Privacy Policy

This Privacy Policy ("Policy") is issued by km789 ("the Platform", "we", "us", "our") and describes how we collect, use, store, disclose, and protect the personal data of individuals ("you", "the User", "the Member") who access and use our online gaming platform at https://km789.lat, including any associated mobile applications or services.

km789 is committed to protecting the privacy of all users in accordance with internationally recognised data protection principles, including those set out under the General Data Protection Regulation (GDPR) framework and applicable privacy legislation. While km789 primarily serves players in Malaysia, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam, this Policy applies to all users of the platform regardless of geographical location.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the platform more broadly. In the event of any conflict between this Policy and the Terms & Conditions regarding data handling, this Policy shall prevail.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, device identifiers, and behavioural data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, km789.
• "Data Processor" means any third party that processes Personal Data on behalf of km789 under a written data processing agreement.
• "KYC Data" means identity verification documents and information submitted by Members to satisfy Know Your Customer requirements, including national identity cards, passport copies, and proof of address documents.
• "Cookies" means small text files placed on your device by the km789 platform to facilitate functionality, performance measurement, and user experience personalisation.
• "Sensitive Data" means a subset of Personal Data that requires heightened protection, including financial account information, government-issued identification numbers, and transaction records.

km789 acts as the Data Controller in respect of Personal Data collected through the platform. As Data Controller, km789 is responsible for determining the lawful basis and purpose for each category of data processing described in this Policy.

For all privacy-related queries, data access requests, correction requests, or deletion requests, please contact our support team using the email address above. We aim to respond to all data-related correspondence within thirty (30) calendar days of receipt.

km789 collects Personal Data through multiple channels: directly from you during registration and account use, automatically through your use of the platform, and from third-party service providers involved in payment processing and identity verification. The categories of data we collect include:

km789 does not intentionally collect or process Sensitive Personal Data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided in the context of a responsible gambling self-exclusion or vulnerability disclosure.

km789 processes your Personal Data only where a lawful basis exists for doing so. The primary legal bases relied upon by km789 are as follows:

• Contractual Necessity: Processing required to perform the contract between km789 and the Member — including account creation, payment processing, and service delivery. Without this processing, km789 cannot provide its gaming and betting services.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and licensing conditions imposed by km789's international gaming authority.
• Legitimate Interests: Processing carried out in pursuit of km789's legitimate business interests, where such interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security monitoring, and analytical improvements to the service.
• Consent: Where processing is based on your freely given, specific, informed, and unambiguous consent — primarily in the context of optional marketing communications. Consent may be withdrawn at any time.

km789 uses the Personal Data collected from Members for the following specific purposes:

• Account Management: Creating, verifying, and maintaining your km789 account, including processing login authentication and account security measures such as two-factor authentication.
• Service Delivery: Facilitating deposits and withdrawals via Malaysian payment methods (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, and USDT TRC20), processing wagers, and delivering game results.
• Identity & Age Verification: Verifying that all registered Members are aged 21 or above and ensuring the authenticity of identity documents in compliance with our KYC obligations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, bonus abuse, account takeover attempts, and other prohibited conduct described in our Terms & Conditions.
• Responsible Gambling: Monitoring wagering patterns to identify potential problem gambling behaviours and administering self-exclusion, deposit limits, and cooling-off period requests.
• Customer Support: Handling account queries, technical issues, payment disputes, and general enquiries submitted through live chat or email.
• Legal Compliance: Meeting obligations under AML legislation, our international gaming licence conditions, and any lawful order from a competent legal authority.
• Marketing Communications (Consent Only): Sending promotional offers, bonus announcements, and platform updates to Members who have opted in to receive such communications. This includes information about promotions relevant to Malaysian players, such as Liga Super Malaysia betting offers and seasonal casino promotions.
• Platform Analytics & Improvement: Analysing aggregated and anonymised usage data to identify performance improvements, fix technical issues, and develop new product features.

km789 does not sell your Personal Data. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

km789 does not share your Personal Data with third-party advertisers, social media platforms, data analytics resellers, or any party for the purpose of external marketing targeting.

