Kul8 takes every member's privacy seriously. This policy sets out transparently how we collect, use, store and protect your personal data — in accordance with Malaysia's data protection legal requirements and our commitment to member trust.
Since kul8 was established in 2018, the protection of member personal data has been one of the core priorities of our platform. The following are the six key pillars that underpin kul8's privacy commitment.
All data transmitted between your device and kul8's servers is protected by 256-bit SSL encryption — the same security standard used by major Malaysian banks such as Maybank and CIMB. Your login credentials, payment details, and personal data cannot be intercepted by any third party during transmission.
Kul8 has never sold, rented or distributed member personal data to any third party for marketing or commercial purposes, and never will. Your information belongs to you — we use it solely for the purposes stated in this Privacy Policy and nothing beyond that.
Kul8 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means the collection, processing, and storage of members' personal data is carried out in accordance with a clear and enforceable legal framework in Malaysia.
Kul8 members have full control over their personal data through their account settings. You can request access to the data we hold, ask for corrections to inaccurate information, or submit a request to have your data deleted — all through easily accessible channels.
Kul8 member data is stored on servers protected by multiple layers of physical and digital security. The kul8 cybersecurity team monitors our systems continuously, 24 hours a day, to detect and respond to any threats before they affect members.
In the event of any security incident involving member data, kul8 is committed to notifying affected members within the timeframe stipulated by Malaysian law. Transparency in incident management is part of our commitment to member trust.
Quick Summary: kul8 collects your personal data only for legitimate purposes related to platform operations. We do not sell your data. You have the right to access, correct and request deletion of your data. All data is protected by 256-bit SSL encryption. This policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA).
Kul8 collects various types of personal data from members to ensure the platform operates effectively, securely and in compliance with legal requirements. The categories of data collected are as follows:
Full name, identity card number (MyKad) or passport number, date of birth, gender and an image of the identity document (if required for KYC verification).
Email address, Malaysian mobile number, and residential address (if requested for verification).
Payment method details used (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX), deposit and withdrawal transaction history in MYR, and account balance.
Betting history, games played, session duration, wins and losses, and platform usage patterns for analytics and responsible gaming purposes.
IP address, browser type, device type, operating system, cookies, session data, and other technical information automatically collected when you use the kul8 platform.
Kul8 collects your personal data through the following methods:
Kul8 does not collect personal data from public sources such as social media or public directories without your knowledge and consent.
Kul8 uses the personal data collected solely for the following legitimate purposes:
Data Minimisation Principle: kul8 only collects data that is strictly necessary for the purposes stated above. We do not collect data that is excessive or irrelevant to the operation of our platform.
Kul8 does not sell, rent, or distribute members' personal data to any third party for their own marketing purposes. Your data is only shared in the following limited circumstances:
In all permitted data sharing cases described above, kul8 ensures that the receiving party adheres to data security standards equivalent to or higher than kul8's own.
Kul8 member personal data is stored on secure servers with multi-layered protection measures in place. The key security measures we implement include:
Data retention period: kul8 retains member personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by Malaysian law. Financial transaction data is typically retained for a minimum of 7 years in line with Malaysia's accounting and tax legal requirements. Inactive account data will be reviewed after 36 months of inactivity.
Data Deletion: When personal data is no longer needed and there is no legal obligation to retain it, kul8 will securely delete or anonymise that data using methods that ensure it cannot be recovered.
Kul8 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Cookies are small text files stored in your browser when you browse the kul8 website.
The types of cookies used by kul8 and their purposes:
You can manage or disable cookies through your internet browser settings. However, disabling certain cookies may affect the functionality of the kul8 platform — particularly session cookies required for login and authentication.
Under Malaysia's Personal Data Protection Act 2010 and kul8's own commitment to member privacy, you have the following rights with respect to your personal data:
You have the right to request a copy of the personal data we hold about you. kul8 will fulfil this request within 21 business days.
You have the right to request corrections to any personal data that is inaccurate or incomplete. You can also update much of your information directly through your kul8 account settings.
You may request the deletion of your personal data, subject to kul8's legal obligations to retain certain data for a minimum prescribed period.
You may withdraw your consent to marketing communications at any time via the unsubscribe link in our emails or through your kul8 account settings.
You have the right to object to the processing of your personal data for specific purposes where permitted by law.
You may request to receive your personal data in a structured, machine-readable format for transfer to another service provider.
To exercise any of the rights above, contact the kul8 data protection team by email at support@kul8.best or via live chat within the platform. kul8 will respond to data rights requests within 21 business days.
