kkslo Privacy Policy

This Privacy Policy (the "Policy") describes how kkslo (referred to herein as "kkslo," "we," "us," or "our") collects, processes, stores, and protects the personal data of individuals (referred to as "you," "the User," or "the Player") who access or use the kkslo online casino and sports betting platform available at https://kkslo.cam (the "Platform").

kkslo operates as an international online gaming platform serving players including, but not limited to, users based in Malaysia. We are committed to handling personal data responsibly, transparently, and in accordance with the data protection obligations imposed by the jurisdictions in which we operate.

By registering an account, accessing the Platform, or otherwise providing us with your information, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your data as described herein. If you do not agree with any part of this Policy, you should refrain from using the Platform and may request closure of any existing Account by contacting our Customer Support team.

For the purposes of this Privacy Policy, the following terms shall carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person. This includes, but is not limited to, names, email addresses, phone numbers, identity document numbers, payment details, IP addresses, and device identifiers.
• "Data Controller" means kkslo, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of kkslo under instruction and in accordance with a data processing agreement.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, modification, retrieval, use, disclosure, erasure, or destruction.
• "Consent" means freely given, specific, informed, and unambiguous agreement to the processing of Personal Data for a stated purpose.
• "KYC" (Know Your Customer) means the identity and age verification process required for account holders prior to high-value transactions or upon request by kkslo's compliance team.
• "Cookies" means small data files stored on a User's device by a web browser, used to identify sessions, preferences, and platform analytics.
• "Malaysian Player" means any User who accesses the Platform from within Malaysia or who has identified Malaysia as their country of residence during registration.

kkslo collects personal data that is necessary to provide you with a secure, compliant, and personalised gaming experience. We adhere to the principle of data minimisation — we collect only what is genuinely required for the purposes described in this Policy. The categories of data we collect include:

kkslo collects personal data through the following means:

1. Direct Provision: Information you voluntarily provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting customer support.
2. Automated Technologies: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser type, and session cookies. This data is collected to maintain platform security, prevent fraud, and analyse usage patterns.
3. Payment Processors: Transaction references and payment method details passed to kkslo by our verified Malaysian payment partners — including but not limited to FPX gateway operators, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank2u, CIMB Clicks, and Public Bank Online — for the purpose of processing deposits and withdrawals.
4. Third-Party Verification Services: Identity and document verification data returned to us by accredited KYC service providers engaged under data processing agreements.
5. Customer Communications: Any information you share with our support team through live chat, email correspondence, or written requests.

kkslo processes your personal data for the following purposes:

• Account Management: To create, maintain, and manage your kkslo account, including authentication, password resets, and preference management.
• Identity Verification (KYC): To verify your identity, age (minimum 21 years), and source of funds as required under our licensing framework and responsible gambling obligations.
• Payment Processing: To facilitate deposits via Malaysian payment channels (Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, etc.) and to process withdrawal requests to your verified payment method.
• Platform Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, bonus abuse, and other forms of prohibited conduct.
• Service Delivery: To provide you with access to games, sports betting markets, live dealer tables, and all other Platform features in a stable, personalised, and secure manner.
• Customer Support: To respond to your enquiries, process complaints, and provide technical assistance.
• Responsible Gambling: To monitor gaming activity for indicators of problem gambling, to enforce self-exclusion requests, and to apply account restrictions at your request or where required by our responsible gambling framework.
• Legal & Regulatory Compliance: To meet our obligations under applicable licensing conditions, anti-money laundering requirements, and law enforcement requests where legally mandated.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and personalised content relevant to your gaming activity. You may withdraw this consent at any time through your Account settings.
• Analytics & Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the Platform's performance, user experience, and feature set.

kkslo processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and kkslo — including account registration, game access, and payment processing.
• Legal Obligation: Processing required to comply with applicable legal requirements, including KYC/AML obligations under our licensing framework and law enforcement cooperation.
• Legitimate Interests: Processing carried out in pursuit of kkslo's legitimate business interests — such as fraud prevention, platform security, and service analytics — where those interests are not overridden by your data protection rights.
• Consent: Processing that relies on your explicit, freely given consent — primarily direct marketing communications. Consent-based processing may be withdrawn at any time without affecting the lawfulness of prior processing.

kkslo does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your data with carefully selected third parties only in the following circumstances:

• Payment Service Providers: We share necessary transaction data with Malaysian payment partners — including FPX gateway operators, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and major Malaysian banks — solely to process deposits and withdrawals on your behalf.
• KYC / Identity Verification Providers: We engage accredited third-party identity verification services to validate documents submitted during KYC. These providers process your identity data under strict data processing agreements and may not use it for any purpose other than verification.
• Game Content Providers: Game providers whose software is deployed on the kkslo Platform may receive anonymised session and technical data necessary to deliver and audit game outcomes. Personal identity data is not shared with game providers.
• Fraud Prevention & Security Services: We may share technical data (IP addresses, device fingerprints, transaction patterns) with fraud prevention partners where there is reasonable suspicion of fraudulent or unlawful activity.
• Legal Authorities: kkslo may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or legitimate regulatory demand.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of the kkslo business, personal data may be transferred to a successor entity, subject to the same protections described in this Policy.

