Privacy Policy — klia88

1. Introduction

klia88 ("we", "us", "our", "the Platform") operates the online gaming and sports betting website accessible at https://klia88.cam. We are committed to safeguarding the privacy, confidentiality, and security of the personal data entrusted to us by our users, players, and visitors ("you", "the User", "the Data Subject").

This Privacy Policy ("Policy") describes in detail how klia88 collects, uses, stores, shares, and protects personal data in connection with your use of the Website and our Services. It has been prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and applicable subsidiary regulations.

By registering an Account, accessing the Website, or otherwise using any Services provided by klia88, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with the terms of this Policy, you must discontinue use of the Website immediately.

2. Definitions

The following terms carry the meanings assigned to them below throughout this Policy:

3. Personal Data We Collect

klia88 collects and processes the following categories of personal data. We adhere to the principle of data minimisation — collecting only information that is necessary for the stated purposes.

4. How We Collect Personal Data

klia88 collects personal data through the following means:

4.1 Direct Collection

Data you provide directly when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or complete any other form or transaction on the Platform.

4.2 Automated Collection

Data collected automatically through cookies, web beacons, device fingerprinting, and server log files when you access or use the Platform. This includes your IP address, browser characteristics, session data, and navigation activity within the Website.

4.3 Third-Party Sources

Data received from third-party identity verification providers, fraud screening services, payment processors (including DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank), and regulatory databases, used to validate the accuracy of information you have provided and to comply with AML and KYC obligations.

5. How We Use Your Personal Data

klia88 processes personal data for the following specific, legitimate, and disclosed purposes:

• Account Management: Creating, maintaining, verifying, and administering your klia88 Account, including identity verification and authentication;
• Service Delivery: Enabling you to access and use all Platform Services, including placing bets, making deposits and withdrawals, and participating in promotions;
• Payment Processing: Facilitating and recording all financial transactions, including deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and bank transfers, and processing withdrawal requests;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, money laundering, and other prohibited activities;
• Regulatory Compliance: Meeting our obligations under the PDPA 2010, AML regulations, and any other applicable Malaysian or international laws and regulatory requirements;
• Responsible Gambling: Monitoring gaming behaviour to identify potential indicators of problem gambling, enforcing self-exclusion requests, and administering deposit and session limit tools;
• Customer Support: Responding to your queries, complaints, and requests submitted via live chat, email, or other support channels;
• Platform Improvement: Analysing usage patterns, conducting internal research, and improving the functionality, content, and performance of our Services;
• Marketing Communications: Sending promotional offers, bonus notifications, and product updates by email or in-platform messaging — subject to your marketing preferences and applicable consent requirements. You may opt out at any time.

6. Legal Basis for Processing

All processing of personal data by klia88 is conducted on one or more of the following lawful bases under the Personal Data Protection Act 2010 and applicable data protection principles:

• Consent: Where you have expressly consented to processing for a specific purpose — for example, when subscribing to marketing communications;
• Contractual Necessity: Where processing is necessary to perform our contractual obligations to you as a registered Account holder — including account creation, payment processing, and game access;
• Legal Obligation: Where processing is required to comply with our obligations under Malaysian law, including AML regulations, KYC requirements, and financial record-keeping obligations;
• Legitimate Interests: Where processing is necessary for klia88's legitimate operational and security interests, such as fraud prevention, IT security, and platform performance analytics, provided these interests do not override your fundamental rights.

7. Sharing of Personal Data

klia88 does not sell, rent, or commercially transfer your personal data to third parties for their own marketing purposes. We share personal data only in the following limited and controlled circumstances:

7.1 Payment Processors

We share financial transaction data with licensed payment service providers — including DuitNow operators, FPX, and local banking partners such as Maybank, CIMB, Public Bank, and Hong Leong Bank — to the extent necessary to process your deposits and withdrawals.

7.2 Identity Verification Providers

We may share identity documentation with licensed KYC verification service providers for the purpose of validating your identity, age, and source of funds in compliance with regulatory requirements.

7.3 Regulatory & Law Enforcement Authorities

We may disclose personal data to Malaysian regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required by law, court order, or governmental directive, including reporting obligations under AML legislation.

7.4 Technology & Infrastructure Providers

We may share limited technical data with cloud hosting providers, cybersecurity firms, and IT service vendors under binding data processing agreements that prohibit them from using your data for any purpose beyond delivering services to klia88.

