kz8 Privacy Policy

1. Who We Are

kz8 (referred to in this document as "we", "us", or "our") operates the online sports betting and casino platform accessible at kz8.lat. We are an internationally licensed gaming operator serving English-speaking players in Malaysia and select international markets.

For the purposes of this Privacy Policy, kz8 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. If you have any questions about this policy or how we handle your data, please refer to Section 13 (Contact Us).

2. Data We Collect

When you register, use, or interact with kz8, we may collect the following categories of personal data:

2.1 Identity & Contact Data

• Full legal name and date of birth
• Malaysian NRIC number or passport number (for identity verification)
• Residential address (including postcode, state, and country)
• Email address and mobile phone number

2.2 Financial Data

• Bank account details (Maybank, CIMB, Public Bank, or other Malaysian banks) used for deposits and withdrawals
• E-wallet identifiers for Touch n Go eWallet, Boost, or GrabPay
• Cryptocurrency wallet addresses (where applicable)
• Transaction history including deposit amounts, withdrawal requests, and betting records

2.3 Technical & Usage Data

• IP address, browser type, and device identifiers
• Operating system and screen resolution
• Pages visited, session duration, and navigation patterns within kz8.lat
• Login timestamps and geographic location derived from your IP address

2.4 Communications Data

• Messages sent to our customer support team via live chat or email
• Feedback, survey responses, and promotional communications you opt in to

3. How We Use Your Data

kz8 uses your personal data for the following purposes:

• Account registration and verification: To create and authenticate your kz8 account, and to comply with Know Your Customer (KYC) obligations under our licensing requirements.
• Service delivery: To process deposits, withdrawals, bets, and game sessions across our sportsbook, casino, slots, crash games, and esports betting verticals.
• Fraud prevention and AML compliance: To detect suspicious activity, prevent money laundering, and comply with applicable financial crime legislation.
• Customer support: To respond to queries, complaints, and technical issues you submit to our support team.
• Responsible gaming: To monitor betting behaviour, apply self-exclusion requests, and enforce deposit limits or account restrictions where necessary to protect vulnerable players.
• Platform improvement: To analyse usage patterns and improve the features, performance, and security of our platform.
• Marketing communications: To send you promotions, bonuses, and event notifications — but only with your prior consent, and only from kz8 directly.
• Legal compliance: To fulfil obligations under applicable laws, regulations, and licensing conditions.

4. Legal Basis for Processing

kz8 processes your personal data on the following legal grounds, depending on the specific activity:

• Contractual necessity: Processing required to fulfil our obligations to you as a registered account holder — for example, processing bets and payments.
• Legal obligation: Processing necessary to comply with AML regulations, KYC requirements, licensing conditions, and any other applicable legislation.
• Legitimate interests: Processing carried out to prevent fraud, secure our systems, and improve our services — where these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, informed agreement — specifically for optional marketing communications. You may withdraw this consent at any time.

5. Data Sharing & Disclosure

kz8 does not sell, rent, or trade your personal data. We may share your information only in the following limited circumstances:

• Service providers: Trusted third-party vendors who assist us in operating the platform — including payment processors, identity verification providers, cloud hosting services, and fraud detection tools. All such vendors are bound by strict data processing agreements and may not use your data for their own purposes.
• Regulatory and law enforcement bodies: Where required by law, court order, or regulatory authority, we may be legally obligated to disclose certain user information. We will only do so to the extent required.
• Business transfers: In the event of a merger, acquisition, or sale of all or a substantial portion of our business, your data may be transferred to the acquiring entity — subject to equivalent privacy protections remaining in place.
• Responsible gaming organisations: In connection with self-exclusion schemes or responsible gaming programmes, limited data may be shared with licensed third-party responsible gaming registries where you have requested enrolment.

6. Cookies & Tracking Technologies

kz8.lat uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use include:

• Essential cookies: Required for the platform to function correctly — including session management, login authentication, and security tokens. These cannot be disabled without breaking core functionality.
• Performance cookies: Used to analyse how users navigate the site so we can identify and fix issues, improve page load times, and optimise the user experience.
• Preference cookies: Store your settings such as language preference, odds format, and display preferences so you do not need to reconfigure them on every visit.
• Analytics cookies: Aggregate, anonymised data about platform usage that helps us understand which features are most valuable to our Malaysian players.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the performance or availability of some platform features.

