At Kediritoto, your personal data is handled with the same seriousness as your account funds. This Privacy Policy explains exactly what we collect, why we collect it, how we protect it, and what rights you hold over your own data.
This Privacy Policy ("Policy") describes how Kediritoto ("Company", "we", "us", "our") collects, uses, stores, processes, and protects personal data provided by users ("User", "you", "your") of the online gaming platform operated atkediritoto.cam ("Platform").
Kediritoto is committed to upholding the privacy rights of all users, with particular attention to our primary user base in Malaysia. This Policy has been drafted with reference to internationally recognized data protection principles and is intended to be transparent, accessible, and practically informative — not merely a compliance formality.
By registering an account on the Platform or by continuing to use our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. Where your consent is the legal basis for a specific processing activity, you retain the right to withdraw that consent at any time, as detailed in Section 9.
This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, which together form the complete framework governing your relationship with Kediritoto.
This Policy applies to all personal data processed in connection with your use of the Kediritoto Platform, including data collected via the website, support communications, payment transactions, KYC verification processes, and any promotional interactions. It does not apply to third-party websites or services linked from the Platform.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
Kediritoto collects Personal Data through several channels and at various points during the User lifecycle. The categories of data we collect, and the context in which each is gathered, are as follows:
3.1 Registration Data
When you create an account, we collect your full legal name, date of birth, email address, mobile telephone number, and residential address (including postcode and state). This data is essential for account creation and cannot be omitted.
3.2 Identity Verification (KYC) Data
To comply with anti-money laundering obligations and to verify your eligibility as a player aged 21 or above, we may collect copies of government-issued identification documents (Malaysian MyKad or passport), proof of address (utility bill or bank statement), and selfie photographs for biometric verification purposes. KYC documents are classified as Sensitive Data and are subject to heightened protection measures.
3.3 Financial & Payment Data
When processing deposits and withdrawals via Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong Bank), Visa, Mastercard, or USDT TRC20 cryptocurrency, we collect transaction records including amount, date, payment method identifier, and processing status. We do not store full card numbers or full wallet credentials — these are handled directly by our certified payment service providers.
3.4 Platform Usage Data
We collect data about how you interact with the Platform, including pages visited, games played, bets placed, session duration, deposit and withdrawal history, bonus usage, and support interactions. This data is used to personalize your experience, detect fraud, and improve Platform functionality.
3.5 Technical & Device Data
We automatically collect technical data including your IP address, browser type and version, operating system, device type, screen resolution, timezone, and referring URL. This data is used for security purposes, fraud prevention, and Platform optimization.
3.6 Communications Data
When you contact our support team via live chat or email, we retain records of those communications, including the content, timestamp, and resolution outcome. This data is used for quality assurance, dispute resolution, and staff training.
We apply the principle of data minimization — we collect only the Personal Data that is strictly necessary for the stated purpose. Where processing can be achieved with anonymized or aggregated data, we prefer that approach.
The table below summarizes the primary purposes for which Kediritoto processes your Personal Data, alongside the category of data used for each purpose:
| Processing Purpose | Data Categories Used | Retention Period |
|---|---|---|
| Account creation & management | Registration data, device data | Duration of account + 5 years post-closure |
| Identity & age verification (KYC) | KYC documents, registration data | 5 years from verification date |
| Payment processing | Financial data, registration data | 7 years (regulatory obligation) |
| Fraud prevention & AML compliance | All categories | 5–7 years depending on incident type |
| Platform personalization | Usage data, preferences | Duration of account activity |
| Customer support | Communications data, account data | 3 years from last interaction |
| Responsible gambling monitoring | Usage data, financial data | Duration of account + 5 years |
| Marketing communications (with consent) | Email address, preferences | Until consent is withdrawn |
| Analytics & platform improvement | Anonymized usage data | Aggregated; no individual expiry |
Kediritoto processes your Personal Data one or more of the following legal bases, depending on the purpose of the processing activity:
Where we rely on legitimate interests as a legal basis, we conduct a balancing test to ensure that our interests do not unduly override your fundamental privacy rights.
Kediritoto does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. Full stop.
We share Personal Data only in the following limited and controlled circumstances:
In all cases where Personal Data is shared with a third party, we ensure that appropriate contractual safeguards are in place, including data processing agreements that impose confidentiality, security, and data minimization obligations on the recipient.
