Privacy Policy Keduritoto – Our Commitment to Protecting User Data

Introduction and Scope of This Policy

Keduritoto ("we", "Platform", or "this website") is committed to protecting and respecting the privacy of every user who registers and uses our services. This Privacy Policy has been formulated to meet the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

This policy covers all your interactions with Keduritoto, including account registration, use of the gaming platform, financial transactions, interactions with our support team, and visits to our website. It applies to all registered users and platform visitors regardless of the device used.

We regard your trust as our most valuable asset. We are therefore committed to not using your data beyond what is necessary and to never sharing your information without a legitimate and justifiable reason.

Types of Personal Data We Collect

Keduritoto collects different information depending on how you interact with our platform. The following are the main categories of data we collect:

How We Use Your Data

Every piece of data we collect has a clear purpose and is used only within the stated scope. We do not use your data for unrelated purposes without obtaining fresh consent from you.

• Managing account registration and verifying user identity as required by anti-money laundering (AML) laws.
• Processing deposits and fund withdrawals securely through payment processors integrated with our platform.
• Sending security notices, transaction confirmations, and important account-related communications.
• Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Improving the user experience based on usage patterns and aggregated feedback.
• Sending marketing communications such as promotional offers and bonuses — only to users who have given consent to receive such communications.
• Meeting legal compliance requirements and reporting obligations to the relevant authorities.

Sharing Information with Third Parties

Keduritoto does not sell, rent, or disclose your personal data to any third party for marketing purposes. However, there are certain situations where we need to share information with trusted parties:

• Payment Processors: Transaction information is shared with authorised payment processors solely to enable deposits and withdrawals to be processed securely.
• Technical Service Providers: Third parties that assist with platform operations such as server hosting and cybersecurity services are all bound by strict data confidentiality agreements.
• Legal Authorities: We will disclose information to authorities when required by court order, regulatory directive, or valid legal obligation.
• Identity Verification: Information required for the KYC process is shared with registered, PDPA-compliant third-party identity verification services.

All third parties that receive your data are required to adhere to data protection standards equal to or higher than those we practise. Written data processing agreements are mandatory for all service partners.

Data Security and Protection

We continually invest in security infrastructure to ensure your data is protected at every stage — during collection, storage, and transfer.

• All data transmitted between your browser and the keduritoto platform is protected by 256-bit SSL/TLS encryption, on par with that used by banking institutions.
• Data stored on our servers is protected with AES-256 encryption and multi-layered access controls.
• Intrusion detection systems (IDS) and security monitoring operate 24 hours a day, 7 days a week.
• Internal access to user data is restricted to staff who require it for their specific duties, with full audit records maintained.
• Data backups are performed regularly to separate, secure locations to ensure service continuity.

Cookies and Tracking Technologies

The keduritoto website uses cookies and similar tracking technologies to enhance the user experience and ensure the platform's core functions run smoothly.

• Essential Cookies: Required for core platform operations such as login session management and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how users interact with the platform to help us identify areas for improvement.
• Preference Cookies: Saving your preferences such as language and display settings so you do not have to reconfigure them each time.
• Analytics Cookies: Used to understand aggregated, anonymised usage patterns for service improvement purposes.

You can manage cookie settings through your browser. Disabling certain cookies may affect your platform experience but will not block access to core functions.

Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 and our own policies, you have the following rights regarding your personal data:

Data Retention Period

Keduritoto does not retain personal data longer than necessary. The retention period depends on the type of data and the purpose for which it is stored.

• Active account data is retained for as long as the account remains active, plus any period required by law upon account closure.
• Financial transaction records are retained for a minimum of seven (7) years as required by Malaysia's financial and taxation laws.
• Security and audit logs are retained for two (2) years for investigation purposes if required.
• Customer support communication data is retained for three (3) years to allow reference to service history.
• Once the retention period has ended, data will be securely deleted or anonymised so it can no longer be linked back to your identity.

Changes to This Privacy Policy

Keduritoto reserves the right to update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or developments in data protection technology.

• The latest version of this policy is always available on this page, with a clear "Last Updated" date shown at the top.
• For significant changes that materially affect user rights, we will send notice via email or in-platform notification at least 14 days before the changes take effect.
• Continued use of the platform after notice of changes is considered acceptance of the updated policy.

How to Contact Us

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, our team is ready to assist. We are committed to providing timely and meaningful responses to every privacy-related enquiry.

• Privacy support email: [email protected]
• Live chat is available 24/7 via the chat icon at the bottom corner of the platform.
• The standard response time for privacy enquiries is within 2 business days.
• For unresolved complaints, you may refer to the Personal Data Protection Commissioner of Malaysia.