KRM88 Privacy Policy

1. Introduction

KRM88 ("we", "us", "our") operates the online gaming platform accessible at krm88.cam (the "Platform"). This Privacy Policy sets out how KRM88 collects, uses, discloses, and safeguards personal data provided by or generated about players, visitors, and other individuals who interact with the Platform.

By registering an account, accessing the Platform, or otherwise providing personal data to KRM88, you acknowledge that you have read and understood this Privacy Policy. This policy applies to all personal data collected through the KRM88 website, account interface, payment channels, customer support communications, and any related digital properties.

2. Definitions

Personal Data

Any information that identifies or can reasonably identify a living individual, including name, identity number, email address, IP address, and financial account details.

Processing

Any operation performed on personal data, including collection, storage, use, transfer, and deletion.

Data Controller

The entity that determines the purposes and means of processing personal data — in this case, the operator of KRM88.

Data Processor

A third party that processes personal data on behalf of and under the instruction of KRM88.

KYC

Know Your Customer — the process of verifying a player's identity, age, address, and payment method ownership to satisfy compliance and responsible gambling requirements.

Sensitive Data

A sub-category of personal data requiring heightened protection, which may include identity document numbers, financial data, or data revealing health information relevant to responsible gambling assessments.

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register, verify your account, transact, or contact us, KRM88 may collect:

• Full legal name and date of birth.
• Residential address, including city (e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru, Penang) and postcode.
• Email address and mobile telephone number.
• Identity document details (e.g., MyKad number, passport number and expiry).
• Payment method information, including DuitNow account reference, FPX bank name, or e-wallet identifiers for Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, or Hong Leong.
• Source-of-funds and source-of-wealth information where required by compliance checks.
• Communications you send to customer support.

3.2 Data Collected Automatically

When you access the Platform, KRM88 systems may automatically record:

• IP address, approximate geolocation, and device type.
• Browser type and version, operating system, screen resolution.
• Pages visited, features used, session duration, and navigation path.
• Game activity records, including game type, stake, result, and timestamp.
• Deposit and withdrawal transaction metadata.
• Cookie identifiers and similar tracking technologies (see Section 10).

3.3 Data from Third Parties

KRM88 may receive personal data from identity verification providers, payment processors, fraud prevention services, and, in limited circumstances, publicly available sources used to corroborate information provided by players. KRM88 uses such data only for the purposes described in this policy.

4. Purposes of Data Processing

5. Legal Basis for Processing

KRM88 relies on the following legal bases when processing personal data, applied on a purpose-by-purpose basis:

• Contractual necessity: Processing required to create and administer your KRM88 account, process transactions, and deliver the services you have requested.
• Legal obligation: Processing necessary to comply with anti-money laundering rules, licensing requirements, fraud reporting obligations, and other applicable laws.
• Legitimate interests: Processing for fraud detection, platform security, responsible gambling monitoring, and service improvement where our interests are not overridden by your data protection rights.
• Consent: Where required, KRM88 will obtain your explicit consent before processing data for optional marketing communications or certain non-essential cookies. Consent may be withdrawn at any time without affecting earlier lawful processing.

6. Data Sharing and Disclosure

KRM88 may share personal data with the following categories of recipients only for the purposes described in this policy and subject to appropriate safeguards:

• Payment processors and e-wallet providers: To facilitate MYR deposits and withdrawals through services such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and partnered banks.
• Identity verification providers: To complete KYC checks and validate identity documents in accordance with compliance requirements.
• Game software providers: Limited technical data may be shared with licensed game studios for the purpose of delivering, recording, and auditing gameplay.
• Fraud prevention and security services: To detect and mitigate abuse, money laundering, account compromise, or other threats to the Platform.
• Analytics and infrastructure providers: Service providers assisting with platform hosting, performance monitoring, and aggregate usage analytics, bound by contractual data processing obligations.
• Regulatory authorities and law enforcement: Where required by a valid legal obligation, court order, or regulatory request to disclose information.

7. Cross-Border Data Transfers

KRM88 operates internationally, and personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, KRM88 takes reasonable steps to ensure that the recipient provides a comparable level of data protection, for example through contractual data processing agreements, standard contractual clauses, or equivalent mechanisms.

By using KRM88, you acknowledge that your personal data may be transferred to servers or service providers located outside Malaysia. KRM88 does not represent that such transfers comply with all requirements of Malaysian law, and players are responsible for assessing this in the context of their own situation.

