Data Protection

Privacy Policy Kedritoto — Our Commitment Protecting Your Data

Your privacy is our priority. This document transparently explains how kedritoto collects, uses, stores and protects the personal information of Malaysian users.

Updated: January 2026 | Version 3.2
256-bit SSL Encryption
0 Sale of Data to Third Parties
24/7 Security Monitoring
7 Rights User Rights Guaranteed

Privacy Commitment

How Kedritoto Protects Your Privacy

Six core pillars of data protection that we apply to every aspect of platform operations.

High-Grade Data Encryption

All data transmitted between your device and kedritoto's servers is protected with 256-bit SSL encryption — the same standard used by world-class banking institutions.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls and an active intrusion detection system. Internal access is also subject to strict controls.

No Data Selling

Kedritoto has never and will never sell users' personal information to any third party for advertising or marketing purposes without your explicit consent.

KYC Identity Verification

Our KYC process is designed to protect you from unauthorised use of your account. Documents collected are stored with encryption and deleted once verification is complete.

Legal Compliance

The kedritoto privacy policy is built in accordance with Malaysia's data protection legislation and international standards to ensure user rights are always upheld.

You Are in Control

Users have the full right to access, amend, download or request deletion of their personal data at any time via account settings or customer support.


Important Note: By using the kedritoto platform, you agree to the terms set out in this Privacy Policy. Please read this entire document carefully. This Policy forms part of the overall agreement between you and kedritoto.

1. Introduction

Kedritoto cares about every user's privacy. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information when you use the website, mobile app, and all services provided by the kedritoto platform.

The information we collect is used solely for the purposes stated in this policy — nothing more. We believe transparency is the foundation of trust, and this document is part of our commitment to always being open with users about our data management practices.

This Privacy Policy applies to all kedritoto users in Malaysia and covers all interaction channels — including the website, Android app, iOS app, customer support chat, and email communications.

2. Types of Personal Data We Collect

We collect various types of information depending on your interaction with the platform. Below are the main categories of data we process:

Data You Provide Directly

  • Registration information: full name, date of birth, identification card number, email address, phone number and password.
  • Financial information: bank account number, account holder name and details of the payment method used.
  • KYC verification documents: copies of identity card, bank statements, proof of address, and other supporting documents required for identity verification.
  • Communications: the content of any enquiries or complaints you submit to our customer support team.

Data Collected Automatically

  • Platform usage data: game history, wagering activity, session duration, and general usage patterns.
  • Technical data: IP address, device type, operating system, app version, and technical performance data.
  • Cookie and tracking data: platform preferences, language settings, and analytics data for service improvement.
Data Category Example Primary Purpose
Identity Name, IC, date of birth Account verification & KYC
Contact Email, phone number Communications & security
Financial Bank account, transactions Payment processing
Usage Game history, sessions Service improvement
Technical IP address, device type Security & analytics

3. How We Use Your Data

Every piece of information we collect has a clear and lawful purpose. Kedritoto uses your data for the following purposes only:

  • Processing your account registration, deposits and withdrawals securely and accurately.
  • Verifying your identity through the KYC process to comply with legal requirements relating to anti-money laundering.
  • Providing effective customer support and resolving any issues you report.
  • Sending service-related notices such as transaction confirmations, security updates and policy changes.
  • Detecting and preventing fraud, unauthorised access and other activities that violate the platform's Terms and Conditions.
  • Improving the platform through analysis of aggregated usage patterns that do not directly identify individuals.
  • Sending relevant promotional information and bonus offers — you may opt out at any time.

4. Data Sharing with Third Parties

Kedritoto does not sell, lease or trade users' personal data. However, in certain narrow and controlled situations, we may need to share information with the following parties:

  • Payment providers: to securely process your deposits and withdrawals. They receive only the minimum data necessary.
  • Game providers: game session data required to ensure games function correctly and that game outcomes are valid.
  • Cloud service providers: our platform uses secure cloud infrastructure; all providers are bound by strict confidentiality agreements.
  • Legal authorities: when required by law or a valid court order in Malaysia.

