Privacy Policy KES918 — Personal Data Protection for Malaysian Members

1Introduction and kes918's Privacy Commitment

Welcome to the kes918 Privacy Policy page. We, kes918, are a digital entertainment platform fully committed to protecting the privacy and personal data security of every member in Malaysia. This Privacy Policy explains in detail how we collect, store, use, and protect your personal information when you use our platform.

By registering and using KES918 services, you agree to the data collection and usage practices described in this policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team to close your account.

The KES918 Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices. We take this responsibility seriously and continually strive to strengthen our data protection standards.

2Types of Personal Data We Collect

KES918 collects various types of personal information from our members for legitimate and specific purposes. Below are the data categories we collect along with their descriptions:

We only collect data that is strictly necessary for defined purposes. kes918 does not collect sensitive data such as your health information, religious beliefs, or political views unless directly relevant to our service requirements.

3How We Use Your Personal Data

KES918 uses our members' personal data for various legitimate purposes. Every use of data is grounded in a solid legal basis and is relevant to the services we offer.

Primary purposes of data use:

• Account management and identity verification: We use your name, identification number, and contact details to create and manage your account, as well as verify your identity through the KYC process before you can make a withdrawal.
• Financial transaction processing: Bank account information and transaction records are used to securely and accurately process your deposits and withdrawals through our supported payment channels, including FPX, Touch 'n Go eWallet, GrabPay, and Boost.
• Service provision and improvement: Gaming data and user behaviour help us understand member needs and continuously improve the gaming experience on the KES918 platform.
• Service communications: We use your email address and phone number to send important notifications related to your account, transactions, security updates, and relevant promotions.
• Fraud prevention and platform security: Technical data including IP addresses and system log records is analysed to detect and prevent suspicious activity, fraud, or unauthorised access attempts.
• Legal and regulatory compliance: KES918 uses and retains certain data to fulfil legal obligations, including anti-money laundering (AML) requirements and regulatory compliance.
• Market research and analysis: Aggregated data (without personal identifiers) is used for internal analysis to understand usage trends and improve our service strategies.

4Data Sharing with Third Parties

Kes918 does not sell, rent, or trade your personal data to any third party for their marketing purposes. This is our absolute commitment to every member. However, there are specific situations where we need to share your information with certain parties for legitimate purposes:

• Payment providers: Required transaction information is shared with payment service providers such as local banks via FPX, digital wallet operators, and licensed payment processors to complete your financial transactions. All such providers are bound by strict confidentiality agreements.
• Game providers: Required gaming data is shared with third-party game software providers that supply games on the KES918 platform. This sharing is limited strictly to data necessary for game functionality.
• Technology service providers: KES918 uses trusted cloud service providers and IT infrastructure to support our platform operations. All such providers are required to comply with strict data security standards.
• Legal authority: KES918 will disclose member information to the relevant authorities when required by law, court order, or as part of a legitimate financial crime investigation. We have no discretion in such situations and will notify members where permitted by law.
• Identity verification services: For the KYC process, your identity documents and information may be shared with our approved identity verification service providers who are bound by data protection agreements.

In all of the above data-sharing scenarios, KES918 ensures that only the minimum necessary data is shared, and all data recipients are contractually obligated to protect that data to a standard equal to or higher than our own.

5Data Security and Protection

KES918 continually invests in the latest cybersecurity infrastructure to ensure your personal data is always protected against unauthorised access, theft, leaks, or damage. Below are the key security measures we have implemented:

• 256-bit SSL encryption: All communications between your browser and kes918 servers are encrypted using industry-standard TLS/SSL protocols. This ensures that every piece of data transmitted — including login credentials, payment details, and personal data — cannot be intercepted by unauthorised parties.
• Data encryption at rest: Sensitive data stored in our databases, including financial information and identity documents, is encrypted using industry-grade encryption algorithms.
• Structured access control: Only authorised staff may access member personal data, and such access is subject to specific job requirements. All staff access is logged and continuously monitored.
• Two-factor authentication (2FA): kes918's internal systems apply two-factor authentication for all staff access to sensitive data, adding an extra layer of protection.
• 24/7 security monitoring: Our IT security team continuously monitors the platform infrastructure at all times to detect and respond to any security threats promptly.
• Periodic penetration testing: KES918 undergoes regular penetration testing by independent security experts to identify and patch any vulnerabilities before they can be exploited.

6Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the data protection principles we uphold, you as a data subject have the following rights regarding your personal data held by KES918:

To exercise any of the above rights, please contact the kes918 customer support team via live chat or our support email. We will process your request within 21 business days in accordance with Malaysia's PDPA requirements. Please note that in certain situations we may be unable to fully fulfil your request due to legal obligations or service operations — and we will clearly explain the reasons should this occur.

7Cookie and Tracking Technology Policy

KES918 uses cookies and similar tracking technologies to enhance your user experience, maintain the security of your login session, and analyse how members use our platform. Below is an explanation of the types of cookies we use:

• Essential cookies: These cookies are required for the platform to function properly. They include login session cookies, security settings, and identity verification cookies. Without them, the platform cannot operate and they cannot be disabled.
• Preference cookies: These cookies store your preferences such as interface language, display settings, and personal configurations so you don't need to reset them each time you visit.
• Analytics cookies: We use analytics data collected through these cookies to understand how members interact with our platform, which pages are visited most frequently, and where users encounter issues. This data helps us continuously improve the platform.
• Security cookies: These cookies help us detect suspicious activity, prevent fraud, and protect your account from unauthorized access.

You may manage or delete cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality of the KES918 platform and your gaming experience.

8Data Retention Period

KES918 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Below are our data retention guidelines:

• Active account data: While your account remains active, we retain all account-related data including profile information, transaction records, and gaming history.
• Post-account closure data: After an account is closed at a member's request, we retain financial data and transaction records for a minimum of 7 years as required by Malaysia's tax and anti-money laundering laws.
• KYC Records: Identity verification documents are retained for 5 years after the business relationship ends, in line with Malaysian regulatory requirements.
• System and security logs: Technical and security logs are retained for 2 years for internal audit purposes and security incident investigations should they occur.
• Communication data: Customer support communication records are retained for 3 years for reference and future dispute resolution.

Upon expiry of the applicable retention period, kes918 will securely delete or anonymise your personal data using industry-standard approved deletion methods, ensuring the data cannot be recovered or reused.

9Child Protection

The kes918 platform is strictly for adults aged 18 and above. We do not intentionally collect, process, or store any personal data from individuals under the age of 18.

All kes918 account registration processes require age verification through a rigorous KYC process. Should we discover that a child's personal data has been collected without valid parental or guardian consent, we will take immediate action to delete that data and terminate the relevant account.

10Privacy Policy Amendments

KES918 reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data. We are committed to informing members of any material changes.

When we make changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying a clear notice on the platform's home page for at least 7 days
• Sending email notifications to all registered members for material changes
• In cases of highly material changes that significantly affect your privacy rights, we may seek your renewed consent before the changes take effect.

It is your responsibility to review this Privacy Policy periodically. Your continued use of the KES918 platform after any changes are published will be considered your acceptance of the updated policy.