The kul8 platform is exclusively for individuals aged 18 and above. kul8 does not knowingly collect or process personal data from individuals under the age of 18.
Should kul8 discover that personal data of a minor has been collected inadvertently, we will take immediate steps to delete that data and close the associated account. Parents or guardians who become aware that their child has provided personal information to kul8 are asked to contact us promptly at support@kul8.best so that appropriate action can be taken.
Kul8 employs multiple age-verification methods during the registration process to prevent access by underage individuals, and reserves the right to request age verification documents at any time if there is any doubt about a member's age.
The kul8 platform may contain links or integrations with third-party services such as payment providers (Touch 'n Go eWallet, GrabPay, DuitNow, and others) and game providers. Please note that:
Kul8 only works with third-party service providers that have a strong track record in security and privacy. That said, kul8 cannot guarantee their practices.
Kul8 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, applicable laws or the services we offer. When significant changes are made:
We encourage you to review this Privacy Policy page periodically to stay informed about how kul8 protects your information.
Current version: This Privacy Policy is the version last updated on 1 January 2026 and supersedes all previous versions.
If you have any questions, concerns or requests regarding kul8's Privacy Policy or how we handle your personal data, please contact our data protection team through the following channels:
Kul8 is committed to responding to all privacy-related enquiries within 3 business days. For formal requests relating to data rights (access, correction, deletion), the response period is 21 working days.
If you are dissatisfied with how kul8 has handled your privacy inquiry, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Multimedia Malaysia.
Secure Payment Methods at kul8
When you register an account on any online platform — whether a banking platform, social media or a betting platform like kul8 — you are entrusting a portion of your personal information to them. This is a responsibility that kul8 does not take lightly. Since the platform was established in 2018, the protection of member personal data has been one of the foremost priorities in every technical and operational decision we make.
Many Malaysians are unaware that our country actually has comprehensive data protection legislation — the Personal Data Protection Act 2010 (PDPA). This law requires organisations that process the personal data of Malaysians to do so responsibly, transparently and securely. kul8 does not treat PDPA compliance merely as a legal obligation — we believe it is the minimum standard to be exceeded if we are to truly protect the interests of our members.
One of the primary reasons kul8 collects personal data is to protect you. The identity verification (KYC) process we carry out is not merely a bureaucratic procedure — it is an active protection mechanism. By verifying that your kul8 account genuinely belongs to you through confirmation of your MyKad or other identity document, we make it significantly harder for any unauthorised party to take over your account or withdraw your funds without your consent.
The same applies to transaction pattern monitoring. If the kul8 system detects unusual patterns in your account activity — such as a large, sudden withdrawal to a new account that has never been used before — our system will flag it for manual review before the transaction is processed. This may seem like an inconvenience at first glance, but it is an additional layer of protection that exists for your benefit.
Cookies often get a bad reputation among privacy-conscious users, but it is important to understand that not all cookies are the same. The session cookies used by kul8 are essential for keeping you logged in during your gaming session — without them, you would be prompted to log in again every few minutes. Preference cookies allow the kul8 platform to remember settings such as your chosen language, so you do not have to reconfigure them every time you visit.
Kul8 does not use cookies to track your activity on other websites outside our platform. The analytics cookies we use are for understanding how members use the kul8 platform in an aggregated and anonymous manner — they help us identify areas for improvement and new features to add. This analytics data is not linked to the personal identity of any individual member.
When you deposit into your kul8 account using Touch 'n Go eWallet, DuitNow, GrabPay or other Malaysian payment methods, an exchange of information takes place between the payment provider and kul8. This information is limited to what is necessary to verify and record the transaction — typically the transaction reference number, amount in RM, date and time, and confirmation that the transaction was successful. kul8 does not store your digital wallet PIN or password.
These transaction records are retained by kul8 as part of your account's financial history and are required for accounting, audit, and legal compliance purposes. You can view your full transaction history at any time through the transaction history section of your kul8 account.
Over 500,000 Malaysian members have chosen to trust kul8 with their personal data. That trust is not something we take lightly. Every data privacy decision at kul8 is made with one key question in mind — is this truly in the best interest of our members? Not for short-term business gain, not because it is technically convenient, but because it genuinely protects and respects the privacy of those who have entrusted us with their personal information.
If you have any questions about how kul8 handles your personal data, or wish to exercise any of your data rights under Malaysia's PDPA, don't hesitate to reach out to our support team, available 24 hours a day, 7 days a week. Your privacy is our priority.