1 Introduction
This Privacy Policy ("Policy") describes how ak441 ("ak441", "we", "us", "our") — the operator of the online sports betting and casino platform accessible at https://ak441.cam — collects, processes, stores, shares, and protects personal data relating to users ("Player", "User", "you") of the Platform and associated services.
This Policy applies to all personal data collected through the ak441 website, mobile applications, customer support channels, payment processing flows, and any other digital or offline interaction between you and ak441. It should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.
By registering an Account on the ak441 Platform or by continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and request Account closure.
ak441 is committed to handling personal data responsibly and in accordance with applicable international data protection standards. Malaysian users should note that Malaysian personal data protection is principally governed by the Personal Data Protection Act 2010 (PDPA). ak441 acknowledges and respects the rights of Malaysian data subjects under the PDPA and applies equivalent standards across all user data regardless of residency.
Plain language summary: We collect your personal data to operate your betting account, verify your identity, process your deposits and withdrawals, and keep the Platform safe. We do not sell your data. You have the right to access and correct your data at any time. Read on for full details.
2 Definitions
The following defined terms are used throughout this Privacy Policy:
- "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, location data, and online identifiers.
- "Processing" — Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
- "Data Controller" — ak441, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
- "Data Processor" — A third party that processes Personal Data on behalf of ak441 under a binding data processing agreement (e.g., payment gateway providers, KYC verification services).
- "Data Subject" — The individual to whom Personal Data relates — in this context, the registered Player or Platform User.
- "Consent" — A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data for a stated purpose.
- "Sensitive Personal Data" — A special category of Personal Data warranting enhanced protection, including health data, biometric data, financial account details, and government-issued identification numbers (e.g., Malaysian MyKad number).
- "AML" — Anti-Money Laundering — the regulatory framework and internal controls designed to detect and prevent the use of the Platform for money laundering or terrorist financing activities.
3 Personal Data We Collect
ak441 collects personal data across several categories depending on the nature of your interaction with the Platform. The table below sets out the categories of personal data we collect and the context in which each category is collected:
| Data Category |
Specific Data Points |
Collection Context |
| Identity Data |
Full legal name, date of birth, nationality, MyKad / Passport number, selfie with ID |
Account registration; KYC verification |
| Contact Data |
Email address, mobile phone number, residential address |
Account registration; account updates |
| Financial Data |
Bank account details, e-wallet registration details, transaction history, deposit / withdrawal records |
Payment processing; AML compliance |
| Technical Data |
IP address, device identifiers, browser type and version, operating system, session tokens |
Platform access; security monitoring |
| Usage Data |
Betting history, game play history, session duration, pages visited, feature interactions |
Service delivery; responsible gambling monitoring |
| Communications Data |
Live chat transcripts, email correspondence, support ticket records |
Customer support; dispute resolution |
| Marketing Preferences |
Promotional opt-in/opt-out status, communication channel preferences |
Consent-based marketing; account settings |
| Location Data |
Country and region of access (derived from IP address); city-level location where consented |
Geo-restriction compliance; fraud detection |
Sensitive Data Handling: Government-issued identification numbers (such as Malaysian MyKad numbers) and financial account details are treated as Sensitive Personal Data and are subject to enhanced access controls, encryption at rest, and strict internal access restrictions on a need-to-know basis only.
