Kedai888 Privacy Policy for Malaysian Players

This Privacy Policy applies to Kedai888, the website at kedai888.cam, and the casino, sportsbook, payment, account management, promotional, and customer support functions made available through the platform. It describes the categories of personal information Kedai888 may process and the measures used to manage that information responsibly.

By accessing Kedai888 or creating an account, you acknowledge that your information will be handled as described in this Policy. This document should be read together with the Terms & Conditions and the Responsible Gambling policy. Where consent is required for a specific activity, Kedai888 will request it separately and clearly.

Kedai888 may collect information that identifies you directly, information connected to your account, and technical data generated when you use the platform. The exact categories depend on the services you access and the verification required.

Kedai888 does not intentionally request information that is irrelevant to providing or securing its services. Users should not send unnecessary identity documents, financial records, or sensitive personal details through general support messages.

Kedai888 receives information directly when you register, complete KYC, update your profile, deposit or withdraw funds, claim a promotion, apply a limit, request self-exclusion, or communicate with support. This includes transactions made through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and other supported methods.

Information is also generated automatically when you use Kedai888. For example, the platform records logins, device details, pages visited, security events, casino sessions, and sportsbook activity. These records help Kedai888 maintain account security, diagnose technical faults, prevent duplicate accounts, and resolve disputes concerning transactions or wagers.

In limited circumstances, Kedai888 may receive verification or risk information from payment processors, identity verification providers, game service providers, fraud prevention systems, or competent authorities. Such information is processed only where reasonably necessary and subject to appropriate confidentiality safeguards.

Kedai888 processes personal information for the following legitimate and defined purposes:

• Creating, authenticating, maintaining, and securing your Kedai888 account.
• Confirming that users satisfy the 21+ age requirement and account eligibility rules.
• Processing MYR deposits, withdrawals, refunds, bonuses, and payment investigations.
• Providing casino games, live dealer tables, slots, sports betting, and account history.
• Verifying identity and conducting anti-fraud, anti-money laundering, and source-of-funds reviews.
• Detecting account takeover, collusion, payment abuse, bonus abuse, and prohibited automated activity.
• Applying deposit limits, time-outs, self-exclusion, and other responsible gambling controls.
• Answering support queries, resolving complaints, and maintaining service quality.
• Improving Kedai888 performance, accessibility, security, content, and Malaysian payment support.
• Sending service notices and, where permitted, relevant promotional communications.
• Meeting legal, regulatory, contractual, accounting, and dispute resolution obligations.

Kedai888 does not sell personal information. Data will not be used for a materially different purpose without an appropriate legal basis, an updated notice, or your consent where consent is required.

Depending on the information and activity involved, Kedai888 may process data because it is necessary to perform the agreement with you, comply with legal or regulatory obligations, protect legitimate business interests, establish or defend legal claims, protect users from fraud or harm, or act with your consent.

Kedai888 relies on legitimate interests only where those interests are not overridden by your rights and freedoms. Relevant interests include securing accounts, preventing fraudulent payments, maintaining platform integrity, improving service reliability, and documenting the fair settlement of casino and sports wagers.

Where Kedai888 relies on consent, you may withdraw that consent for future processing. Withdrawal does not affect processing that was lawful before consent was withdrawn, and it does not prevent Kedai888 from retaining information required for compliance, fraud prevention, or dispute handling.

Kedai888 uses financial and identity information to verify that deposits and withdrawals belong to the registered account holder. Payment records may include the provider name, transaction reference, partial account identifier, amount in MYR, currency conversion information, timestamp, status, and risk assessment. Kedai888 does not need to display complete card, bank, or wallet credentials in ordinary account records.

Before a withdrawal is released, Kedai888 may request a MyKad, passport, proof of address, payment ownership evidence, or source-of-funds documentation. Enhanced verification may be required for unusually large transactions, inconsistent payment patterns, multiple failed deposits, or activity that triggers compliance controls.

KYC data is restricted to authorised personnel and approved verification providers with a genuine operational need. Kedai888 may retain verification results after account closure where necessary to prevent duplicate registration, meet recordkeeping duties, investigate fraud, or respond to a lawful request.

Kedai888 may use cookies and similar technologies to maintain login sessions, remember preferences, support security controls, measure platform performance, and understand how features are used. Essential cookies are required for functions such as authentication, balance updates, language preferences, and fraud prevention.

Performance data may show how quickly pages load, which device types experience errors, and whether users can complete common tasks such as opening a game or checking a transaction. Kedai888 uses this information in aggregated or appropriately protected form wherever practical.

