Does kedai168 sell my personal data to other companies?

Absolutely not. kedai168 does not sell, rent, or disclose your personal data to any third party for their commercial purposes. Your data is only shared with service providers who are contractually bound to protect it, or when required by Malaysian law.

How do I request a copy of the personal data kedai168 holds about me?

You may submit a data access request by contacting our support team via live chat or by emailing support@kedai168.fun with the subject line "Personal Data Access Request". We will process your request within 21 working days in accordance with Malaysia's PDPA requirements.

What happens to my data when I close my kedai168 account?

Upon account closure, your data will be retained for the period required by Malaysian law — typically 5 to 7 years for financial records. After that, your data will be securely deleted or anonymised. During the retention period, your data will not be used for any marketing or active operational purposes.

Can I stop receiving promotional emails from kedai168?

Yes, you may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link found at the bottom of any of our promotional emails, or via the notification settings in your account. Please note that emails related to account security and transactions are mandatory and cannot be disabled.

What steps does kedai168 take in the event of a data breach?

In the event of any data breach affecting your personal information, kedai168 will take immediate action to contain the issue, notify affected users within the timeframe stipulated by Malaysia's PDPA, and report the incident to the Department of Personal Data Protection Malaysia. We will also conduct a thorough investigation and implement preventive measures to avoid similar incidents in the future.

Is my financial information, such as my bank account number, stored securely?

Yes. Your financial information is stored with high-level encryption and used solely for the payment processing purposes you have authorised. We do not store your full credit or debit card number. All financial transactions are processed through trusted and secure payment channels such as DuitNow, FPX, and Malaysia's major eWallets.

kedai168 | Privacy Policy – How We Protect Your Data

01 Introduction

Kedai168 takes our responsibility to protect the privacy and security of every member's personal data seriously. This Privacy Policy is established to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international data protection standards.

As a trusted online entertainment platform in Malaysia, we understand that your trust is our most valuable asset. We are therefore committed to being transparent about the data we collect, why we need it, and how we protect it.

This document applies to all information collected through the kedai168.fun website, our mobile app, and any interactions you have with the platform and our support team. We encourage you to read this Privacy Policy carefully and to contact us if you have any questions.

This Privacy Policy forms part of the kedai168 Terms and Conditions. Continued use of our platform means you have read, understood, and agreed to the policy set out here.

02 Information Collected

Kedai168 collects various categories of personal information to ensure our services function properly, securely, and in compliance with applicable laws in Malaysia. The following are the types of information we collect:

Data Categories	Sample Information	Requirements
Personal Identity	Full name, date of birth, identification number (MyKad/Passport)	Mandatory (KYC)
Contact Information	Email address, phone number, residential address	Mandatory
Financial Information	Bank account number, bank name, eWallet details	Mandatory (Withdrawal)
Account Data	Username, password (encrypted), login history	Mandatory
Transaction Data	Deposit history, withdrawals, wagering, and wins	Mandatory
Technical Data	IP address, device type, web browser, operating system	Automatic
Usage Data	Games played, time spent, pages visited	Automatic
Verification Documents	MyKad copy, bank statement, selfie for verification	Required (KYC)

We do not collect information irrelevant to the purpose of providing our services. Sensitive data such as passwords are always stored in encrypted form and cannot be viewed by any kedai168 staff.

03 Data Collection Methods

Kedai168 collects your personal information through the following channels:

Account Registration: When you complete the registration form on kedai168.fun, basic information such as your name, email, and phone number is collected directly from you.
KYC Process: During identity verification, you submit documents such as a copy of your MyKad or passport directly through our platform.
Financial Transactions: Every time you make a deposit or withdrawal, information related to the payment method and transaction amount is recorded automatically.
Platform Activity: Our system automatically records your gaming activity, clicks, page navigation, and interactions with the platform via cookies and similar technologies.
Support Communications: When you contact our support team via live chat, email, or other channels, the conversation is recorded for training and service improvement purposes.
Devices and Networks: Your IP address, device information, and general location data are automatically collected when you access our platform for security purposes.

We have never purchased, rented, or obtained personal data lists from third parties for marketing or any other purpose.

04 Purpose of Data Use

Every piece of information we collect is used for specific and legitimate purposes. kedai168 uses your personal data for the following purposes:

Account Management: Creating, verifying, and managing your account on the kedai168 platform, including a secure login process.
Identity Verification (KYC): Verifying that you meet the minimum age requirement of 18 and confirming your identity in accordance with legal compliance requirements.
Payment Processing: Processing deposits, withdrawals, and other financial transactions securely and accurately.
Service Provision: Enabling you to access all games, promotions, and platform features available.
Platform Security: Detecting and preventing fraud, money laundering, account abuse, and other unlawful activities.
Customer Support: Providing you with effective technical assistance and support services.
Marketing Communications: Sending you promotional information, exclusive offers, and the latest news about kedai168, subject to your consent preferences.
Platform Improvements: Analysing usage patterns to improve user experience, platform performance, and various new features.
Legal Compliance: Meeting applicable legal and regulatory obligations in Malaysia.

We will not use your data for any purpose beyond those stated above without first obtaining your explicit consent.

