrawals of your winnings to your Malaysian bank account or e-wallet.
• Provision of gaming services: Ensuring you can seamlessly access and enjoy all games on KKSlots — from online slots and Live Casino to Sports Betting and e-sports.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, hacking, or platform abuse that could compromise the security of your account or that of other players.
• Legal compliance: Meeting reporting and compliance obligations to relevant authorities in Malaysia in accordance with applicable laws.
• Customer support: Enabling the Malay-speaking KKSlots support team to assist you in resolving any issues or enquiries.
• Service improvement: Analysing usage patterns on an aggregate (not individual) basis to improve the platform, curate better games, and enhance the overall user experience.
• Marketing communications: Sending you relevant promotions, bonuses, and offers — but only where you have given consent to receive such communications, and you may withdraw that consent at any time.

KKSlots does not sell, rent, or disclose your personal information to third parties for marketing or commercial purposes. However, in the normal course of platform operations, your data may be shared with the following limited parties:

• Payment service provider: Malaysian e-wallet and internet banking providers that process your deposit and withdrawal transactions (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX) — data is shared on a minimal basis and only to the extent necessary to complete the transaction.
• Game software provider: Game partners such as PG Soft, Pragmatic Play, and Evolution Gaming may receive the game session data necessary to deliver games to you — without any personal financial information.
• Legal authorities: Personal information may be disclosed to law enforcement agencies, regulatory authorities, or courts where required by law or a valid court order.
• Technical service provider: Companies that assist KKSlots with technical operations (such as cloud computing, email delivery, and analytics) are bound by strict confidentiality agreements and may only use data for specified purposes.

In each of the data sharing instances described above, KKSlots ensures that the receiving party has adequate data protection measures in place and complies with the appropriate privacy standards.

KKSlots invests seriously in data security infrastructure to protect the personal information of all our members. The security measures we employ include:

• 256-bit SSL/TLS Encryption: All communications between your browser and KKSlots servers are protected by 256-bit SSL/TLS encryption — the same standard used by leading Malaysian banking institutions.
• Encryption of data at rest: Sensitive data stored in KKSlots databases is encrypted using the latest industry-standard encryption to prevent unauthorised access even in the event of a physical breach of the servers.
• Role-based access controls: Only KKSlots staff with a legitimate business need and who have undergone rigorous background checks are permitted to access user data. All access is logged and audited on a regular basis.
• Two-factor authentication (2FA): KKSlots' internal systems are protected with multi-factor authentication to prevent unauthorised access by irresponsible parties.
• Continuous threat monitoring: KKSlots' IT security team monitors network and system activity around the clock, 24/7, using advanced threat detection tools to identify and respond to any threats in real time.
• Regular security testing: Penetration testing and security audits are conducted regularly by independent security experts to identify and address any security vulnerabilities.

Despite all these security measures, no system is 100% immune to breaches. Should any security incident occur that affects your personal data, KKSlots is committed to notifying you and the relevant authorities within the timeframe stipulated by Malaysian law.

KKSlots only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required under applicable Malaysian law. The following is a guide to data retention periods by category:

• Active account data: Retained for the duration your account is active and for one year after account closure for record-keeping and security purposes.
• Financial transaction records: Retained for seven (7) years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• KYC verification data: Retained for five (5) years after the business relationship ends, or longer if required by applicable law.
• Support communication records: Retained for two (2) years for service quality and dispute resolution purposes.
• Log and technical data: Retained for ninety (90) days for security and technical troubleshooting purposes.

Once the applicable retention period has elapsed, your data will be securely deleted using methods that comply with the latest security standards. Deletion is carried out automatically through the KKSlots records management system.

As a player KKSlots based in Malaysia, you are entitled to data protection rights guaranteed under the Personal Data Protection Act 2010 (PDPA). These rights include:

To exercise any of the above rights, please contact KKSlots' Data Protection Officer (DPO) via email at privacy@kkslots.biz or via in-platform live chat. KKSlots is committed to responding to all data rights requests within 14 business days. For more complex cases, the response period may be extended to up to 30 days, with prior notice to you.

KKSlots uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled, as the platform will not function without them.
• Performance Cookies: Used to analyse how players use the platform — which pages are visited most frequently, how much time is spent, and where technical issues occur. Data is collected in aggregate form and does not identify you as an individual.
• Functional Cookies: Saves your preferences such as language settings, text size, and game preferences to ensure a more personalised experience each time you visit KKSlots.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality of the KKSlots platform. For non-essential cookies, you may withdraw your consent at any time via your account privacy settings.

In the context of operations KKSlots as an online platform, your personal data may be processed or stored on servers located outside Malaysia for certain operational purposes, such as cloud computing and the provision of gaming services by international providers.

When such a data transfer takes place, KKSlots ensures that:

• Transfers are only made to countries or parties that provide an adequate level of data protection consistent with Malaysian standards.
• All recipients are bound by a Data Processing Agreement that complies with the requirements of PDPA 2010 and relevant international standards.
• Appropriate technical and organisational safeguards are applied whenever data is transferred or processed outside Malaysia.

You have the right to obtain further information about the countries or regions where your data may be processed by contacting the KKSlots privacy team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way KKSlots manage your personal data, you may contact us through the following channels:

Privacy team KKSlots will respond to all inquiries within 14 business days. For cases involving data rights requests under PDPA 2010, we are committed to resolving them within 21 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).