Official Documents Updated: January 2026

KRM8 Privacy Policy – Data Protection & Personal Information

At KRM8, your privacy is more than a legal obligation — it is a responsibility we take seriously. This document clearly explains how we collect, use, store, and protect your personal information every time you use our platform.

256-bit
SSL Encryption
24/7
Security Monitoring
0
Sale of Data to Third Parties
100%
Data Stored Securely

Krm8's Privacy Commitment

High-Level Encryption

All data transmitted between your device and krm8 servers is protected by 256-bit SSL encryption. No third party can read or intercept your information in transit.

No Data Sales

Krm8 does not sell, rent, or trade your personal information to any third party for marketing purposes. Your data is used solely for the purposes stated in this policy.

Full Control in Your Hands

You have the right to access, update, or request deletion of your personal data. KRM8 provides easy channels for users to manage their own privacy preferences.

Legal Compliance

Krm8 complies with applicable data protection requirements, including Malaysia's Personal Data Protection Act (PDPA). We take every legal obligation relating to user data seriously.

Secure Data Storage

User data is stored on servers protected by strict access controls, firewalls, and continuous security monitoring 24 hours a day, 7 days a week.

Full Transparency

We believe you have the right to know exactly what we do with your information. This Privacy Policy is written in plain, easy-to-understand language, free of confusing legal jargon.

For Users Aged 18 and Above

The krm8 platform is only accessible to individuals aged 18 and above. By using this platform, you confirm that you meet this age requirement and agree to this Privacy Policy.

Welcome to the krm8 Privacy Policy page. We understand that in today's digital world, trust is the most valuable asset. When you register and play at krm8, you entrust us with your personal information — and we do not take that responsibility lightly.

This Privacy Policy applies to all users of the KRM8 platform, including those accessing via the website at krm8.org or via our mobile app. This policy explains the types of information we collect, why we need it, who can access it, and how we keep it safe.

1 Information We Collect

Krm8 collects several categories of information depending on how you interact with our platform. This information falls into two main types: information you provide directly, and information collected automatically.

Data Categories Example Information Requirements
Identity Information Full name, date of birth, identification card number Mandatory (KYC)
Contact Information Email address, phone number Mandatory
Financial Information Bank account number, deposit and withdrawal transaction records Mandatory
Technical Information IP address, browser type, device, operating system Automatic
Usage Data Game records, session duration, pages visited Automatic
Verification Documents Copy of ID card, utility bills, bank statements When required
Important Note

We do not collect information that is unnecessary for the operation of the platform. Every piece of data we collect has a clear purpose, as stated in this policy.

2 How We Collect Data

Krm8 collects information through the following channels:

  • Account Registration: When you register, you provide basic information such as your name, email, and phone number.
  • KYC Process: To fulfill identity verification requirements, you may be asked to upload supporting documents.
  • Financial Transactions: Every deposit and withdrawal automatically records the relevant payment information.
  • Platform Usage: Your activity on the platform — such as games played, bets placed, and session duration — is logged automatically.
  • Cookies & Tracking Technologies: We use cookies and similar technologies to enhance user experience and analyse traffic.
  • Support Communications: When you contact our support team, conversations may be recorded for training and service improvement purposes.

We may also receive information about you from registered third parties such as payment providers, identity verification partners, and legitimate public information sources — solely to meet legal compliance requirements.

3 Purpose of Data Use

Krm8 uses collected information only for legitimate and stated purposes. The following are the primary purposes for which we use your data:

  • Account Management: Create and manage your user account, including the login process and security verification.
  • Transaction Processing: Process deposits, withdrawals, and other financial transactions securely and efficiently.
  • Legal Compliance: Fulfil legal obligations including KYC requirements, anti-money laundering (AML) compliance, and reporting to relevant authorities when required.
  • Platform Security: Identify and prevent fraud, unauthorised access, and suspicious activity.
  • Customer Support: Provide technical assistance and resolve your enquiries or complaints.
  • Service Improvement: Analyse usage patterns to improve platform functionality, design, and experience.
  • Marketing Communications: Send promotional information and exclusive offers — only if you have consented to receive them.
  • Responsible Gaming: Monitor gameplay patterns to identify early signs of problem gambling and offer appropriate assistance.
Marketing Communication Preferences

You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any of our promotional emails, or by contacting our support team directly.

4 Information Sharing & Disclosure

Krm8 does not sell, rent, or trade your personal data to third parties for commercial gain. However, there are certain situations where we may need to share your information:

  • Trusted Service Providers: We share necessary data with payment providers, licensed gaming platforms, cloud service providers, and other technology vendors that help us operate the platform. They are bound by strict confidentiality agreements.
  • Legal Requirements: We may disclose your information to competent authorities when required to do so by law, court order, or other lawful process.
  • Fraud Prevention: In certain cases, we may share information with financial institutions or law enforcement agencies to investigate or prevent fraud and illegal activity.
  • Business Transfer: In the event of a merger, acquisition, or asset sale, user information may be transferred as part of that transaction, with appropriate notice provided to users.
Our Commitment

In all data-sharing cases, KRM8 ensures that only the minimum necessary information is shared, and all data recipients are bound by equivalent data protection obligations.

