Privacy Policy

1. Who We Are

king368 is an online casino and sports betting platform operating at king368.one, licensed under international gaming authority regulations. References to "king368", "we", "us", or "our" in this Policy refer to the operator of the Platform.

king368 is the data controller in respect of the personal information collected through the Platform. If you have questions about how king368 handles your personal data, you may contact our Data Protection contact at [email protected].

2. Personal Data We Collect

king368 collects the following categories of personal data from Players and Platform visitors:

king368 does not collect special category data (such as health data, racial or ethnic origin, or political opinions) except where voluntarily provided by a Player in the context of a responsible gaming self-assessment, in which case such data is used solely to assist the Player with appropriate responsible gaming tools.

3. How We Collect Personal Data

3.1 Directly from You

The majority of personal data king368 holds is provided directly by Players through the registration process, KYC submission, deposit and withdrawal requests, live chat and email interactions, and the completion of responsible gaming assessments or preference settings within the account.

3.2 Automatically

Technical and usage data is collected automatically when you access the Platform, through server logs, session cookies, and similar tracking technologies. This data is used for security monitoring, fraud detection, and platform performance optimisation. See Section 7 for details on cookies.

3.3 From Third Parties

king368 may receive identity verification data from third-party KYC service providers, fraud screening data from payment processors, and geolocation data from IP intelligence services used to enforce jurisdiction restrictions. king368 does not purchase marketing lists or receive personal data from social media platforms.

4. How We Use Your Personal Data

king368 uses personal data collected from Players for the following purposes:

• Account Management — creating, maintaining, and securing your king368 account;
• Service Delivery — processing bets, deposits, withdrawals, and bonus applications;
• KYC & Regulatory Compliance — verifying identity and age in accordance with international gaming authority requirements and applicable anti-money laundering (AML) regulations;
• Fraud & Security — detecting, investigating, and preventing fraudulent activity, unauthorised account access, and money laundering;
• Customer Support — responding to queries, resolving disputes, and processing complaints;
• Responsible Gaming — monitoring betting patterns to identify potential problem gambling indicators and providing appropriate intervention tools;
• Platform Improvement — analysing aggregated usage data to improve the Platform's performance, interface, and content;
• Marketing Communications — sending promotional offers and updates to Players who have opted in to marketing communications. Players may withdraw this consent at any time via account settings or by contacting support.

king368 does not use personal data for automated decision-making that produces significant legal effects on Players, except where required for fraud screening and AML compliance in which case Players retain the right to request human review of any automated determination.

5. Legal Basis for Processing

king368 processes personal data on the following legal bases:

• Contract Performance — processing necessary to provide the gaming services you have registered for, including account management, deposits, withdrawals, and bet settlement;
• Legal Obligation — processing required to comply with gaming licence conditions, AML regulations, KYC requirements, and any other applicable legal obligations;
• Legitimate Interests — processing for fraud prevention, platform security, and internal analytics where these interests are not overridden by your privacy rights;
• Consent — processing for direct marketing communications, where you have explicitly opted in. This consent may be withdrawn at any time without affecting prior lawful processing.

6. Disclosure of Personal Data to Third Parties

king368 does not sell personal data to third parties. king368 may disclose personal data to the following categories of recipients in order to operate the Platform and comply with legal obligations:

• Payment Processors — Touch n Go eWallet, Boost, FPX banking partners (Maybank, CIMB, Public Bank), Visa, Mastercard, and USDT settlement providers, to the extent necessary to process transactions;
• KYC & Identity Verification Providers — third-party services that assist king368 in verifying the identity and age of Players as required by the gaming licence;
• Fraud & AML Screening Services — services that assist in detecting suspicious transaction patterns and preventing money laundering;
• Game Software Providers — certified casino game providers (e.g., PG Soft, Pragmatic Play, Evolution Gaming) receive limited technical data necessary to deliver their games within the Platform environment;
• Regulatory Authorities — the international gaming authority and any other competent regulatory or law enforcement body where king368 is required by law or licence condition to make such disclosure;
• Professional Advisers — lawyers, auditors, and compliance consultants operating under confidentiality obligations.

All third-party processors engaged by king368 are required to maintain appropriate data security standards and to process personal data only for the purposes for which they have been engaged.

