Kedai88 Privacy Policy – Protection of Your Personal Data

Kedai88 collects several categories of personal data when you register and use our platform. All data collection is carried out on the basis of legitimate purposes and is directly related to the services we provide to members in Malaysia.

Information you provide directly during registration:

• Full name as stated on your Malaysian identity card (MyKad) or passport.
• An active Malaysian mobile number — used for account verification and service communications.
• Email address — for account verification, transaction notifications, and customer support communications.
• Account password — stored in encrypted (hashed) form and cannot be viewed by any kedai88 staff.
• Date of birth — to verify that you are at least 18 years of age.

Financial transaction data collected during your use of the platform:

• Deposit and withdrawal records — including the payment method used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks), transaction amount, date and time, and transaction status.
• Current account balance and complete transaction history within the platform.
• Win and loss records from all gaming sessions.

Technical data collected automatically during use:

• The IP address of the device used to access Kedai88.
• Device type, operating system, and web browser used.
• Session data — including login times, session duration, pages visited, and actions taken within the platform.
• Cookie data and similar tracking technologies (see Section 5 for further details).

Kedai88 uses collected personal data solely for legitimate purposes directly related to providing our online casino services to members in Malaysia. We do not use your data for any other purpose without your knowledge and consent.

The primary purposes for which Kedai88 uses your personal data are as follows:

• Account management: Registration, identity verification, login and overall management of your Kedai88 member account.
• Financial transaction processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and withdrawals to your bank account or e-wallet.
• Provision of gaming services: Enabling you to access and play all games available on Kedai88 — live casino, jackpot slots, table games, Sports Betting on the Malaysia Super League, EPL, badminton, cricket, and e-sports.
• Service communications: Sending transaction notifications, account updates, promotional alerts you have opted in to receive, and responses to customer support enquiries.
• Security and fraud prevention: Detecting, investigating and preventing fraudulent activity, multiple account usage, bonus abuse and any suspicious activity that may compromise the integrity of the platform or the interests of other members.
• Platform improvement: Analysing usage patterns on an aggregated, anonymised basis to understand how members interact with our platform, for the purpose of improving the user experience and developing new features.
• Legal Compliance: To fulfil relevant legal and regulatory obligations in Malaysia, including the Personal Data Protection Act 2010 (PDPA) and related compliance requirements.

Kedai88 holds firmly to the principle that our members' personal data is a trust that must never be compromised. We do not sell, commercialise, or share your personal data with third parties for marketing purposes or any other purpose outside the scope of our platform's operations.

However, there are limited situations where Kedai88 may need to share certain data with carefully selected third parties, strictly for legitimate operational purposes:

• Payment providers: Only the minimum transaction data required is shared with Malaysian payment providers (such as Touch 'n Go, GrabPay, DuitNow, and FPX) solely to process your deposits and withdrawals. These providers are subject to their own privacy policies and security standards.
• Game providers: Minimum game data (such as session IDs) is shared with game providers including PG Soft, Pragmatic Play, Evolution Gaming, and others to ensure games function correctly and to facilitate dispute resolution if the need arises.
• Legal requirements: Kedai88 may disclose your personal data to the relevant authorities in Malaysia if required by law, court order, or valid legal process. In such situations, we will endeavour to notify you in advance where permitted by law.

Kedai88 takes security infrastructure seriously, ensuring that every member's personal data and financial information remains protected at all times. The security measures we uphold are on par with the standards set by Malaysia's financial and banking industry.

Key security measures implemented by kedai88 include:

• 256-bit SSL Encryption: All communications between your browser and Kedai88's servers are encrypted using TLS protocol with 256-bit encryption keys. This means data in transit — including login credentials and transaction details — cannot be read even if intercepted by a third party.
• Encrypted password storage: Account passwords are never stored in plain text. We use strong hashing algorithms to ensure your password cannot be retrieved — not even by kedai88 staff.
• Two-factor authentication (2FA): Two-factor authentication is available for all Kedai88 accounts. We strongly encourage all members to enable 2FA as an effective additional layer of protection against unauthorised access.
• Real-time activity monitoring: Kedai88's automated anomaly detection system continuously monitors all account activity to identify unusual patterns or suspicious behaviour, and takes preventive action before any harm occurs.
• Staff access controls: Access to member personal data within Kedai88 is strictly limited and governed by a need-to-know principle — only staff who require access to specific data for their job responsibilities are permitted to do so.
• Regular security audits: The Kedai88 platform undergoes regular security assessments and testing to identify and address any vulnerabilities before they can be exploited.