05 Information Sharing

Kedai168 does not sell, rent, or disclose your personal information to third parties for their own commercial purposes. However, we may share your information in the following limited circumstances:

Service Providers: We share necessary information with trusted third-party service providers such as payment processors (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay), game providers, and cloud infrastructure services. All parties are bound by strict data protection agreements.
Legal Requirements: We may disclose your information to competent authorities when required by Malaysian law, court order, or a valid criminal investigation.
Fraud Prevention: Where required, certain information may be shared with fraud prevention agencies or industry security information-sharing platforms to protect all parties.
Business Transfers: In the event of a merger, acquisition, or sale of kedai168 assets, user data may be transferred to the new entity, which will be bound by this Privacy Policy.

All third parties receiving your data from kedai168 are contractually bound to protect that information to a standard equal to or higher than this Privacy Policy.

06 Data Security

The security of your personal data is a responsibility we take extremely seriously. kedai168 implements comprehensive layers of technical and organisational protection to prevent unauthorised access, use, disclosure, or destruction of data.

256-bit SSL Encryption: All communications between your browser and our servers are protected with industry-standard 256-bit SSL/TLS encryption, the same as that used by major financial institutions worldwide.
Encrypted Password Storage: Your password is stored using a secure one-way hashing algorithm. No one on our team can view your password in its original form.
Two-Factor Authentication (2FA): 2FA is available and strongly encouraged for all members to add an extra layer of security to your account.
24/7 Monitoring: Our security monitoring system operates around the clock to detect any intrusion attempts, unusual activity, or other security threats.
Internal Access Controls: Only authorised personnel have access to your personal data, based on a strict need-to-know basis.
Regular Security Audits: We conduct regular security audits and penetration testing to identify and address any system vulnerabilities.
Secure Data Centre: Your data is stored in high-grade data centres with robust physical security controls, redundancy, and disaster recovery procedures.

While we implement all reasonable security measures, no system can guarantee 100% absolute security. In the event of any data breach affecting your personal information, we will notify you within the timeframe required by law.

07 Cookies & Tracking Technologies

Kedai168 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled without affecting platform functionality.
Performance Cookies: Collecting information on how you use our platform — pages visited, time spent, and any errors encountered. This data is used to improve the platform.
Functional Cookies: Saving your preferences such as language, display settings, and login information you have permitted to be stored for future convenience.
Analytics Cookies: Helping us understand overall platform traffic and usage patterns for service improvement and internal marketing purposes.

You can control or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality or user experience of the kedai168 platform.

By continuing to use the kedai168 platform, you agree to the use of cookies as described in this policy. You may manage your cookie preferences through your browser settings at any time.

08 Your Rights

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by kedai168:

Right to Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 working days.

Right to Correction

If your data is inaccurate or outdated, you have the right to request a correction through your account settings or our support team.

Right to Withdraw Consent

You may withdraw consent for marketing communications at any time without affecting core services.

Right to Restriction of Processing

In certain circumstances, you may request a restriction on the processing of your data while a review or complaint is pending.

Right to Erasure

You may request the deletion of your personal data, subject to our legal record-retention obligations.

Right to Complaint

If you are not satisfied, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of the above rights, please contact our team by email at [email protected] or via live chat. We will endeavour to process your request within the timeframe prescribed by Malaysia's PDPA.

09 Data Storage

Kedai168 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

Active Account Data: For as long as your account is active at kedai168, we retain all information associated with your account to ensure smooth service delivery.
Financial Transaction Data: Financial transaction records are retained for a minimum of 7 years in accordance with Malaysia's financial and accounting legal requirements.
KYC Documents: Identity verification documents are retained for 5 years after account closure or the date of the last transaction, whichever is later.
Security Logs: Access and security logs are retained for 12 months for investigation and security compliance purposes.
Communication Records: Customer support conversation history is retained for 3 years for service improvement purposes and reference in the event of a dispute.

Upon expiry of the retention period, your personal data will be securely deleted or anonymised using approved procedures. Anonymised data no longer contains any information that can personally identify you.

10 Children's Privacy

Kedai168 is an online entertainment platform exclusively for adults aged 18 and above. We take the prevention of underage access very seriously.

Minimum Age Requirement: Our platform does not permit registration or use by anyone under the age of 18. Our KYC process is designed to verify this age requirement.
No Collection of Children's Data: We do not intentionally collect, process, or store any personal data from individuals under the age of 18.
Immediate Action: If we discover that a user under the age of 18 has registered an account, we will immediately close the account and delete all associated data.

If you believe that a minor has registered an account on kedai168, please contact us immediately at [email protected] so that appropriate action can be taken without delay.

11 Policy Amendments

Kedai168 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or platform improvements.

Notice of Changes: Any material changes to this Privacy Policy will be communicated to you via a prominent notice on our platform or by email to your registered address.
Effective Date: Each version of the Privacy Policy will state its effective date. The current version takes effect on 1 January 2026.
Periodic Review: We encourage you to review this page periodically to stay informed about how we protect your data.
Continued Acceptance: Continued use of the kedai168 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer through the following channels:

Email: [email protected] (response within 24–48 hours on business days)
Live Chat: Available 24/7 via the chat icon on the kedai168.fun platform
Language: Enquiries accepted in Bahasa Melayu and English

For more information about your rights under Malaysia's PDPA, you may visit the official website of the Department of Personal Data Protection Malaysia. For any complaints that cannot be resolved through us, you have the right to submit a formal complaint to the relevant authority.

Our team is ready to help you understand and exercise your privacy rights. Do not hesitate to contact us — we are committed to responding to every enquiry transparently and professionally.

Privacy Policy kedai168

Contents