Privacy Policy Kadbrokes – Personal Data Protection for Malaysia Users

This Privacy Policy ("Policy") describes the privacy practices of Kadbrokes ("we", "Platform") regarding the collection, use, disclosure, and protection of your personal information ("you", "User") when using the website, mobile app, and all related services provided by Kadbrokes.

This Policy applies to all Kadbrokes platform users, including unregistered visitors, registered members, and former members whose accounts have been closed. By using the Kadbrokes platform, you agree to the practices described in this Privacy Policy.

This Policy should be read together with Terms and Conditions which forms part of the overall agreement between you and Kadbrokes.

We collect several categories of personal information for different purposes:

We collect only the data genuinely necessary to deliver our services. We do not collect sensitive data such as medical information, religious beliefs, or political views.

The data we collect is used for the following purposes:

• Managing your account – registration, identity verification, profile updates, and login session management.
• Processing financial transactions – processes deposits, withdrawals, and required financial records.
• Delivering gaming services – provides access to all games, records game results, and manages bonuses.
• Legal compliance – fulfils KYC requirements, anti-money laundering (AML) obligations, and legally mandated reporting.
• Platform security – detects and prevents fraud, account abuse, and suspicious activity.
• Customer Support – resolves enquiries, complaints, and technical issues.
• Platform improvements – analyses usage patterns to improve the interface and user experience.
• Marketing communications – sends promotional information, bonus offers, and platform news (with your consent).

Kadbrokes does not sell, rent, or trade your personal data. However, in certain limited circumstances, we may share data with the following parties:

• Payment providers – FPX, DuitNow, Touch 'n Go and other digital wallet providers integrated with our platform, to securely process your financial transactions.
• Game providers – game studios such as Pragmatic Play, PG Soft, and others receive the minimum technical data required to deliver their games to you.
• IT service providers – companies providing server infrastructure, cybersecurity, and other technical services required for platform operations. All third parties are bound by strict confidentiality agreements.
• Legal authorities – where required by law, court order, or to prevent financial crime.

In all data sharing cases, we ensure that only strictly necessary data is shared, and recipients are bound by equivalent data protection obligations.

Kadbrokes uses cookies and similar technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies – required for core platform operations such as login verification and session security. Cannot be disabled.
• Performance Cookies – collects anonymous information about how users interact with the platform to help us improve the experience.
• Functional Cookies – saves your preferences such as language, currency, and display settings for convenience on future visits.
• Analytics Cookies – helps us understand usage patterns and platform performance in an aggregated, non-personal manner.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect platform functionality.

Kadbrokes implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, damage, or disclosure:

• 256-bit SSL encryption for all data in transit.
• AES-256 encryption for sensitive data stored in the database.
• Role-based access control — only staff who require access for their duties are permitted.
• 24/7 security monitoring and real-time threat detection systems.
• Regular penetration testing conducted by independent security firms.
• A clear incident response protocol in the event of any data breach.

Kadbrokes retains your personal data only for as long as necessary for the stated purposes or as required by law:

• Active account data – retained for the duration your account is active and for 5 years after account closure, to meet financial and AML legal requirements.
• Financial transaction records – retained for 7 years in accordance with Malaysia financial regulatory requirements.
• KYC documents – retained for the period specified by applicable law, typically 5 years after the end of the business relationship.
• Support communication logs – retained for 2 years for reference and quality control purposes.
• Cookie and technical data – retained for between 30 days and 2 years depending on cookie type.

Once the retention period expires, data will be securely deleted or permanently anonymised using methods that ensure it cannot be recovered or linked back to you.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data: