Your privacy is more than a legal obligation to us — it is a moral responsibility we take seriously. Learn exactly how krm8 handles, protects and respects the personal data of every member.
Every piece of data you share with us is protected by six robust, comprehensive layers of security.
All data transmitted between your device and krm8's servers is protected using 256-bit SSL encryption — the same highest-grade security standard used by the world's leading banking institutions.
Member personal data is stored on servers protected by multi-layered firewalls and intrusion detection systems. Database access is restricted to authorised personnel only.
KRM8 does not sell, rent, or share your personal data with any third party for marketing purposes without your consent. Your data belongs to you — it is not our business commodity.
You have full control over your data — update your personal information, manage marketing preferences, or request data deletion directly through your KRM8 account settings at any time.
KRM8 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring that all our data handling practices meet applicable legal requirements.
The KRM8 security system undergoes regular independent audits by qualified third parties to ensure member data protection consistently meets the latest industry standards.
This Privacy Policy applies to all users of the KRM8 platform — including the website, Android and iOS mobile apps, and all related services. By using our platform, you agree to this policy.
KRM8 understands that member trust is the foundation of everything we do. When you register an account, make a deposit, or simply browse our platform, you are entrusting us with a certain amount of personal information. We do not take this trust lightly — and this Privacy Policy is our written commitment to handling your data with full integrity and responsibility.
This document clearly explains the types of data we collect, why we need it, how it is used, and your rights as a member to control that information. We encourage you to read this policy in full so you can make informed decisions about your use of the KRM8 platform.
If you have any questions about how we handle your personal data, the krm8 privacy team is available via email or our Live Chat, which operates 24 hours a day.
When you register an account on KRM8 or interact with our platform, you may provide us with the following information:
When you use the KRM8 platform, our systems automatically record certain technical information for security and service improvement purposes:
KRM8 does not collect unnecessary data. Every type of data we retain has a clear and legitimate purpose as stated in this policy.
KRM8 uses your personal data only for legitimate, relevant, and limited purposes. The table below shows exactly how your data is used:
| Purpose of Use | Types of Data Involved | Legal Basis |
|---|---|---|
| Account registration and management | Name, email, phone number, date of birth | Contract performance |
| Processing deposits and withdrawals | Payment details, bank statements | Contract performance |
| Identity verification (KYC) | MyKad, supporting documents | Legal obligations |
| Fraud prevention and security | IP address, activity logs, device data | Legitimate interests |
| Customer Support | Communication records, account details | Contract performance |
| Marketing communications (where permitted) | Email, phone number | Your consent |
| Platform improvements and analytics | Anonymous usage data | Legitimate interests |
KRM8 will not use your personal data for any purposes other than those stated above without obtaining your consent first. You may withdraw consent for marketing communications at any time through your account settings.
KRM8 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in certain situations, we may need to share your information with the following parties:
We work with trusted third-party service providers to enable smooth platform operations. These include payment processors, identity verification providers, cloud services, and technical support providers. All such providers are contractually bound to protect your data and may only use it for the specified purposes.
KRM8 may be required to disclose your personal data to the relevant authorities if directed by a court order, legal order, or valid regulatory requirement. In such situations, we will notify you to the extent possible unless prohibited from doing so by law.
In cases of suspected fraud, money laundering, or criminal activity, KRM8 reserves the right to share relevant information with law enforcement agencies or applicable industry regulatory bodies for investigation purposes.
KRM8 has never and will never sell your personal data to advertisers, data brokers, or any other commercial party. This is our absolute guarantee to you.
KRM8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you when you return, remember your preferences, and ensure the platform functions correctly.
Types of cookies we use:
You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience of the KRM8 platform.
Protecting your personal data is krm8's top priority. We continuously invest in the latest security infrastructure to ensure your information remains safe at all times. Key security measures we have implemented include:
While we implement industry-standard security measures, no system can guarantee 100% absolute security. You are also responsible for keeping your account password confidential.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a KRM8 member have the following important rights regarding your personal data. We respect and facilitate the exercise of all these rights:
Request a copy of all personal data we hold about you at any time.
Update or correct any inaccurate or outdated personal information.
Request deletion of your personal data when it is no longer required for its original purpose.
Object to the processing of your data for direct marketing purposes at any time.
Receive your data in a machine-readable format for transfer to another platform.
Request that we restrict the processing of your data in certain legally permitted situations.
To exercise any of the above rights, contact our privacy team via Live Chat or email. We will process your request within 14 business days of receipt.
KRM8 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. Our general data retention guidelines are as follows:
Once the retention period has expired, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered.
The krm8 platform is restricted to users aged 18 and above. We do not knowingly collect, store or process any personal data of individuals under the age of 18. Should we discover that we have inadvertently collected personal data of a minor, we will take immediate steps to delete that data and close the relevant account.
If you believe we may have collected personal data of an individual under the age of 18, please contact us immediately so we can take the appropriate action.
KRM8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any significant amendments will be communicated to you via in-app notification or email at least 7 days before the changes take effect.
We encourage you to review this page periodically to ensure you are always aware of our current policy. The "Updated" date at the top of this page indicates the latest version in effect.
If you have any questions, concerns or wish to exercise your privacy rights, please contact the krm8 Privacy Officer via:
We are committed to responding to all privacy enquiries within 5 business days.