Our Guarantee: All third parties receiving kedritoto user data are bound by strict data protection agreements and are not permitted to use that information for any purpose other than what is specified.

5. Data Security

Kedritoto implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, disclosure, alteration or destruction:

  • 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
  • Sensitive data such as passwords is stored in hashed form using the latest encryption algorithms — no one at kedritoto can view your password in its original form.
  • Multi-layered firewall and intrusion detection system (IDS) operating 24 hours a day.
  • Role-based access control (RBAC) — only staff who require access to specific data to carry out their duties are permitted to do so.
  • Regular security audits conducted by independent third-party experts to identify and address any vulnerabilities.

In the Event of a Breach: In the event of any data breach that may affect your information, kedritoto will notify impacted users within a reasonable timeframe and take immediate remediation steps.

6. Cookies and Tracking Technologies

The kedritoto platform uses cookies and similar tracking technologies to enhance the user experience and understand how the platform is used. Cookies are small text files stored on your device.

Types of Cookies We Use

  • Essential cookies: required for the platform to function properly, including verification of your login session. Cannot be disabled.
  • Functional cookies: stores your preferences such as language, theme, and display settings for a better experience.
  • Analytics cookies: helps us understand how users interact with the platform for improvement purposes. This data is aggregated and does not identify individuals.

7. Your Rights as a User

Kedritoto fully respects users' rights regarding their personal data. Below are the seven key rights you hold:

1

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

2

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data.

3

Right to Erasure

You may request the deletion of your personal data in certain circumstances as provided by law.

4

Right to Restriction

You may request that we restrict the processing of your data under certain circumstances.

5

Right to Portability

You have the right to receive your data in a structured, reusable format.

6

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

7

Right to Withdraw Consent

Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of any processing that took place prior to withdrawal.

To exercise any of the above rights, please contact kedritoto's customer support team via live chat in the app or email [email protected]. We will process your request within 30 days.

8. Data Retention Period

Kedritoto retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law.

  • Active account data is retained for as long as your account remains active.
  • Financial transaction records are retained for a minimum of 7 years in accordance with Malaysia's financial regulatory requirements.
  • KYC documents are retained for the duration of the active account and deleted within 90 days of account closure.
  • Technical log data is retained for a maximum of 12 months for security analysis purposes.

Once the retention period expires, data will be securely deleted or converted into a non-personally identifiable format.

9. Cross-Border Data Transfer

In certain circumstances, your personal data may be transferred to servers located outside Malaysia — for example, for data backup purposes or the use of international cloud services. Any such transfer only takes place to countries or providers that offer privacy protections equivalent to or stronger than those in Malaysia.

Kedritoto ensures that all cross-border data transfers are carried out using appropriate protection mechanisms such as standard contractual agreements or compliance with recognised international privacy frameworks.

10. Child Protection

Kedritoto does not target or collect data from individuals under the age of 18. Our platform has strict age verification systems as part of the KYC process.

Zero Tolerance Policy: If we find that data belonging to minors under the age of 18 has been collected unintentionally, that data will be deleted immediately and the associated account will be closed.

11. Amendments to the Privacy Policy

Kedritoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, technology, legal requirements or services. Any changes will be posted on this page with a new update date.

For significant amendments, we will endeavour to notify users via in-app notices or their registered email. Continued use of the platform after amendments take effect constitutes acceptance of the updated policy.

12. Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding how kedritoto handles your personal data, we strongly encourage you to contact us directly:

  • Live chat within the kedritoto app — available 24/7 for a fast response.
  • Privacy email: [email protected] — for data-specific enquiries.
  • Page FAQ contains answers to frequently asked questions about privacy and data.

Our team will respond within 14 days for privacy-related enquiries, and within 30 days for formal user rights requests.


Secure Platform

Your Data is Safe with Kedritoto

Join over 500,000 Malaysian players who have trusted kedritoto with their information. Our platform is built on a foundation of security, transparency, and strict compliance with privacy laws.

Register Now Download App Terms & Conditions

Bahasa Melayu