Official Privacy Policy

Privacy Policy KedirToto

Your personal data is a trust we take seriously. This document transparently explains what we collect, how it is used, and your rights as a player to control your own information.

Last Updated: 1 January 2026 Complying with Malaysia's PDPA 2010

Six Data Protection Principles KedirToto

We don't just comply with the law — we go beyond the minimum requirements to ensure your data is truly secure.

Limited Collection

We only collect data that is genuinely necessary for platform operations. No excessive or irrelevant data collection takes place.

Highest-Level Encryption

All data transmitted and stored is protected with 256-bit SSL encryption — the same standard used by banking institutions.

No Data Sales

Your personal data is never sold, rented, or shared with third-party advertisers for commercial purposes.

Your Controls

You have the right to access, correct, or request deletion of your personal data at any time through your account or our support team.

Full PDPA Compliance

KedirToto operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards.

Breach Notification

In the event of any security incident, we will notify affected players within 72 hours as required by law.

01Introduction and Scope of This Policy

KedirToto is fully committed to protecting the privacy of every individual who interacts with our platform. This Privacy Policy ("Policy") transparently explains how KedirToto collects, uses, stores, discloses, and protects your personal information when you use the website kedirtoto.app and all related services.

This document applies to all KedirToto platform users — including visitors, registered members, and former members. By registering or using our services, you agree to the practices described in this Policy. If you do not agree, please stop using the platform and contact us to request data deletion.

This Privacy Policy should be read together with Terms and Conditions KedirToto. Both documents form the complete agreement between you and our platform.

02Personal Data We Collect

KedirToto practises the principle of data minimisation — we only collect data that is genuinely necessary to provide safe, fair, and legally compliant services.

2.1 Information You Provide Directly

  • Registration Information: Full name, date of birth, identity card number (MyKad), email address, phone number, and password.
  • KYC Documents: MyKad copy, proof of address (utility bill, bank statement), and other supporting documents for identity verification.
  • Payment Information: Bank account number, account holder name, and payment method details used for deposits and withdrawals.
  • Communications: The content of messages, inquiries, or complaints you send to our support team.

2.2 Information Collected Automatically

  • Technical Data: IP address, browser type, operating system, screen resolution, and device information.
  • Usage Data: Pages visited, session duration, games played, access times, and in-platform actions.
  • Transaction Data: Records of deposits, withdrawals, wagering, and win history.
  • Cookie Data: Information collected through cookies and similar tracking technologies (see Section 6).
Data Category Information Type Primary Purposes
Identity Name, MyKad, date of birth Age verification & KYC
Contact Email, phone number Communications & account security
Financial Bank details, transaction records Payment processing & auditing
Technical IP, device, access logs Security & fraud prevention
Usage Game records, betting Legal compliance & reporting

03How We Use Your Data

Every piece of data we collect has a specific purpose permitted under PDPA 2010. The following are the primary purposes for which your data is used:

  • Platform Operations: Providing access to games, processing deposits and withdrawals, managing accounts, and delivering customer support.
  • Identity Verification (KYC): Verifying that you meet the minimum age requirement of 18 and confirming your identity to prevent fraud and money laundering.
  • Security & Fraud Prevention: Detecting and preventing suspicious activity, unauthorised access, and any form of misconduct on the platform.
  • Legal Compliance: Meeting reporting obligations to relevant authorities in accordance with applicable Malaysian law.
  • Service Improvement: Analysing usage patterns (in aggregate and anonymised form) to improve user experience and platform performance.
  • Communications: Sending important notifications related to your account, security, and policy updates. (Marketing communications only with your consent.)

KedirToto does not use your data to make automated decisions that negatively affect your rights without human review. All account suspensions are reviewed by our compliance team.

04Data Sharing and Disclosure

KedirToto does not sell your personal data to any party. Disclosure of data to third parties only occurs in very limited situations:

4.1 Third-Party Service Providers

We work with trusted service providers who help operate the platform, including:

  • Payment Processors: To facilitate deposit and withdrawal transactions via banking and e-wallet methods.
  • KYC Service Providers: To assist with secure identity and document verification.
  • Infrastructure Services: Server and cloud service providers that store data in secure, compliant environments.
  • Analytics Services: Anonymous analytics tools to understand aggregate platform usage patterns.

All these third-party providers are bound by strict data protection agreements and are only permitted to use your data for the specific purposes we define.

4.2 Legal Requirements

KedirToto may disclose your data to government authorities, law enforcement agencies, or courts when required by Malaysian law — including the Financial Intelligence and Enforcement Department (FIED) of Bank Negara Malaysia in cases involving suspicious financial activity.

We will endeavour to notify you of any such disclosure in advance where the law permits such notification.

05Data Security and Protection

KedirToto invests seriously in security infrastructure to ensure your personal data remains protected at all times. The technical and organisational measures we implement include:

  • 256-bit SSL/TLS Encryption: All communications between your browser and our servers are encrypted using the latest encryption protocols.
  • Data Encryption at Rest: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using AES-256.
  • Strict Access Controls: Only authorised staff with a legitimate need may access players' personal data.
  • 24/7 Monitoring: A real-time security monitoring system detects and responds to any threats or suspicious activity.
  • Regular Security Audits: Penetration testing and security audits are conducted regularly by independent parties.
  • Two-Factor Authentication: Players are encouraged to enable 2FA for an additional layer of account security.

While we take every reasonable step to protect your data, no system can be guaranteed 100% secure. You also play an important role in keeping your account safe by using a strong password and not sharing it with anyone.

06Cookies and Tracking Technologies

KedirToto uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login, session security, and navigation. Cannot be disabled.
  • Functional Cookies: Saving your preferences such as language, display settings, and game preferences for a more personalised experience.
  • Analytics Cookies: Collecting information about how you use the platform (anonymously) to help us improve our services.
  • Security Cookies: Helping identify suspicious sessions and preventing unauthorised access.

6.2 Managing Cookie Preferences

You can manage and delete cookies through your browser settings. However, disabling essential cookies may affect platform functionality and prevent you from logging in or using certain features.

07Your Rights Under PDPA 2010

As a KedirToto player whose personal data we hold, you have rights guaranteed under Malaysia's Personal Data Protection Act 2010 (PDPA). We fully respect these rights.

Right to Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request correction of inaccurate or incomplete data through your account settings or our support team.

Right to Erasure

You may request deletion of your data, subject to applicable legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another platform.

Right to Complain

If you are not satisfied, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner.

To exercise any of the above rights, contact the KedirToto support team via live chat or email at [email protected]. We will process your request within 14 business days.

08Data Retention and Deletion Period

KedirToto does not retain your personal data longer than necessary. Our retention periods depend on the type of data and applicable legal requirements:

  • Active Account Data: Retained for the duration of the active account plus 5 years after account closure for audit and compliance purposes.
  • Financial Transaction Records: Retained for 7 years in accordance with the Companies Act and Malaysian financial legislation.
  • KYC Documents: Retained for a minimum of 6 years after account closure in accordance with anti-money laundering standards.
  • Security Logs: Retained for 12 months for investigation and fraud prevention purposes.
  • Support Communications: Retained for 3 years for reference and service improvement purposes.

After the designated retention period, your data will be securely deleted or anonymised so it can no longer be linked to you.

09Amendments to This Privacy Policy

KedirToto reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, applicable laws, or technological developments. Significant changes will be communicated to you via:

  • Email notifications sent to the address registered in your account.
  • A prominent notice on the KedirToto platform homepage.
  • An in-platform pop-up notice during your next login session.

Continued use of the KedirToto platform after any changes to this Policy constitutes your acceptance of the latest version. It is your responsibility to review this page periodically. The last updated date is always displayed at the top of this document.

10Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how KedirToto handles your personal data, we are ready to listen and assist.

The KedirToto Privacy Team can be reached through the following methods:

  • Email: [email protected] (for privacy enquiries, use the subject "Data Privacy Enquiry")
  • Live Chat: Available 24/7 via the chat icon within the KedirToto platform
  • Response Time: We aim to respond to all enquiries within 2 business days

KedirToto takes every privacy inquiry and complaint seriously. Your information is our responsibility, and we always strive to provide clear, transparent, and helpful responses.

Play with Peace of Mind at KedirToto

We ensure your privacy and data security are protected at all times. Register today and enjoy a safe, fair, and responsible gaming experience with KedirToto.

PDPA 2010 Compliance 256-bit SSL Encryption No Data Sales
Bahasa Melayu