king368 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how king368 ("the Company", "we", "us", "our") collects, processes, uses, stores, discloses, and protects personal data obtained from individuals ("you", "your", "the Member") who access or use the king368 platform available at king368.asia, including all associated services, features, games, and communications (collectively, "the Service" or "the Platform").

king368 is committed to handling personal data responsibly and in a manner consistent with applicable data protection principles. By registering an account on the Platform or otherwise using the Service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy. Where there is any inconsistency between this Policy and those documents on a matter relating specifically to personal data, this Policy shall prevail.

We may update this Policy from time to time. Material changes will be communicated via a notice on the Platform or by email to your registered address. Continued use of the Service following publication of an updated Policy constitutes your acceptance of the revised terms.

2. Personal Data We Collect

king368 collects personal data through several channels and for a variety of purposes. The categories of personal data we may collect include, but are not limited to, the following:

2.1 Registration and Identity Data. When you create a king368 account, we collect your full legal name, date of birth, email address, and chosen username and password. This data is necessary to create and administer your account.

2.2 KYC Verification Data. In accordance with our obligations under applicable anti-money laundering ("AML") and Know Your Customer ("KYC") requirements, we may collect copies of government-issued identity documents (such as your Malaysian IC or passport), proof of address documentation, and source of funds information. This data is collected prior to processing withdrawals and may be requested at other stages of your account lifecycle.

2.3 Financial Transaction Data. When you make deposits or withdrawals on the Platform, we collect transaction records including payment method identifiers, transaction amounts in Malaysian Ringgit (MYR), timestamps, and transaction reference numbers. Full payment instrument numbers (e.g. bank account numbers) are handled by our payment service providers and are not stored in full on king368 systems.

2.4 Gaming Activity Data. We maintain records of your gaming activity on the Platform, including games played, bets placed, wagers settled, promotional offers claimed, and session duration. This data is used for account administration, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical and Device Data. When you access the Platform, our systems automatically collect technical data including your IP address, browser type and version, device type and operating system, referring URL, and session activity logs. This data is collected using standard web server logging and analytics technologies.

2.6 Communications Data. If you contact king368 customer support — by email to [email protected] or via any Platform-based support feature — we retain records of those communications, including the content of messages and any attachments you provide.

2.7 Cookies and Tracking Technologies. The Platform uses cookies and similar tracking technologies to support session management, personalisation, platform performance analytics, and fraud prevention. Please see Section 9 (Cookies) for further detail.

3. How We Use Your Personal Data

king368 processes personal data only for the purposes described in this Policy and where a lawful basis for processing exists. The primary purposes for which we use your personal data are:

• Account administration: creating, maintaining, and managing your king368 account, including processing deposits, withdrawals, and bonus claims.
• Identity and age verification: confirming that you meet the minimum age requirement of 21 years and verifying your identity in accordance with KYC obligations.
• AML and fraud prevention: monitoring transactions and gaming activity to detect and prevent money laundering, fraud, and other financial crime.
• Regulatory compliance: meeting our obligations under applicable gaming, financial services, and data protection regulations, including responding to lawful requests from regulatory authorities.
• Customer support: responding to enquiries, resolving disputes, and providing technical assistance.
• Responsible gaming: monitoring your gaming behaviour to identify potential indicators of problem gambling and, where appropriate, proactively offering responsible gaming tools.
• Platform improvement: analysing aggregated usage data to improve platform performance, game selection, payment infrastructure, and user experience.
• Marketing communications: where you have provided consent, sending you promotional offers, bonus notifications, and updates about the Platform. You may withdraw consent for marketing communications at any time.

4. Legal Basis for Processing

king368 processes your personal data on the following legal bases:

• Contractual necessity: processing required to fulfil our contractual obligations to you under the Terms and Conditions, including account administration and payment processing.
• Legal obligation: processing required to comply with applicable legal and regulatory requirements, including AML obligations, KYC verification, and tax reporting.
• Legitimate interests: processing carried out in pursuit of our legitimate business interests, including fraud prevention, platform security, and platform improvement, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: processing carried out on the basis of your explicit consent, in particular for marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Disclosure of Personal Data

king368 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients in the circumstances described below:

5.1 Payment Service Providers. We share transaction data with payment processors and e-wallet providers — including but not limited to Touch n Go, Boost, GrabPay, DuitNow, and FPX network participants — to the extent necessary to process deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations.

