Privacy Policy KL108 –
User Personal Data Protection

Welcome to the KL108 Privacy Policy. This document constitutes a written agreement between KL108 and you as a user of our platform regarding how we manage your personal information. We understand that privacy is something of great value, and we take this responsibility with the utmost seriousness.

KL108 is an online entertainment platform operating in Malaysia. In delivering our services, we collect and process certain personal data to ensure a safe, fair, and enjoyable gaming experience. This Privacy Policy clearly explains what we collect, why we need it, and how we protect it.

By registering and using the kl108 platform, you are deemed to have read, understood, and fully agreed to this Privacy Policy. If you do not agree with any part of this policy, you are advised not to use kl108's services.

This policy applies to all users accessing the kl108 platform via the official website, Android or iOS mobile app, or any other official kl108 channel. We are committed to keeping this policy up to date in line with evolving data protection laws and industry best practices.

KL108 collects various types of information from users depending on how you interact with our platform. We only collect information that is genuinely necessary to provide you with a safe and efficient service.

Information you provide directly:

• Full name as shown on your official identification document.
• A valid and active Malaysian phone number for account verification purposes.
• Date of birth to verify that you meet the minimum age requirement of 18 years.
• Bank account or digital wallet details for processing deposits and withdrawals.
• A copy of your identity document (MyKad) during the KYC (Know Your Customer) process.
• Source of funds information if requested in an AML compliance context.

Information collected automatically:

• IP address and approximate location data based on IP for security and geographic compliance purposes.
• Device type, operating system, and app version in use.
• Session log data including login times, in-platform activity, and session duration.
• Full transaction history including deposits, withdrawals, and wagering activity.
• Cookie and local storage data to enhance the user experience.

KL108 uses collected personal data solely for legitimate and specific purposes. We will not use your data beyond what is stated in this policy without obtaining your additional consent.

The primary purposes for which kl108 uses your personal data are as follows:

• Account Management: Creating, verifying, and securely managing your user account.
• Transaction Processing: Processing all deposits, withdrawals, and other financial transactions accurately and securely.
• Identity Verification (KYC): Conducting identity verification as required by law to prevent fraud and money laundering.
• Platform Security: Identifying and preventing fraudulent activity, duplicate accounts, and hacking attempts.
• Customer Support: Providing accurate and effective assistance when you contact the kl108 support team.
• Service Communications: Sending important notifications related to accounts, transactions, policy changes, and security issues.
• Marketing (with consent): Sending promotional information, bonuses, and special offers to users who have given their consent.
• Platform Improvements: Analyzing aggregated usage patterns to improve user experience and kl108 service quality.
• Legal Compliance: Fulfilling legal obligations and regulations applicable to the operation of the kl108 platform.

All data processing is carried out on the basis of contractual necessity, legal obligation, kl108's legitimate interests, or your explicitly given consent. You may withdraw consent for marketing at any time without affecting kl108's core services.

KL108 understands the sensitivity of user personal data and upholds a strictly limited and responsible data-sharing policy. We does not sell users' personal data to any party for any commercial purpose.

In the following limited circumstances, kl108 may share your personal data with certain parties:

• Payment Service Providers: Payment gateways and banks used to process your transactions. Such sharing is kept to a minimum and limited strictly to data required to complete the transaction.
• Technology Service Providers: Technology companies providing hosting, security, and infrastructure services to kl108 under strict confidentiality agreements.
• KYC/AML Service Providers: Registered and approved third-party identity verification services that help us meet legal compliance requirements.
• Government Authorities: If required by Malaysian law or by a valid court order, kl108 will comply with information requests from the relevant authorities.
• Business Merger: In the event of a merger, acquisition, or sale of kl108 assets, user data may be transferred as part of the business assets, subject to notification to users.

In all data sharing cases, kl108 ensures that recipient parties maintain an equivalent or higher level of data protection than our own standards. All third parties handling kl108 user data are required to sign a comprehensive data processing agreement.

