kedai888 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") applies to kedai888 ("we", "us", "our"), the operator of the online casino and sportsbook platform accessible at https://kedai888.lat (the "Platform"). This Policy governs the collection, use, disclosure, and protection of personal data submitted by users ("you", "your") in connection with your access to and use of the Platform.

By registering an account with kedai888, you confirm that you are at least 21 years of age, that you are accessing the Platform voluntarily, and that you consent to the practices described in this Policy. If you do not agree, please discontinue use of the Platform immediately.

kedai888 is committed to safeguarding your privacy in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and applicable international standards. We review and update this Policy periodically; the "Last Updated" date at the top of this document reflects the most recent revision.

2. Personal Data We Collect

kedai888 may collect the following categories of personal data from you:

2.1 Account Registration Data

• Full legal name (as per your NRIC or passport)
• Date of birth (for 21+ age verification)
• Malaysian identity card number (NRIC) or passport number
• Email address
• Mobile phone number
• Residential address (state, postcode)
• Preferred language (Bahasa Melayu, Mandarin, or English)

2.2 Financial and Payment Data

• Bank account details (for Maybank, CIMB, Public Bank transfers)
• e-Wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay)
• Cryptocurrency wallet addresses (USDT, Bitcoin) where applicable
• Deposit and withdrawal transaction history

2.3 Usage and Behavioural Data

• Games played, bet amounts, session durations, and win/loss records
• Device information (browser type, operating system, screen resolution)
• IP address and approximate geolocation data
• Cookie identifiers and session tokens
• Pages visited, clicks, and navigation patterns within the Platform

2.4 Responsible Gaming Data

• Deposit limits, wagering limits, or cooling-off periods you have set
• Self-exclusion status and duration
• Communications relating to responsible gaming support requests

2.5 Communications Data

• Live chat transcripts and WhatsApp support messages
• Email correspondence with our support team
• Feedback, survey responses, or complaints submitted to kedai888

3. How We Use Your Personal Data

kedai888 uses the personal data we collect for the following purposes, each grounded in a legitimate legal basis:

3.1 Account Management and Service Delivery

To create and maintain your kedai888 account, verify your identity, process deposits and withdrawals in MYR via your chosen payment method, and deliver the games and features you access on the Platform — including slots, live casino tables, sportsbook markets, roulette, and arcade games.

3.2 Age and Identity Verification

Malaysian law and our own responsible gaming standards require us to confirm that every registered player is at least 21 years of age. We use your NRIC or passport data solely for this verification purpose and do not retain documentary scans longer than necessary.

3.3 Payment Processing and Fraud Prevention

To process financial transactions securely, detect suspicious activity, prevent unauthorised account access, and comply with anti-money laundering (AML) obligations under applicable Malaysian financial regulations.

3.4 Responsible Gaming Compliance

To monitor for signs of problem gambling, enforce deposit limits and self-exclusion requests you have placed, and reach out proactively where our systems flag unusual or high-risk betting patterns. See our Responsible Gaming page for full details on the tools available to you.

3.5 Platform Improvement and Analytics

To understand how players interact with the Platform, identify technical issues, improve game loading times (especially on mobile networks common in Kuala Lumpur, Petaling Jaya, and other urban centres), and develop new features that better serve Malaysian players.

3.6 Customer Support

To respond to your enquiries via live chat, WhatsApp, or email in your preferred language (Bahasa Melayu, Mandarin, or English), and to maintain a record of our interactions for quality assurance and dispute resolution.

3.7 Legal and Regulatory Compliance

To comply with applicable laws, respond to lawful requests from regulatory authorities or law enforcement agencies, and enforce our Terms & Conditions.

4. Cookies and Tracking Technologies

kedai888 uses cookies and similar technologies to ensure the Platform functions correctly and to deliver a personalised experience. The types of cookies we use include:

• Essential Cookies: Required for core Platform functionality — login sessions, game state preservation, and security tokens. These cannot be disabled without impairing your ability to use the Platform.
• Analytics Cookies: Used to understand aggregate usage patterns (pages visited, time spent, device types). Data collected is anonymised and used only internally by kedai888.
• Preference Cookies: Store your language preference (English, Bahasa Melayu, or Mandarin) and display settings so you do not need to re-select them on each visit.
• Security Cookies: Help us detect and prevent fraudulent logins, account takeovers, and bot activity.

You may configure your browser to block or delete cookies; however, doing so may affect certain features of the Platform. We do not use third-party advertising cookies or retargeting pixels on the kedai888 Platform.

5. How We Share Your Data

kedai888 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We may share your data only in the following limited and controlled circumstances:

5.1 Payment Service Providers

We share the minimum financial data necessary with licensed payment processors to facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency networks. All payment partners are contractually bound to protect your data and prohibited from using it for any other purpose.

