keduritoto Official Privacy Policy

Privacy Policy keduritoto — Malaysia Member Personal Data Protection

At keduritoto, we understand that your privacy is not a trivial matter. This document clearly explains how we collect, use, store, and protect your personal data — so you can play with peace of mind without worrying about the security of your information.

Last Updated: 1 January 2026 Bahasa Melayu Version Malaysia PDPA Compliance

Six Principles of Data Protection keduritoto

These are the principles that guide how we handle the personal data of all keduritoto members.

End-to-End Encryption

All data transmitted between your device and keduritoto servers is protected with 256-bit SSL encryption. Your sensitive information cannot be intercepted or read by third parties while in transit.

Minimum Data Collection

Keduritoto only collects data that is genuinely necessary to provide our services. We do not request irrelevant information and do not retain data beyond the period required.

No Data Sales

Your personal data will not be sold to any third party for marketing or commercial purposes. This is not merely a promise — it is a strict policy embedded in all of our partnership agreements.

Full Control Is Yours

You have the right to access, correct, download, or delete your personal data at any time. The keduritoto support team is ready to help you exercise these rights.

Malaysia PDPA Compliance

All our data handling practices comply with Malaysia's Personal Data Protection Act (PDPA) 2010 and its amendments. We take our legal responsibility to protect user data seriously.

Breach Notification

In the event of any data security breach involving your personal information, keduritoto is committed to notifying you within 72 hours of the breach being detected.

1

Introduction to the keduritoto Privacy Policy

Keduritoto ("we", "our platform") is committed to protecting the privacy and security of the personal data of all its users. This Privacy Policy explains our practices regarding the collection, use, storage, and protection of personal information you provide to us while using the keduritoto platform.

This document applies to all users of the keduritoto platform, including website visitors, registered users, and active members. By accessing or using keduritoto's services, you agree to the practices described in this Privacy Policy.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and industry best practices for online user data protection.

If you have any questions about this Privacy Policy or how we handle your data, please contact the keduritoto support team through the official channels available on the platform.

2

What Data Do We Collect?

Keduritoto collects your personal data through several means — directly when you register or interact with the platform, and automatically when you use our services. The following are the categories of data we collect:

Data Category Example Information Resources
Identity Data Full name, date of birth, identification card number Provided during registration / KYC
Contact Data Email address, phone number, residential address Provided during registration
Financial Data Bank account number, digital wallet information (for payment processing) Provided for deposit / withdrawal
Technical Data IP address, device type, browser, operating system Collected automatically
Usage Data Game history, betting records, account activity Generated during platform usage
Communication Data Support chat logs, help tickets, feedback While you are in contact with us

We do not collect sensitive data categories such as medical information, religious beliefs, or political views, except in specific cases where you have voluntarily provided them.

3

How Do We Use Your Data?

The personal data we collect is used solely for legitimate and transparent purposes. Below are the primary purposes for which your data is used at keduritoto:

  • Account Management: Creating, verifying, and managing your account on the keduritoto platform.
  • Transaction Processing: Processing deposits, withdrawals, and any other financial transactions you carry out.
  • Identity Verification (KYC): Meeting legal requirements for verifying user identity and preventing fraud.
  • Service Provision: Ensuring you can access and enjoy all games and features available on the platform.
  • Customer Support: Helping you resolve any issues or queries related to your account or gameplay.
  • Platform Security: Detecting and preventing fraud, unauthorised use, and other security threats.
  • Platform Enhancement: Analysing usage patterns to improve the overall user experience.
  • Marketing Communications: Sending promotional information and relevant offers — only if you have given your consent.

We do not use your data to make automated decisions that affect your legal rights without appropriate human intervention.

4

Data Sharing and Disclosure

Keduritoto does not sell, rent, or trade your personal data to third parties for marketing purposes. However, in certain limited situations, we may need to share data with the following parties:

  • Payment Service Provider: DuitNow, FPX, Touch 'n Go, Boost, GrabPay, and other payment processors that help handle your financial transactions.
  • Game Software Provider: Third-party game providers that supply the casino, slots, and other game platforms — only the minimum data required for game operations.
  • Statutory Authorities: Where required by law or a valid court order, we may be obliged to disclose data to the relevant authorities.
  • Technical Service Providers: Companies that help us operate the platform's technical infrastructure, including cloud storage and cybersecurity — subject to strict confidentiality agreements.

All third parties that receive data from keduritoto are required to comply with privacy standards equal to or stricter than our own. They are not permitted to use that data for any purpose other than what has been specified.