4 How We Collect Personal Data
ak441 collects personal data through the following primary channels:
4.1 Direct Collection
Data you provide directly when you:
- Register an Account on the Platform (identity and contact data)
- Complete KYC verification by submitting identity documents
- Make a deposit or request a withdrawal (financial data)
- Contact our customer support team via live chat, email, or Telegram
- Update your Account profile or communication preferences
- Participate in promotions, surveys, or bonus campaigns
4.2 Automated Collection
Data collected automatically when you interact with the Platform:
- Technical data (IP address, device ID, browser fingerprint) via server logs and analytics tools
- Session and usage data via cookies and similar tracking technologies (see Clause 10)
- Betting and game play activity data recorded in real time by our Platform systems
- Security event data (failed login attempts, unusual access patterns) recorded by our fraud prevention systems
4.3 Third-Party Sources
In limited circumstances, ak441 may receive personal data from:
- Identity verification service providers (e.g., KYC platform providers) used to verify document authenticity
- Payment processors and financial institutions for transaction verification and fraud screening purposes
- Credit reference and fraud screening agencies where applicable for AML compliance purposes
- Publicly available sources (e.g., sanctions lists, politically exposed persons databases) for AML/KYC screening
5 Purposes of Data Processing
ak441 processes your personal data for the following specific and legitimate purposes:
- Account Management: Creating, maintaining, securing, and administering your registered Account on the Platform.
- Identity Verification (KYC): Verifying your identity, age (21+ requirement), and eligibility to use the Platform in compliance with our AML and responsible gambling obligations.
- Payment Processing: Processing deposits and withdrawals via your chosen payment method (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, USDT TRC20, or Bitcoin) and reconciling transaction records.
- Service Delivery: Enabling you to place sports bets on Liga Super Malaysia, EPL, and other covered events, access live casino games, play slot titles, and use all other Platform features.
- Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, bonus abuse, and other prohibited conduct.
- Responsible Gambling: Monitoring usage patterns to identify potentially problematic gambling behaviour and to administer responsible gambling tools (deposit limits, self-exclusion) that you have requested.
- Customer Support: Providing assistance with your Account, resolving disputes, and responding to queries submitted via live chat, email, or Telegram.
- Legal Compliance: Meeting our obligations under applicable AML regulations, international gaming licensing conditions, and any valid court orders or regulatory directives.
- Marketing Communications (with consent): Sending you promotional offers, bonus notifications, and betting-related updates where you have provided explicit consent and have not subsequently opted out.
- Platform Improvement: Analysing aggregated and anonymised usage data to understand how Players use the Platform and to improve features, performance, and user experience.
6 Legal Basis for Processing
ak441 processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:
- Contractual Necessity: Processing required to perform the contract between you and ak441 (i.e., the Terms & Conditions) — including account management, payment processing, and service delivery.
- Legal Obligation: Processing required to comply with applicable law, including AML obligations, KYC requirements under our international gaming licence, and responses to valid regulatory or court orders.
- Legitimate Interests: Processing carried out for ak441's legitimate business interests where those interests are not overridden by your rights — including fraud detection, platform security, responsible gambling monitoring, and internal analytics.
- Consent: Processing carried out on the basis of your freely given, specific, and informed consent — principally for direct marketing communications. You may withdraw consent at any time by updating your communication preferences in Account Settings or by contacting [email protected].
Withdrawing Consent: Withdrawing your consent for marketing communications will not affect the lawfulness of processing carried out prior to withdrawal, and will not affect processing carried out on any other lawful basis (e.g., contractual necessity or legal obligation).
7 Data Sharing & Disclosure
ak441 does not sell, rent, or trade your personal data. We may share your personal data with third parties only in the following circumstances and only to the extent necessary for each stated purpose:
- Payment Processors: We share financial transaction data with payment gateway providers (e.g., FPX operators, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency network operators) solely to process your deposits and withdrawals.
- KYC & Identity Verification Providers: We share identity document data with accredited KYC verification service providers for the purpose of verifying your identity and age in accordance with our licensing obligations.
- Game Studio Providers: Aggregated, non-identifiable session and play data may be shared with licensed game studio providers to facilitate game functionality, progressive jackpot systems, and RTP audit compliance.
- Fraud & AML Screening Services: We may share transaction data and identity data with fraud detection agencies and AML screening platforms to identify and prevent prohibited conduct.
- Legal and Regulatory Authorities: We will disclose personal data to government authorities, regulators, law enforcement agencies, or courts where required by valid legal process, court order, or regulatory directive — including mandatory AML reporting obligations.
