Data Protection Commitment

Kedai24 Privacy Policy – Your Data, Our Responsibility

At kedai24, your privacy is more than a legal obligation — it is a core value we uphold. This document transparently explains how we collect, use and protect your personal information.

Updated: 1 January 2026
🔐
256-bit
SSL Encryption
🚫
Zero
Third-Party Data Sales
✅
PDPA
Malaysian Act Compliance
👤
Full Control
Your Data Access Rights
How We Protect Your Privacy

Six layers of data protection at kedai24

🔒

End-to-End Encryption

All data transmitted between your device and Kedai24 servers is protected by 256-bit SSL encryption — the same technology used by leading banks. No one can intercept or read your data in transit.

🚫

No Data Sales

Kedai24 has never and will never sell, rent, or trade your personal information to any third party for marketing purposes. Your data belongs to you — it is not a commodity to be sold to advertisers.

🛡️

Malaysia PDPA Compliance

All our data handling practices fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We take these legal obligations seriously and continuously update our procedures to keep pace with legislative developments.

👤

Full Control in Your Hands

You have the right to access, correct and delete your personal data at any time. kedai24 provides a straightforward mechanism for you to manage your own data through account settings or by contacting our team.

🔍

Regular Security Audits

Kedai24's data security infrastructure is reviewed regularly by independent third-party auditors. This ensures our protection systems consistently meet the latest standards and remain free from exploitable vulnerabilities.

📋

Full Transparency

We believe in transparency. This Privacy Policy is written in plain language — not packed with confusing legal jargon. We want you to genuinely understand what happens with your data, not just sign off without reading.

What Data We Collect

Overview of data types and their collection purposes

Data Category Example Information Primary Purpose Status
Personal Identity Full name, date of birth, ID number KYC verification & fraud prevention Mandatory
Contact Information Email, phone number, address Account communication & security Mandatory
Financial Data Banking details, transaction records Deposit & withdrawal processing Mandatory
Usage Data Login records, betting history, game preferences Platform improvement & support Automatic
Technical Data IP address, browser type, device Security & performance analytics Automatic
Communication Preferences Notification settings, preferred language Personalised user experience Options

This Privacy Policy describes how kedai24 ("kami", "Platform") collects, uses, stores and protects your personal information when you use our services at kedai24.app. By registering or using the kedai24 platform, you agree to the practices described in this policy.

Our commitment: We do not sell your data. We do not share your data with advertisers. We only use your data for the purposes stated in this document.

1

Introduction & Scope

Kedai24 takes your privacy very seriously. We understand that when you share personal information with us, you are placing trust in this platform — and we honour that trust wholeheartedly.

This policy applies to all information collected through the kedai24 website, mobile app (if available), customer support services and other communication channels related to the use of our platform. It does not apply to third-party websites that may be linked from our platform.

As a platform operator in Malaysia, Kedai24 is bound by the Personal Data Protection Act 2010 (PDPA) and all regulations in force thereunder. We take these compliance obligations seriously and conduct regular internal reviews to ensure our practices remain fully aligned with legal requirements.

2

Data We Collect

We collect personal information in two main ways — information you provide directly to us, and information collected automatically when you use the platform.

Information you provide directly:

  • Full name, date of birth, and ID number during registration and the KYC process.
  • Email address and mobile number for communication and verification purposes.
  • Current residential address, which may be required for full KYC processing.
  • Bank account information for processing deposits and withdrawals.
  • Identity documents (MyKad photo, passport) for identity verification.

Information collected automatically:

  • IP address, browser type, operating system and device used.
  • Activity logs include login timestamps, pages visited, and in-platform actions.
  • Complete betting records, game results and transaction history.
  • General location information based on IP address for security purposes.

We do not collect sensitive information such as biometric data, health information, or political views unless explicitly required by law or compliance regulations.

3

How We Use Your Data

Every piece of data we collect has a clear purpose. We do not collect data for the sake of collecting it. Here is how we use your personal information:

  • Account management: To securely create, verify and manage your Kedai24 account.
  • Transaction processing: To process deposits, withdrawals and all financial transactions accurately and securely.
  • Legal compliance: To fulfil KYC requirements, anti-money laundering obligations and statutory reporting duties.
  • Platform security: To detect and prevent fraud, hacking and suspicious activity that could compromise the security of other members.
  • Customer support: To enable our support team to assist you effectively whenever you have an issue or enquiry.
  • Platform improvement: To understand how the platform is used and make improvements that benefit all members.
  • Service communications: To send important notifications about your account, policy changes or security issues.

