Kediritoti Privacy Policy – How We Protect the Data and Privacy of Malaysian Players

Kediritoti collects your personal data through several different methods depending on how you interact with our platform. This data collection is conducted transparently and only where there is a legitimate legal basis or valid operational need to do so.

Our main data collection methods are as follows:

• Account Registration: When you register a new account at kediritoti, we collect information you provide directly, such as your name, date of birth, phone number, and email address.
• KYC Process: To meet compliance requirements and prevent fraud, we collect identity documents and proof of address during the identity verification process.
• Financial Transactions: Deposit and withdrawal information is collected automatically for payment processing and financial record-keeping purposes.
• Platform Usage: Usage data such as activity logs, game history, and settings preferences are collected automatically when you use kediritoti services.
• Communications: When you contact our customer support, records of those communications are retained for service quality and complaint resolution purposes.
• Device & Technical: Technical information about your device — including device type, operating system, IP address, and general location data — is collected automatically.

The following table summarises the categories of personal data that kediritoti collects and holds:

We only store sensitive data such as identification numbers and banking information in encrypted format, protected by strict access controls.

Kediritoti uses your personal data only for legitimate and stated purposes as outlined below. We will not process your data for any other purpose without informing you in advance.

• Account Management: To create, verify, and manage your player account on the kediritoti platform.
• Transaction Processing: To accurately and securely process deposits, withdrawals, and all other financial transactions.
• Legal Compliance: To fulfill KYC, AML (anti-money laundering), and reporting obligations to the relevant authorities.
• Platform Security: To detect and prevent fraud, unauthorized access, multi-account usage, and other security threats.
• Service Improvement: To understand usage patterns and improve the features, performance, and user experience of the kediritoti platform.
• Service Communications: To send important notifications relating to your account, transactions, policy changes, and security updates.
• Customer Support: To resolve inquiries, complaints, and technical issues in an effective manner.
• Promotions (with consent): To send relevant offers and promotions if you have given consent to receive marketing communications.

Kediritoti does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are certain situations where data sharing is necessary for the operation of our platform:

• Payment Providers: Required transaction information is shared with payment service providers such as banks, DuitNow, and eWallet providers to process your transactions. These providers are bound by strict confidentiality obligations.
• Game Providers: Required data is shared with game software providers to enable proper game functionality and for fraud prevention purposes.
• Legal Authorities: kediritoti will disclose personal data to authorities, law enforcement bodies, or regulators when required by Malaysian law or a valid court order.
• Technical Service Providers: IT infrastructure providers, customer support, and analytics partners working on behalf of kediritoti may access your data within the scope of their duties, subject to binding confidentiality agreements.

Kediritoti implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, loss, damage, or disclosure.

Key security measures we employ include:

• 256-bit SSL encryption for all data transmitted between you and kediritoti servers
• AES-256 encryption for sensitive data stored in our databases
• Two-factor authentication (2FA) is available and recommended for all accounts
• 24/7 security monitoring by the kediritoti IT security team
• Role-based access control — only authorised staff can access player data
• Regular security audits by independent third-party assessors
• A comprehensive incident response plan to address any data breaches
• Regular secure and encrypted data backups

Kediritoti uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies for different purposes:

• Essential Cookies: Required for core platform functions such as login sessions and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collects information on how you use the platform to help us identify issues and improve performance.
• Functional Cookies: Remembers your preferences such as interface settings and game preferences to improve ease of use.
• Analytics Cookies: Helps us understand overall platform usage patterns in aggregate, without identifying individual users.

You can manage cookie settings through your internet browser. However, disabling essential cookies may affect certain functions of the kediritoti platform.

As a kediritoti player based in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). kediritoti is committed to respecting and facilitating the exercise of these rights.

Kediritoti retains your personal data for as long as necessary to fulfill the original purpose of collection, or as required by applicable law. Our retention policy is as follows:

• Active Account Data: Retained for the duration your account is active and for an additional period following account closure in accordance with compliance requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements.
• KYC Records: Retained for a minimum of 5 years after the business relationship ends in accordance with AML requirements.
• Game Logs: Retained for 2 years for dispute resolution and audit purposes.
• Support Communication Records: Retained for 2 years for quality control and complaint resolution purposes.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with our data deletion procedures. Anonymised data no longer contains any personally identifiable information and may be used for internal statistical purposes.

The kediritoti platform may contain links or integrations with third-party services such as game providers and payment gateways. This Privacy Policy applies only to data we collect directly. When you access third-party platforms or services, your privacy is governed by their respective privacy policies.

Kediritoti is not responsible for the privacy practices of any third party. We recommend reading the privacy policies of any relevant third-party service providers before providing them with any personal information.

Kediritoti reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or technological developments. Any amendments will be posted on this page with an updated effective date.

For significant amendments that affect how we use your personal data, we will endeavor to provide advance notice via your registered email or an in-platform notification. Continued use of the kediritoti platform after the amendment's effective date constitutes acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. If you have any concerns about changes made, please contact us before continuing to use the platform.

If you have any questions, concerns, or requests regarding this Privacy Policy or how kediritoti manages your personal data, our privacy team is ready to assist. We are committed to addressing all privacy enquiries transparently and within a reasonable timeframe.

For more formal inquiries regarding data rights or complaints about how your data is managed, please contact us in writing via our support email. We will acknowledge receipt of your request within 3 business days and resolve it within 21 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia (PDPD) in accordance with the procedures set out under the PDPA 2010.