While Kedai88 takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. You also play a role in keeping your account secure — particularly by using a strong and unique password, not sharing your login credentials, and reporting to us immediately if you suspect any suspicious activity on your account.

Kedai88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser when you visit our site. They allow Kedai88 to recognise you when you return to the platform, remember your preferences, and deliver a more personalised and seamless experience.

Types of cookies used by kedai88:

• Session cookies: Temporary cookies that exist only for the duration of your browsing session and are deleted automatically when you close the browser. Used to maintain your login session and ensure smooth gameplay during an active session.
• Persistent cookies: Cookies that remain on your device for a set period. Used to remember your language preference, platform settings, and to keep you logged in so you do not have to sign in every time you access kedai88.
• Analytics cookies: Used to collect aggregated, anonymised usage statistics — such as number of visitors, most frequently visited pages, and session duration. This helps us understand how the kedai88 platform is being used and make relevant improvements.
• Security cookies: Used to detect suspicious login attempts, abnormal account activity, and to keep our fraud detection systems running effectively.

As a kedai88 member and as an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several rights regarding the personal data we hold about you. kedai88 fully respects and facilitates the exercise of these rights.

• Right of access: You have the right to request a copy of the personal data kedai88 holds about you. Submit your request by email to support@kedai88.asia and we will provide the requested information within 14 business days.
• Right to rectification: If you find that any personal data we hold about you is inaccurate or outdated, you have the right to request a correction. Contact our support team and we will update your information within a reasonable timeframe.
• Right to restrict processing: Under certain circumstances, you may request Kedai88 to restrict the processing of your personal data — for example, if you dispute the accuracy of your data or no longer wish to receive marketing communications from us.
• Right to erasure: You have the right to request deletion of your personal data from kedai88's systems upon closing your account, subject to data retention obligations required under Malaysian law.
• Right to withdraw consent: You may withdraw your consent for certain uses of your data — such as receiving marketing communications — at any time, without affecting the validity of any processing carried out prior to that withdrawal.

To exercise any of the rights above, please contact the Kedai88 team at support@kedai88.asia, clearly stating the right you wish to exercise along with your account details for identity verification purposes. We are committed to handling all privacy rights requests promptly and with full respect.

Kedai88 retains your personal data only for as long as it is needed for the purposes set out in this Privacy Policy, or as required under applicable Malaysian law. Once data is no longer needed, we will securely delete or anonymise it.

General data retention periods we practise:

• Active account data: Retained for as long as your account remains active on Kedai88 and for a reasonable period after account closure, subject to legal requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with applicable Malaysian legal and accounting requirements — this includes deposit records, withdrawals, and win history.
• Security and activity logs: Retained for the period required for fraud detection and security purposes, typically no longer than 2 years unless an active investigation requires extended retention.
• Cookie data: This depends on the type of cookie — session cookies are deleted when the session ends, while persistent cookies are stored for the duration specified in the respective cookie settings.

When you request closure of your Kedai88 account, we will process the deletion of personal data that is no longer required within 30 days of the account being officially closed, subject to any retention obligations required by law. You will be notified once the data deletion process has been completed.

Kedai88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our privacy practices, the services we provide, or applicable Malaysian legal requirements.

When we make significant changes to this Privacy Policy, we will notify you via a prominent notice on the kedai88 platform or by email to the address registered on your account, at least 7 days before the changes take effect. For minor changes that do not materially affect your privacy rights, we may update the policy without specific notice — though the last updated date will always be displayed at the top of this document.

Continued use of the kedai88 platform after any Privacy Policy changes take effect will be considered your acceptance of the revised policy. It is your responsibility to check this Privacy Policy page periodically. If you disagree with any changes, you have the right to close your account and request data deletion by contacting us at support@kedai88.asia.

This Privacy Policy is governed by Malaysian law, in particular the Personal Data Protection Act 2010 (PDPA). Any disputes relating to data privacy will be resolved in accordance with the applicable provisions of Malaysian law. For any questions, concerns, or complaints regarding this Privacy Policy or how kedai88 handles your personal data, please contact us at support@kedai88.asia and we will respond within two business days.