This Privacy Policy explains how KZ8 collects, uses, stores, and protects the personal data of registered players and visitors. We take your privacy seriously — your data is handled with care, stored securely, and never sold to third parties.
KZ8 (referred to in this Policy as "KZ8", "we", "us", or "our") operates the online gaming platform accessible at kz8.cam. We are committed to protecting the privacy and personal data of every individual who visits or registers on the Platform, in accordance with applicable data protection principles.
This Privacy Policy (the "Policy") describes the categories of personal data we collect, the purposes for which that data is processed, how it is stored and protected, with whom it may be shared, and the rights you hold in respect of your personal information. This Policy applies to all users of the KZ8 Platform, including registered account holders, prospective players, and general visitors.
By accessing the KZ8 Platform, registering an account, or providing any personal information to KZ8, you acknowledge that you have read and understood this Policy and consent to the processing of your data as described herein. If you do not accept this Policy, you must not use the Platform or provide any personal data to KZ8.
KZ8's Privacy Commitment: We do not sell, rent, or trade your personal data to third parties for marketing purposes. Data shared with service providers is limited to what is operationally necessary and governed by confidentiality agreements.
The following terms carry the meanings assigned below throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers such as IP addresses. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, or deletion. |
| "Data Controller" | KZ8, which determines the purposes and means by which personal data is processed. |
| "Data Subject" | The individual to whom the personal data relates — in most cases, the registered player or Platform visitor. |
| "Third Party" | Any organisation or individual other than the Data Subject and KZ8, including payment processors, game software providers, analytics providers, and regulatory bodies. |
| "Cookies" | Small text files placed on a user's device by the Platform to store session information, preferences, and usage data. |
KZ8 collects personal data through several channels, including the registration process, ongoing account activity, customer support interactions, and automated technical means. The categories of data collected are described below.
When you register an account on KZ8, we collect:
To process deposits and withdrawals, KZ8 collects:
KZ8 does not store complete bank card details on its own servers. Payment data is processed through PCI-DSS compliant third-party payment processors.
As part of the Know Your Customer (KYC) process, KZ8 collects:
KZ8 records all gaming activity conducted on the Platform, including bets placed, games played, stake amounts, outcomes, bonus claims, wagering progress, and session durations. This data is used for account management, regulatory compliance, and responsible gambling monitoring.
KZ8 automatically collects the following technical information when you access the Platform:
When you contact KZ8 support or correspond with us via email or live chat, we retain records of those communications — including message content, timestamps, and resolution notes — for quality assurance and regulatory compliance purposes.
KZ8 processes personal data only for the purposes described below. We do not process personal data for any purpose incompatible with those stated at the time of collection.
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your KZ8 account, including authentication and security. |
| Identity Verification (KYC) | Confirming the identity and age of players to prevent underage gambling and comply with anti-money laundering (AML) obligations. |
| Payment Processing | Facilitating deposits and withdrawals through Malaysian payment channels including e-wallets, bank transfers, and cryptocurrency. |
| Regulatory Compliance | Meeting obligations under applicable financial crime, anti-money laundering, and responsible gambling regulations. |
| Responsible Gambling | Monitoring gaming patterns to identify at-risk behaviour and enforcing player-set limits, cool-off periods, or self-exclusions. |
| Platform Improvement | Analysing aggregated usage data to improve Platform functionality, speed, and user experience. |
| Fraud Prevention | Detecting and preventing fraud, bonus abuse, unauthorised account access, and other prohibited activities. |
| Customer Support | Responding to queries, complaints, and support requests in English via live chat and email. |
| Promotional Communications | Sending promotional offers and platform updates to players who have opted in to marketing communications. You may opt out at any time. |
KZ8 processes personal data on one or more of the following legal bases:
KZ8 does not sell, rent, or trade personal data to any third party. Personal data may be shared with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection agreements:
To process deposits and withdrawals, KZ8 shares limited financial and identity data with payment service providers including e-wallet operators (such as Touch 'n Go eWallet and Boost), bank FPX gateways (such as Maybank and CIMB), and cryptocurrency network providers. These providers are contractually bound to process data only for the purpose of completing the relevant transaction.
KZ8's casino and live dealer games are operated by third-party software providers. These providers may receive limited account data (such as an anonymised player identifier) to facilitate gameplay and maintain game integrity. They do not receive your full identity or payment details.
KZ8 may use specialist third-party identity verification services to assist with KYC document review and age verification. Any data shared with such providers is strictly limited to what is required for verification and is subject to a confidentiality agreement.
KZ8 may disclose personal data to regulators, law enforcement agencies, or other governmental authorities where required by applicable law, court order, or regulatory direction. In all cases, KZ8 will disclose only the minimum data required to satisfy the legal obligation.
In the event of a merger, acquisition, or sale of the KZ8 business or its assets, personal data held by KZ8 may be transferred to the relevant successor entity. Players will be notified of any such transfer and their rights under this Policy will be preserved.
KZ8 uses cookies and similar tracking technologies to operate the Platform, remember user preferences, maintain session security, and analyse aggregate usage patterns. The cookies we use fall into the following categories:
You may manage your cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to log in and use the Platform. Blocking other categories of cookies may limit certain non-essential features but will not prevent basic Platform access.
