king855 Privacy Policy

1 About This Policy & Data Controller

This Privacy Policy ("Policy") is published by king855 ("king855", "we", "us", "our"), the operator of the online gaming platform at king855.lat ("the Platform"). king855 acts as the data controller in respect of the personal data of users ("you", "your") of the Platform, meaning we determine the purposes and means of processing your personal data.

This Policy applies to all personal data collected by king855 through the Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and general platform usage. By using the king855 Platform, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy.

2 Personal Data We Collect

king855 collects the following categories of personal data about you:

• Identity Data: Full name, date of birth, national identity card number or passport number (for KYC verification purposes), gender.
• Contact Data: Email address, Malaysian mobile phone number, residential address (including city, state, postcode).
• Financial Data: Bank account details, e-wallet account identifiers (Touch n Go eWallet, Boost), FPX transaction references, deposit and withdrawal history, account balance records.
• Account Data: Username, encrypted password hash, account registration date, login history, session logs, preference settings.
• Gameplay Data: Betting history, game session logs, wagering patterns, game preferences, bonus claims and wagering records.
• Technical Data: IP address, device identifiers, browser type and version, operating system, screen resolution, referring URLs, and other standard web server log data.
• Responsible Gaming Data: Deposit limits, loss limits, self-exclusion requests, responsible gaming interactions, and any information provided when accessing problem gambling support.
• Communications Data: Records of your communications with king855 customer support, including live chat transcripts and email correspondence.

king855 does not collect any special categories of sensitive personal data (such as racial or ethnic origin, health data, or biometric data) except where explicitly required for regulatory age and identity verification purposes.

3 How We Collect Your Data

king855 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting customer support, or updating your account profile.
• Automated collection: Data collected automatically as you use the Platform, including via cookies, web beacons, session tracking technologies, and server access logs. See Section 6 for details on cookies.
• Third-party sources: Identity verification data from KYC service providers; transaction data from payment processors including Touch n Go, Boost, and FPX-connected banks; fraud detection signals from anti-fraud service providers.

4 How We Use Your Personal Data

king855 uses your personal data for the following purposes:

• To create and manage your king855 account and verify your identity and age (21+ verification);
• To process deposits and withdrawals in MYR via your selected payment method;
• To provide access to casino games, live dealer tables, slots, Sic Bo, and sportsbook services;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To comply with anti-money laundering (AML) obligations and international gaming authority regulatory requirements;
• To administer bonuses, promotions, and the king855 loyalty programme;
• To provide 24/7 customer support and respond to queries and complaints;
• To monitor compliance with our responsible gaming obligations, including enforcing self-exclusion;
• To send service communications, including account alerts, transaction confirmations, and security notifications;
• To improve Platform performance, user experience, and game offerings through aggregated analytics;
• To send marketing communications about king855 promotions and offers, where you have consented to receive such communications.

5 Legal Basis for Processing

king855 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide you with the king855 Platform services and fulfil our contractual obligations to you under the Terms & Conditions.
• Legal obligation: Processing required for compliance with applicable laws and regulations, including AML obligations, gaming authority licensing conditions, and age verification requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytical improvement of our services, where such interests are not overridden by your rights.
• Consent: Marketing communications and non-essential cookies, where we rely on your freely given, specific, and informed consent.

6 Cookies & Tracking Technologies

king855 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences such as language settings, last game played, and deposit method selection to improve your experience on king855.
• Analytics cookies: Aggregate, anonymised data about how users navigate and use the Platform, used to improve performance and identify technical issues. No personally identifiable information is transmitted through analytics cookies.
• Marketing cookies: Used with your consent to show relevant king855 promotional content. You may withdraw consent at any time via your browser cookie settings.

You can control and manage cookie settings through your browser. Disabling strictly necessary cookies will impair your ability to use the king855 Platform.

7 Sharing & Disclosure of Personal Data

king855 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

• Payment processors: Touch n Go, Boost, FPX-connected banks, and cryptocurrency processors, to facilitate deposits and withdrawals;
• KYC and identity verification providers: Third-party verification services used to confirm your identity, age, and residential address for regulatory compliance;
• Fraud prevention and AML services: Specialist providers who assist king855 in detecting suspicious transactions and complying with anti-money laundering obligations;
• Game software providers: Game providers may receive anonymised session data required to operate their certified RNG game engines and live dealer feeds;
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or gaming authority regulatory obligation;
• Professional advisers: Lawyers, auditors, and other advisers engaged by king855 under confidentiality obligations.

All third parties with whom king855 shares personal data are contractually required to process that data securely and only for the specified purpose.

8 International Data Transfers

king855 operates an international online gaming platform and some of our service providers and infrastructure may be located outside Malaysia. Where personal data is transferred internationally, king855 ensures that appropriate safeguards are in place, including contractual protections equivalent to the standard clauses recommended by applicable data protection frameworks. By using the Platform, you acknowledge that your data may be processed in jurisdictions outside Malaysia subject to these protections.

9 Data Retention

king855 retains your personal data for as long as your account remains active and for a period thereafter as required by our legal and regulatory obligations. Specifically:

• Account data and transaction records are retained for a minimum of 5 years following account closure, in compliance with AML and gaming authority record-keeping requirements;
• Customer support communications are retained for 3 years following resolution of the relevant matter;
• Marketing consent records are retained until consent is withdrawn plus a further 1 year to evidence compliance;
• Technical log data is retained for 12 months for security and fraud investigation purposes.

When retention periods expire, personal data is securely deleted or anonymised in accordance with king855's data disposal procedures.

10 Security of Your Personal Data

king855 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage of sensitive account credentials, access controls limiting personal data access to authorised personnel with a need to know, regular security assessments and penetration testing of the Platform, and incident response procedures for detecting and responding to data security events. Notwithstanding these measures, no system is completely immune to security threats. In the event of a personal data breach that poses a risk to your rights, king855 will notify you and relevant regulatory authorities as required by applicable law.

11 Your Rights as a Data Subject

Subject to applicable law, you have the following rights in relation to your personal data held by king855:

• Right of access: Request a copy of the personal data king855 holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations;
• Right to restriction: Request that king855 restricts processing of your data in certain circumstances;
• Right to data portability: Receive your personal data in a structured, machine-readable format for transfer to another controller;
• Right to object: Object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of the above rights, contact king855 via the in-platform live chat or at the email address provided in Section 14. We will respond within 30 days. Some requests may be subject to identity verification before we can act on them.

12 Children's Privacy & Age Restriction

The king855 Platform is strictly for individuals aged 21 years and above. king855 does not knowingly collect personal data from persons under 21. If we become aware that a user is under the age of 21, that account will be immediately closed, all personal data will be deleted, and any winnings will be forfeited. If you believe a person under 21 has registered a king855 account, please notify us immediately via customer support so we can take appropriate action.

13 Changes to This Privacy Policy

king855 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The updated Policy will be published on this page with a revised "Last Updated" date. For material changes, king855 will notify registered users via the Platform notification system or by email to your registered address. Continued use of the Platform following the effective date of an updated Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically.

14 Contact & Complaints

For any questions, requests, or concerns regarding this Privacy Policy or king855's data processing practices, please contact our data protection team:

Email: [email protected] (plain text — not a clickable link)

Live Chat: Available 24/7 via the in-platform support widget on king855.lat

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the applicable data protection supervisory authority in your jurisdiction. king855 takes all privacy complaints seriously and will acknowledge formal complaints within 5 business days.