Summary: kandar88 collects personal data that is necessary to operate a licensed gaming platform — account registration details, transaction records, and technical usage data. We do not sell your personal data to third parties. We retain data only as long as required by law or legitimate business need. Malaysian players have the right to access, correct, and request deletion of their personal data held by kandar88.
This Privacy Policy ("Policy") describes how kandar88 ("the Company", "we", "us", "our") collects, processes, stores, and protects the personal data of players and visitors ("you", "your") who interact with the kandar88 website at kandar88.co and all associated gaming services.
kandar88 operates as the data controller in respect of personal data processed through the platform. As a licensed gaming operator, kandar88 is subject to data protection obligations under its licensing framework, which require the platform to implement adequate technical and organisational measures to protect player data and to process personal data only for lawful, specified purposes.
This Policy is incorporated by reference into the kandar88 Terms & Conditions. By creating a kandar88 account or using the platform, you acknowledge that you have read and understood this Policy. If you do not agree with the terms of this Policy, you must not use the kandar88 platform.
kandar88 collects personal data through multiple touchpoints across the platform lifecycle. The categories of data collected are described below.
When you create a kandar88 account, we collect: your chosen username, email address, date of birth, and country of residence. This information is required to establish and maintain your account and to verify your eligibility to use the platform.
In fulfilment of our licensing obligations and anti-money laundering (AML) requirements, kandar88 may collect copies of government-issued identification documents (such as a Malaysian MyKad or passport), proof of address documentation, and payment method ownership verification. This data is processed solely for compliance and fraud prevention purposes.
kandar88 records all financial transactions associated with your account, including deposit amounts, payment methods used, withdrawal requests, and transaction timestamps. For e-wallet transactions via Touch 'n Go eWallet, Boost, or GrabPay, we receive confirmation data from the respective payment processor but do not store your full e-wallet account credentials.
kandar88 records your gameplay activity, including bets placed, game results, session duration, and bonus redemptions. This data is used to operate the platform, resolve disputes, and detect irregular activity patterns consistent with fraud or bonus abuse.
When you access kandar88, our servers automatically collect technical data including your IP address, browser type and version, device type and operating system, referring URL, pages visited within the platform, and session timestamps. This data is used for platform security, performance optimisation, and fraud detection.
If you contact kandar88 support via live chat or any other channel, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.
| Purpose | Data Used | Basis |
|---|---|---|
| Account creation and management | Registration data, email | Contract performance |
| Identity and age verification | KYC documents, date of birth | Legal obligation |
| Processing deposits and withdrawals | Financial transaction data | Contract performance |
| Fraud detection and AML compliance | Transaction data, IP, KYC data | Legal obligation |
| Platform security and abuse prevention | Technical data, gameplay data | Legitimate interest |
| Customer support and dispute resolution | Communications, gameplay records | Contract performance |
| Regulatory reporting | Identity, transaction data | Legal obligation |
| Responsible gaming monitoring | Gameplay patterns, session data | Legal obligation / legitimate interest |
| Service improvement and analytics | Aggregated usage data | Legitimate interest |
kandar88 does not use your personal data for automated decision-making that produces legal or similarly significant effects, except where required by regulatory compliance processes such as AML screening, in which case you have the right to request human review of automated determinations.
kandar88 processes your personal data on the following legal bases:
kandar88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data may be shared in the following limited circumstances:
kandar88 engages third-party service providers to support platform operations, including payment processors (such as FPX payment gateway operators, Maybank, CIMB, and e-wallet providers), game content providers (such as Pragmatic Play, Evolution Gaming, and PG Soft), identity verification services, and cloud hosting infrastructure providers. These providers process personal data on kandar88's behalf under data processing agreements and are contractually prohibited from using your data for their own independent purposes.
kandar88 will disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, valid legal process, or our licensing obligations. kandar88 will notify affected players of such disclosures where permitted by law to do so.
In the event of a merger, acquisition, or sale of all or substantially all of kandar88's assets, player personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection commitments.
Some kandar88 service providers operate outside Malaysia. Where personal data is transferred internationally, kandar88 ensures that adequate safeguards are in place — including standard contractual clauses or equivalent mechanisms — to maintain the protection of your data to a standard consistent with applicable data protection requirements.
kandar88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal and regulatory obligations. Specific retention periods include:
Following the expiry of the applicable retention period, kandar88 will securely delete or anonymise your personal data.
kandar88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
No data transmission or storage system is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, kandar88 will notify affected players without undue delay in accordance with applicable regulatory requirements.
kandar88 uses cookies and similar tracking technologies on the platform for the following purposes:
These cookies are essential for the kandar88 platform to function. They maintain your session state, store authentication tokens, and support security features. These cookies cannot be disabled without disrupting core platform functionality.
These cookies remember your preferences and settings — such as your preferred game lobby view or language setting — to provide a personalised experience on the kandar88 platform.
kandar88 uses aggregated, anonymised analytics data to understand how players use the platform and to identify areas for improvement. This data does not identify individual players.
You may manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the kandar88 platform but may affect the quality of your experience.
As a player whose personal data is processed by kandar88, you have the following rights, subject to applicable legal limitations:
To exercise any of the above rights, contact kandar88 support via the live chat facility on the platform. kandar88 will respond to verified requests within 30 days. Identity verification will be required before requests are processed.
kandar88 strictly prohibits the use of its platform by persons under 21 years of age. kandar88 does not knowingly collect personal data from persons under 21. If kandar88 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed and all associated data will be deleted, except where retention is required for regulatory compliance or fraud prevention purposes.
If you believe that a minor has registered an account with kandar88, please contact support immediately with relevant details so that the matter can be investigated and resolved promptly.
kandar88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material changes will be communicated to registered players via a notice on the kandar88 platform and/or by email to the registered account address at least 14 days before the change takes effect.
The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the kandar88 platform following notification of a revised Policy constitutes your acceptance of the updated terms.
For any questions, concerns, or requests relating to this Privacy Policy or the personal data kandar88 holds about you, please contact the kandar88 data protection team through the live chat support facility available on the platform. You may also reach out via the email address listed in the footer of this page.
kandar88 is committed to resolving data privacy concerns promptly and transparently. If you are not satisfied with our response, you have the right to escalate your concern to the relevant data protection supervisory authority or gaming regulatory body applicable under kandar88's operating licence.
kandar88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes — ever.
All data transmitted to and from the kandar88 platform is protected by SSL/TLS encryption. Sensitive data at rest is encrypted separately.
Access, correct, or request deletion of your kandar88 data at any time. Requests are processed within 30 days following identity verification.
kandar88 collects only the data genuinely necessary to operate the platform, comply with licensing obligations, and prevent fraud.
kandar88 retains data only for as long as legally required or operationally necessary. Data is securely deleted or anonymised at the end of its retention period.
kandar88 does not knowingly collect data from persons under 21. Accounts found to belong to minors are closed immediately and data deleted.
Play with confidence knowing your data is handled responsibly. If you have any questions about your privacy at kandar88, our support team is available around the clock.
Access kandar88