Privacy Policy KRG88 – Your Information Is in Safe Hands

KRG88 collects your personal data only when genuinely necessary to provide a safe, efficient, and compliant service. We do not collect excessive or irrelevant information. The following are the categories of data we collect:

In addition to information you provide directly, krg88 also collects data automatically through cookie technology and server logs when you use our platform. This data is used solely to enhance security and the user experience.

Every piece of data we collect has a specific and legitimate purpose. krg88 does not use your data for purposes unrelated to the provision of platform services without first obtaining your explicit consent.

• Account management: Identity and contact data are used to create, verify, and securely manage your account. This includes login verification, password resets, and sending important account-related notifications.
• Transaction processing: Financial data is used to process deposits and withdrawals quickly and accurately. KRG88 ensures every transaction is fully recorded for the protection of both parties.
• Regulatory compliance: Some data is collected solely to fulfil legal obligations, including KYC requirements, anti-money laundering (AML) reporting, and international gambling licensing conditions.
• Fraud prevention: Technical data such as IP addresses and device information is used to detect and block suspicious activity, including unauthorised login attempts and payment fraud.
• Service improvement: Non-personally identifiable usage data is analysed to understand platform usage patterns and make meaningful improvements to the member experience.
• Marketing communications: If you have agreed to receive marketing communications, we will send you information about the latest promotions and offers. You may withdraw this consent at any time.
• Responsible gaming: KRG88 uses game record data to identify patterns that may indicate problem gambling and to reach out to affected members with appropriate support resources when needed.

KRG88 takes a highly cautious approach to data sharing. We only share your data with third parties in limited circumstances and with strict controls in place. Below is a full list of parties who may receive your data and the reasons why:

• Licensed payment providers: Required financial data is shared with payment processors and banking institutions to complete your deposit and withdrawal transactions. All such providers are bound by strict data protection agreements with KRG88.
• Game software providers: Data required for gaming operations is shared with licensed game platform providers. This sharing is limited to information necessary to ensure games function correctly and fairly.
• Regulatory authorities: KRG88 will disclose data when required by law or by direction of a competent authority, including gambling licensing bodies, law enforcement agencies, and courts.
• Technical service providers: Hosting, cybersecurity, and analytics providers we use may process some of your data as part of their services. They act solely as data processors and may not use your data for their own purposes.

Protecting your data from unauthorized access, loss, or misuse is KRG88's top priority. We continuously invest in the latest security infrastructure to ensure our data protection standards remain at the highest level.

• Encryption in transit: All data transmitted between your browser or app and the krg88 servers is encrypted using TLS 1.3 protocol with AES-256 encryption. This means that even if your data is intercepted, it cannot be read.
• Encryption at rest: Sensitive data stored in our databases, including financial information and identity verification documents, is encrypted at rest using the latest industry standards.
• Internal access controls: Access to members' personal data within KRG88's internal systems is restricted on a least-privilege basis — only staff who genuinely require access to perform their duties are permitted.
• Continuous monitoring: Our systems are monitored 24/7 to detect any unusual activity or intrusion attempts. Any anomaly is responded to immediately by our cybersecurity team.
• Regular security audits: KRG88 conducts regular penetration testing and independent security audits to ensure there are no vulnerabilities in our data protection systems.
• Incident response: In the event of any data breach affecting your information, krg88 is committed to notifying you within 72 hours and taking immediate action to contain the damage.

KRG88 uses cookies and similar tracking technologies to ensure our platform functions properly and to provide you with a better experience. We believe in full transparency about how these cookies are used.

Essential cookies cannot be disabled as they are required for the platform to function. For all other cookie types, you can manage your preferences through your web browser settings. Please note that disabling certain cookies may affect specific features on the KRG88 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and KRG88's policy, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights.

To exercise any of the above rights, please contact the krg88 customer support team via the in-platform live chat. We will verify your identity before processing any request related to your personal data to ensure the security of your information.

KRG88 does not retain your personal data longer than necessary. Retention periods are determined based on the purpose of collection and applicable legal obligations.

• Active account data: While your account is active, we retain all data necessary for account operations. After account closure, essential data is kept for 5 years for legal compliance purposes.
• Financial transaction records: All transaction records are retained for a minimum of 7 years in accordance with accounting and anti-money laundering legal requirements in force in Malaysia.
• KYC Documents: Identity verification documents are retained for 5 years after the business relationship ends, as required by gambling licensing regulations.
• Security logs: Access logs and security activity are retained for 12 months to enable investigation in the event of a security incident.
• Marketing data: If you withdraw your marketing consent, the relevant data will be deleted within 30 days of the date your request is received.

Once the retention period expires, data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

KRG88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We are committed to notifying you of any material changes.

Any amendments will be posted on this page with a clear update date at the top of the document. For significant changes, we will send notification via email or an in-platform notice at least 14 days before the changes take effect. Continued use of the KRG88 platform after the effective date of any changes constitutes your acceptance of the amended Privacy Policy.