Privacy Policy — KJ168

1. Introduction

This Privacy Policy (hereinafter "the Policy") describes how KJ168 (hereinafter "KJ168", "we", "us", or "our"), the operator of the online gaming platform accessible at kj168.cam, collects, processes, stores, and protects the personal data of individuals who visit, register on, or otherwise interact with our platform.

KJ168 is committed to handling personal data responsibly, transparently, and in accordance with internationally recognised privacy principles. While Malaysia's Personal Data Protection Act 2010 (PDPA) applies to data processors operating within Malaysia, KJ168 acknowledges its spirit and aligns its data handling practices accordingly, alongside the data protection standards of its international licensing jurisdiction.

By registering an account on KJ168 or otherwise using our services, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree with any provision of this Policy, please discontinue use of the platform and contact our support team to request account closure.

2. Definitions

For the purpose of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" — Any information that identifies or can reasonably be used to identify a natural person, including but not limited to: name, date of birth, email address, mobile number, residential address, IP address, device identifiers, and financial account details.
• "Processing" — Any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" — KJ168, the entity that determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" — Any third party engaged by KJ168 to process Personal Data on KJ168's behalf, subject to written data processing agreements.
• "User" / "Player" — Any natural person who registers an account on the KJ168 platform or otherwise accesses its services.
• "Platform" — The KJ168 website, mobile interface, and associated digital services accessible at kj168.cam.
• "KYC" — Know Your Customer — the identity and document verification process required for account approval and withdrawal processing.
• "Cookies" — Small data files placed on a User's device by a website, used to retain session information and platform preferences.

3. Data We Collect

KJ168 collects Personal Data through several channels during a Player's lifecycle on the platform. The categories of data collected and the manner of collection are detailed below.

3.1 Data Provided Directly by You

When you register an account, you provide us with the following information:

• Full legal name and date of birth
• Email address and mobile telephone number
• Residential address (including city, state, and postcode)
• Chosen username and password (passwords are stored in hashed form only)
• Preferred language and currency settings

3.2 Data Collected During KYC Verification

When you request a withdrawal or when triggered by our compliance protocols, we may request:

• Government-issued photo identification (e.g., MyKad for Malaysian nationals, or a valid passport)
• Proof of address document (e.g., utility bill or bank statement not older than 3 months)
• Proof of payment method ownership (e.g., screenshot of e-wallet or bank account in your name)
• Source of funds documentation where required by our compliance team

3.3 Financial Transaction Data

When you deposit or withdraw funds — whether via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or cryptocurrency (USDT/BTC/ETH) — we collect:

• Transaction amounts, dates, and timestamps
• Payment method identifiers (e-wallet account reference, bank name, or crypto wallet address)
• Transaction status and processing records

Raw card numbers, full bank account credentials, and e-wallet login details are never transmitted to or stored by KJ168 directly — these are handled by our verified payment processor partners.

3.4 Technical and Usage Data

When you access the KJ168 platform, we automatically collect the following technical data:

• IP address and approximate geographic location derived therefrom
• Device type, operating system, and browser version
• Session start and end times, pages visited, and features accessed
• In-game activity logs (game titles played, wager amounts, outcomes)
• Referral source (how you arrived at kj168.cam)

4. Legal Basis for Processing

KJ168 processes Personal Data on the following legal bases, in accordance with applicable data protection principles:

5. How We Use Your Data

KJ168 processes Personal Data for the following specific purposes:

5.1 Account and Service Operation

To create and maintain your player account, authenticate your identity at login, manage your wallet balance, process deposits and withdrawals, deliver bonus awards, and provide customer support assistance in English, Bahasa Melayu, or Mandarin as required.

5.2 Regulatory Compliance and AML

To comply with applicable anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, including transaction monitoring, suspicious activity reporting, and record-keeping requirements mandated by our licensing jurisdiction.

5.3 Fraud Prevention and Platform Security

To detect, investigate, and prevent fraudulent activity, account takeover attempts, bot usage, multi-accounting, bonus abuse, and other conduct prohibited under our Terms & Conditions. Technical data, IP logs, and device fingerprints are central to these activities.

5.4 Responsible Gambling Obligations

To monitor player behaviour for indicators of problem gambling, enforce deposit limits and self-exclusion requests, verify the age of players (21+ requirement), and respond to responsible gambling-related support requests in a timely manner.

5.5 Communications

To send transactional communications (e.g., deposit confirmation, withdrawal processed, account verification notifications) that are necessary for the operation of your account. With your explicit consent, to send promotional communications about bonuses, new games, and special offers relevant to Malaysian players. You may withdraw marketing consent at any time by contacting support or updating your account preferences.

5.6 Platform Improvement

To analyse aggregated, anonymised usage patterns to improve the KJ168 user experience, optimise game loading performance, and inform product development decisions. Aggregated analytics do not identify individual users.

