Privacy Policy kediritoto – User Data Protection

Kediritoto ("we", "our platform") cares deeply about the privacy of every user who uses our services. This Privacy Policy transparently explains how we manage your personal information from the moment you register until you stop using our platform.

This document is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and adheres to international standards in user data handling. We ensure that every piece of information you share with us is handled with full responsibility.

This Policy applies to all kediritoto channels — the official website, Android and iOS mobile apps, and any integrated services operating under the kediritoto brand. If you access our platform via a third-party link, we encourage you to read that website's privacy policy separately.

We collect two main categories of information: information you provide directly, and information collected automatically when you use our platform.

Information You Provide Directly:

• Full name as shown on your identity card or passport.
• Date of birth for age verification purposes.
• Active email address and phone number.
• Current residential address.
• Bank account or e-wallet details for deposit and withdrawal purposes.
• Identity documents submitted during the KYC (Know Your Customer) process.

Information Collected Automatically:

• IP address and general location information (state or city).
• Device type, operating system and browser version used.
• Login session records including date, time, and duration.
• Gaming activity history and transaction records.
• Cookie data and session identifiers for platform functionality purposes.

The information we collect is used solely for legitimate purposes relevant to the operation of the kediritoto platform. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying, and managing your user account.
• Transaction Processing: Securely processing deposits, withdrawals, and any financial transactions within the platform.
• Identity Verification (KYC): Complying with anti-money laundering (AML) legal requirements and verifying user identity.
• Customer Support: Providing technical support and resolving complaints or disputes you report.
• Platform Security: Detecting and preventing fraud, account intrusion attempts, and suspicious activity.
• Service Improvement: Analyzing usage patterns in aggregate (not individually) to improve platform features.
• Communications: Sending transaction notifications, security updates, and promotional information (if you have consented).

We do not use your data for automated decision-making that could have a material impact on you without human review. Any significant decisions, such as account closures or withdrawal rejections, involve manual review by our team.

Kediritoto does not sell or rent your personal information to any third party. However, there are limited situations where data sharing is necessary to operate the platform:

• Payment Providers: Required transaction details are shared with payment gateway providers (such as FPX, Touch 'n Go) solely to process your financial transactions.
• Game Software Providers: Game session data is shared with licensed game providers to ensure smooth and fair gameplay.
• Legal Compliance: We will disclose the required information to relevant authorities where mandated by a court order or applicable law.
• Fraud Prevention: Limited information may be shared with risk assessment agencies to detect and prevent fraudulent activity.

Kediritoto uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Preference Cookies: Saving your preferences such as interface language and display settings for your convenience.
• Analytics Cookies: Collecting anonymized usage data to help us understand how users interact with the platform and identify areas for improvement.
• Security Cookies: Used to detect suspicious login attempts and protect your account from unauthorised access.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some platform features.

Protecting your data is our highest priority. kediritoto continuously invests in the latest security infrastructure to keep your information safe at all times.

Security Measures We Practice:

• 256-bit SSL encryption for all data transmitted between your device and our servers.
• Passwords are stored using one-way hashing algorithms that cannot be decrypted.
• Two-factor authentication (2FA) is available for all user accounts.
• Round-the-clock security monitoring by our IT security team.
• Regular penetration testing by independent security experts.
• Multi-layered access controls — only authorised personnel may access sensitive data.
• Periodic data backups to a secure, isolated location.

Under Malaysia's PDPA and kediritoto's privacy policy, you have the following rights regarding your personal information:

To submit any request relating to your privacy rights, please contact our customer support team via live chat on the platform. We will verify your identity before processing any request to ensure the security of your data.

Kediritoto only retains your personal information for as long as necessary to fulfil the purpose for which it was collected, or as required by law.

• Active Account Data: Retained for the duration your account is active and for several years after account closure for legal compliance purposes.
• Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and audit legal requirements.
• Security Logs: Retained for 12 months for investigation purposes if required.
• Marketing Data: Deleted immediately upon withdrawal of your consent to receive marketing communications.

Once the retention period expires or a valid deletion request has been processed, your data will be permanently deleted or anonymised so that it can no longer be linked to your identity.

The kediritoto platform is strictly for individuals aged 18 and above. We do not intentionally collect, store, or process personal information from individuals under the age of 18.

Kediritoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements or service improvements. Any material changes will be communicated to you via:

• In-platform notifications upon login.
• Email sent to the registered address on your account.
• Update the review date at the top of this page.

Continued use of the kediritoto platform after any policy changes are published is considered your acceptance of the updated policy. We recommend reviewing this page periodically.

If you have any questions, concerns, or complaints regarding how we handle your personal information, our privacy team is ready to assist. We are committed to responding to every privacy inquiry seriously and within a reasonable timeframe.

You can reach us through the following channels:

• Live Chat 24/7: Available directly on the kediritoto web platform or mobile app.
• Support Email: [email protected]

For formal complaints regarding data protection, you also have the right to submit a complaint to the Department of Personal Data Protection (JPDP) Malaysia if you believe your privacy rights have been violated and we have failed to resolve the matter satisfactorily.