Privacy Policy Kediritoro – How We Protect the Personal Data of Every Malaysian Player

To provide a secure, fair, and personalised experience for every member, kediritoro collects certain categories of data. All data collection is carried out transparently and only where a valid legal basis or your consent exists.

Data you provide directly:

Data collected automatically while you use the platform:

• IP address and general location information (state/city)
• Device type, operating system, and web browser version used
• Pages visited, time of visit, and navigation patterns within the platform
• Your in-account game history, bets, and transactions
• Communication records with the kediritoro customer support team

Every piece of data kediritoro collects has a clear and specific purpose. We do not use your data for any purpose beyond what is stated below without first obtaining your renewed consent.

• Account management – to create, verify, and manage your account at kediritoro.
• Transaction processing – to process deposits, withdrawals, and any financial activity on the platform.
• Identity verification (KYC) – to meet compliance requirements and verify that you are eligible to use the platform.
• Security and fraud prevention – to identify and prevent any suspicious or unlawful activity.
• Service improvements – to understand how users interact with the platform and make relevant improvements.
• Service communications – to send important notifications relating to your account, transactions, or policy changes.
• Customer Support – to process and resolve enquiries and complaints you submit to our team.
• Responsible gaming – to monitor usage patterns and provide assistance to players who may need support.

Kediritoro does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, there are specific situations where data sharing is necessary to deliver our services:

• Payment providers – transaction information is shared with payment providers such as DuitNow, FPX, and digital wallet operators active on the kediritoro platform for processing purposes only.
• Game providers – basic account information may be shared with game providers such as PG Soft, Pragmatic Play, and Evolution Gaming solely to enable access to their games.
• Technology service providers – companies providing server infrastructure, analytics, and technical support services to kediritoro may have limited access to data necessary for their tasks.
• Legal authorities – kediritoro will disclose data when required by law, court order, or direction from a competent regulatory authority.

All third parties working with kediritoro are bound by strict confidentiality agreements and are required to meet data protection standards equal to or higher than kediritoro's own.

Kediritoro uses cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly. Here are the types of cookies we use:

• Essential cookies – required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance cookies – helps us understand how users interact with the platform so we can make targeted improvements.
• Functional cookies – stores your preferences such as language, display settings, and favourite games so you don't need to reconfigure them every time you log in.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect some features on the kediritoro platform. Note: Kediritoro does not use third-party cookies for targeted advertising.

Kediritoro continuously invests in security infrastructure to keep your data protected at all times. Our security measures include:

• 256-bit SSL encryption for all communications between your device and kediritoro servers.
• Encryption of sensitive data stored in the database — including passwords stored in an unreadable hashed format.
• Two-factor authentication (2FA) is available for all accounts and strongly encouraged for all members.
• Real-time 24/7 security monitoring and intrusion detection.
• Regular independent security audits and penetration testing.
• Strict access controls – only authorised kediritoro staff may access user data, and only for purposes related to their role.
• Secure data backup systems to ensure your data is never lost due to technical failure.

Kediritoro respects your rights over your own personal data. Below is a summary of the rights you hold:

Kediritoro retains your personal data only for as long as necessary to fulfil the purpose it was collected for, or to comply with legal requirements. Our general data retention guidelines are as follows:

• Active account data – retained for as long as your account is active and for 5 years after account closure for legal compliance purposes.
• Transaction records – retained for 7 years in accordance with Malaysia's financial regulatory requirements.
• KYC documents – retained for as long as the account is active and for 5 years after account closure.
• Support communication logs – retained for 2 years from the date of last communication.
• Analytics and system log data – retained for a maximum of 12 months before being anonymised or deleted.

Kediritoro reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new technologies. When we make significant changes, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the kediritoro platform for at least 14 days.
• Sending a notification to members via their registered email if the changes are material and significantly affect your rights.

Continued use of the kediritoro platform after the effective date of any policy update constitutes your acceptance of the latest version of this Privacy Policy.

If you have any questions, concerns, or wish to exercise any of the privacy rights stated in this policy, please contact the kediritoro team through the following channels: