Privacy Policy kediritoto — Your Data Protection

1 Introduction

This Privacy Policy explains how kediritoto ("we", "Platform", or "Company") collects, processes, stores, and protects your personal information when you use the kediritoto.vin website and all related services. This Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices.

By registering an account on kediritoto or continuing to use our platform after the effective date of this Policy, you give your consent to kediritoto to process your personal data as described in this document. If you do not agree with any part of this Privacy Policy, please stop using the platform and contact us to close your account.

Kediritoto acts as the data controller for the personal information you provide to us. This means we are fully responsible for ensuring your data is processed lawfully, fairly, and transparently in accordance with applicable laws in Malaysia.

2 Personal Data We Collect

Kediritoto collects several categories of personal information from our members. Each category is collected only when necessary and for clearly defined purposes.

2.1 Information You Provide Directly

When you register or use our services, you provide us with information such as:

• Full name as stated in your official identification document (MyKad / passport).
• Date of birth and gender.
• Email address and mobile phone number.
• Full residential or mailing address.
• Malaysian bank account details used for deposits and withdrawals.
• Identity verification documents (KYC) such as a copy of your MyKad or passport along with a verification selfie.
• Any communications you send to our support team.

2.2 Information Collected Automatically

When you use the kediritoto platform, our systems automatically record certain technical information, including:

• IP address and estimated geographic location based on IP.
• Browser type, operating system, and software version in use.
• The time and duration of your login sessions.
• Pages visited, buttons clicked, and navigation patterns within the platform.
• Transaction history for deposits, withdrawals, betting, and wins.
• Cookie data and session tokens required to maintain your login session.

Data Categories	Purpose of Collection	Legal Basis
Identity Information	Account registration, KYC verification, fraud prevention	Contractual & legal obligation
Financial Information	Deposit processing, withdrawals, anti-money laundering	Legal obligation (AML)
Technical Data	Account security, fraud detection, platform improvement	Legitimate platform interests
Game Data	Account management, problem gambling detection, regulatory compliance	Contractual obligation & public interest
Communication Data	Customer support, complaint resolution, and service improvement	Legitimate platform interests

3 How We Use Your Data

Every piece of information we collect is used for specific and legitimate purposes. kediritoto will not use your data for any other purpose without notifying you first and, where required, obtaining your consent again.

• Account Management: Creating and maintaining your account, processing logins, and granting access to all platform features.
• Transaction Processing: Verifying and processing all deposits and withdrawals accurately and securely.
• Identity Verification (KYC): Meeting legal requirements related to anti-money laundering and age verification.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support.
• Platform Security: Detecting and preventing fraudulent activity, hacking, or account misuse.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate assistance.
• Service Communications: Sending important notifications regarding your account, transactions, and changes to our terms or policies.
• Platform Enhancement: Analysing aggregated usage patterns to improve platform functionality, design, and performance.

4 Data Sharing & Disclosure

Kediritoto exercises strict control over who can access your personal data. We do not sell or rent your data to anyone. Data sharing only occurs in the following limited situations:

4.1 Third-Party Service Providers

We share the minimum necessary data with service providers that help us operate the platform, including payment gateway providers, cloud hosting platforms, and identity verification service providers. All such providers are bound by strict data protection agreements and are only permitted to use your data for the specific purposes defined.

4.2 Legal Requirements

Kediritoto will disclose your personal data to the relevant authorities if required to do so by Malaysian law, court order, or directive from a legitimate regulatory body. This includes investigations related to money laundering, fraud, or other criminal activities.

4.3 Protection of Vital Interests

In exceptional circumstances, we may disclose your data where necessary to protect someone's life or to prevent serious and unavoidable harm.

5 Data Security

Protecting your data is one of kediritoto's highest priorities. We implement comprehensive technical and organisational security measures to safeguard your personal information from unauthorised access, loss, or destruction.

The security measures we employ include:

• Data encryption in transit using TLS 1.3 / 256-bit SSL protocols.
• At-rest encryption for all sensitive information such as bank account details and identity documents.
• Two-factor authentication (2FA) for member account access and internal admin access.
• Round-the-clock security monitoring, 24 hours a day, 7 days a week, by our cybersecurity team.
• Regular security audits by accredited independent cybersecurity firms.
• Strict role-based access controls for internal staff.
• A comprehensive incident response plan to address any data breaches promptly.

While kediritoto takes all reasonable measures to protect your data, no system can be guaranteed 100% secure against all cyber threats. In the event of a security breach affecting your data, we will notify you within the timeframe required by applicable law.

6 Cookies & Tracking Technologies

The kediritoto website uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better user experience. Cookies are small text files stored on your device by your web browser.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as maintaining your login session and saving language preferences. These cookies cannot be disabled without affecting platform functionality.
• Security Cookies: Helping us identify suspicious activity, prevent unauthorised access, and protect your account from cyber threats.
• Analytics Cookies: Collecting information about how you use the platform (pages visited, session duration) to help us understand and improve the user experience. This data is collected in aggregate and is not used to identify you personally.
• Preference Cookies: Saving your preferences such as display settings and favourite game selections so you don't need to reconfigure them each time you log in.

6.2 Managing Cookies

You can manage and delete cookies through your web browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note, however, that disabling certain cookies may affect the functionality and performance of the kediritoto platform in your experience.

7 Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by kediritoto. We are committed to respecting and facilitating the exercise of these rights.

• Right of Access: You have the right to request a copy of the personal data we hold about you, including details of how it is processed.
• Right to Rectification: If the personal data we hold is inaccurate or incomplete, you have the right to request a correction without undue delay.
• Right to Erasure: Under certain circumstances, you have the right to request that we delete your personal data, subject to our legal obligations to retain certain records.
• Right to Withdraw Consent: Where processing of your data is based on your consent, you may withdraw that consent at any time. Such withdrawal will not affect the validity of any processing carried out prior to that point.
• Right to Object: You may object to the processing of your data for specific purposes such as direct marketing.
• Right to Data Portability: You have the right to receive a copy of your data in a structured, machine-readable format for transfer to another service provider.

To exercise any of the above rights, please contact the kediritoto support team via live chat or email at [email protected]. We will process your request within 14 working days and may require identity verification before your request is processed to ensure the security of your account.

8 Data Retention Period

Kediritoto retains your personal data for as long as your account remains active or as long as necessary to provide services to you. After account closure, we will retain certain records as required by applicable law.

• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legislation.
• Identity verification documents (KYC) — retained for 5 years after account closure.
• Customer support communication logs — retained for 3 years for reference and complaint resolution purposes.
• Login data and security activity — retained for 2 years for security audit purposes.

Upon expiry of the required retention period, your data will be securely deleted or anonymised so it can no longer be linked to you.

9 Changes to This Privacy Policy

Kediritoto may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. Any changes will be published on this page along with the new effective date.

For changes deemed significant or material, we will notify you by email or in-platform notification at least seven (7) days before those changes take effect. Continued use of the kediritoto platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

10 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding how kediritoto handles your personal data, we encourage you to contact us directly. We are committed to addressing every inquiry seriously and transparently.

You can reach the kediritoto Data Protection Officer (DPO) via:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform.

If you are not satisfied with our response, you have the right to file a complaint with Malaysia's Department of Personal Data Protection (JPDP), the country's data protection regulatory body.