kedai888 Privacy Policy

1.1  kedai888 operates Malaysia's trusted online casino and sports betting platform at kedai888.one. In the course of providing gaming, sportsbook, crash game, and Lottery 4D services to Malaysian players, kedai888 necessarily collects and processes certain personal data about its users.

1.2  kedai888 takes its obligations regarding data privacy seriously. This Policy sets out in plain terms what data we collect, why we collect it, how long we keep it, who we share it with, and what rights you have in relation to it. We encourage all kedai888 players to read this Policy carefully before registering an account.

1.3  This Policy should be read alongside the kedai888 Terms and Conditions and Responsible Gaming Policy, which together govern your relationship with the Platform.

2.1  For the purposes of this Policy, kedai888 is the data controller in respect of personal data collected from players and visitors to kedai888.one. As data controller, kedai888 determines the purposes and means by which personal data is processed.

2.2  If you have any questions or concerns about how kedai888 handles your personal data, you may contact our Data Protection contact via the details set out in Section 14 of this Policy.

3.1  kedai888 collects personal data from you in the following categories:

3.2  kedai888 does not collect sensitive personal data (such as biometric data, health data, or racial/ethnic origin data) in the ordinary course of account registration or operation, unless required for specific identity verification purposes by applicable law or regulatory direction.

4.1  kedai888 uses the personal data it collects for the following purposes:

• Account creation and management — to register, verify, and maintain your kedai888 player account;
• Service delivery — to provide access to games, process bets, settle winnings, and operate the Platform;
• Payment processing — to process deposits and withdrawals via your chosen Malaysian payment method (Touch n Go eWallet, Boost, FPX, Maybank2u, CIMB Clicks, Public Bank);
• Identity verification (KYC) — to verify your identity and age in accordance with our obligations and our Terms and Conditions;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and other prohibited conduct;
• Responsible gaming — to monitor gaming behaviour for indicators of potential problem gambling and to administer responsible gaming tools including deposit limits and self-exclusion;
• Customer support — to respond to enquiries, complaints, and support requests submitted via live chat or email;
• Legal and regulatory compliance — to comply with applicable laws, regulatory requirements, and lawful orders from competent authorities;
• Marketing communications — to send you promotional information about kedai888 offers and new features, where you have provided consent to receive such communications;
• Platform improvement — to analyse usage patterns and improve the kedai888 Platform's performance, design, and content.

5.1  kedai888 processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform our contract with you (the Terms and Conditions), including account management, game provision, and payment processing;
• Legal obligation — processing required to comply with applicable laws and regulatory requirements, including age verification and anti-money-laundering obligations;
• Legitimate interests — processing for fraud prevention, security, responsible gaming monitoring, and Platform improvement, where our legitimate interests are not overridden by your rights and interests;
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time.

6.1  kedai888 does not sell your personal data to third parties. We share your data only in the following circumstances:

• Game providers and technology partners — certified game studios and technology service providers who supply game content or Platform infrastructure to kedai888, under appropriate data processing agreements;
• Payment processors — payment service providers facilitating deposits and withdrawals (e.g., FPX, eWallet operators), who process only the data necessary for payment execution;
• Identity verification providers — third-party KYC service providers engaged to assist with age and identity verification;
• Fraud detection services — specialist service providers engaged to assist kedai888 in detecting and preventing fraudulent activity on the Platform;
• Legal and regulatory authorities — where required by law, court order, or regulatory direction, kedai888 will disclose personal data to competent Malaysian authorities or other lawful recipients;
• Business transfers — in the event of a merger, acquisition, or sale of all or part of kedai888's business, player data may be transferred to the successor entity subject to equivalent privacy protections.

6.2  All third-party service providers engaged by kedai888 are required to process personal data only for the specified purposes and are bound by contractual confidentiality and data protection obligations.

7.1  The kedai888 Platform uses cookies and similar tracking technologies to enable core functionality, improve user experience, and (where consent is given) for analytics purposes. The categories of cookies used are:

• Strictly necessary cookies — essential for the operation of the Platform, including session management and login authentication. These cannot be disabled.
• Functional cookies — used to remember your preferences, such as language settings and responsible gaming tool configurations.
• Analytics cookies — used to collect aggregated, anonymised information about how players use the Platform, helping kedai888 improve its services. Deployed only with your consent.

7.2  You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may impair the functionality of the kedai888 Platform.

8.1  kedai888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in any event for the minimum period required by applicable law and regulatory obligations.

8.2  Account data (including transaction and gaming history) is retained for a period of seven (7) years following account closure, in order to comply with anti-money-laundering obligations and to resolve any disputes that may arise after closure.

8.3  Where personal data is no longer required for any lawful purpose, kedai888 will securely delete or anonymise it in accordance with its data retention and disposal procedures.

9.1  kedai888 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the kedai888 Platform;
• Encryption of sensitive data fields (including payment information and passwords) at rest;
• Access controls limiting employee access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• OTP-based verification for logins from new devices to prevent unauthorised account access.

9.2  While kedai888 employs robust security measures, no online platform can guarantee absolute security against all threats. You are responsible for maintaining the confidentiality of your account credentials and for notifying kedai888 immediately if you suspect any unauthorised access to your account.

10.1  Subject to applicable law, you have the following rights in relation to your personal data held by kedai888:

• Right of access — to request a copy of the personal data kedai888 holds about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of personal data where there is no longer a lawful basis for its retention (subject to applicable legal retention obligations);
• Right to restriction — to request that kedai888 restrict the processing of your personal data in certain circumstances;
• Right to data portability — to receive your personal data in a structured, commonly used machine-readable format, where processing is based on consent or contractual necessity;
• Right to object — to object to processing based on legitimate interests or direct marketing purposes;
• Right to withdraw consent — to withdraw consent to processing at any time where consent is the legal basis, without affecting the lawfulness of prior processing.

10.2  To exercise any of the above rights, please contact kedai888 via the details in Section 14. kedai888 will respond to all valid requests within thirty (30) days. We may request proof of identity before processing certain requests.

11.1  If you have reason to believe that a person under 21 years of age has registered an account or provided personal data to kedai888, please contact us immediately at the details in Section 14 so that appropriate action can be taken.

12.1  In discharging its responsible gaming obligations, kedai888 monitors player account activity for indicators of potentially harmful gambling behaviour. This monitoring is conducted using your Usage Data and Responsible Gaming Data (as described in Section 3) and constitutes processing based on kedai888's legitimate interests in player welfare.

12.2  Where kedai888's responsible gaming systems identify indicators of potential problem gambling, kedai888 may proactively contact you with responsible gaming information or restrict account activity in accordance with its Responsible Gaming Policy. This processing is necessary for the protection of your fundamental interests.

12.3  Responsible gaming tool settings (deposit limits, self-exclusion status, etc.) are treated as sensitive operational data and are not disclosed to third parties except where required by law or for the technical administration of those tools. For full details of kedai888's responsible gaming approach, please see the Responsible Gaming page.

13.1  kedai888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform functionality. Where any change is material, kedai888 will notify registered players by email to their registered address or via a notice on the kedai888 Platform at least seven (7) days before the change takes effect.

13.2  The current version of this Policy is always available at kedai888.one/privacy-policy. The "Last updated" date at the top of this Policy indicates when it was most recently revised. Continued use of the Platform following the effective date of any change constitutes acceptance of the revised Policy.

14.1  If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by kedai888, please contact us using the following details:

14.2  kedai888 is committed to resolving all data privacy concerns promptly and transparently. This Policy was last reviewed and updated on 12 June 2026.