Kackpot Privacy Policy – Malaysian User Data Protection

1 Introduction & Scope of This Policy

Welcome to the kackpot Privacy Policy. This document ("Privacy Policy") explains how kackpot ("we", "Platform") collects, uses, stores, and protects your personal data when you use our website, mobile app, or any of the services we offer.

We understand that your trust in us depends largely on how we handle your personal information. That is why we strive to be as transparent as possible about our privacy practices — no overly complex legal language, no vague terms, and no hidden surprises.

This Privacy Policy applies to all Kackpot users, including unregistered visitors, registered members, and VIP members. By using our platform, you agree to the practices described in this Privacy Policy. This document should be read alongside Terms and Conditions Kackpot.

2 Types of Personal Data We Collect

Kackpot collects your personal data through several means — data you provide directly, data collected automatically during platform use, and in certain cases, data from legitimate third-party sources.

A. Data You Provide Directly:

• Full name, date of birth, email address, and mobile number.
• Current residential address information.
• Identity verification documents (KYC) — copies of MyKad, passport, or driving licence.
• Bank account details for deposit and withdrawal purposes.
• Communications you send to our customer support team.

B. Data Collected Automatically:

• IP address, web browser type, and device operating system.
• Activity log data — pages visited, access times, and in-platform actions.
• Game session data — wagers placed, games played, session duration.
• Geolocation data (country or region level) for regulatory compliance.
• Mobile device information including device ID and operating system version.

3 How We Use Your Data

Kackpot uses the personal data collected for the following purposes, and only for these purposes:

• Account management: Creating, verifying, and maintaining your account securely.
• Transaction processing: Processing deposits, withdrawals, and all related financial transactions.
• Identity verification (KYC): Ensuring all users are real individuals aged 18 and above, in line with regulatory requirements.
• Fraud prevention and anti-money laundering: Monitoring suspicious activity to protect all users on the platform.
• Service communications: Sending important notifications about your account, transactions, or policy changes.
• Platform improvements: Analyzing usage patterns in aggregate to enhance the user experience.
• Responsible gaming: Monitoring play patterns to identify users who may need responsible gaming support.
• VIP Program: Calculating loyalty points and determining VIP membership levels based on gaming activity.

4 Data Sharing with Third Parties

Kackpot does not sell users' personal data to any third party. However, we share data in limited and controlled circumstances with the following categories of third parties:

• Payment processing providers: To facilitate your deposits and withdrawals securely. They only receive the data necessary for the specific transaction.
• Identity verification service providers: To carry out the KYC process as required by regulators.
• Technology service providers: Companies providing the technical infrastructure for our platform, subject to strict confidentiality agreements.
• Regulatory authorities and law enforcement: When required by law or a valid court order.

All of kackpot's third-party partners are bound by strict data protection agreements and are only permitted to use your data for purposes we have specified. They are not allowed to use your data for their own purposes.

5 Data Security & Protection Measures

We invest seriously in security infrastructure to ensure your data is protected at all times. The technical and organizational measures we implement include:

• 256-bit SSL encryption for all data transmitted between your device and our servers.
• Password storage using strong hashing algorithms — we cannot view your password ourselves.
• Server infrastructure protected by multi-layered access controls and 24/7 monitoring.
• Regular security audits conducted by independent third parties.
• Mandatory data protection training for all staff with access to user data.
• Documented security incident response procedures for data breach situations.

While we take all reasonable measures, no digital security system can be guaranteed 100% safe. In the event of a data breach affecting your information, we will notify you within the timeframe required by applicable law.

6 Data Retention Period

Kackpot retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required by applicable law.

• Active account data: Retained for as long as your account is active and for a minimum period after account closure as required by regulatory requirements.
• Financial transaction records: Retained for a minimum of 7 years for anti-money laundering (AML) compliance and financial reporting requirements.
• Customer support communication data: Retained for 3 years from the date of last interaction.
• Technical and security logs: Retained for 12 months for security and digital forensics purposes.

When your data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise it in accordance with established procedures.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

8 Cookies, Tracking Technologies & Your Choices

Kackpot uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage patterns, and ensure the security of your login sessions.

Types of cookies we use:

• Essential cookies (required): Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Functional cookies: Saving your preferences such as language, display settings, and interface options for your convenience.
• Analytics cookies: Helping us understand how users interact with the platform for improvement purposes. Data is collected in aggregate and anonymized form.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the platform.

9 Minor Protection

The Kackpot platform is exclusively for individuals who have reached the age of 18. We do not knowingly collect or process personal data of underage children or minors.

If we discover that personal data of an individual under the age of 18 has been collected without proper consent, we will take immediate steps to delete that data and close the associated account. Parents or guardians who become aware that their child has registered on our platform are encouraged to contact us immediately.

10 Amendments to This Privacy Policy

Kackpot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. The latest version of the Privacy Policy will always be available on this page.

When we make material changes to this Privacy Policy, we will notify you via an in-platform notification or the email registered to your account at least 14 days before the changes take effect. Continued use of the Kackpot platform after such notice constitutes acceptance of the updated Privacy Policy.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our team is ready to assist.

You can reach Kackpot through the following channels:

• Live Chat: Available 24/7 directly within the kackpot platform or our mobile app.
• Support email: [email protected] (response within 24–48 business hours).
• Enquiry form: Available in the "Contact Us" section after logging in to your account.

For requests related to personal data rights (access, correction, deletion), please clearly state that it is a "Data Privacy Rights Request" so we can route it to the right team and process your request more efficiently.