Kaki33 Privacy Policy — Your Data is Secure With Us

1. Introduction and Scope of Privacy Policy

This Privacy Policy is published by kaki33 and applies to all users who access or use our platform, including the website, mobile app, and any related services. By using the kaki33 platform, you acknowledge that you have read and fully understood this policy.

Kaki33 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data privacy management. We believe that member trust is our most valuable asset, and protecting your personal data is an integral part of that commitment.

2. Information We Collect

Kaki33 only collects information that is strictly necessary to provide platform services to you. We do not collect any irrelevant or excessive information. The types of information we collect are as follows:

2.1 Information You Provide Directly

• Registration Information: Full name, identity card number, date of birth, mobile number, email address and chosen password.
• Profile Information: Username, language preferences and other account settings you have configured.
• KYC Documents: Copy of national ID, passport or driving licence; selfie photo for identity verification if required.
• Financial Information: Bank account number, bank name, digital wallet number for deposit and withdrawal processing purposes.
• Communications: Records of conversations with our customer support team via live chat or email.

2.2 Information Collected Automatically

• Technical Data: IP address, browser type and version, operating system, screen resolution, and device information.
• Usage Data: Pages visited, session duration, games played, login and logout times.
• Cookie Data: Session cookies, preference cookies and analytics cookies to enhance the user experience.
• Location Data: Approximate location data based on IP address to ensure compliance with service area requirements.

Data Categories	Purpose of Collection	Retention Period
Registration Information	Account verification & KYC	Throughout active account + 7 years
Transaction Records	Deposit & withdrawal processing	7 years (legal requirement)
Login Data	Security & fraud detection	12 months
Game Data	Analytics & service improvement	24 months
Cookies & Session Data	User experience & performance	30 days (session) / 12 months (preferences)
Support Records	Communication history & issue resolution	36 months

3. How We Use Your Information

Every piece of information we collect has a clear and legitimate purpose. kaki33 uses your personal data for the following purposes:

• Account Operations: Creates and manages your account, processes logins and ensures secure session continuity.
• Financial Processing: Handles deposits, withdrawals and all financial transactions related to your account.
• Identity Verification: Fulfils KYC requirements and Anti-Money Laundering (AML) legal compliance.
• Platform Security: Detects and prevents fraud, unauthorised access, account misuse and any suspicious activity.
• Customer Support: Addresses enquiries, resolves complaints and provides technical support to you.
• Service Improvements: Analyses usage patterns to improve the interface, performance and overall user experience.
• Important Communications: Sends account-related notifications, security updates and important service information.
• Promotions (with consent): Delivers bonus offers, promotions and relevant campaign information if you have consented to receive marketing communications.

4. Sharing Information with Third Parties

Kaki33 does not sell or disclose your personal information to third parties for marketing or commercial purposes. However, there are certain situations where we may need to share your information with trusted parties:

• Payment Service Providers: Partner banks, digital wallet operators, and payment processors that assist in handling your financial transactions. All such parties are bound by strict confidentiality agreements.
• Game Software Providers: Game development companies that provide slots, casino, and other game content on our platform.
• KYC Service Providers: A third-party identity verification platform that helps us securely verify members' documents and identities.
• Sovereign Authority: Law enforcement agencies, regulatory bodies, or courts where required by law or court order.
• Analytics Services: Third-party analytics tools that help us understand platform usage patterns — this data is shared in aggregated form and contains no personally identifiable information.

Every third party we engage is required to protect your data to a security standard equal to or higher than kaki33's own standards. We have zero tolerance for any misuse of data by third parties.

5. Cookie Policy

The kaki33 platform uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device when you visit our website.

5.1 Types of Cookies We Use

• Essential Cookies: Cookies required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Preference Cookies: Saves your settings such as language preference, display theme and other platform configurations for your convenience.
• Analytics Cookies: Helps us understand how users interact with the platform to improve design and content.
• Performance Cookies: Monitors page load speed and technical performance to ensure the platform operates at its best.

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of some features on the kaki33 platform.

6. Data Security Measures

The security of your personal data is an absolute priority for kaki33. We implement multiple layers of technical and operational protection to keep your information safe at all times:

• 256-bit SSL/TLS encryption for all communications between your browser and our servers.
• Sensitive data in the database is encrypted using the AES-256 algorithm.
• Two-factor authentication (2FA) for internal admin access.
• Continuous 24/7 security monitoring by our IT security team.
• Regular penetration testing conducted by independent cybersecurity firms.
• Automatic data backup with full encryption for disaster recovery.
• Mandatory data security training for all kaki33 staff who handle user data.

7. Your Rights Over Personal Data

As a kaki33 user, you have certain rights under Malaysia's Personal Data Protection Act 2010 (PDPA) regarding your personal data:

• Right to Access: You may request a copy of all personal data we hold about you.
• Right to Rectification: You may request that we correct any information that is inaccurate or incomplete.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data from our systems.
• Right to Restrict Processing: You may request that we restrict how we use your data in certain situations permitted by law.
• Right to Withdraw Consent: You may withdraw marketing consent at any time without affecting your core account services.
• Right to Complain: You have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your rights have been violated.

To exercise any of the above rights, please contact the kaki33 support team via email at [email protected]. We will process your request within 21 business days.

8. Children's Privacy

The kaki33 platform is strictly for adults aged 18 and above. We do not knowingly collect or process any personal information from individuals under the age of 18. If we discover that a minor's personal data has been collected inadvertently, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and discover that your child has registered on our platform, please contact us immediately at [email protected].

9. Cross-Border Data Transfers

In some operational scenarios, your personal data may be processed or stored on servers located outside Malaysia. Such transfers only occur when:

• The recipient country has a level of data protection equivalent to or higher than Malaysia.
• Appropriate data transfer agreements have been established with all data recipients.
• The transfer is necessary to fulfil the service agreement between you and kaki33.

Kaki33 ensures that all cross-border data transfers comply with PDPA requirements and applicable international data protection standards.

10. Changes to This Privacy Policy

Kaki33 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Whenever the Privacy Policy is updated, the "Updated" date at the top of this page will be revised accordingly.

For significant changes that affect your rights, we will provide clear notice via the platform or to your registered email at least 14 days before the changes take effect. We encourage you to review this page periodically.