Note: KZ8 does not use third-party advertising networks or cross-site tracking cookies. Analytics data collected by KZ8 is used exclusively for internal Platform improvement and is not shared with advertising platforms.
KZ8 retains personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable legal and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of account plus 5 years following account closure, for regulatory compliance purposes. |
| Financial Transaction Records | Minimum 5 years from the date of transaction, in accordance with applicable AML requirements. |
| KYC Documents | Duration of account plus 5 years following account closure. |
| Gaming Activity Logs | 3 years from the date of each gaming session. |
| Support Communications | 2 years from the date of the relevant interaction. |
| Technical / Usage Data | 13 months from collection, after which data is anonymised or deleted. |
Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Where a legal hold or ongoing investigation requires extended retention, data will be preserved until the matter is resolved.
KZ8 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
Despite these measures, no internet transmission is entirely secure. In the event of a data breach that affects your personal data and poses a material risk, KZ8 will notify affected players in a timely manner and take appropriate remedial steps.
As a Data Subject, you hold the following rights in respect of your personal data held by KZ8. You may exercise any of these rights by contacting us via the details in Section 14.
Request a copy of the personal data KZ8 holds about you and information about how it is being used.
Request correction of any personal data that is inaccurate, incomplete, or out of date.
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Request that processing of your personal data be restricted in certain circumstances, for example while the accuracy of the data is disputed.
Request a structured, machine-readable copy of personal data you have provided to KZ8, where technically feasible.
Object to processing of your personal data for direct marketing purposes or where processing is based on KZ8's legitimate interests.
KZ8 will respond to all valid data rights requests within 30 days. In complex cases, this period may be extended by a further 60 days, in which case KZ8 will notify you of the extension and the reason for it. Requests that are manifestly unfounded or excessive may be refused or subject to a reasonable administrative fee.
Please Note: Exercising the right to erasure or account closure will not affect KZ8's obligation to retain transaction and identity records for the statutory minimum period required under applicable anti-money laundering regulations.
KZ8 is strictly an adults-only platform. The minimum age requirement for all registered players is 21 years. KZ8 does not knowingly collect personal data from individuals under the age of 21.
Age verification is conducted at registration and reinforced during the KYC process. If KZ8 discovers or reasonably suspects that personal data has been provided by a person under 21, the relevant account will be suspended immediately, all associated data will be reviewed, and the account will be closed. Any funds held in the account will be handled in accordance with applicable regulatory requirements.
If you are a parent or guardian and believe that a minor has registered on the KZ8 Platform or provided personal data to KZ8 without your knowledge, please contact us immediately at the details in Section 14.
The KZ8 Platform integrates with a number of third-party services to deliver core functionality, including game content, payment processing, and identity verification. While KZ8 takes reasonable steps to ensure that these providers maintain adequate data protection standards, KZ8 is not responsible for the privacy practices of third-party services operating under their own terms.
This Policy does not cover the privacy practices of third-party payment providers such as Touch 'n Go eWallet, Boost, GrabPay, or banking institutions such as Maybank, CIMB, Public Bank, or Hong Leong Bank. When you interact with these services directly — for example, when authorising a payment in the Touch 'n Go app — their own privacy policies apply.
KZ8 does not embed third-party advertising networks, social media tracking pixels, or cross-site data collection tools on the Platform. All third-party integrations serve a direct operational purpose.
KZ8 reserves the right to amend this Privacy Policy at any time. When material changes are made, the updated Policy will be published on the Platform with a revised "Last Updated" date. Where changes significantly affect how personal data is processed, KZ8 will provide reasonable advance notice to registered players via email or in-platform notification.
Your continued use of the KZ8 Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any amendment, you may close your account by contacting KZ8 support and request deletion of your personal data subject to statutory retention obligations.
If you have any questions, concerns, or requests relating to this Privacy Policy or KZ8's handling of your personal data, please contact us through the following channels:
For formal data rights requests, please submit your request in writing via email with the subject line "Data Rights Request" and include your full name and registered account email address for identity verification purposes. KZ8 will acknowledge your request within 48 hours and respond in full within 30 days.
Privacy protection at KZ8 is an operational standard, not a marketing claim. Here's what that looks like in practice.
Every byte of data transmitted between your device and KZ8 is encrypted with SSL/TLS. Your login credentials, payment details, and personal information travel securely.
KZ8 does not sell, rent, or broker your personal data to advertisers or marketing companies. Your information is used only to operate and improve the Platform.
KZ8 collects only the personal data that is strictly necessary for account operation, payment processing, KYC compliance, and responsible gambling monitoring.
KYC documents are stored with encryption, accessible only to authorised verification staff, and retained only for the regulatory minimum period before secure deletion.
Access, correct, restrict, or delete your personal data by contacting our 24/7 support team. Requests are acknowledged within 48 hours and resolved within 30 days.
Data is held for defined periods matched to regulatory requirements — not indefinitely. When the retention period ends, data is securely deleted or anonymised.
If you have questions about how KZ8 handles your personal data, or if you'd like to exercise any of your data rights, our 24/7 support team is ready to assist. You can also visit our FAQ page for quick answers to common privacy questions.