Privacy Policy kepo66 —
Your Data is Fully Protected

1. Introduction

Kepo66 takes member privacy very seriously. In today's digital world, data protection is not merely a legal obligation — it is part of our responsibility to every individual who entrusts their personal information to our platform.

This Privacy Policy ("Policy") describes how kepo66 collects, stores, uses, discloses and protects your personal data when you register, access or use our platform and services. It applies to all members, visitors and users of the kepo66 platform, including access via our website and mobile app.

This Policy is to be read together with Terms and Conditions and Responsible Gaming Policy of ours. Should any conflict arise between those documents regarding privacy, this Privacy Policy shall take precedence.

2. Personal Data We Collect

Kepo66 collects your personal data through various means during your interactions with our platform. Below are the types of data we collect and their sources:

2.1 Data You Provide Directly

• Identity Information: Full name, MyKad or passport number, date of birth and gender.
• Contact Information: Email address, mobile phone number and residential address.
• Financial Information: Bank account number, bank name and digital wallet details for deposit and withdrawal purposes.
• Verification Documents: Copies of identification documents, bank statements or other supporting documents submitted during the KYC process.
• Account Information: Username, password (stored in encrypted form), and account preferences.

2.2 Automatically Collected Data

• Usage Data: Login records, gaming activity, transaction history and platform usage patterns.
• Technical Data: IP address, device type, operating system, browser type, screen resolution and language settings.
• Location Data: General location based on IP address for regional verification and security purposes.
• Cookie Data: Session data, user preferences, and analytics data collected through cookies and similar tracking technologies.

2.3 Data Summary Table

3. Purposes of Data Use

Every piece of data we collect is used for specific, legitimate and necessary purposes. kepo66 does not use your data for purposes unrelated to the services we provide. Below are the primary purposes for which your personal data is used:

3.1 Service Operations

• Processing new account registrations and managing existing accounts.
• Processing deposits, withdrawals, and all financial transactions securely.
• Providing access to games, Sports Betting, and all platform features.
• Sending account-related notifications, transaction updates, and service announcements.

3.2 Identity Verification & Compliance

• Carrying out KYC (Know Your Customer) processes in line with compliance requirements.
• Verifying member age — only individuals aged 18 and above are permitted.
• Meeting legal obligations and regulatory reporting requirements.
• Preventing money laundering, fraud, and other illegal activities.

3.3 Security & Fraud Prevention

• Detecting and preventing unauthorised access, multiple account usage, and fraudulent activity.
• Monitoring suspicious transaction patterns to protect all members.
• Conducting internal investigations when complaints or security incidents arise.

3.4 Service Improvement

• Analysing usage patterns to improve the interface and user experience.
• Personalising content, offers, and promotions that are relevant to you.
• Running A/B tests and user experience studies to improve platform quality.

4. Data Sharing & Disclosure

Kepo66 does not sell, rent, or trade members' personal data to any third party for commercial purposes. However, there are certain situations where we need to share your information with trusted parties for service operational purposes:

4.1 Trusted Service Providers

We share necessary data with third-party service providers who help us operate the platform, including:

• Payment Processor: DuitNow, FPX, TNG eWallet and bank service providers for processing financial transactions.
• Identity Verification Provider: Third-party KYC services that assist in verifying member identities.
• Game Organiser: Game software providers who require basic information to ensure smooth game delivery.
• Analytics Services: Analytics platforms that help us understand usage patterns (data is anonymised).

All these service providers are bound by strict confidentiality agreements and are only permitted to process your data in accordance with our instructions.

4.2 Legal Requirements

Kepo66 may be required to disclose your personal data to authorities if mandated by law, court order, or a relevant regulatory body. In such situations, we will endeavour to notify you in advance unless prohibited from doing so by law.

4.3 Business Transfers

In the event of a merger, acquisition or asset transfer involving kepo66, members' personal data may be transferred as part of that process. Members will be notified in advance and their rights under this policy will be maintained.