8. Data Retention

KRM88 retains personal data for no longer than necessary to fulfil the purpose for which it was collected, subject to mandatory minimum retention periods required by applicable compliance obligations. As a general guide:

• Active account data is retained for the duration of the account relationship plus a post-closure period to support dispute resolution, audits, and legal compliance.
• KYC and identity verification records are typically retained for a minimum of five years after the account is closed, in line with common anti-money laundering practice.
• Transaction records may be retained for a similar period to support financial audit, chargeback, and compliance review requirements.
• Communication and support records are retained for a period sufficient to resolve any outstanding matters and satisfy documentation obligations.
• Marketing consent records are retained for as long as necessary to demonstrate the validity of the consent and handle any related objections.

When data is no longer required, KRM88 deletes or anonymises it in a secure manner appropriate to the sensitivity of the information.

9. Security Measures

KRM88 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, and destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and KRM88 servers.
• Encryption and hashing of sensitive fields, including passwords and identity data, at rest.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security testing, vulnerability scanning, and patch management.
• Multi-factor authentication options for account access and sensitive account changes.
• Monitoring systems to detect and respond to suspicious login attempts, unusual transaction patterns, and access anomalies.
• Data processor due diligence and contractual security requirements applied to all third-party service providers.

No security system is impenetrable. Players are encouraged to use strong, unique passwords, enable available two-factor authentication, and contact KRM88 support immediately if they suspect unauthorised account activity.

10. Cookies and Similar Technologies

KRM88 uses cookies and similar tracking technologies (including local storage and session identifiers) to operate the Platform, improve user experience, measure performance, and support fraud prevention. Categories of cookies used may include:

• Strictly necessary cookies: Required for the Platform to function, including session management, login state, and payment flow continuity. These cannot be disabled without impairing core functionality.
• Functional cookies: Remember your preferences such as language settings and display options to provide a more personalised experience.
• Analytics cookies: Collect aggregate, anonymised information about how visitors use the Platform to help KRM88 identify performance issues and improve navigation.
• Security cookies: Support fraud detection, bot mitigation, and abuse prevention systems.

Where cookies require consent under applicable standards, KRM88 will seek your agreement before placing them. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may prevent the Platform from operating correctly.

11. Minors and Age Verification

KRM88 strictly prohibits the use of its Platform by anyone under the age of 21. We do not knowingly collect, use, or retain personal data relating to individuals below this age limit. Age verification is enforced through the KYC process, and any account found to belong to a person under 21 will be closed immediately with the balance returned.

If you believe that a person under 21 has submitted personal data to KRM88 or accessed an account, please notify us immediately through the support contact below so that the data can be reviewed and, where appropriate, deleted.

12. Your Data Rights

Subject to applicable law and the constraints of KRM88's compliance, fraud prevention, and contractual obligations, you may exercise the following rights in relation to personal data KRM88 holds about you:

• Right of access: Request confirmation of whether KRM88 holds personal data about you and obtain a copy, together with information about how it is used.
• Right to rectification: Request correction of inaccurate or incomplete personal data held about you.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purpose collected, you have withdrawn consent (where consent was the basis), or processing was unlawful — subject to overriding retention obligations.
• Right to restriction: Request that processing be suspended while a dispute about accuracy or lawfulness is resolved.
• Right to portability: Receive personal data you have provided to KRM88 in a structured, machine-readable format, where technically feasible and legally applicable.
• Right to object: Object to processing based on legitimate interests, including direct marketing profiling.
• Right to withdraw consent: Withdraw any consent given to optional processing at any time, without affecting the lawfulness of earlier processing.

To exercise any of these rights, contact KRM88 customer support with your account username and a clear description of the request. KRM88 may need to verify your identity before processing a rights request and will respond within a reasonable timeframe, typically within 30 days.

13. Changes to This Privacy Policy

KRM88 may update this Privacy Policy from time to time to reflect changes in the Platform, applicable law, regulatory guidance, or data processing practices. The revised policy will be published on the Privacy Policy page with an updated effective date. Where a change is material, KRM88 may provide additional notice through the account interface or by email.

Continued use of the KRM88 Platform after the effective date of a revised policy constitutes acceptance of the changes, to the extent permitted by law. If you do not agree to an updated policy, you should stop using the Platform and may request account closure.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise a data right, report a suspected data incident, or withdraw a marketing consent, please contact KRM88 customer support. Support is available 24 hours daily, Malaysia Time.

The KRM88 website email is [email protected] and is displayed as plain text for reference only. It is not a clickable link. When contacting us regarding a privacy matter, please state your registered account username and describe your request clearly. Do not include passwords, complete identity document numbers, or full financial account details in initial support communications.

For all other account, payment, and platform enquiries, further information is available on the FAQ page.