Privacy Policy

This Privacy Policy ("Policy") issued by Kurnia898 ("we", "us", "our", "the Company"), the operator of the online gaming and sports betting platform accessible at kurnia898.cam (the "Platform"). It applies to all users who register an account, access, browse, or otherwise interact with the Platform, wherever they are located.

This Policy describes: (a) what categories of personal data Kurnia898 collects; (b) the purposes for which that data is processed; (c) the legal bases upon which we rely to process it; (d) how long we retain data; (e) the circumstances in which data may be shared with third parties; and (f) the rights available to you in respect of your personal data.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. By registering an account or otherwise using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the data processing activities described herein, to the extent that consent is the applicable legal basis for such processing.

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or can reasonably identify a living individual, directly or in combination with other data. This includes names, email addresses, payment details, IP addresses, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. Kurnia898 is the data controller for all personal data collected through the Platform.
• "Data Processor" — a third party that processes personal data on the data controller's behalf, subject to written instructions and security obligations.
• "KYC Data" — identity and age verification documentation submitted by users, including government-issued identification, proof of address, and payment method evidence.
• "Cookies" — small text files placed on your device by the Platform to enable functionality, remember preferences, and support analytics.

Kurnia898 collects the following categories of personal data from users of the Platform:

We do not intentionally collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation. If you voluntarily share such information during support interactions, we will handle it with appropriate care and not use it for any purpose beyond addressing your specific enquiry.

Kurnia898 collects personal data through the following channels and methods:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a survey.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser information, session logs, and cookie data.
• Payment Processors: Limited transaction data received from payment providers such as Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency processing partners — sufficient to confirm deposit and withdrawal status.
• Identity Verification Providers: Where we use third-party KYC services to verify the authenticity of identity documents, those providers may share verification outcomes and flaging data with us.
• Fraud Prevention Services: Data from fraud detection and anti-money laundering screening tools that compare your profile against watchlists and risk indicators.

Kurnia898 processes your personal data for the following specific purposes:

• Account Administration: Creating, managing, and maintaining your Kurnia898 account, including processing login authentication and account security measures.
• Identity Verification (KYC): Confirming that you meet our minimum age requirement of 21 years and verifying your identity in compliance with our anti-money laundering obligations before processing withdrawals.
• Transaction Processing: Facilitating deposits and withdrawals via supported Malaysian payment methods, and maintaining accurate financial records of all transactions.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and unauthorised account access.
• Responsible Gambling Compliance: Monitoring gaming behaviour to identify signs of problem gambling and applying self-imposed or operator-imposed limits. This processing supports our duty of care to players.
• Customer Support: Responding to your enquiries, resolving disputes, and providing assistance via live chat, WhatsApp, or email in English, Bahasa Melayu, or Mandarin.
• Platform Improvement: Analysing aggregated usage data to improve navigation, performance, and game offerings on the Platform.
• Marketing Communications: Where you have given explicit consent, sending you promotional offers, bonus notifications, and platform updates. You may withdraw this consent at any time.
• Legal Compliance: Retaining records as required by applicable laws and cooperating with law enforcement or regulatory authorities where legally required to do so.

Where internationally recognised data protection frameworks apply, Kurnia898 relies on the following legal bases to process your personal data:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your account, process transactions, and provide the services described in our Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC and anti-money laundering requirements under our operating licence.
• Legitimate Interests: Processing necessary for our legitimate business interests — including fraud prevention, platform security, and analytics — where those interests are not overridden by your fundamental rights.
• Consent: Where we rely on consent as the legal basis (primarily for marketing communications), we will make this explicit at the point of data collection. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Kurnia898 does not sell your personal data. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment Processors: We share the minimum transaction data necessary with payment providers — Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong), cryptocurrency processors — to facilitate deposits and withdrawals.
• KYC & Identity Verification Providers: Where third-party identity verification services are used to authenticate KYC documents, we share identity data with those providers under strict data processing agreements.
• Fraud Prevention & AML Services: We may share data with anti-fraud screening and anti-money laundering compliance tools that compare user profiles against sanctions lists and risk databases.
• Technology & Platform Providers: Service providers who host our Platform infrastructure, provide cloud storage, or deliver email communications. All such providers operate under data processing agreements requiring them to handle data only as instructed.
• Legal Authorities: Where required by applicable law, a court order, or regulatory demand, we may disclose personal data to law enforcement authorities or licensing regulators. We will only disclose the minimum information required and, where legally permitted, will notify affected users.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

As an internationally operated Platform, some of your personal data may be stored on or processed by servers located outside Malaysia. Jurisdictions where our infrastructure or service providers are based may have data protection laws that differ from those in Malaysia.

Where personal data is transferred internationally, Kurnia898 takes appropriate measures to ensure that the transfer is subject to adequate safeguards, including:

• Contractual clauses with data processors requiring them to uphold appropriate data protection standards.
• Selecting service providers operating in jurisdictions recognised as providing adequate data protection, or who maintain internationally accredited security certifications.
• Minimising the volume of personal data transferred internationally to only that which is strictly necessary for the applicable processing purpose.

Kurnia898 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Active Account Data: Retained for the duration of the account relationship and for a period of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following account closure, in accordance with applicable AML compliance requirements. Documents are deleted or irreversibly anonymised after this period.
• Financial Transaction Records: Retained for five (5) to seven (7) years, consistent with financial record-keeping standards applicable to our operating jurisdiction.
• Customer Support Communications: Retained for two (2) years following the resolution of the relevant support interaction, or longer if the subject matter involves an ongoing dispute or legal proceeding.
• Cookie and Analytics Data: Typically retained for a maximum of thirteen (13) months from collection, after which it is aggregated or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes without restriction.

Kurnia898 uses cookies and similar technologies (including local storage and session tokens) on the Platform. Our cookie use falls into the following categories:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. You cannot opt out of these without disabling the Platform entirely.
• Functional Cookies: Remember your preferences, such as your chosen language, last used payment method, and display settings. Disabling these may affect your experience.
• Analytical Cookies: Used to measure Platform traffic, page performance, and user behaviour patterns in aggregated, anonymised form. This data helps us identify and fix usability issues.

We do not deploy third-party advertising cookies or cross-site tracking cookies. No external advertising network receives data about your behaviour on the Kurnia898 Platform.

You may manage cookie preferences through your browser settings. Restricting or deleting cookies may affect the functionality of the Platform, particularly authentication and session management features.

Kurnia898 takes the handling of KYC identity documents with particular seriousness. When you submit identity documents — such as a copy of your Malaysian MyKad, Passport, or utility bill for proof of address — those documents are handled as follows:

• KYC documents are accessed only by authorised personnel with specific business need to review them as part of the verification process.
• Documents are stored in encrypted form, separately from your gaming and financial data, with access controls and audit logging in place.
• Documents are used exclusively for the purpose of verifying your identity and age in accordance with our KYC obligations. They are not used for any marketing purpose.
• Documents submitted via third-party KYC providers are subject to those providers' data handling agreements, which require equivalent security standards.
• Upon account closure and the expiry of the applicable retention period, KYC documents are securely deleted or irreversibly anonymised.

The Kurnia898 Platform is strictly intended for persons aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps designed to prevent underage access.

If Kurnia898 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the associated personal data to the extent legally permissible, and return any deposited funds to the originating payment method following investigation.

If you believe that a minor has registered an account on the Platform, please contact our support team immediately at [email protected].

Subject to applicable law and certain legal exceptions, you have the following rights in respect of your personal data held by Kurnia898: