Privacy Policy Kedai88 – Your Personal Data Protection

This Privacy Policy describes how Kedai88 ("we", "our platform") collects, uses, discloses, and protects your personal information when you use our website and mobile app. It applies to all users who browse, register, or interact with the Kedai88 platform in any capacity.

By registering an account or using any Kedai88 service, you agree to the practices described in this Privacy Policy. We encourage you to read this document carefully and contact us if you have any doubts or questions regarding your privacy.

Kedai88 collects your personal information through several methods to ensure the best user experience and optimal platform security. The types of information we collect are as follows:

a) Information You Provide Directly:

• Full name as stated on your identification document
• National identity card number (MyKad) or passport number
• Date of birth for age verification
• Email address and mobile phone number
• Bank account or e-wallet details for deposit and withdrawal purposes
• Photos or copies of identity documents submitted during the KYC process
• The username and password you choose during registration

b) Information Collected Automatically:

• IP address and approximate geographic location
• Device type, operating system, and browser version used
• Cookie data and session tracking identifiers (session cookies)
• Records of in-platform activity — including games played, session duration, and financial transactions
• Technical error logs and application performance reports

Every piece of information we collect is used for specific and legitimate purposes. Kedai88 uses your personal data solely for the following purposes:

We do not use your data for third-party advertising or commercial profiling without your consent. Any use of data beyond the list above will require your explicit consent beforehand.

Kedai88 takes its commitment to never selling or renting your personal data very seriously. However, there are limited situations where we may need to share your information with certain parties:

• Payment Service Providers: Transaction information is shared with approved payment gateways and banks solely to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Legal Compliance: We will disclose required information when ordered to do so by a court, law enforcement agency, or legitimate regulatory authority in Malaysia.
• Fraud Prevention: In cases of suspected fraud or money laundering, relevant information may be shared with the appropriate authorities.
• Technology Providers: Our technical service providers (such as cloud computing and cybersecurity) may process your data as part of the services provided to kedai88, but they are not permitted to use that data for any other purpose.

Kedai88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are critical to website operation.
• Performance Cookies: Collects information about how you use our platform — such as frequently visited pages and response times — to help us improve the platform.
• Functional Cookies: Saves your preferences such as language, layout, and display settings so you do not need to reconfigure them every time you browse.
• Analytics Cookies: Used to understand aggregate and anonymous usage patterns for platform improvement purposes.

You can manage or disable cookies through your browser settings. Please note, however, that disabling essential cookies may affect platform functionality and your user experience.

Kedai88 retains your personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable Malaysian law. The following are our data retention guidelines:

• Active Account Data: Retained for the duration of your active account and for a period of 7 years after account closure for legal compliance and audit purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements.
• KYC Documents: Retained for the duration of the active account and 7 years after account closure for anti-money laundering (AML) compliance requirements.
• Communication Logs: Customer support records are retained for 3 years for reference and dispute resolution purposes.
• Analytics Data: Anonymous usage data is retained for 2 years for platform performance analysis purposes.

Once the retention period expires, your data will be securely deleted or anonymised using approved procedures.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. Kedai88 fully respects and supports these rights:

• Right of Access: You have the right to request a copy of the personal information we hold about you at any time.
• Right to Rectification: If any of your personal information is inaccurate or out of date, you have the right to request that we correct it.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data, subject to applicable legal retention requirements.
• Right to Object: You have the right to object to the processing of your data for certain purposes, such as direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.

Kedai88 invests seriously in security infrastructure to ensure your personal data is always protected. The key security measures we implement include:

• 256-bit SSL/TLS encryption for all data communications between your device and our servers
• Encryption at rest for all sensitive data stored in our databases
• Two-factor authentication (2FA) available for all member accounts
• Round-the-clock (24/7) security monitoring using advanced intrusion detection systems
• Periodic security audits conducted by independent third parties
• Mandatory data security training for all staff who handle personal data
• A comprehensive incident response plan to address any data breaches

The kedai88 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal information from individuals under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take appropriate steps to delete that information as soon as possible.

During the registration process, Kedai88 requires date of birth verification and a valid identity document to ensure the minimum age requirement is met. Any account found to belong to an underage individual will be closed immediately.

Kedai88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. When we make significant changes, we will:

• Updating the "Last Updated" date at the top of this page
• Displaying clear notices within the platform
• Sending notifications via your registered email for material changes

Continued use of the kedai88 platform after any amendments are published will be considered your acceptance of the updated policy. If you do not agree with the changes, please stop using the platform and contact us to close your account.