- Professional Advisors: We may share relevant data with legal counsel, auditors, or compliance consultants under appropriate confidentiality obligations in the context of legal proceedings or regulatory reviews.
- Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of ak441's business assets, personal data held on the Platform may be transferred to the acquiring entity, subject to equivalent privacy protections remaining in place.
No Sale of Data: ak441 does not and will not sell personal data to third-party data brokers, advertising networks, or marketing companies. Any third party receiving your data from ak441 is bound by contractual data processing restrictions limiting use of that data to the specific purpose for which it was shared.
8 International Data Transfers
ak441 operates an internationally hosted platform. Personal data collected from Malaysian players may be transferred to and stored on servers located outside Malaysia — including in jurisdictions where ak441's infrastructure providers, KYC partners, and game studio providers maintain data centres.
Where personal data is transferred internationally, ak441 takes all reasonable steps to ensure that the transfer is subject to appropriate safeguards, including:
- Contractual data processing agreements incorporating standard data protection clauses
- Transfer only to recipients in jurisdictions that maintain data protection standards equivalent to or exceeding those of the Malaysian PDPA
- Technical and organisational security measures applied consistently regardless of the jurisdiction of processing
You may request further information about the specific safeguards applied to any international transfer of your personal data by contacting our privacy team at [email protected].
9 Data Retention
ak441 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:
- Active Account Data: Retained throughout the active life of your Account plus five (5) years following account closure, in compliance with international AML record-keeping requirements.
- KYC & Identity Documents: Retained for five (5) years following account closure or the last verified transaction, as required under AML regulations.
- Transaction Records: Retained for seven (7) years following each transaction for audit and regulatory compliance purposes.
- Customer Support Records: Live chat transcripts and email correspondence retained for three (3) years following resolution of the relevant query or dispute.
- Marketing Consent Records: Consent records retained for the duration of your Account plus two (2) years following account closure or opt-out, to demonstrate compliance.
- Technical Logs: Server access logs and security event logs retained for twelve (12) months on a rolling basis.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with ak441's data destruction procedures.
10 Cookies & Tracking Technologies
ak441 uses cookies and similar tracking technologies on the Platform to enable core functionality, enhance performance, and support security. The following categories of cookies are used:
- Strictly Necessary Cookies: Essential for the Platform to function — including session management, authentication tokens, and security cookies. These cannot be disabled without materially impairing Platform functionality.
- Performance & Analytics Cookies: Used to measure how players interact with the Platform — including pages visited, session duration, and error rates — to improve Platform performance. Data collected is aggregated and anonymised.
- Functional Cookies: Used to remember your preferences — such as language settings, preferred deposit method, and betting interface configuration — to personalise your experience.
- Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and suspicious access patterns on the Platform.
ak441 does not deploy third-party advertising or retargeting cookies on the Platform. You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to log in and use core Platform features.
11 Data Security
ak441 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
- Encryption in Transit: All data transmitted between your device and ak441 servers is encrypted using TLS 1.3 (256-bit SSL).
- Encryption at Rest: Sensitive personal data — including identity documents, financial details, and authentication credentials — is encrypted at rest using AES-256 encryption.
- Access Controls: Personal data is accessible internally only on a strict need-to-know basis. Staff access is controlled by role-based access permissions and multi-factor authentication requirements.
- Penetration Testing: The Platform undergoes regular independent security penetration testing and vulnerability assessments to identify and remediate security weaknesses.
- Data Breach Response: ak441 maintains a documented data breach response procedure. In the event of a breach likely to result in a risk to your rights, we will notify affected individuals and relevant authorities within the timelines prescribed by applicable law.
- Vendor Security Standards: All third-party processors handling your personal data on behalf of ak441 are contractually required to maintain security standards equivalent to or exceeding our own.
Your responsibility: While ak441 takes all reasonable measures to protect your data, you are responsible for maintaining the confidentiality of your Account password and for notifying us immediately at
[email protected] if you suspect any unauthorised access to your Account.