5

Your Personal Data Security

The security of your personal data is keduritoto's top priority. We implement a comprehensive range of technical and organisational security measures to protect your data from unauthorised access, loss, destruction, or disclosure.

Key security measures we practise:

  • 256-bit SSL Encryption for all data transmitted between your device and our servers.
  • Encryption of data at rest for sensitive information stored in our databases.
  • Two-Factor Authentication (2FA) available for all accounts for stronger Login protection.
  • 24/7 Monitoring by the cybersecurity team to detect and respond to threats.
  • Regular security audits by independent parties to ensure our systems remain up to date and secure.
  • Role-based access control ensuring internal staff can only access data required for their specific duties.

While we take every reasonable measure to protect your data, no system is completely 100% secure. You also play an important role by keeping your password confidential and enabling 2FA on your account.

6

Data Retention Period

Keduritoto retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations.

Data Type Retention Period
Active Account Data For the duration of the active account + 5 years after closure
Financial Transaction Records 7 years (legal requirement)
KYC Documents 5 years after the business relationship ends
Support Communication Logs 2 years from the date of interaction
Technical & Log Data 90 Days
Marketing Data Until you withdraw your consent

Once the retention period has expired, your data will be fully deleted or anonymised in accordance with secure disposal procedures.

7

Your Rights Regarding Personal Data

Under Malaysia's PDPA and keduritoto's policy, you have the following rights regarding your personal data:

Right of Access
You have the right to request a copy of the personal data we hold about you at any time.
Right to Rectification
If your data is inaccurate or outdated, you have the right to request that we correct it without delay.
Right to Erasure
Under certain circumstances, you may request that we delete your personal data — subject to legal retention requirements.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time.
Right to Data Portability
You have the right to receive your personal data in a machine-readable format for transfer to another provider.
Right to Restrict Processing
In certain situations, you may request that we restrict how we process your data while a dispute is being resolved.

To exercise any of the above rights, contact the keduritoto support team via live chat or the official email channel. We will process your request within 30 business days.

8

Cookies and Tracking Technologies

Keduritoto uses cookies and similar tracking technologies to enhance the user experience, ensure smooth platform functionality, and understand how users interact with our platform.

We use four main categories of cookies:

Essential Cookies Functional Cookies Analytics Cookies Preference Cookies
  • Essential Cookies: Required for core platform functions such as login, user sessions, and security. Cannot be disabled.
  • Functional Cookies: Storing user preferences such as language, theme, and personal settings. Can be disabled but will affect the user experience.
  • Analytics Cookies: Helping us understand how the platform is used so we can make improvements. Data is collected in aggregate and without personal identification.
  • Preference Cookies: Marketing cookies to display more relevant content. You can choose to opt out of these cookies.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some parts of the keduritoto platform.

9

Child Data Protection

Keduritoto services are strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

Should we discover that we have collected personal data from a minor, we will immediately take the following steps:

  • Deleting all personal data related to that individual.
  • Closing the associated account.
  • Reporting the incident to the relevant authorities if required.

Parents or guardians who believe their child has registered or used the keduritoto platform are urged to contact us immediately so that appropriate action can be taken.

10

Amendments to This Privacy Policy

Keduritoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or industry developments.

When a material change occurs, we will:

  • Updating the "Last Updated" date at the top of this document.
  • Displaying a prominent notice on the platform's home page for a minimum period of 30 days.
  • Sending notifications to all members via their registered email.
  • For highly significant changes, re-requesting your consent where necessary.

Continued use of the keduritoto platform after any amendments take effect will be considered your acceptance of the revised policy.

11

Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding how keduritoto handles your personal data, please reach us through the following channels:

Live Chat Platform
Available 24/7 via the keduritoto app or website
Official Email
Response Time
Within 3 business days for privacy-related inquiries

We take every privacy complaint seriously and will conduct a thorough investigation before responding. If you are not satisfied with our response, you have the right to escalate your complaint to the Personal Data Protection Department of Malaysia.

YOUR PRIVACY, OUR PRIORITY

Play with Peace of Mind at keduritoto

Now you know how keduritoto protects your personal data. Register today and enjoy a safe, fun, and responsible gaming experience alongside more than 500,000 other members in Malaysia.

SSL
256-bit Encryption
PDPA
Full Malaysia Compliance
72 Hours
Data Breach Notice
0
Data Sold to Third Parties
Bahasa Melayu