Browser settings may allow you to block or remove cookies. However, disabling essential cookies can prevent account login, payment confirmation, live casino access, or other core Kedai888 services from functioning correctly.

Kedai888 may disclose limited personal information to service providers that support payment processing, identity verification, fraud detection, hosting, cybersecurity, customer support, game delivery, communications, professional advice, and regulatory compliance. Providers receive only the information reasonably required to perform their assigned function.

Information may also be disclosed where Kedai888 reasonably believes this is necessary to comply with a valid legal request, investigate suspected crime, protect the safety or rights of users, enforce the Terms & Conditions, recover funds, or establish and defend legal claims.

If the Kedai888 business undergoes a merger, restructuring, financing, or transfer of assets, relevant information may be transferred as part of that transaction. Any recipient must continue to protect the information in accordance with applicable law and existing confidentiality obligations.

Online gaming services may rely on infrastructure and specialist providers located outside Malaysia. As a result, Kedai888 information may be processed in other jurisdictions for hosting, verification, payment support, security, or game operations.

Where an international transfer occurs, Kedai888 applies safeguards appropriate to the circumstances. These may include contractual confidentiality terms, security requirements, restricted access, data minimisation, transfer assessments, and obligations requiring the recipient to process information only on documented instructions.

Laws in another jurisdiction may differ from Malaysian privacy requirements. Kedai888 nevertheless requires service providers to maintain protections consistent with the sensitivity of the information and the purposes described in this Policy.

Kedai888 maintains administrative, technical, and organisational safeguards designed to protect personal information against unauthorised access, accidental loss, alteration, misuse, or disclosure. Measures may include encryption in transit, access controls, authentication, monitoring, secure development practices, backups, incident procedures, and staff confidentiality obligations.

No internet-based service can guarantee absolute security. You are responsible for choosing a strong password, keeping credentials private, securing your mobile device, signing out from shared computers, and informing Kedai888 promptly if you suspect unauthorised activity.

Where a personal data incident creates a material risk, Kedai888 will investigate, contain the incident, take reasonable corrective action, and provide notifications where required by applicable law or regulatory obligations.

Kedai888 retains personal information only for as long as reasonably necessary to provide services and satisfy operational, regulatory, fraud prevention, accounting, responsible gambling, and dispute resolution requirements. Different categories may therefore have different retention periods.

Account, transaction, KYC, wagering, and complaint records may be retained after account closure where required to meet anti-money laundering duties, respond to payment disputes, prevent self-excluded users from reopening accounts, or defend legal claims. Information no longer required is securely deleted, anonymised, or placed beyond ordinary operational use.

A request to delete information does not override a lawful retention obligation. Kedai888 will explain any material restriction when responding to an eligible deletion request.

Subject to applicable law and identity verification, you may ask Kedai888 to confirm whether your personal information is being processed, provide access to relevant information, correct inaccurate or incomplete details, restrict particular processing, or delete information that is no longer required.

You may also object to certain processing based on legitimate interests, withdraw marketing preferences, or request a review of a significant decision made using automated risk controls. Not every request can be fulfilled in full; exemptions may apply where information must be retained for compliance, security, fraud prevention, legal claims, or the rights of another person.

Kedai888 may request proof of identity before acting on a privacy request. This protects your account from unauthorised disclosure. Requests should clearly describe the information or action concerned so that the support team can respond efficiently.

Kedai888 may process account activity to administer responsible gambling measures and identify indicators that may require intervention. Relevant information can include deposit frequency, losses, session duration, repeated limit changes, cancelled withdrawals, support messages, and use of time-out or self-exclusion tools.

This processing may result in a player protection message, account review, temporary restriction, affordability query, limit recommendation, or suspension. Kedai888 uses such measures to support safer play and to meet applicable obligations, not to guarantee that harmful behaviour will always be identified.

Self-exclusion records may be retained after an account is closed so Kedai888 can prevent circumvention. Players seeking information about limits, cooling-off periods, or account exclusion should read the Responsible Gambling page. Kedai888 services are for players aged 21 and above only.

Kedai888 may revise this Privacy Policy to reflect changes in services, security practices, payment methods, technology, or legal requirements. The revised version will display an updated effective date.

Where a change materially affects how existing personal information is used, Kedai888 will provide an appropriate notice through the platform or registered contact details. Continued use of Kedai888 after the effective date means the revised Policy applies to subsequent processing, subject to any consent rights required by law.