Koko88 Privacy Policy

Introduction

Koko88 ("we", "us", "our") operates the online casino and sports betting platform accessible at koko88.asia

This Privacy Policy ("Policy") sets out in detail the personal data we collect from players and visitors, the purposes for which that data is processed, the legal bases upon which we rely to process it, the circumstances under which it may be shared, and the rights available to you as a data subject.

This Policy applies to all registered players on the Koko88 Platform, all visitors who access the Platform without registering, and all individuals who contact Koko88 through any channel, including live chat, email, and social media.

This Policy is incorporated by reference into our Terms and Conditions. By using the Koko88 Platform, you confirm that you have read and understood this Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and, if applicable, close your account.

Definitions

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, phone number, IP address, and payment details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" means Koko88, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of Koko88, pursuant to a data processing agreement.
• "Player" / "User" means any natural person who has registered an account on the Platform or who accesses it as a visitor.
• "KYC" means the Know Your Customer identity and age verification process mandated by applicable regulatory requirements.
• "Cookies" means small text files placed on your device by the Platform to facilitate functionality, analytics, and personalisation.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by which a data subject signifies acceptance of the processing of their Personal Data.

Data We Collect

Koko88 collects Personal Data from Players and visitors across number of categories, depending on how you interact with the Platform. The following table summarises the categories of data we collect and representative examples of each:

We collect only the data that is necessary and proportionate to the purposes described in this Policy. We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless explicitly required for responsible gambling monitoring purposes.

How Data Is Collected

Koko88 collects Personal Data through the following channels and mechanisms:

4.1 Direct Collection

Data provided directly by you during the account registration process, KYC submission, deposit and withdrawal transactions, support interactions, promotional participation, and responses to surveys or feedback requests.

4.2 Automated Collection

Technical and behavioural data collected automatically when you access the Platform, including through cookies, web beacons, pixel tags, and server log files. This includes your IP address, device identifiers, browsing behaviour within the Platform, and session data.

4.3 Third-Party Sources

Identity verification data may be received from authorised third-party KYC service providers. Fraud screening data may be received from payment processors and anti-fraud service partners. We only receive data from third-party sources where we have a lawful basis for doing so and where appropriate data-sharing agreements are in place.

Data Processing

Koko88 processes your Personal Data for the following specific purposes:

• Account Management: Creating, maintaining, and administering your player account, including the processing of registration data, login authentication, and account preference settings.
• Identity Verification (KYC): Verifying your identity and age in compliance with applicable regulatory requirements. We use KYC data to confirm you are 21 years of age or older and to prevent the use of false identities on the Platform.
• Transaction Processing: Processing deposits and withdrawals via your selected payment methods, maintaining accurate transaction records, and managing payment disputes.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, money laundering, and other prohibited activities. This includes real-time monitoring of account activity and transaction patterns.
• Responsible Gambling Monitoring: Monitoring player behavioural data to identify signs of problematic gambling and, where appropriate, reaching out to offer responsible gambling tools or support information.
• Customer Support: Responding to player enquiries, complaints, and support requests. Support communications may be recorded for quality assurance and training purposes.
• Regulatory Compliance: Meeting applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, tax reporting obligations, and data retention mandates.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the Platform's features, performance, and user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform news to players who have consented to receive marketing communications. You may opt out at any time.
• Dispute Resolution: Maintaining records of bets, transactions, and account activity necessary to resolve player disputes fairly and in a timely manner.

Legal Basis for Processing

Koko88 processes your Personal Data only where a valid legal basis exists. The legal bases upon which we rely are as follows:

• Contractual Necessity: Processing required to perform the contract between Koko88 and the Player — including account creation, transaction processing, and support services.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC obligations, AML obligations, and financial record-keeping mandates.
• Legitimate Interests: Processing carried out in pursuit of Koko88's legitimate business interests — including fraud prevention, platform security, and product improvement — where those interests are not overridden by the Player's privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — including marketing communications and certain cookie usage. You have the right to withdraw consent at any time.

Data Sharing & Disclosure

Koko88 does not sell, rent, or trade your Personal Data to any third party for commercial or marketing purposes. We may, however, share your Personal Data with the following categories of recipients in specific, limited circumstances:

• Payment Service Providers: Financial institutions and electronic payment processors — including providers of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank services — for the purpose of processing deposit and withdrawal transactions.
• KYC and Identity Verification Providers: Authorised third-party identity verification service providers engaged to assist with the KYC process, operating under data processing agreements that restrict their use of your data to verification purposes only.
• Fraud Prevention and AML Service Providers: Third-party fraud detection and anti-money laundering screening services used to identify and prevent financial crime on the Platform.
• Technology and Infrastructure Providers: Cloud hosting providers, database administrators, and cybersecurity service providers who process data on Koko88's behalf under binding data processing agreements.
• Regulatory and Law Enforcement Authorities: Government agencies, regulators, and law enforcement bodies where disclosure is required by applicable law, court order, or regulatory directive. Koko88 will disclose only the minimum data necessary to satisfy any such requirement.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by Koko88, where disclosure of Personal Data is necessary for the provision of those services and appropriate confidentiality obligations are in place.