KL108 continuously invests in the latest cybersecurity infrastructure to ensure user personal data is always protected against unauthorized access, loss, destruction, or accidental disclosure.

Key security measures implemented by kl108 include:

• Data Encryption at Rest: All personal data stored in the kl108 database is encrypted using the AES-256 standard, which is practically unbreakable.
• Data Encryption in Transit: All communications between your browser/app and kl108 servers are protected by TLS 1.3 with a valid SSL certificate.
• Layered Access Control: Access to user data is restricted to staff who require it for their job duties only, with comprehensive audit logs maintained.
• Two-Factor Authentication: kl108's internal systems require two-factor authentication for all staff accessing sensitive user data.
• 24/7 Security Monitoring: A real-time threat detection system monitors all platform activity to identify and respond to any security threats.
• Regular Penetration Testing: KL108 conducts regular penetration testing by independent security experts to identify and address any vulnerabilities.
• Secure Data Backup: User data is automatically backed up to a secure, separate location to ensure service continuity in the event of a technical disruption.

While kl108 takes all reasonable steps to protect your data, no system is 100% immune to all cyber threats. In the event of any security incident involving your personal data, we will notify you within the timeframe stipulated by PDPA law and take immediate remedial action.

KL108 uses cookies and similar tracking technologies to enhance your experience on our platform, maintain session security, and understand how users interact with our services.

Types of cookies used by kl108:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled as they are fundamental to platform operation.
• Performance Cookies: Collecting aggregated information on how users interact with the platform to help us identify popular pages and improve overall performance.
• Functional Cookies: Saving your personal preferences such as display settings, preferred language, and frequently used information for your convenience.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality and security of the kl108 platform. Analytical and functional cookies can be disabled without impacting basic platform usage.

The kl108 mobile app also uses device identifiers and similar technologies for security verification and to enhance the mobile user experience. This information is processed in accordance with the same privacy policy as outlined in this document.

Under Malaysia's Personal Data Protection Act 2010, you as a kl108 user have several important rights regarding your personal data. KL108 fully respects and facilitates the exercise of these rights.

KL108 does not retain user personal data longer than necessary for the purposes stated in this policy or as required by Malaysian law.

Data retention periods vary depending on the type of data and operational requirements:

• Active Account Data: Retained for the duration your account remains active and in use on the kl108 platform.
• Financial Transaction Data: Retained for a minimum of 7 years after the transaction occurs, in line with Malaysia's financial and tax regulatory requirements.
• KYC & Identity Verification Data: Retained for a minimum of 5 years after the business relationship ends, in line with AML/CFT requirements.
• Support Communication Logs: Retained for 2 years for reference and dispute resolution purposes.
• Security Log Data: Retained for 12 months for security investigation and threat detection purposes.
• Marketing Data: Deleted within 30 days after you withdraw your marketing consent.

Upon expiry of the retention period, kl108 will securely delete or encrypt the data using methods that ensure it cannot be recovered. For data that must be retained for legal reasons, access will be restricted to the minimum level necessary.

KL108 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our business practices, data protection legislation, or new operational requirements.

In the event of material changes to this policy, kl108 will take the following steps to notify users:

• Sending email notifications to all registered users at least 14 days before changes take effect.
• Displaying clear notices on the kl108 platform's homepage and account settings section.
• Updating the "Last Updated" date at the top of this document.
• Requesting re-confirmation of consent if changes involve new or different data processing purposes.

Your continued use of the kl108 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to close your account and stop using kl108 services.

We encourage users to review this Privacy Policy periodically to stay informed about how kl108 protects your information.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how kl108 handles your personal data, we strongly encourage you to contact us directly.

The kl108 Data Protection Officer (DPO) team is ready to assist you with all privacy-related matters:

• Privacy Email: [email protected] – use the subject line "Privacy Inquiry" for faster processing.
• Live Chat: Available 24/7 on the kl108 platform for general privacy-related inquiries.
• Response Time: We are committed to responding to all privacy inquiries within 3 business days.

If you are not satisfied with kl108's response to your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia, the regulatory body for PDPA in Malaysia.