Privacy Policy kembang128 – How We Protect Malaysian Players' Personal Data

Kembang128 collects the personal information necessary to provide safe, legally compliant online betting services. Below are the categories of data we collect from you:

Kembang128 uses collected personal data solely for legitimate and necessary purposes. We will not use your data for any other purpose without your prior consent. The following are the primary purposes for which your personal data is used:

• Account Management: Create, verify, and securely manage your kembang128 account.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as your withdrawal payouts.
• Identity Verification (KYC): Verify that you are who you claim to be and that you meet the minimum age requirement of 18 years.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support.
• Legal Compliance: Meeting reporting and compliance obligations under applicable Malaysian laws.
• Service Improvement: Analyse usage patterns to continuously improve the overall kembang128 platform experience.
• Marketing Communications: Sending you information about kembang128 bonus offers and promotions (subject to your notification preferences).

For marketing communications, you may unsubscribe at any time by clicking the "unsubscribe" link in any email or by contacting the kembang128 support team.

Kembang128 does not sell or transfer your personal data to third parties for their own marketing purposes. However, there are specific situations where we may need to share your data with carefully selected parties:

In all data-sharing arrangements, kembang128 ensures that recipients adhere to data protection standards equal to or higher than our own. No data will be transferred outside Malaysia without adequate safeguards and in full compliance with the PDPA.

Kembang128 continuously invests in robust security infrastructure to protect your personal and financial data. Below are the key security measures we employ:

While kembang128 takes all reasonable steps to protect your data, no security system is entirely infallible. You also play an important role in keeping your account secure — do not share your password, use a strong password, and stay vigilant against phishing attempts.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding personal data held by kembang128. All requests will be processed within 14 business days.

Kembang128 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored in your browser that help facilitate navigation and personalise your experience.

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may prevent you from using certain features on the kembang128 platform. For more information on managing cookies in your browser, refer to your browser's help section.

Kembang128 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with legal requirements. The following are general data retention guidelines:

• Active Account Data: For the duration of your active account plus 7 years after account closure (financial reporting legal requirement).
• Transaction Records: Minimum 7 years, in line with Malaysian Tax Act requirements and anti-money laundering regulations.
• Support Communication Records: 3 years from the date of last interaction.
• Anonymised Analytics Data: Can be retained indefinitely as it contains no personally identifiable information.
• KYC Data: 5 years after the business relationship ends, or longer if required by a regulatory authority.

Once the applicable retention period has elapsed, your data will be securely deleted using industry-standard methods that ensure it cannot be recovered.

The kembang128 platform may contain links to third-party websites or applications, including game providers, social media channels, or sports news portals. These links are provided for your convenience only.

Kembang128 is not responsible for the privacy practices or content of any third-party websites. We strongly recommend reading the privacy policy of every website you visit outside the kembang128 platform. Visiting any third-party site is entirely at your own risk.

Kembang128 is a platform intended strictly for individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe that someone under the age of 18 has registered or is using the kembang128 platform, please notify us immediately at privacy@kembang128.ws.

Any account found to be owned or used by a minor will be closed immediately, and all associated data will be deleted in accordance with applicable child protection laws.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how kembang128 handles your personal data, please contact our Privacy Officer through the following channels:

This Privacy Policy is effective from 1 January 2026 and supersedes all previous versions. kembang128 reserves the right to update this Privacy Policy from time to time and will notify you via email or in-platform notification of any material changes.