Cookies & Tracking Technologies

Koko88 uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage objects — to operate the Platform effectively, enhance your user experience, and gather analytical insights about Platform usage.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential to the operation of the Platform. These cookies enable core functionality such as user authentication, session management, and security features. They cannot be disabled without impairing your ability to use the Platform.
• Performance and Analytics Cookies: Used to collect anonymised information about how visitors use the Platform, including pages visited and error messages encountered. This data helps us identify areas for improvement.
• Functional Cookies: Enable the Platform to remember your preferences — such as language settings, display preferences, and previously viewed games — to provide a more personalised experience.
• Marketing and Targeting Cookies: Used to deliver promotional content and offers relevant to your interests, based on your browsing behaviour and Platform usage history. These cookies are only set with your consent.

8.2 Managing Cookies

You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is set. Please note that disabling certain cookies may affect the functionality of the Platform and your user experience.

Data Retention

Koko88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations.

• Active Account Data: Retained for the duration of your active account relationship with Koko88, plus a further period as required by applicable regulations following account closure.
• KYC and Identity Documents: Retained for a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of seven years to comply with applicable financial regulatory requirements.
• Support Communications: Retained for up to two years following the resolution of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of the marketing relationship and for a reasonable period thereafter, as evidence of consent.

Upon expiry of applicable retention periods, Personal Data will be securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to ongoing legal proceedings or regulatory investigations, it will be isolated from active processing systems until deletion becomes permissible.

Data Security

Koko88 implements comprehensive technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• Encryption: All data in transit is protected using TLS 1.3 / 256-bit SSL encryption. Sensitive data at rest — including KYC documents, payment credentials, and authentication tokens — is encrypted using AES-256 standards.
• Access Controls: Role-based access controls restrict internal access to Personal Data to authorised personnel only. Multi-factor authentication is enforced for all staff with access to production systems.
• Intrusion Detection: Automated intrusion detection and real-time monitoring systems alert our security team to suspicious access patterns and potential threats.
• Vulnerability Management: Regular security assessments, penetration testing, and software patching are conducted to identify and remediate vulnerabilities in our infrastructure.
• Incident Response: Koko88 maintains a documented data breach response procedure. In the event of a data breach affecting Player data, we will notify affected players and relevant authorities within applicable statutory timeframes.

Your Rights

As a data subject, you hold the following rights in relation to the Personal Data that Koko88 holds about you. We are committed to facilitating the exercise of these rights without undue delay and within applicable statutory timeframes.

To exercise any of the above rights, please contact Koko88's support team with your request. Requests will be acknowledged within 5 business days and processed within 30 calendar days. Where a request is complex or involves a large volume of data, the processing period may be extended by a further 30 days with written notice to you.

Please note that certain rights are subject to limitations where applicable law requires Koko88 to retain data — for example, KYC and financial transaction records subject to mandatory retention periods under anti-money laundering legislation.

Minors & Age Restriction

The Koko88 Platform is strictly intended for adults aged21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that an account has been registered by or on behalf of an individual under the age of 21, we will immediately suspend that account, void any associated bets and transactions, and delete all associated Personal Data — except where retention is required by applicable law.

All registered players are required to complete KYC verification, which includes mandatory age verification. This process is designed to prevent underage individuals from accessing gambling services on the Platform.

International Data Transfers

In the course of delivering the Platform's services, Personal Data may be transferred to and processed in jurisdictions outside Malaysia. This may occur in connection with our use of cloud hosting providers, KYC service partners, or payment processing infrastructure located outside Malaysia.

Where Personal Data is transferred internationally, Koko88 ensures that appropriate safeguards are in place to maintain the security and integrity of that data, including contractual data transfer agreements, standard contractual clauses, or transfers to jurisdictions recognised as providing adequate levels of data protection.

Third-Party Services

The Koko88 Platform may contain integrations with or references to third-party services — including payment processors, game content providers, and analytics platforms. This Privacy Policy applies exclusively to data processed by Koko88. Koko88 is not responsible for the privacy practices of any third party, and we encourage you to read the privacy policies of any third-party services you engage with.

Third-party game content providers integrated into the Platform may collect limited technical data — such as session identifiers and game event data — for the purpose of game delivery and fairness auditing. Such data is collected by the game provider under their own data governance framework and is subject to their privacy policy.

Policy Amendments

Koko88 reserves the right to amend, update, or revise this Privacy Policy at any time. Material changes to this Policy will be communicated to registered players via email notification and/or prominent notice on the Platform no fewer than 7 days before the changes take effect, except where immediate amendment is required by applicable law.

The current version of this Policy will always be accessible at koko88.asia/privacy-policy and will display the date on which it was most recently updated. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.

If you do not accept any amended version of this Policy, you must cease use of the Platform and, if applicable, contact our support team to arrange closure of your account and processing of any eligible outstanding balance.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by Koko88, please contact us through the following channels. All privacy-related enquiries are handled by our dedicated data protection team.

• Support Email: [email protected] — Please use the subject line:"Privacy Request — [Your Name / Account ID]" for all privacy-related correspondence.
• Live Chat: Available 24 hours a day, 7 days a week, directly on the Koko88 Platform. Our support team can log privacy requests and escalate them to our data protection team for handling.
• Response Time: Privacy requests will be acknowledged within 5 business days. Full responses will be provided within 30 calendar days in accordance with applicable data protection requirements.
• Support Languages: English, Bahasa Melayu, and Mandarin Chinese — reflecting our commitment to serving all Malaysian players in the language they are most comfortable with.