12 Your Data Rights
As a data subject whose personal data is processed by ak441, you hold the following rights. These rights are exercisable by submitting a written request to [email protected]. ak441 will respond to all valid requests within 30 days. No fee is charged for standard requests.
Right of Access
Request a copy of the personal data ak441 holds about you, together with information about how it is processed.
Right to Rectification
Request correction of any personal data that is inaccurate, incomplete, or out of date.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose collected, subject to legal retention obligations.
Right to Restrict Processing
Request that ak441 restrict processing of your data while accuracy is contested or an objection is pending review.
Right to Data Portability
Request a machine-readable copy of your personal data (where technically feasible) for transfer to another service provider.
Right to Object
Object to processing carried out on the basis of legitimate interests, including direct marketing communications.
Right to Withdraw Consent
Withdraw consent for any processing carried out on a consent basis (e.g., marketing emails) at any time via Account Settings or by emailing us.
Right to Complain
Lodge a complaint with the relevant data protection authority if you believe your data rights have not been respected.
Exercising your rights: To submit a data rights request, email
[email protected] with the subject line "Data Rights Request" and specify the right you wish to exercise. We may require identity verification before processing the request to protect against fraudulent third-party requests.
13 Children's Privacy
The ak441 Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Account registration requires mandatory age verification as part of the KYC process, and any account found to belong to an individual under 21 will be immediately closed and all associated data securely deleted, subject to any applicable legal retention obligations.
If you believe that ak441 may have inadvertently collected personal data from a minor, please contact us immediately at [email protected] and we will take prompt corrective action.
21+ Only. ak441 has zero tolerance for underage gambling. For players aged 21 and above only. Parents and guardians who are concerned about a minor's access to online gambling platforms are encouraged to make use of parental control software and content filtering tools to restrict access to gambling sites.
14 Third-Party Links & Services
The ak441 Platform may contain references to third-party services — such as payment providers, game studios, or responsible gambling support organisations. Where the Platform facilitates navigation to or interaction with a third-party service, please be aware that:
- ak441 does not control the privacy practices of third-party services and is not responsible for their data collection or processing activities.
- Third-party payment providers (e.g., Touch 'n Go eWallet, Boost, GrabPay) operate under their own separate privacy policies governing data collected during payment transactions processed on their platforms.
- Game studio providers operate under their own data policies governing game session data processed within their software environments.
We recommend reviewing the privacy policies of any third-party service you interact with when using the Platform.
15 Amendments to This Policy
ak441 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. Material changes — including changes to the categories of data collected, the purposes of processing, or the rights available to you — will be communicated to registered Players via email notice to the address on file and/or via a prominent Platform notification prior to the effective date of any change.
Your continued use of the Platform following the effective date of any amendment to this Policy constitutes acceptance of the updated terms. The current version of this Policy, including its effective date, will always be accessible at https://ak441.cam/privacy-policy. We recommend reviewing this page periodically to stay informed of any changes.
16 Contact Us
For any questions, concerns, or requests relating to this Privacy Policy — including data access requests, correction requests, erasure requests, marketing opt-outs, or general privacy enquiries — please contact ak441's privacy team through the following channels:
- Email: [email protected] — Subject line: "Privacy Enquiry" or "Data Rights Request" for fastest routing
- Live Chat: Available 24/7 on every page of the ak441 Platform — average first response under 2 minutes
- Telegram: @ak441support — monitored continuously, including Malaysian public holidays
ak441 is committed to responding to all privacy-related queries within 5 business days and to resolving all data rights requests within 30 calendar days of receipt of a valid, verified request. For complex requests, we will notify you of any extension of the response period and the reasons for the extension.
Serving Malaysian players across Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and nationwide. Our privacy team is equipped to handle data requests from Malaysian players in plain, clear English and with full respect for rights under the Malaysian PDPA 2010.