5.2 Identity Verification Partners

To meet our 21+ age verification and KYC (Know Your Customer) obligations, we may engage regulated third-party identity verification services. These partners process only the data required to confirm your identity and are subject to strict confidentiality obligations.

5.3 Technology and Infrastructure Providers

Our Platform is hosted on secure cloud infrastructure. Hosting and security providers access data only to the extent required to maintain and protect the Platform, under data processing agreements aligned with PDPA requirements.

5.4 Legal and Regulatory Authorities

We may disclose personal data to government agencies, law enforcement, or regulatory bodies when required to do so by law, court order, or when we reasonably believe such disclosure is necessary to protect the rights, property, or safety of kedai888, our users, or the public.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of kedai888's business assets, your personal data may be transferred as part of that transaction. You will be notified via email and/or a prominent notice on the Platform before your data becomes subject to a different privacy policy.

6. Data Security Measures

kedai888 implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our key technical and organisational measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your browser or app and our servers is encrypted to the same standard used by major Malaysian financial institutions.
• Encrypted Data at Rest: Sensitive fields — including passwords, payment details, and identity documents — are encrypted or hashed when stored in our databases.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with data access undergo regular security training.
• Penetration Testing: Our Platform undergoes regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Incident Response: We maintain a documented data breach response plan. In the unlikely event of a breach affecting your data, kedai888 will notify you and relevant authorities within the timeframes required by applicable law.

While we take all reasonable precautions, no system is completely immune to risk. We encourage you to use a strong, unique password for your kedai888 account and to enable any two-factor authentication options available to you.

7. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes outlined in this Policy or as required by law. Our general retention guidelines are as follows:

• Active Account Data: Retained for the duration of your account relationship with kedai888, plus a minimum of five (5) years after account closure to satisfy AML and financial record-keeping obligations.
• Transaction Records: Deposit, withdrawal, and bet histories are retained for seven (7) years in accordance with applicable financial regulations.
• Identity Verification Documents: Retained for a minimum of five (5) years post-verification or post-account closure, whichever is later.
• Support Communications: Chat transcripts and email correspondence are retained for three (3) years for quality assurance and dispute resolution purposes.
• Responsible Gaming Records: Self-exclusion and limit-setting data is retained for five (5) years to prevent circumvention and to support any future responsible gaming inquiries.
• Cookie and Analytics Data: Anonymised analytics data may be retained indefinitely in aggregate form; individual session-level identifiers are purged after thirteen (13) months.

When retention periods expire, data is securely deleted or anonymised such that it can no longer be associated with you as an individual.

8. Your Data Rights

As a kedai888 user, you have the following rights with respect to your personal data, consistent with Malaysia's PDPA 2010:

• Right of Access: You may request a copy of the personal data we hold about you at any time.
• Right of Correction: If any information we hold is inaccurate or incomplete, you have the right to request that it be corrected promptly.
• Right to Withdraw Consent: Where our processing is based on your consent, you may withdraw that consent at any time. Note that withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Restrict Processing: In certain circumstances, you may request that we limit how we use your data while a dispute or investigation is pending.
• Right to Object: You may object to processing based on our legitimate interests where you believe your fundamental rights and freedoms override those interests.
• Right to Data Portability: Where technically feasible, you may request your data in a structured, machine-readable format.

To exercise any of these rights, contact our Data Protection team at [email protected]. We will respond to all valid requests within 21 calendar days. Some requests may require identity verification before we can process them.

9. Third-Party Content and Links

The kedai888 Platform may contain references to third-party game providers whose software engines power some of our slot and live casino titles. While kedai888 selects partners who meet our security and fairness standards (certified RNG software), we are not responsible for the privacy practices of those providers' own systems or websites.

This Policy applies solely to data collected and processed directly by kedai888 through the Platform at https://kedai888.lat. We recommend reviewing the privacy notices of any third-party service you interact with independently.

10. Minors and Age Restrictions

kedai888 is strictly a 21+ platform. We do not knowingly collect personal data from any individual under 21 years of age. If we become aware that a person under 21 has registered an account or provided us with personal data, we will immediately suspend the account, delete all associated data, and reverse any financial transactions where possible.

Parents and guardians who believe a minor has accessed the Platform are encouraged to contact us immediately at [email protected] so we can take swift action.

11. Changes to This Privacy Policy

kedai888 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other operational factors. When we make material changes, we will notify you by:

• Posting a prominent notice on the Platform homepage
• Sending an email notification to the address registered with your account
• Updating the "Last Updated" date at the top of this document

Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of those changes. We encourage you to review this page periodically to stay informed about how kedai888 protects your information.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to how kedai888 handles your personal data, please contact our dedicated Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week
• Languages: English, Bahasa Melayu, and Mandarin
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days, and data subject requests within 21 calendar days.

We are committed to working with you to resolve any concerns about your privacy in a fair and transparent manner. If you remain unsatisfied with our response, you may lodge a complaint with Malaysia's relevant regulatory authority under the PDPA 2010.