koko308 is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your own data as a Member of our Platform.
Last Updated: 1 January 2026koko308 does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your data belongs to you.
All data transmitted between your device and the koko308 Platform is protected using industry-standard 256-bit SSL encryption. Your transactions and personal details are secured at every step.
Members may request access to, correction of, or deletion of their personal data at any time by contacting our support team. We process all data rights requests promptly and in good faith.
We collect only the personal data that is strictly necessary for account operation, payment processing, regulatory compliance, and delivering an excellent gaming experience to our Malaysian members.
Personal data is stored on secure, access-controlled servers. Access is restricted to authorised personnel only, and all staff who handle personal data are bound by strict confidentiality obligations.
koko308 uses cookies and similar tracking technologies solely to improve platform performance, personalise your experience, and support essential security functions. We do not use tracking cookies for third-party advertising.
koko308 (hereinafter "koko308", "we", "us", or "the Company") operates the online gaming platform accessible at https://koko308.cam and all associated subdomains, mobile applications, and software interfaces (collectively, "the Platform"). This Privacy Policy describes how koko308 collects, processes, stores, shares, and protects the personal data of individuals who access or use the Platform (hereinafter "Members", "you", or "the User").
This Privacy Policy forms part of our overall legal framework alongside the Terms & Conditions. By registering an Account or continuing to use the Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
koko308 takes its obligations regarding personal data seriously. We are committed to handling all Member data with integrity, transparency, and in compliance with applicable data protection principles. We will never use your data in ways that are inconsistent with the purposes for which it was collected.
Scope: This Privacy Policy applies to all personal data collected through the koko308 Platform, including data submitted during account registration, during the course of gameplay, through customer support interactions, and via your device and browser when you access the Platform.
For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, either directly or in combination with other data held by koko308. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction. |
| "Data Controller" | koko308, as the entity that determines the purposes and means by which Personal Data is processed. |
| "Data Processor" | Any third party that processes Personal Data on behalf of koko308 under a contractual arrangement (e.g., payment processors, KYC verification providers, game software providers). |
| "Cookies" | Small data files placed on your device by the Platform to enable functionality, improve performance, and support security measures. |
| "KYC" | Know Your Customer — the identity verification process conducted to confirm a Member's identity, age, and address in accordance with applicable regulatory requirements. |
| "Account" | The registered user profile created by a Member on the Platform through which all gaming, financial, and communication activity is conducted. |
koko308 collects personal data from Members through several channels. The categories of data we collect are set out below.
When you create an Account on the Platform, we collect the following information: full legal name, date of birth, gender (where voluntarily provided), residential address, email address, mobile phone number, and preferred account currency (Malaysian Ringgit — MYR).
To comply with our age verification obligations and anti-money laundering (AML) requirements, we collect copies of identity documents (Malaysian MyKad, Driver's Licence, Passport), proof of address (utility bills, bank statements), and in certain cases, a selfie photograph alongside an identity document. This data is processed solely for verification purposes and stored securely.
When you make deposits or withdrawal requests, we collect payment method details relevant to the transaction — for example, the masked identifier of your DuitNow account, Touch 'n Go eWallet account reference, FPX bank account details, or cryptocurrency wallet address. We do not store full credit or debit card numbers. All payment data is handled in accordance with applicable payment security standards.
We collect data about how you interact with the Platform, including: game history (titles played, wager amounts, outcomes), login timestamps and session duration, navigation patterns, promotion participation history, and support ticket records.
When you access the Platform, our servers and analytics tools automatically collect certain technical information, including: IP address, device type and model, operating system version, browser type and version, referring URL, and general geolocation data (derived from IP address — typically at city level, not precise GPS location).
If you contact our customer support team via Live Chat, email, or any other channel, we retain records of those communications including any personal data you voluntarily share in the course of seeking assistance.
Sensitive Data: koko308 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where expressly required for age verification purposes in accordance with our KYC obligations.
koko308 uses the personal data we collect for the following specific purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your Account; verifying your identity and age; processing login authentication. |
| Service Delivery | Providing access to games, processing deposits and withdrawals, awarding bonuses, and maintaining account history. |
| Regulatory Compliance | Meeting our AML, KYC, and age verification obligations; responding to lawful requests from regulatory or law enforcement authorities. |
| Fraud Prevention | Detecting, investigating, and preventing fraudulent transactions, collusion, money laundering, or other prohibited activities on the Platform. |
| Customer Support | Responding to your queries, resolving disputes, processing complaints, and maintaining support correspondence records. |
| Platform Improvement | Analysing aggregated usage patterns to improve the design, performance, and functionality of the Platform for all Members. |
| Responsible Gambling | Monitoring gaming behaviour to identify patterns that may indicate problem gambling and applying responsible gambling tools where appropriate. |
| Marketing Communications | Sending you information about promotions, bonuses, and new features — but only where you have given explicit consent, and always with a clear opt-out mechanism. |
koko308 processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being used:
koko308 does not sell, rent, or trade your personal data to any third party. We may share your data with third parties only in the following limited and controlled circumstances:
We engage trusted third-party service providers who process personal data on our behalf and under our instruction. These include: payment processing partners (including providers for DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB, and cryptocurrency processors); identity and KYC verification providers; fraud detection and risk management tools; cloud hosting and infrastructure providers; and customer support software providers. All such processors are bound by contractual data processing agreements that require them to process data only as instructed, maintain appropriate security measures, and prohibit onward sharing.