8. Cookies & Tracking Technologies

klia88 uses cookies and similar tracking technologies to enhance your user experience, maintain session continuity, and gather aggregated analytics data. The following categories of cookies are used on the Platform:

• Strictly Necessary Cookies: Essential for the Website to function and cannot be disabled. They include session cookies that maintain your logged-in state and security tokens that protect against cross-site request forgery;
• Performance & Analytics Cookies: Collect anonymised data about how users navigate the Platform — including pages visited, time on site, and click paths — to help us improve functionality and content;
• Functional Cookies: Remember your preferences such as language settings, game display options, and notification choices to provide a more personalised experience;
• Security Cookies: Support fraud detection and authentication processes by recognising your device across sessions.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. klia88 does not use cookies to serve third-party advertising or to track your activity outside of our Website.

9. Data Retention

klia88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Account Data: Retained for the duration of the active Account relationship and for a minimum of seven (7) years following Account closure, in compliance with financial record-keeping obligations;
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification or Account closure (whichever is later), as required under AML regulations;
• Transaction Records: Retained for a minimum of seven (7) years to comply with financial audit and regulatory reporting requirements;
• Support Communications: Retained for a period of three (3) years from the date of the communication, for dispute resolution and quality assurance purposes;
• Marketing Preferences: Retained until you withdraw consent or request deletion, subject to any legal retention requirements that supersede that request.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.

10. Data Security

klia88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security infrastructure includes:

• Transport Layer Security (TLS/SSL): All data in transit between your browser and our servers is encrypted using TLS 1.2 or higher. The presence of HTTPS and a valid SSL certificate is verifiable in your browser's address bar at all times;
• Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted at rest using AES-256 or equivalent industry-standard algorithms;
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with data access undergo background checks and data protection training;
• Two-Factor Authentication: Available for all user Accounts to provide an additional layer of protection against unauthorised login;
• Intrusion Detection & Prevention: Our infrastructure is continuously monitored for suspicious activity, with automated alerting and response protocols in place;
• Regular Security Audits: klia88 conducts periodic internal and third-party security assessments to identify and remediate vulnerabilities in our systems.

11. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, and subject to certain statutory exemptions, you have the following rights in relation to your personal data held by klia88:

• Right of Access: You have the right to request confirmation of whether klia88 holds personal data about you, and to obtain a copy of that data in a readable format;
• Right of Correction: You have the right to request correction of inaccurate, incomplete, or outdated personal data held by klia88. We will process correction requests within a reasonable timeframe;
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal;
• Right to Limit Processing: In certain circumstances, you may request that we restrict our processing of your personal data — for example, where you contest the accuracy of data while we verify it;
• Right to Prevent Processing for Marketing: You may opt out of receiving marketing communications from klia88 at any time by updating your communication preferences in your Account settings or by notifying our support team.

To exercise any of the above rights, please contact us at the details provided in Section 15. We will respond to all legitimate requests within thirty (30) calendar days. In some cases, we may need to verify your identity before processing your request. We reserve the right to decline requests that are manifestly unfounded, repetitive, or that conflict with our legal retention obligations.

12. Children's Privacy

klia88 is strictly an adult gaming platform. Our Services are not directed at, and are not intended to be used by, individuals under the age of 21. We do not knowingly collect personal data from persons under 21 years of age. If you are under 21, you must not register an Account or use any Services provided by klia88.

If klia88 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated Account. If you have reason to believe that a minor has registered on our Platform, please contact us immediately at the details provided in Section 15.

13. Cross-Border Data Transfers

In the course of providing our Services, klia88 may transfer certain categories of personal data to third-party service providers located outside of Malaysia — for example, cloud infrastructure providers or identity verification services operating from other jurisdictions.

Any such cross-border transfer of personal data will be carried out in accordance with the requirements of the PDPA 2010 and only to jurisdictions or processors that offer an adequate level of data protection. klia88 will put in place appropriate safeguards — including contractual clauses — to ensure that your data continues to be protected to the standard set out in this Policy, regardless of where it is processed.

14. Amendments to This Privacy Policy

klia88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or operational procedures. All amendments will be published on this page with a revised effective date prominently displayed.

Where amendments are material — that is, where they represent a significant change to how we collect or use your personal data — we will provide additional notice through your registered email address or a prominent notice on the Platform. Your continued use of klia88 Services following the publication of an amended Policy constitutes your acceptance of the revised terms.

We recommend reviewing this Policy periodically to stay informed of how klia88 protects your personal data. This Policy was last reviewed and updated on 1 January 2026.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data handling practices, please do not hesitate to reach out to our support team using the contact details set out below. We handle all privacy-related enquiries with strict confidentiality and will respond within the timeframes described in Section 11.

For data access or correction requests, please include your registered Account username and a description of your request to allow us to locate and verify your records efficiently.

This Privacy Policy is effective as of 1 January 2026 and supersedes all previous versions published on this page. klia88 reserves the right to amend this Policy in accordance with Section 14.