Privacy Policy KRG88 – Personal Data Protection for Malaysian Members

At KRG88, we understand that trust is the foundation of our relationship with every member in Malaysia. Privacy is not merely a legal obligation for us — it is a core value we uphold in every aspect of our platform's operations. When you entrust your personal information to KRG88, you have the right to know clearly what happens with that information.

This Privacy Policy applies to all services provided by KRG88 via krg88.click, including slots, live casino, Malaysia Super League and EPL Sports Betting, e-sports, poker, blackjack, roulette, and our VIP Rewards Programme. This policy also applies to all communication channels we use to interact with members, including email, live chat, and WhatsApp.

We encourage you to read this Privacy Policy carefully. If anything is unclear or you have any concerns, our support team KRG88 available to assist you 24/7.

KRG88 only collects data that is strictly necessary to provide a safe, fair, and efficient service to our Malaysian members. Below are the categories of data we collect:

KRG88 collect your personal information through a variety of lawful and transparent channels:

• During new KRG88 account registration — name, email, phone number, and password.
• During the identity verification (KYC) process — a copy of a valid Malaysian MyKad or passport.
• When making a deposit or withdrawal — information related to your preferred payment method (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, or CIMB Clicks).
• When contacting KRG88 customer support — conversation records and information you have shared.
• When completing special forms, surveys, or bonus claims.

• Game activity logs — game types played (slots, live casino, football, poker, blackjack, e-sports), bet amounts, session duration.
• Technical data — IP address, device information, operating system, and web browser used.
• Cookie data — to ensure platform functionality, session security, and usage analytics.

KRG88 uses your personal data solely for legitimate, stated purposes. We do not use your data for any purpose unrelated to the provision and improvement of KRG88's services.

• Account Management: Creating, verifying, and securely maintaining your KRG88 account.
• Transaction Processing: Verifying and processing your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other Malaysian payment methods.
• Legal Compliance (KYC/AML): Fulfilling Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations as required by regulation.
• Fraud Prevention: Identifying and preventing fraudulent activity, hacking attempts, and multi-account usage that violates KRG88's Terms & Conditions.
• VIP Rewards Programme: Calculates and manages VIP points, determines VIP tier (Bronze to Diamond), and provides the appropriate benefits for each member.
• Service Communications: Sending important notifications regarding your account, transactions, policy updates, and exclusive promotions relevant to your activity.
• Platform Improvements: Analyses usage patterns in aggregate (not at an individual level) to improve the user experience, identify technical issues, and develop new features.
• Responsible Gaming: Monitor gameplay patterns to identify potential gambling issues and provide appropriate support to members who need assistance.

KRG88 exercise great care regarding who we share your personal data with. As a general rule, we do not sell or rent members' personal data. However, there are limited situations where data sharing is necessary and lawful:

KRG88 works with selected service providers who help us operate the platform — including Malaysian payment gateway providers (Touch 'n Go eWallet, GrabPay, DuitNow, FPX), gaming software providers, data analytics platforms, and cloud services. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

KRG88 may disclose personal data when required by Malaysian law, court order, or lawful request from a competent authority such as Bank Negara Malaysia or the Royal Malaysia Police (PDRM) in a legitimate investigation related to financial crime or money laundering.

In the event of a merger, acquisition, or sale of KRG88 assets, members' personal data may be transferred as part of that transaction. Members will be notified in advance, and their privacy will continue to be protected by the new entity.

KRG88 invest significantly in cybersecurity infrastructure to ensure your personal data is protected at all times. Our security measures encompass multiple layers of defence:

• Data Encryption in Transit: All communications between your device and KRG88 servers are protected using TLS 1.3 with 256-bit SSL encryption.
• Encryption of Data at Rest: Sensitive data stored in KRG88's databases is encrypted using the industry-standard AES-256 algorithm.
• Two-Factor Authentication (2FA): KRG88 offers 2FA for all accounts as an additional layer of security during login.
• 24/7 Monitoring: Our systems are continuously monitored to detect suspicious activity, intrusion attempts, and security anomalies.
• Periodic Audits: Independent penetration testing and security audits are conducted on a regular basis to identify and address system vulnerabilities.
• Strict Access Controls: Only KRG88 staff who require access to specific data to perform their duties are permitted to do so — based on the principle of least privilege.

Website KRG88 use cookies — small text files stored on your device to enhance your browsing experience. The following are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some KRG88 platform features.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices, every member KRG88 have the following rights regarding their personal data:

KRG88 only retains your personal data for as long as necessary for the stated purpose, or as required by applicable Malaysian law:

• Active Account Data: Retained for as long as your account is active and updated on a regular basis.
• Financial Transaction Data: Retained for a minimum of 7 years to comply with financial reporting requirements and the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).
• KYC / Identity Verification Data: Retained for 5 years after account closure in accordance with KYC compliance guidelines.
• Customer Support Records: Retained for 3 years after the last interaction for reference and dispute resolution purposes.
• Technical Log Data: Retained for 12 months for security and technical troubleshooting purposes.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with industry-standard procedures that ensure it cannot be recovered.

Services KRG88 is exclusively for individuals aged 18 and above only. KRG88 does not knowingly collect or process personal data from any individual under the age of 18.

KRG88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, Malaysian legal requirements, or the latest technological developments. Any material changes to this Privacy Policy will be communicated to you via:

• An email notification to your registered address at least 14 days before the changes take effect.
• Prominent notice banners on the KRG88 login page and homepage.
• Update the "Last Updated" date shown at the top of this page.

Continued use of the service KRG88 after the effective date of such amendments will be considered acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding how KRG88 handle your personal data, we encourage you to reach out to us directly. We are committed to addressing every enquiry seriously and in a timely manner.

All privacy-related complaints will be investigated and handled fairly and thoroughly. If you are not satisfied with KRG88's response, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department, the PDPA regulatory authority in the country.