Privacy Policy kediritoto —
Malaysia Player Data Protection

1. Information We Collect

When you register and use the kediritoto platform, we collect several categories of information depending on how you interact with our services. Understanding the types of data we collect helps you make more informed decisions about your use of our platform.

1.1 Account Registration Information

During the registration process, we require basic information to create your account:

• Full name as it appears on your official identification document
• An active email address to be used as the primary communication channel
• A valid Malaysia mobile phone number
• Date of birth for age verification (minimum 18 years)
• The username and password you create yourself

1.2 KYC Verification Information

Before your first withdrawal is processed, we require supporting documents to comply with anti-money laundering (AML) requirements and verify your identity:

• A valid copy of your Malaysian MyKad or passport
• The most recent three months' bank statements showing your name and account number
• Proof of current residential address such as a utility bill or official letter dated within the last 90 days

1.3 Financial Transaction Information

Every deposit and withdrawal transaction made through the kediritoto platform is automatically recorded, including the payment method used, transaction amount, date and time, and transaction reference number for record-keeping and dispute resolution purposes.

1.4 Technical and Usage Information

Our platform automatically collects certain technical information when you access our services, including your device's IP address, browser type and version, operating system, pages visited, time spent on each section of the platform, and gaming session data.

2. How We Use Your Data

Every piece of information we collect has a clear and transparent purpose. We do not use your data for purposes not stated in this privacy policy without first obtaining your additional consent.

Beyond the purposes listed above, we also use collected data to detect and prevent fraudulent activity, ensure the technical stability of the platform, conduct internal analysis for service improvement, and comply with any court orders or lawful requests from relevant authorities.

3. Information Sharing

Kediritoto understands that your trust is our most valuable asset. We do not share your personal information indiscriminately. The following are specific situations where data sharing may occur:

• 3.1 Payment Service Providers: To process deposits and withdrawals, we share the necessary transaction information with approved payment processors that maintain data security standards equivalent to our own.
• 3.2 Game Software Providers: Third-party game providers integrated with the kediritoto platform receive only the minimum session data required to operate their games. They do not receive your financial or identity information.
• 3.3 Legal Authority: We will disclose personal information to government authorities, law enforcement bodies, or courts when lawfully required by court order or applicable legislation.
• 3.4 Regulatory Authority: As a licensed platform, we may be required to submit certain reports or transaction data to our licensing regulatory authority as part of regulatory compliance.
• 3.5 Business Transfer: In the event of a merger, acquisition, or sale of company assets, player data may be transferred to a successor entity that will be bound by a privacy policy at least equivalent to this one.

4. Cookies and Tracking Technologies

The kediritoto platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions properly. Below is a detailed explanation of how we use cookies:

4.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login sessions, account security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects anonymous information about how players use the platform — which pages are visited most frequently, response times, and any error messages that may occur — to help us improve performance.
• Functional Cookies: Enables the platform to remember your preferences such as language, display settings, and login information (with your consent) to make your experience more comfortable.
• Analytics Cookies: Used internally to understand overall platform usage patterns for continuous improvement purposes. This data is processed in aggregate and does not identify individual players.

4.2 Managing Your Cookies

You can manage and delete cookies at any time through your web browser settings. Please note that disabling essential cookies may affect the functionality of certain parts of the platform and your overall user experience. Refer to your browser's help documentation for detailed cookie management guidance.

5. Data Security

Protecting your personal data from unauthorized access, breaches, or misuse is kediritoto's top priority. We continuously invest in the latest security infrastructure to ensure your data remains safe at all times.

• 5.1 All data transmitted between your device and our servers is protected with 256-bit SSL/TLS encryption — the highest security standard in the industry.
• 5.2 Player passwords are never stored in plain text. We use strong hashing algorithms with salting to ensure your password remains secure even in the most extreme data breach scenarios.
• 5.3 Our data servers are protected by multi-layered firewalls, intrusion detection and prevention systems (IDS/IPS), and continuous 24/7 security monitoring.
• 5.4 We conduct regular third-party security penetration testing by independent parties to identify and address any vulnerabilities before they can be exploited.
• 5.5 Access to the player database is limited to staff who require it to perform their duties, and all access is logged and audited on a regular basis.

6. Player Rights

As a kediritoto player, you have certain rights regarding your personal data, which we take seriously and are committed to fulfilling within a reasonable timeframe.

To exercise any of the above rights, please contact the kediritoto customer support team via live chat on the platform or through the official email. We will process your request within 30 working days from the date of receipt of the completed request.

7. Data Retention and Deletion

Kediritoto retains players' personal data only for as long as it is needed for the purposes stated in this policy or as required by applicable law.

• 7.1 Active account data is retained for the duration your account remains active and for the required period following account closure to fulfil legal obligations.
• 7.2 Financial transaction records are retained for a minimum period of 7 years after the transaction occurs, as required by applicable financial and tax legislation.
• 7.3 KYC documents are retained for the period required under applicable AML regulations, which is typically a minimum of 5 years after the business relationship ends.
• 7.4 Game session data and technical logs are retained for 12 months for dispute resolution and technical improvement purposes, after which they are automatically deleted or anonymised.
• 7.5 When data is no longer required and has exceeded the defined retention period, it will be securely deleted using methods that ensure it cannot be recovered.

8. International Data Transfers

In certain circumstances, your personal data may be transferred to or accessed from countries other than Malaysia — for example, backup servers or international gaming software providers integrated with our platform.

When such international data transfers occur, kediritoto ensures adequate protection through:

• Contractually binding data processing agreements (DPA) with all international data recipients
• Use of internationally recognized standard contractual clauses
• Strict assessment of the level of data protection in the recipient country before any transfer takes place
• End-to-end encryption for all data transferred across national borders

9. Children's Privacy

The kediritoto platform is an adult service strictly available to individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

If we discover that a child's personal data has been collected without our knowledge, we will take immediate action to delete that data and close the associated account. Parents or guardians who believe their child has registered a kediritoto account are requested to contact us immediately via our official email.

10. Changes to the Privacy Policy

Kediritoto reserves the right to update or amend this privacy policy from time to time to reflect changes in our data practices, legal requirements, or platform updates. When material changes are made:

• 10.1 We will display a clear notice on the platform's main page for at least 14 days before the changes take effect.
• 10.2 Players will be notified via their registered email about material changes and how those changes affect their privacy rights.
• 10.3 The "Updated" date at the top of this page will be revised to reflect the date of the latest version of this policy.
• 10.4 Continued use of the platform after the effective date of any changes is deemed acceptance of the updated policy. If you do not agree, you may close your account before that date.

11. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, the kediritoto data privacy team is ready to assist you.

You can reach us via:

• Live Chat: Available on the kediritoto platform 24 hours a day, 7 days a week
• Email: [email protected]
• Response Time: We aim to respond to all privacy-related inquiries within 3 business days