We retain Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The general retention principles applied by Kediritoto are as follows:
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized in accordance with our data disposal procedures.
Kediritoto implements a comprehensive set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:
While we implement robust technical measures, the security of your account also depends on the strength and confidentiality of your password and 2FA credentials. Never share your account credentials with any third party. Kediritoto staff will never ask for your password. If you suspect unauthorized account access, contact support immediately.
Subject to applicable law and certain limitations arising from regulatory compliance obligations (such as AML record-keeping requirements), you hold the following rights in relation to your Personal Data held by Kediritoto:
Request a copy of the Personal Data we hold about you and information about how it is used.
Request correction of any inaccurate or incomplete Personal Data held your account.
Request deletion of your Personal Data where it is no longer necessary for its original purpose, subject to legal retention obligations.
Request that we limit the processing of your data in certain circumstances, such as while dispute is being resolved.
Receive your Personal Data in a structured, machine-readable format for transfer to another service, where technically feasible.
Object to processing based on legitimate interests, including direct marketing. Such objections will be honored promptly.
Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
Request human review of any significant automated decision made about you, such as account risk scoring.
To exercise any of the above rights, contact our support team via live chat or email at [email protected]. We aim to respond to all data rights requests within 30 days. Requests may be subject to identity verification before processing.
The Kediritoto Platform uses cookies and similar tracking technologies to enable core functionality, improve performance, and analyze usage patterns. The categories of cookies we use are described below:
You may manage cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect Platform functionality. For mobile users in Malaysia — particularly those accessing kediritoto.cam via Android or iOS browsers — standard browser cookie management settings apply.
The Kediritoto Platform integrates with a number of third-party services to deliver its full functionality. These include:
The Kediritoto Platform does not contain links to external third-party websites. Any third-party services integrated within the Platform operate under their own applicable privacy policies. Kediritoto is not responsible for the privacy practices of independent third-party service providers beyond the scope of our data processing agreements with them.
Kediritoto operates a strict21+ age policy. The Platform is not directed at, and does not knowingly collect Personal Data from, any person under the age of 21. Age verification is a mandatory component of our KYC process.
If we become aware that Personal Data has been collected from a person under 21 years of age — whether through a verification failure, a report, or our own detection — we will immediately:
If you have reason to believe that a minor has registered on this Platform, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will act on any such report without delay.
In the course of providing its services, Kediritoto may transfer your Personal Data to servers or third-party processors located outside of Malaysia. Such transfers may occur in connection with cloud infrastructure hosting, KYC processing, and payment processing where the relevant service provider operates internationally.
Where Personal Data is transferred internationally, Kediritoto ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that provided under this Privacy Policy. Safeguards may include:
You may request further information about the specific safeguards applied to any international transfer of your Personal Data by contacting us as described in Section 15.
Kediritoto reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision.
Where changes to this Policy are material — meaning they significantly affect your privacy rights or how we handle your data — we will notify registered Users by email no less than 14 days before the changes take effect. For minor amendments such as typographical corrections or formatting updates, the revised Policy will be published without advance notice.
Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. We encourage you to review this Policy periodically to remain informed about how Kediritoto protects your data.
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the Kediritoto Data Protection team through the following channels:
Kediritoto's support team serves players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other states — in English, Bahasa Melayu, and Mandarin, 24 hours a day.
This Privacy Policy was last reviewed and published on 1 January 2026. This document supersedes all prior versions. Prior versions are available upon request by contacting support.
Our privacy practices are built around six core commitments that govern every data processing decision we make.
Your Personal Data is not a commodity. We do not sell, rent, or trade your information to third parties for their commercial use — under any circumstances.
All data in transit is protected with SSL/TLS encryption. Data at rest is encrypted with AES-256. Your financial and identity data is never stored unprotected.
Access, correct, export, or delete your data at any time. Submit a request via live chat or email — responses within 30 days, with identity verification.
We collect only what is genuinely necessary for each function. Anonymized and aggregated data is preferred over individual records wherever operational requirements permit.
Every category of data has a published maximum retention period. Data is securely deleted or irreversibly anonymized once its retention period expires.
In the unlikely event of a data breach affecting your rights, we will notify you and relevant authorities within the legally required timeframe — no cover-ups, no delays.
If you have any privacy concerns or want to review your data, our team is available 24/7. Visit the homepage to explore everything kediritoto offers — securely.
For players aged 21 and above only. Please gamble responsibly.