If you do not wish to receive marketing communications from kedai24, you can unsubscribe at any time through the notification settings in your account. However, important notifications about account security and transactions cannot be turned off as they are for your protection.

4

Data Sharing with Third Parties

Kedai24 does not and will not sell your personal data to any third party for marketing or commercial purposes. However, in the course of operating the platform, we may share data with certain parties in the following situations:

  • Payment processors: Information required to complete your financial transactions with trusted payment service providers.
  • KYC service providers: Identity information for identity verification purposes via a certified KYC platform.
  • Statutory authority: When required by Malaysian law or by a valid court order.
  • Business acquisition: In the event of a company merger or acquisition, data may be transferred to the new entity, which will be bound by the same privacy policy.

All third parties we work with are required to meet strict data security standards and are only permitted to use your data for the purposes specified in their service agreements with Kedai24.

5

Data Security

Kedai24 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

  • 256-bit SSL/TLS encryption for all data communications between client and server.
  • Passwords are stored in an irreversible hash format.
  • Two-factor authentication (2FA) is available and recommended for all accounts.
  • Role-based access control ensures only authorised staff can access sensitive data.
  • 24/7 security monitoring by an experienced cybersecurity team.
  • Penetration testing is conducted regularly by independent security experts.

While we take all reasonable steps to protect your data, no system is 100% impenetrable. Should a data breach occur that affects you, we will notify you and the relevant authorities in accordance with our legal obligations within the stipulated timeframe.

6

Cookies & Tracking Technology

Kedai24 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies:

  • Essential Cookies: Required for core platform functions such as login and session security. These cookies cannot be disabled.
  • Preference Cookies: Saves your settings such as language and display preferences for a better user experience.
  • Analytics Cookies: Helps us understand how the platform is used for improvement purposes.

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect platform functionality.

7

Your Rights Regarding Personal Data

Under the Malaysia Personal Data Protection Act and the privacy principles we follow, you have several important rights regarding your personal data:

👁️

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

✏️

Right to Rectification

You have the right to correct any inaccurate or incomplete information in your account.

🗑️

Right to Erasure

You may request deletion of your personal data, subject to legal record-keeping obligations.

📤

Right to Portability

You have the right to receive your data in a machine-readable format for transfer to another platform.

⛔

Right to Object

You may object to the processing of your data for certain purposes, including direct marketing.

🔕

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

To submit any request relating to your privacy rights, contact our team by email at [email protected]. We will process your request within 14 business days.

8

Data Retention Period

Kedai24 retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable laws and regulations.

  • Financial transaction data: Retained for a minimum of 7 years in accordance with Malaysia's accounting and tax legal requirements.
  • KYC documents: Retained for a minimum of 5 years after account closure in accordance with AML compliance requirements.
  • Platform activity logs: Retained for 2 years for security and audit purposes.
  • Support communication data: Retained for 3 years for reference and service improvement.

Once the designated retention period has elapsed, data is securely deleted or anonymised using certified data disposal procedures.

9

Privacy Policy Amendment

Kedai24 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technology, or updated legal requirements.

When significant amendments are made, we will notify you via in-platform notifications or by email to your registered address. The "Updated" date at the top of this document will always reflect the current version of the policy.

We encourage you to review this policy periodically. Continued use of the kedai24 platform after any amendments means you accept the latest version of this policy.

10

Contact Our Privacy Officer

If you have any questions, concerns or complaints regarding this Privacy Policy or how kedai24 handles your personal data, we are here to help. We are committed to resolving every privacy issue thoroughly and within a reasonable timeframe.

If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Department of Personal Data Protection (JPDP) through their official channels.

🛡️

Your Data Is Safe at kedai24

We protect your personal information with the utmost care. Join over 500,000 members who already trust kedai24 as their preferred online gaming platform.

Read also Terms and Conditions and Responsible Gaming us. For 21+ only.

Bahasa Melayu