km789 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies used on km789 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the operation of the km789 platform. They enable core functions such as user authentication, session management, and security features. These cookies cannot be disabled without severely impairing platform functionality.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised data about how Members use the platform — including which pages are visited most frequently and whether any error messages are encountered. This data is used solely to improve platform performance.
• Functionality Cookies: These cookies remember your preferences and settings (such as language preferences and display options) to provide a more personalised experience on subsequent visits.
• Responsible Gambling Cookies: These cookies store your responsible gambling tool settings (such as session reminder preferences) to ensure these tools function correctly across all your sessions.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality or security of the km789 platform. km789 does not use third-party advertising cookies or cross-site behavioural tracking cookies.

km789 retains Personal Data for no longer than is necessary for the purpose for which it was collected, unless a longer retention period is required by applicable law or regulatory obligation. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents any identification of the individual from the remaining data.

km789 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: 256-bit SSL/TLS encryption for all data in transit. Sensitive data at rest is encrypted using industry-standard AES-256 encryption.
• Access Controls: Strict role-based access controls ensure that only authorised personnel with a demonstrated need can access Member personal data. All data access events are logged and subject to periodic audit.
• Two-Factor Authentication: km789 supports two-factor authentication (2FA) for Member accounts. We strongly encourage all Members to enable this feature.
• Penetration Testing: km789's platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: km789 maintains a documented data breach response procedure. In the event of a breach that poses a significant risk to Member rights and freedoms, affected Members will be notified promptly in accordance with applicable regulatory obligations.

Subject to applicable law and regulation, you have the following rights in respect of your Personal Data held by km789. To exercise any of these rights, please contact our support team at [email protected] with your account details and the specific right you wish to exercise.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, together with information about how that data is being used and the legal basis for its processing.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held about you. Where data is used for regulatory compliance, corrections may be subject to verification.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. Please note that km789 may be required to retain certain data under AML and licensing regulations, which takes precedence over erasure requests for relevant data categories.
• Right to Restrict Processing: You may request that km789 temporarily restrict the processing of your data while a request for rectification or objection is being considered.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that km789 provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your data where km789 relies on legitimate interests as its legal basis, and where you believe your interests override those of km789.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent for marketing communications can be actioned via the unsubscribe mechanism in any email or by contacting support.

km789 will respond to all valid data rights requests within thirty (30) calendar days. In complex cases, we may extend this period by a further thirty (30) days, with notice to you. We reserve the right to verify your identity before actioning any data rights request.

km789 operates under international licensing and uses technology infrastructure, payment processors, and identity verification partners that may be located in jurisdictions outside of Malaysia. As a result, your Personal Data may be transferred to and processed in countries other than your country of residence, including countries in Southeast Asia, Europe, and the Americas.

Where such transfers occur, km789 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards may include contractual data processing agreements, standard contractual clauses, or reliance on the adequacy of data protection frameworks in the destination jurisdiction.

By using the km789 platform, you acknowledge and consent to the transfer of your Personal Data to countries outside Malaysia for the purposes described in this Policy.

km789 does not knowingly collect Personal Data from individuals under the age of 21. The km789 platform is strictly restricted to adults aged 21 and above. Age verification is a mandatory step during account registration and KYC, and km789 will refuse registration and close any account discovered to belong to a person under 21 years of age.

If you are a parent or guardian and believe that a minor has registered on km789 or provided personal information to us, please contact our support team immediately at [email protected]. We will investigate and take appropriate action, including deletion of any data associated with the minor's account.

km789 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this document will be revised accordingly upon each amendment.

Where amendments are material — meaning they significantly affect how we use your Personal Data or your rights in relation to that data — km789 will provide notice to registered Members via email or an in-platform notification prior to the amended Policy taking effect. We encourage you to review this Policy periodically.

Continued use of the km789 platform following the publication of an amended Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the platform and contact support to arrange account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of the data rights described in Section 11, please contact the km789 data team using the details below:

For general account and platform support queries, our customer support team is available via live chat within your km789 account dashboard following login, or by emailing [email protected].

For responsible gambling support, please visit our Responsible Gambling page or contact Talian Kasih at 15999 (Malaysia) for confidential assistance.