5 Data Security

Protecting your data is krm8's highest priority. We implement multiple layers of technical and organisational security to ensure your information remains safe:

  • 256-bit SSL Encryption: All communications between your device and our servers are encrypted using the latest TLS protocols.
  • Stored Data Encryption: Sensitive data stored in our database is encrypted using industry-recognized encryption algorithms.
  • Two-Factor Authentication (2FA): We support and encourage the use of 2FA as an additional layer of security on user accounts.
  • Continuous Monitoring: Our systems are monitored 24/7 to detect any unusual activity or intrusion attempts.
  • Strict Access Controls: Only authorized personnel may access user data, and all access is logged for audit purposes.
  • Regular Security Testing: We conduct regular penetration testing and security audits to identify and address potential vulnerabilities.

While we take all reasonable precautions, no system can be guaranteed entirely free from risk. We encourage you to also take security measures on your end, such as using a strong and unique password and not sharing your login credentials.

6 Cookies & Tracking Technologies

Krm8 uses cookies and similar tracking technologies to enhance user experience and understand how our platform is used. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, sessions, and security. These cookies cannot be disabled.
  • Performance Cookies: Collect information on how you use the platform to help us improve functionality and site speed.
  • Functional Cookies: Store your preferences such as language, display settings, and login information for a more convenient repeat experience.
  • Analytics Cookies: Help us understand traffic patterns and platform usage on an aggregated, anonymised basis.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some parts of the platform. For more information on managing cookies, refer to your browser's help documentation.

7 User Rights

As a krm8 user, you have certain rights regarding your personal data. krm8 respects and facilitates the exercise of these rights:

Right to Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete data in our records.

Right to Erasure

You can request deletion of your data, subject to legal obligations that require its retention.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes or other non-essential purposes.

Right to Data Portability

You can request your data in a machine-readable format for transfer to another platform.

Right to Restriction of Processing

You can request that we restrict how we process your data under certain circumstances during an investigation.

How to Exercise Your Rights

To exercise any of the above rights, contact our privacy team via our support email. We will process your request within 30 business days. For complex requests, this period may be extended with notice to you.

8 Data Retention Period

Krm8 retains your personal data for as long as your account is active or as long as necessary to provide services to you. We also retain data for a specified period after account closure to fulfil applicable legal and regulatory obligations.

Data Type Retention Period
Account and user profile information Throughout the active account period + 5 years after closure
Financial transaction records 7 years (legal requirement)
KYC Documents 5 years after account closure
Game activity logs 3 years
Support communication logs 2 years
Cookie data Up to 12 months (depending on cookie type)

Upon expiry of the retention period, data will be securely deleted or anonymised in accordance with industry-standard procedures. Anonymised data may be retained for a longer period for analytics and service improvement purposes.

9 Child Protection

Krm8 is an online gambling platform restricted to individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

If we discover that a minor has provided us with personal data, we will immediately take the following steps:

  • Close the relevant account immediately.
  • Delete all associated personal data from our systems.
  • Processing any financial transactions associated with that account will not be carried out.
Child-Related Complaints

If you believe that a minor has registered or is using the krm8 platform, please contact our support team immediately. We will take appropriate action without delay.

10 Changes to the Privacy Policy

Krm8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to the services we offer.

When we make material changes to this policy, we will:

  • Update the "Last Updated" date at the top of this page.
  • Display in-platform notifications to inform users of important changes.
  • Send notification emails to registered users for significant changes, at least 14 days before the changes take effect.

Your continued use of the krm8 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account and stop using the platform.

Current Version

This Privacy Policy is the latest version and supersedes all previous versions. Effective date: January 2026.

11 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our privacy team is here to help.

You can reach us through the following channels:

  • Support Email: [email protected]
  • Live Support: Via the Live Chat function available on our platform 24/7.
  • Help Centre: Browse the page our FAQ for answers to frequently asked questions.

We are committed to responding to all privacy-related enquiries within 3 business days. For official data rights requests, processing may take up to 30 business days.

FAQ – Privacy Policy

No. krm8 does not sell, rent, or trade users' personal data to any third party for commercial purposes. We only share the necessary information with service providers who assist us in operating the platform, and they are bound by strict confidentiality agreements.

You can submit a data access request by emailing our privacy team at [email protected] with the subject line "Data Access Request". Please include your full name and account number. We will process your request within 30 business days and provide a copy of your data in a readable format.

When you close your account, we will retain your data for the period required by applicable laws and regulations — typically between 5 and 7 years depending on the data type. This is a mandatory requirement to comply with financial laws and fraud prevention obligations. Once the retention period ends, data will be securely deleted.

Yes. krm8 uses 256-bit SSL encryption to protect all financial information transmitted through our platform. Payment transactions are processed by registered and trusted payment providers. krm8 does not store credit or debit card numbers directly in our systems.

You have the right to request deletion of your personal data. However, some data may not be immediately erasable due to legal obligations — such as financial transaction records that must be retained for a specified period. We will clearly inform you which data can be deleted immediately and which must be temporarily retained in accordance with legal requirements.

krm8 implements multiple layers of security including two-factor authentication (2FA), suspicious login activity monitoring, automatic notifications for new access attempts, and automatic session timeouts. We also employ fraud detection technology to identify unusual usage patterns and take preventive action promptly.

Play Safe & With Confidence at KRM8

Your privacy and security are our top priority. Register today and enjoy a transparent, safe, and responsible online gaming experience with krm8.

Bahasa Melayu