KRM8 Privacy Policy –
Personal Data Protection Malaysian Players

2Data We Collect

Krm8 only collects data that is strictly necessary to operate our platform safely and effectively. Below are the categories of data we collect and the purposes for which they are collected:

Krm8 does not collect sensitive data such as health information, religious beliefs, political views, or biometric data unless there is a specific legal requirement to do so. We also do not collect any data from individuals under the age of 18.

3How We Use Your Data

The personal data we collect is used responsibly for the following purposes only. KRM8 will not process your data for any other purpose without first obtaining fresh consent from you:

• Account Management: Creating, verifying, and managing your member account, including the KYC process required to process withdrawals and maintain platform security.
• Transaction Processing: Processing deposits and withdrawals securely through a variety of payment methods including FPX, DuitNow, e-wallets, and cryptocurrency.
• Service Communications: Sending you important notifications regarding your account, transactions, policy changes, and security alerts.
• Fraud Detection: Monitoring suspicious activity to protect your account from unauthorized access and financial fraud.
• Responsible Gaming: Using usage data to identify risky gaming patterns and extend support to players who need assistance.
• Platform Improvements: Analyzing usage data in aggregate (without identifying individuals) to improve service quality and user experience.
• Legal Compliance: Fulfilling the legal and regulatory obligations applicable to our operations in Malaysia.

4Data Sharing

Krm8 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in operating our platform, we may share your data with the following categories of parties under limited and controlled circumstances:

• Payment Service Providers: Payment partners such as FPX, DuitNow providers, and card processors are required to receive minimum transaction information to process your payments. All such partners are bound by strict confidentiality agreements.
• Game Software Providers: Third-party gaming companies whose platforms are integrated with KRM8 may receive the minimum session data required to operate the games. They do not receive your personally identifiable information.
• Identity Verification Services: Third-party KYC providers that help us verify player identities to meet anti-money laundering (AML) legal requirements.
• Cloud Services & Infrastructure: Cloud computing service providers that store and process our data in a secure and compliant environment.
• Law Enforcement Agencies: KRM8 will disclose required data to the authorities when mandated by a valid court order or lawful legal directive.

5Cookies & Tracking Technologies

Krm8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification, session management and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your preferences such as language, theme, and display settings so you don't need to reconfigure them on every visit.
• Analytics Cookies: Helping us understand how players use our platform in aggregate. This data is used solely to improve our services and is not linked to any individual's identity.
• Security Cookies: Used to detect suspicious login attempts, verify new devices and protect against cyber attacks.

You can manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may prevent you from accessing certain parts of the KRM8 platform fully.

6Data Storage & Security

Krm8 employs industry-grade security infrastructure to protect your data from unauthorized access, loss, alteration, or disclosure. Our key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored in our database, including passwords (stored as one-way hashes) and financial information.
• Role-based access controls ensuring that only authorized personnel can access specific data categories.
• Round-the-clock security monitoring with an automated threat detection system capable of identifying and responding to suspicious activity in real time.
• Regular penetration testing conducted by independent security experts to identify and address system vulnerabilities.
• Encrypted data backups stored at geographically separate locations to ensure data recovery in the event of a disaster.

Data Retention Period: krm8 retains your personal data for as long as your account is active or as long as necessary to provide services to you. Following account closure, we retain certain records for seven (7) years to fulfil legal, tax, and audit obligations. After this period, your data will be securely deleted or anonymised.

7Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by KRM8. We are committed to fulfilling every request carefully and within the stipulated timeframe:

To exercise any of the above rights, contact our Data Protection Officer by email at [email protected]. Requests will be processed within 14 to 30 business days depending on the complexity of the request.

8Children's Data

The KRM8 platform is intended for users aged 18 years and above only. We do not knowingly collect or process personal data from individuals under the age of 18. All account registrations require age verification as part of our KYC process.

If we become aware that personal data of a minor has been collected without proper consent verification, we will immediately take the following steps:

• Suspending the account in question immediately while an investigation is conducted.
• Deleting all related personal data as promptly as possible following verification.
• Notifying the relevant parent or guardian where contact information is available.
• Reporting incidents to the relevant authorities where required by law.

9Third-Party Links

The KRM8 platform may contain references or integrations with third-party services such as payment providers and game software suppliers. This Privacy Policy applies solely to the KRM8 platform and does not cover the privacy practices of any third party.

Each third-party provider integrated with KRM8 has its own privacy policy governing how they handle data. KRM8 is not responsible for the privacy practices of those third parties, and we encourage you to read their privacy policies before interacting with their services.

10Privacy Policy Amendments

Krm8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. Any material changes will be communicated to you via:

• An email notification to your registered address at least 7 days before the changes take effect.
• A prominent notice on the krm8 platform homepage and on this Privacy Policy page.
• An in-platform notification when you first log in after changes have been published.

The "Updated" date at the top of this document always reflects the latest version of KRM8's Privacy Policy. Continued use of our platform after the effective date of any changes constitutes acceptance of the amended terms.

We encourage you to review this page periodically. Previous versions of the Privacy Policy are available upon request by contacting our team.

11Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, do not hesitate to contact our Data Protection Officer (DPO):

If you are not satisfied with how we have handled your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant regulatory body.