5.2 Identity Verification Providers. KYC and identity verification may be performed with the assistance of third-party verification service providers. These providers process your identity documents under contractual data processing agreements with king368.

5.3 Regulatory and Law Enforcement Authorities. We may disclose personal data to relevant regulatory bodies, law enforcement agencies, or courts where we are required to do so by law, by a court order, or by regulatory directive. This includes reporting obligations under applicable AML legislation.

5.4 Game and Technology Providers. Certain games on the Platform are provided by licensed third-party game studios and technology suppliers. Interaction with these games may involve the transmission of session data to the relevant provider for game administration and RTP auditing purposes. Game providers are required to process such data under data processing agreements.

5.5 Professional Advisors. We may share personal data with legal, financial, or audit advisors where necessary for the conduct of our business, subject to appropriate confidentiality obligations.

6. Data Retention

king368 retains personal data for as long as is necessary for the purposes set out in this Policy, or as required by applicable law. In practice, this means:

• Account and identity data is retained for the lifetime of your account and for a minimum of five years following account closure, in accordance with AML record-keeping requirements.
• Financial transaction records are retained for a minimum of seven years from the date of the transaction, in accordance with financial record-keeping obligations.
• Communications and support records are retained for a period of three years from the date of the communication, or longer where relevant to an ongoing dispute or legal proceeding.
• Technical and session log data is retained for a period of twelve months from collection in standard operational logs, and for longer periods in aggregated and anonymised form for analytics purposes.

Where personal data is no longer required for any lawful purpose, it is securely deleted or anonymised in accordance with our data lifecycle management procedures.

7. Your Rights Over Your Personal Data

Subject to applicable law, you have the following rights in relation to the personal data we hold about you:

• Right of access: the right to request a copy of the personal data we hold about you.
• Right to rectification: the right to request correction of inaccurate or incomplete personal data.
• Right to erasure: the right to request deletion of your personal data in certain circumstances, subject to our overriding legal obligations to retain certain data.
• Right to restriction: the right to request that we restrict processing of your personal data in certain circumstances.
• Right to object: the right to object to processing of your personal data carried out on the basis of legitimate interests.
• Right to withdraw consent: where processing is based on your consent, the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to verified requests within a reasonable timeframe in accordance with applicable requirements. Please note that certain rights may be limited where their exercise would conflict with our legal or regulatory obligations, in particular our AML record-keeping requirements.

8. Data Security

king368 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include SSL/TLS encryption for data in transit, encryption of sensitive data at rest, access controls limiting internal system access to authorised personnel on a need-to-know basis, and regular security assessments of our platform infrastructure.

While we take data security seriously, no system is entirely impervious to breach. In the event of a personal data breach that poses a risk to your rights and freedoms, king368 will notify affected individuals and relevant authorities in accordance with applicable breach notification requirements.

You are responsible for maintaining the security of your account credentials. king368 will never ask you to share your password via email, chat, or any other channel. If you suspect that your account has been compromised, contact our support team immediately at [email protected].

9. Cookies and Tracking Technologies

king368 uses cookies — small text files stored on your device by your browser — and similar technologies including local storage and session tokens to operate and improve the Platform. The categories of cookies we use include:

• Essential cookies: required for the Platform to function, including session authentication tokens and load balancing cookies. These cannot be disabled without affecting your ability to use the Platform.
• Analytics cookies: used to collect aggregated data about how the Platform is used, which pages are visited, and how users navigate between sections. This data is used to improve the Platform and is not used to identify individual users.
• Fraud prevention cookies: used to detect and prevent fraudulent activity, including multi-accounting and automated bot access.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect Platform functionality. Disabling analytics cookies will not affect your ability to use the Platform but will reduce our ability to improve our services based on usage data.

10. Children and Minors

The king368 Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will delete that data and close the associated account. If you believe a minor has submitted personal data to us, please contact [email protected] immediately.

11. Contact and Complaints

For questions about this Policy, to exercise your data rights, or to raise a complaint about how we handle your personal data, please contact the king368 data protection contact at: [email protected]

We will acknowledge receipt of your query and aim to provide a substantive response within 30 calendar days. If you are not satisfied with our response, you may have the right to lodge a complaint with a relevant supervisory authority in your jurisdiction.