7. Data Retention Periods

kz8 retains your personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable law. Our standard retention schedule is as follows:

• Account data: Retained for the duration of your active account and for a period of five (5) years following account closure, in accordance with AML and licensing requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by financial crime prevention regulations.
• Identity verification documents: Retained for five (5) years after the end of the customer relationship, or longer where required by law.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless the communication relates to an ongoing dispute or legal matter.
• Marketing consent records: Retained for as long as you remain opted in, plus one (1) year following withdrawal of consent for audit purposes.

When data is no longer required, kz8 will securely delete or anonymise it in accordance with our internal data disposal procedures.

8. Data Security

kz8 applies industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS 1.2 / 1.3 encryption for all data transmitted between your browser or app and our servers
• AES-256 encryption for all personal and financial data stored in our databases
• Multi-factor authentication (MFA) options for your kz8 account
• Regular penetration testing and vulnerability assessments conducted by independent third parties
• Role-based access controls ensuring that only authorised personnel can access user data
• 24/7 intrusion detection and monitoring systems

Despite these measures, no online platform can guarantee absolute security. If you believe your kz8 account has been compromised, please contact our support team immediately at [email protected].

9. Your Rights

As a kz8 user, you hold the following rights with respect to your personal data. You may exercise any of these rights by contacting us through the details provided in Section 13:

• Right of access: Request a copy of all personal data kz8 holds about you.
• Right to rectification: Request correction of any inaccurate or incomplete personal data we hold.
• Right to erasure: Request deletion of your personal data, subject to legal and regulatory retention obligations.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances — for example, while a dispute is being resolved.
• Right to data portability: Request that we provide your data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to object: Object to processing based on legitimate interests, including direct marketing. Upon receiving a valid objection to marketing, we will cease sending you promotional communications immediately.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

kz8 will respond to all data rights requests within 14 business days. In complex cases, we may extend this to 30 days and will notify you accordingly.

10. Minors & Age Restriction

kz8 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Access to our sportsbook, casino, slots, and all other gambling products is prohibited for anyone aged under 21 years.

During the registration process, kz8 requires all users to confirm that they are aged 21 or above. We also conduct identity verification checks to enforce this requirement. If we discover that personal data has been collected from a person under 21, we will delete that data and close the associated account immediately.

If you are a parent or guardian and believe a minor has accessed kz8 without authorisation, please contact us at [email protected] so we can take prompt action.

11. Cross-Border Data Transfers

kz8 operates as an internationally licensed platform. As a result, certain data processing activities — particularly those carried out by our cloud infrastructure, payment processing, and fraud detection service providers — may involve transferring your personal data to servers or systems located outside Malaysia.

Where such transfers take place, kz8 ensures that appropriate safeguards are in place to maintain the level of protection afforded to your data under this Privacy Policy. These safeguards include:

• Contractual data processing agreements with all overseas service providers that impose equivalent data protection obligations
• Transfer only to countries or organisations that maintain adequate data protection standards
• Encryption of all data in transit across international connections

By registering and using kz8, you acknowledge that your data may be processed in jurisdictions outside Malaysia as described above.

12. Changes to This Privacy Policy

kz8 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify you via:

• A prominent notice displayed on kz8.lat when you next log in
• An email notification sent to the address registered on your account (where the change is significant)
• An updated "Last Updated" date at the top of this page

We encourage you to review this Privacy Policy periodically to stay informed about how kz8 is protecting your information. Continued use of the platform following notification of changes constitutes your acceptance of the revised policy.

Where a change requires your renewed consent (for example, a new use of your data for a different purpose), we will seek that consent explicitly before proceeding.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kz8 handles your personal data, please reach out to our Data Protection team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 directly within the kz8 platform — accessible after logging in to your account.
• Response time: We aim to respond to all privacy-related enquiries within 14 business days.

When contacting us about a data rights request, please include your registered email address and a brief description of your request so we can verify your identity and respond efficiently.