5. Data Security

The security of your personal data is kepo66's highest priority. We implement a comprehensive range of technical and organisational measures to protect your data from unauthorised access, loss, misuse, or accidental disclosure.

5.1 Technical Security Measures

• 256-bit SSL Encryption: All data transmitted between your device and our servers is protected with industry-standard SSL/TLS encryption.
• Data-at-Rest Encryption: Sensitive data stored in our databases is encrypted using AES-256 encryption.
• Two-Factor Authentication: An additional security layer is available to protect member accounts from unauthorised access.
• Firewall & Intrusion Detection System: Our infrastructure is protected by multiple layers of firewalls and real-time threat detection systems.
• Regular Security Audits: Independent security assessments are conducted periodically by third-party security experts.

5.2 Organisational Measures

• Access to members' personal data is restricted solely to staff who require it for their job responsibilities.
• All staff undergo regular privacy and data security training.
• A data incident response procedure has been established to address any security breaches promptly.

6. Cookies & Tracking Technologies

Kepo66 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as the platform will not function without them.
• Preference Cookies: Saving your preferences such as language, time zone, and display settings so you don't need to reconfigure them every time you access the platform.
• Analytics Cookies: Helping us understand how members use our platform through anonymised aggregate data. This information is used to improve our services.
• Security Cookies: Helping detect suspicious activity and protect your account from unauthorised access attempts.

6.2 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect platform functionality and your user experience. Refer to your browser's help guide for more information on managing cookies.

7. Your Rights

As the owner of your personal data, you have certain rights that kepo66 is committed to upholding. Below are your rights and how to exercise them:

8. Data Retention Period

Kepo66 retains your personal data for as long as your account is active or as long as necessary to provide services to you. Following account closure, we will retain your data for a defined period in accordance with legal and regulatory requirements.

• Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysia's financial legal requirements.
• KYC Documents: Retained for 5 years after account closure or the date of the last transaction, whichever is later.
• Game Activity Logs: Retained for 3 years for dispute resolution and compliance purposes.
• Support Communication Logs: Retained for 2 years for service quality purposes and complaint reference.
• Technical & System Log Data: Retained for 12 months for security purposes and technical troubleshooting.

Once the designated retention period has elapsed, your personal data will be securely deleted or anonymised in a manner that can no longer be linked back to your identity.

9. Third-Party Links

The kepo66 platform may contain links to third-party websites or services in certain contexts. Please note that this Privacy Policy applies solely to the kepo66 platform and does not cover the privacy practices of any third parties.

Kepo66 is not responsible for the content, privacy policies, or practices of any third-party websites or services. We encourage you to read the privacy policy of every website you visit to understand how they handle your data.

10. Minors & Protection of Vulnerable Persons

The kepo66 platform is intended exclusively for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

All new registrants are required to verify their age during the registration process, and our KYC process is designed to detect and reject applications from underage individuals. Should we become aware or be informed that we have inadvertently collected data from someone under the age of 18, we will take immediate steps to delete that data and close the relevant account.

Parents or guardians who believe their child has registered on our platform without permission are urged to contact our support team immediately.

11. Amendments to the Privacy Policy

Kepo66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements, or new service features. Any changes will take effect once the updated version is published on this page with a new "Updated" date.

For material amendments that significantly affect how we use your personal data, kepo66 will notify you via your registered email or in-platform notification at least 14 days before the changes take effect. This allows you to make an informed decision about whether to continue using our services.

Continued use of the kepo66 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you disagree with any changes, please contact us or close your account before the amendment takes effect.

12. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact the kepo66 data protection team through the following channels:

• Privacy Email: [email protected] (use subject: "Data Privacy Inquiry")
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the platform.
• Response Time: We are committed to responding to all privacy-related enquiries within 3 business days.

To file a formal complaint regarding the handling of your personal data, please submit full details of your complaint to us via email. All complaints will be thoroughly investigated and we will provide a written response within 14 business days of receiving your complaint.