7. Cookies & Tracking Technologies

king368 uses cookies and similar technologies to operate the Platform, maintain session state, prevent fraud, and analyse usage patterns. The following categories of cookies are in use:

• Strictly Necessary Cookies — required for the Platform to function, including session management, authentication state, and security tokens. These cannot be disabled without preventing access to the Platform;
• Functional Cookies — store your preferences such as language, stake defaults, and game lobby filters to personalise your experience;
• Analytics Cookies — collect aggregated, anonymised data about how Players navigate the Platform, used to improve the user experience. No personally identifiable information is included in analytics reports;
• Security Cookies — used to detect and mitigate fraud, bot activity, and credential stuffing attacks.

Players may manage non-essential cookie preferences through their browser settings. Disabling analytics cookies will not affect Platform functionality but may result in a less personalised experience. king368 does not use third-party advertising or targeting cookies.

8. Data Retention

king368 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and to comply with legal and regulatory obligations. In practice, this means:

• Account and transaction records are retained for a minimum of 5 years following account closure or the last transaction, as required by gaming licence and AML regulations;
• KYC documentation is retained for the period required by the relevant gaming authority, typically 5 years from the date of verification;
• Support communications are retained for 3 years from the date of the interaction;
• Technical log data (IP addresses, session logs) is retained for 12 months for security monitoring purposes;
• Marketing consent records are retained for 3 years from the date consent was last renewed or withdrawn.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

9. Your Privacy Rights

Subject to applicable law and regulatory limitations, Players have the following rights in respect of their personal data held by king368:

• Right of Access — you may request a copy of the personal data king368 holds about you;
• Right to Rectification — you may request correction of inaccurate or incomplete personal data;
• Right to Erasure — you may request deletion of your personal data in certain circumstances, subject to our overriding legal obligations to retain certain records;
• Right to Restrict Processing — you may request that king368 limits its processing of your data in specific circumstances;
• Right to Data Portability — you may request your personal data in a structured, machine-readable format for transfer to another controller where technically feasible;
• Right to Object — you may object to processing carried out on the basis of legitimate interests. king368 will consider and respond to such objections within 30 days;
• Right to Withdraw Consent — where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, submit a written request to [email protected]. king368 will respond to verified requests within 30 days. We may require identity verification before processing rights requests to prevent unauthorised disclosure.

10. Data Security

king368 implements technical and organisational measures appropriate to the sensitivity of the personal data it processes. Security measures in place include:

• SSL/TLS encryption for all data transmitted between the Player's device and king368 servers;
• Encrypted storage for all passwords — plaintext passwords are never stored and are never accessible to king368 staff;
• Restricted access controls ensuring that personal data is accessible only to staff and systems with a documented operational need;
• Regular penetration testing and vulnerability assessments conducted by external security specialists;
• Two-factor authentication (2FA) available for all Player accounts to protect against unauthorised access;
• Anomaly detection systems that flag unusual login patterns or transaction activity for security review.

In the event of a personal data breach that poses a risk to Player rights, king368 will notify the relevant supervisory authority and affected Players within the timeframes required by applicable law. Players are encouraged to use 2FA and a unique, strong password to maximise account security.

11. Children and Minors

The king368 Platform is strictly prohibited for use by persons under the age of 21. king368 does not knowingly collect personal data from individuals under 21. Where king368 has reason to believe that an account is held by a minor, the account will be suspended immediately, any balance forfeited, and the personal data associated with the account deleted in accordance with applicable law.

21+   If you become aware that a minor has registered on king368, please contact [email protected] immediately.

12. International Data Transfers

king368 may transfer personal data to processors located outside Malaysia in the course of operating the Platform — for example, to cloud hosting providers or KYC service providers whose infrastructure is based in other jurisdictions. Where such transfers occur, king368 ensures that appropriate contractual safeguards are in place to protect the personal data to a standard equivalent to that required by the gaming authority's data protection requirements.

Players who have concerns about international data transfers may contact [email protected] to request details of the specific safeguards applicable to their data.

13. Updates to This Privacy Policy

king368 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or gaming authority requirements. Material changes will be communicated to registered Players via the email address associated with their account at least 14 days before the changes take effect.

The current version of this Privacy Policy is always available at king368.one/privacy-policy. The "Last updated" date at the top of this page indicates when the most recent revision was made. Continued use of the Platform following a policy update constitutes acceptance of the revised Privacy Policy.

14. Contact & Complaints

For privacy-related enquiries, requests, or complaints, please contact king368 at:

• Email: [email protected]
• Live Chat: Available 24/7 via the Platform
• Response time: Privacy requests are responded to within 30 days of receipt of a verified request

If you are dissatisfied with king368's response to a privacy complaint, you have the right to escalate the matter to the data protection supervisory authority in the relevant jurisdiction, or to the dispute resolution body designated by the applicable international gaming authority.