6. Data Sharing & Disclosure

KJ168 does not sell or rent your Personal Data to third parties. We may share your data with the following categories of third parties strictly for the purposes described:

6.1 Payment Processors

Verified payment service providers who process your deposit and withdrawal transactions (e.g., operators of Touch 'n Go eWallet infrastructure, FPX/DuitNow banking rails, and cryptocurrency transaction processors). These processors are contractually bound to handle your data securely and only for payment processing purposes.

6.2 Identity Verification Providers

Third-party KYC verification service providers who assist in validating identity documents submitted during the verification process. These providers operate under strict data processing agreements and are prohibited from using your data for any purpose other than identity verification.

6.3 Regulatory and Law Enforcement Authorities

Where required by applicable law, court order, or legitimate regulatory demand, KJ168 may disclose Personal Data to relevant governmental or regulatory authorities. KJ168 will notify affected Users of such disclosure to the extent permitted by applicable law.

6.4 Fraud Prevention and Security Services

Third-party fraud detection and cybersecurity service providers who assist in identifying suspicious activity and protecting platform integrity. Data shared with these providers is limited to technical identifiers (IP addresses, device fingerprints) necessary for their function.

7. Cookies & Tracking Technologies

KJ168 uses cookies and similar technologies on its platform. The following table describes the categories of cookies we use and their purpose:

KJ168 does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking technologies. You may manage cookie preferences through your browser settings. Note that disabling essential cookies may impair platform functionality, including your ability to log in.

8. Data Security

KJ168 implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Transport Encryption: All data in transit between your device and KJ168's servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive Personal Data stored on KJ168's infrastructure is encrypted at rest using industry-standard algorithms.
• Password Hashing: User passwords are never stored in plaintext. They are stored exclusively as salted cryptographic hashes.
• Two-Factor Authentication (2FA): Available to all registered players and strongly recommended. Adds a second verification layer to account access.
• Access Controls: Internal access to Personal Data is restricted to authorised personnel on a strict need-to-know basis, with all access logged and audited.
• Regular Security Audits: KJ168 conducts regular vulnerability assessments and penetration testing of its platform infrastructure.

9. Data Retention

KJ168 retains Personal Data only for as long as is necessary to fulfil the purposes described in this Policy or as required by applicable legal, regulatory, or compliance obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with KJ168's internal data destruction procedures.

10. Your Rights Over Your Personal Data

As a registered player, you hold the following rights in relation to your Personal Data held by KJ168. These rights may be subject to limitations based on applicable legal obligations and the specific circumstances of your account.

To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond within a reasonable timeframe and, where applicable, within any legally mandated response window.

11. Minors & Age Verification

KJ168 is strictly an adult gaming platform. Access to the platform is permitted only to individuals aged 21 years or above. We do not knowingly collect Personal Data from any person under the age of 21.

KJ168 implements age verification checks at the point of registration and during KYC processes. Any account found to belong to a person under the age of 21 will be immediately suspended, all funds will be returned to the deposited payment method, and the account will be permanently closed.

If you believe that a minor has created a KJ168 account, please notify us immediately at [email protected]. We will investigate and act on such reports as a matter of urgency.

12. Third-Party Services & Links

The KJ168 platform is powered in part by third-party service providers — including payment processors, game content studios, and technical infrastructure providers. These third parties operate under their own privacy policies and are required by contract to process any KJ168 player data only for the specific, agreed purposes and in accordance with applicable data protection standards.

KJ168 does not control and is not responsible for the privacy practices of any third-party website that may be accessible via a link on the platform. We strongly recommend reviewing the privacy policies of any third-party services you use independently.

All third-party data processors engaged by KJ168 are subject to written data processing agreements (DPAs) that set out strict obligations regarding data security, use limitation, and sub-processing restrictions.

13. International Data Transfers

KJ168 operates under an international gaming licence and may process and store Personal Data on servers located outside of Malaysia. Where Personal Data is transferred to a jurisdiction outside Malaysia, KJ168 ensures that appropriate safeguards are in place to protect such data, including contractual protections with receiving entities equivalent to those applicable in jurisdictions with recognised data protection frameworks.

By registering an account on KJ168, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia as described in this clause, for the purposes of providing the services you have requested.

14. Amendments to This Privacy Policy

KJ168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services we provide. The "Last Updated" date at the top of this Policy will be revised accordingly.

Where changes are material — meaning they significantly affect how we process your Personal Data or your rights in relation thereto — we will notify registered players by email to the address on file, by a prominent in-platform notice, or both, with a minimum of seven (7) days' notice before the amended Policy takes effect.

Your continued use of the KJ168 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must discontinue use of the platform and request account closure.

15. Contact Us

For all privacy-related enquiries, data rights requests, or concerns regarding KJ168's handling of your Personal Data, please contact our support team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" for prioritised handling.
• Live Chat: Available directly on the KJ168 platform, 24 hours a day, 7 days a week. Our average first-response time is 3–5 minutes. Support is available in English, Bahasa Melayu, and Mandarin Chinese.

We are committed to resolving privacy concerns promptly and transparently. If you are unsatisfied with our response, you may escalate your concern to the supervisory authority in our licensing jurisdiction as applicable.