kkslo retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following retention principles:

• Active Accounts: Personal data associated with an active Account is retained for the duration of the Account's existence and for a minimum period of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations applicable under our licensing framework.
• Transaction Records: Financial transaction records — including deposits, withdrawals, and bonus records — are retained for a minimum of five (5) years from the date of the transaction.
• KYC Documents: Identity verification documents are retained for five (5) years following account closure or the conclusion of the relationship with the Player.
• Communication Records: Customer support correspondence and chat transcripts are retained for up to three (3) years from the date of the interaction.
• Marketing Data: Consent records and marketing preference data are retained for as long as the Account exists. Following opt-out, suppression records are maintained to ensure we do not inadvertently re-contact you.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

kkslo uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you access the Platform. They do not contain executable code and cannot be used to access your device or other files.

We use the following categories of cookies:

• Essential Cookies: Required for the Platform to function. These cookies manage your login session, maintain security tokens, and enable core Platform features. They cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Collect anonymised data on how users navigate the Platform — pages visited, session duration, error encounters — to help us improve the user experience. No personally identifiable information is stored in these cookies.
• Functional Cookies: Remember your preferences — such as language settings, last-visited game categories, and display settings — to personalise your experience on return visits.
• Marketing Cookies: Where you have consented, these cookies record your interactions with promotional content to help us deliver relevant offers. You may withdraw consent for marketing cookies at any time through your Account settings or browser settings.

You may configure your browser to reject all cookies or to alert you when a cookie is set. Note that disabling essential cookies will prevent you from logging into or using the kkslo Platform.

kkslo implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and kkslo's servers.
• Encryption at rest for all sensitive personal data and financial records stored on kkslo infrastructure.
• Strict access controls limiting access to personal data to authorised personnel with a documented operational need.
• Two-factor authentication for internal systems access by kkslo staff.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Segregation of player funds from operational funds in separate accounts.
• Incident response procedures ensuring prompt notification and remediation in the event of a data security incident.

While kkslo takes every reasonable precaution to protect your personal data, no system can be guaranteed as entirely immune from security breaches. In the event of a data security incident that poses a risk to your rights, kkslo will notify affected users as promptly as practicable and take all reasonable steps to contain and remediate the incident.

Subject to applicable law and our legal obligations (including record-keeping requirements under our licensing framework), you hold the following rights with respect to your personal data held by kkslo. To exercise any of these rights, please contact us using the details in Section 15.

We will respond to all valid data rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it. We may ask you to provide proof of identity before processing any request.

The kkslo platform is strictly intended for adults aged 21 years and above. kkslo does not knowingly collect or process personal data from individuals under this age. Age verification is a mandatory component of the KYC process, and accounts found to be held by persons under the age of 21 will be immediately closed, with all associated data handled in accordance with this Policy and applicable legal obligations.

If you are a parent or guardian and believe that a person under the age of 21 has registered an account or provided personal data to kkslo, please contact us immediately at [email protected]. We will investigate and take all appropriate action, including account closure and data deletion where legally permissible.

As an international online gaming platform, kkslo may transfer personal data across national borders in the course of providing its services. Such transfers may occur when data is processed by our KYC partners, payment processors, or cloud infrastructure providers who operate from locations outside Malaysia.

Where personal data is transferred internationally, kkslo takes appropriate safeguards to ensure that such transfers are conducted lawfully and that the data receives a level of protection equivalent to that which it would receive in its country of origin. These safeguards may include standard contractual clauses, data processing agreements incorporating binding data protection obligations, or transfers to jurisdictions recognised as providing an adequate level of data protection.

kkslo reserves the right to update or revise this Privacy Policy at any time. The updated Policy will be published at https://kkslo.cam/privacy-policy with a revised "Last updated" date. Where changes are material, we will notify registered Account holders through an in-platform notification or by email to the address on file.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. We encourage you to review this Policy periodically to remain informed about how we handle your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kkslo handles your personal data — including any requests to exercise your data protection rights — please contact us through the following channels:

• Email: [email protected] (displayed as plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week directly on the Platform

Please note that we may request proof of identity before actioning any data subject request, to ensure we do not inadvertently disclose or delete data belonging to another person. We aim to respond to all privacy-related enquiries within 48 hours and to resolve substantive requests within 30 days.

For responsible gambling support — including self-exclusion requests — please refer to our Responsible Gambling page, which contains relevant guidance and contact options.