Certain game-level data (such as player ID and game session logs) may be shared with our licensed game studio partners for the purpose of delivering gameplay, resolving disputes, and auditing game outcomes. Game providers do not receive your full personal profile.
koko308 will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts of law where required to do so by applicable law, regulation, legal process, or enforceable governmental request. We will notify affected Members of such disclosures to the extent permitted by law.
In the event of a merger, acquisition, restructuring, or sale of all or a portion of the Company's assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms of the successor entity prior to your data being subject to a materially different privacy policy.
No Third-Party Marketing: koko308 never provides your contact details or usage data to external advertisers, data brokers, or affiliate marketing networks. Any promotional communications you receive from koko308 are sent directly by us.
koko308 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. Our general retention practices are as follows:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.
koko308 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:
While koko308 takes every reasonable precaution to protect your data, no system is entirely impervious to breach. In the event of a data security incident that affects your rights and freedoms, we will notify you as required by applicable law, providing details of the nature of the incident, the data affected, and the steps taken to address it.
Your Responsibility: You are responsible for maintaining the confidentiality of your Account credentials. Do not share your password with any third party. If you suspect your Account has been compromised, contact our support team via Live Chat immediately.
The koko308 Platform uses cookies and similar technologies (such as web beacons and local storage) to enhance your browsing experience, maintain session security, and support essential platform functions. The types of cookies we use are as follows:
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Required for the Platform to function. These cookies manage your login session, maintain your cart/balance state, and enable core security features. They cannot be disabled without impairing the functionality of the Platform. |
| Performance & Analytics | Used to collect aggregated data about how Members navigate the Platform — page load times, most visited sections, error occurrences — enabling us to identify and resolve performance issues. |
| Functional | Remember your preferences such as language settings and display options, so you do not need to re-enter them on each visit. |
| Security | Support fraud detection, bot prevention, and two-factor authentication processes to protect your Account and the Platform's integrity. |
koko308 does not use third-party advertising or cross-site tracking cookies. You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality and security of the Platform.
As a Member of koko308, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our Data Protection team via the contact details provided in Section 14 of this Policy.
You may request a copy of all personal data we hold about you. We will provide this within 30 days of a verified request, free of charge for the first request in any 12-month period.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may also update basic Account information directly through your Account settings.
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under AML and regulatory requirements.
You may request that we limit the processing of your data in certain circumstances — for example, while a dispute about its accuracy is being resolved — without requesting full deletion.
Where processing is based on consent or contractual necessity, you may request a copy of your data in a structured, machine-readable format so it can be transferred to another service provider.
Where processing is based on your consent (such as marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.
All data rights requests must be submitted in writing and will be responded to within thirty (30) calendar days. We may require you to verify your identity before processing any request to prevent unauthorised disclosure. In certain cases, we may decline a request where we are legally obligated to retain the data or where your request is manifestly unfounded or excessive.
The koko308 Platform is intended exclusively for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory component of our KYC process, and any Account found to be held by an individual under 21 will be immediately suspended.
If you become aware that a minor has registered on the Platform or that personal data of a minor has been submitted to koko308, please notify us immediately via our support channels. Upon verification, we will promptly delete all data associated with the underage individual and close the relevant Account.
21+ Age Policy: koko308 enforces a strict minimum age requirement of 21 years. This applies to all Members regardless of the minimum gambling age in their jurisdiction of residence. We conduct mandatory age verification as part of our standard KYC process.
koko308 operates as an international online gaming platform. As part of delivering our services, your personal data may be transferred to and processed in countries outside of Malaysia. These transfers are necessary for the operation of our Platform and the delivery of services by our third-party processors, including game software providers and payment processors located in various jurisdictions.
Wherever personal data is transferred outside of Malaysia, koko308 ensures that appropriate safeguards are in place to protect your data in a manner consistent with this Privacy Policy. These safeguards may include: contractual data processing agreements incorporating standard data protection clauses; transfers to countries that have been determined to offer adequate levels of data protection; or other mechanisms approved under applicable data protection legislation.
koko308 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the structure of our business. The most current version of this Privacy Policy will always be available on this page, with the "Last Updated" date reflecting the date of the most recent revision.
Where amendments are material — particularly where they affect how we use your personal data or your rights — we will notify registered Members via their registered email address or by means of a prominent notice on the Platform. Continued use of the Platform following notification of material amendments constitutes acceptance of the revised Policy. If you do not agree with the amended terms, you should discontinue use of the Platform and close your Account.
If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, or if you wish to exercise any of your data rights as described in Section 10, please contact the koko308 Data Protection team through the following channels:
When submitting a data rights request, please provide your full registered name, Account email address, and a clear description of the right you wish to exercise or the concern you wish to raise. We may require identity verification before processing your request to protect against unauthorised data disclosure.
For questions about our general terms of service, please refer to our Terms & Conditions. For information about responsible gambling tools, please visit our Responsible Gambling page.
At koko308, your personal data is handled with the same care and integrity we apply to every aspect of our platform. If you have any privacy-related questions, our team is always available.
By using koko308, you confirm that you are 21 years of age or older and that you have read and accepted this Privacy Policy. Terms & Conditions · Responsible Gambling