k4klub Privacy Policy

This Privacy Policy ("Policy") issued by the operator of k4klub ("we", "us", "our"), accessible at k4klub.cam ("the Platform"). It describes how we collect, process, store, and protect the personal data of individuals ("Player", "User", "you") who access, register, or otherwise interact with the k4klub Platform, including all associated web pages, mobile interfaces, and support channels.

This Policy should be read in conjunction with our Terms and Conditions and our Responsible Gambling Policy. By accessing the Platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

k4klub is committed to handling personal data in accordance with applicable international data protection standards, including principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality. Our approach to privacy is proactive, not reactive — we build data protection into our systems from the outset rather than as an afterthought.

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, online identifiers, and any other data that, alone or in combination, can identify a specific individual.
• "Processing" — Any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is the operator of the k4klub Platform.
• "Data Processor" — A third party that processes personal data on behalf of the Data Controller pursuant to a contractual arrangement.
• "Consent" — Any freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data for a specified purpose.
• "KYC" (Know Your Customer) — The identity and age verification process conducted by k4klub to confirm a Player's identity, age, and source of funds prior to enabling full account functionality.
• "Cookie" — A small text file stored on a User's device by a web browser upon visiting a website, used to retain session information, preferences, and analytical data.
• "PDPA" — The Personal Data Protection Act 2010 of Malaysia, the primary legislation governing the processing of personal data of Malaysian individuals in commercial transactions.

k4klub collects personal data through several channels: directly from you during the registration and KYC process, automatically through your use of the Platform, and in certain limited cases from third-party sources such as payment processors and identity verification services. The categories of data we collect are set out below.

When you create a k4klub account, we collect:

• Full legal name
• Date of birth
• Email address
• Contact number (mobile)
• Residential address (including postcode, city, and country — e.g., Kuala Lumpur, Penang, Johor Bahru)
• Username and encrypted password
• Preferred currency (MYR)

As part of our mandatory KYC process, we collect:

• Government-issued photo identification (e.g., Malaysian MyKad, passport)
• Proof of address documentation
• Source of funds documentation where required by our compliance procedures
• Facial recognition or liveness check data where applicable to our identity verification process

In connection with deposits, withdrawals, and betting activity, we collect:

• Payment method details (e.g., bank account identifiers, e-wallet IDs for Touch 'n Go, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong)
• Transaction history including deposit amounts, withdrawal requests, and wager records
• Account balance history

k4klub does not store full payment card numbers or sensitive authentication data. Payment transactions are routed through secured third-party payment processors.

When you use the Platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration and navigation paths within the Platform
• Pages visited, game sessions accessed, and features used
• Log files and error reports

Where you contact k4klub's support team or respond to communications from us, we retain records of those interactions, including:

• Live chat transcripts
• Email correspondence
• Support ticket history
• Any information you voluntarily provide in the course of those communications

k4klub uses the personal data we collect for the following purposes:

k4klub processes your personal data on the following legal bases, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing required to enter into or perform the contract between you and k4klub — including account registration, payment processing, and the provision of betting and gaming services.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including KYC verification, anti-money laundering (AML) obligations, and reporting duties to relevant authorities.
• Legitimate Interests: Processing undertaken in pursuit of k4klub's legitimate business interests, provided such interests are not overridden by your fundamental rights — including fraud prevention, security monitoring, platform analytics, and responsible gambling interventions.
• Consent: Processing undertaken on the basis of your freely given, specific, and informed consent — principally in relation to optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Vital Interests: In exceptional circumstances, we may process personal data to protect the vital interests of a subject — for example, in connection with a safeguarding concern arising from responsible gambling obligations.

k4klub does not sell, rent, or trade your personal data to third-party marketers under any circumstances. We may, however, share your personal data with the following categories of recipients where necessary and in accordance with this Policy:

• Payment Processors: Third-party payment service providers who process deposits and withdrawals on our behalf, including gateway operators connected to DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and major Malaysian banks. These parties process data solely on our instructions and are bound by strict data processing agreements.
• Identity Verification Providers: Specialist KYC and AML verification services engaged to confirm player identity and age and to conduct sanctions screening as required by our compliance obligations.
• Game Content Providers: Software providers whose casino games, slot titles, and live dealer services are operated on the Platform. These providers may receive anonymised or pseudonymised gameplay data for licensing and audit purposes.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory directive, k4klub may disclose personal data to law enforcement agencies, financial intelligence units, tax authorities, or other competent authorities. We will notify you of such disclosure where legally permissible to do so.
• Professional Advisers: Legal counsel, accountants, auditors, and other professional advisers engaged by k4klub who are subject to confidentiality obligations.
• Business Successors: In the event of a merger, acquisition, restructuring, or sale of the business or its assets, your personal data may be transferred to the successor entity subject to equivalent data protection obligations.

All third-party service providers engaged by k4klub are required to process your personal data only as instructed by us, in accordance with applicable data protection law, and subject to appropriate contractual safeguards.

k4klub operates as an internationally licensed platform. In the course of operating the Platform and providing services to players in Malaysia, your personal data may be transferred to, stored in, or processed in jurisdictions outside of Malaysia. These may include the jurisdiction in which k4klub holds its operating licence, as well as the jurisdictions in which our third-party service providers (payment processors, KYC providers, cloud infrastructure providers) are located.

Where we transfer personal data internationally, we take all reasonable steps to ensure that appropriate safeguards are in place to protect your data to the same standard as required under applicable data protection law. Such safeguards may include contractual data transfer agreements, adequacy assessments, or other recognised mechanisms for securing cross-border data transfers.

By using the k4klub Platform, you acknowledge and consent to the potential transfer of your personal data to jurisdictions outside of Malaysia for the purposes described in this Policy.

k4klub retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, and in compliance with applicable legal and regulatory retention obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account's active status plus any applicable post-closure retention period.
• Financial Transaction Records: Retained for a minimum of five (5) to seven (7) years from the date of the transaction, in compliance with applicable AML and financial record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of account closure or the completion of the business relationship, as required by applicable anti-money laundering legislation.
• Customer Support Records: Retained for a period of up to three (3) years from the date of the interaction, or longer where the subject matter relates to an ongoing dispute or legal proceding.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be used to identify you. Where deletion is not immediately practicable due to technical constraints, we will take steps to ensure the data is isolated from further processing pending deletion.

k4klub uses cookies and similar tracking technologies on the Platform to provide, improve, and analyse our services. The types of cookies we use are described below. You may control your cookie preferences through your browser settings, though disabling certain cookies may affect the functionality of the Platform.

Most web browsers allow you to control cookie settings through your browser preferences. Clearing cookies or blocking them may affect your ability to stay logged in or use certain features of the k4klub Platform. Refer to your browser's help documentation for instructions on managing cookie preferences.

Subject to applicable data protection law and any legal obligations that may restrict our ability to comply, you have the following rights in respect of your personal data held by k4klub. To exercise any of these rights, please contact our support team via live chat or by email.

k4klub will respond to valid data subject requests within a reasonable timeframe — typically within 30 calendar days of receipt. We may request proof of identity before processing a request to protect against fraudulent access to personal data.

k4klub implements a comprehensive range of technical and organisational security measures designed to protect your personal data from unauthorised access, accidental loss, destruction, disclosure, or alteration. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and k4klub's servers
• Encrypted storage for sensitive personal data and financial records at rest
• Multi-factor authentication requirements for administrative access to data systems
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security specialists
• Intrusion detection and prevention systems monitoring for suspicious access patterns
• Incident response procedures covering data breach detection, containment, assessment, and notification

Notwithstanding the above, no method of electronic transmission or storage is completely secure. While k4klub takes every reasonable precaution to protect your data, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, k4klub will notify affected players and relevant authorities in accordance with applicable law.

Players are also responsible for maintaining the security of their own account credentials. k4klub strongly recommends using a strong, unique password for your account and enabling any available account security features. Do not share your login credentials with anyone.

k4klub is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Our platform enforces a mandatory minimum age of 21 years through KYC verification procedures applied to all registrations.

If k4klub becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage player will be returned through the original payment method where possible, in accordance with applicable legal requirements.

If you have reason to believe that a person under 21 has registered an account or submitted personal data to k4klub, please contact our support team immediately so that we can investigate and take the appropriate action.

Malaysia's Personal Data Protection Act 2010 (PDPA) regulates the processing of personal data in commercial transactions. k4klub acknowledges the relevance of the PDPA to the extent that our processing activities involve personal data of Malaysian residents in the context of a commercial relationship.

In accordance with the general principles of the PDPA, k4klub commits to the following in respect of Malaysian players:

• General Principle: Personal data is processed lawfully and only for purposes to which you have consented or which are necessary for our contractual and legal obligations.
• Notice & Choice Principle: We inform you at the point of data collection of the purposes for which your data is being collected, your right to access and correct that data, and any third parties to whom it may be disclosed.
• Disclosure Principle: Personal data is not disclosed to third parties beyond what is described in this Policy without your consent, except as required by law.
• Security Principle: We implement practical steps to protect your personal data from loss, misuse, modification, unauthorised or accidental access or disclosure, alteration, or destruction.
• Retention Principle: Personal data is retained only for as long as necessary for the fulfillment of the stated purposes, or as required by applicable law.
• Data Integrity Principle: We take reasonable steps to ensure that personal data collected and processed is accurate, complete, not misleading, and up to date.
• Access Principle: You have the right to request access to and correction of your personal data held by k4klub. Requests should be directed to our support team.

k4klub reserves the right to update, revise, or amend this Privacy Policy at any time. We will notify registered Players of material changes to this Policy via email to the registered email address on file and/or by posting a conspicuous notice on the Platform. The revised Policy will take effect on the date specified in the notification.

Your continued use of the Platform following the effective date of any amendment to this Policy constitutes your acknowledgement of the revised terms. If you do not agree with any amendment, you should cease using the Platform and contact our support team to request account closure.

We recommend that you review this Privacy Policy periodically to remain informed about how k4klub is protecting your personal data. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by k4klub, please contact us through the following channels. We are committed to responding to all privacy-related enquiries promptly and transparently.

For matters specifically related to responsible gambling, account self-exclusion, or deposit limits, please visit our Responsible Gambling page. For the full Platform rules, refer to our Terms and Conditions.