Ke427 – Privacy Policy & Protection of Malaysian Member Data

This Privacy Policy ("Policy") is published by ke427 ("we", "ke427") and describes how we collect, use, disclose, transfer, and store your personal data when you use our online casino platform, accessible via ke427.my and any associated domains or mobile applications.

Ke427 is the data controller of your personal data under the terms of Malaysia's Personal Data Protection Act 2010 (PDPA). This means we are responsible for ensuring that your personal data is processed lawfully, fairly, and transparently at all times.

This Policy applies to all individuals who interact with the ke427 platform — whether as a registered member, a website visitor, or someone contacting our support team. Your continued use of the ke427 platform after this Policy is published or updated constitutes your agreement to the practices described herein.

We respect every ke427 member's privacy just as we would want our own respected. This approach is not merely a legal obligation — it is part of ke427's culture of prioritising trust and integrity across all aspects of our operations.

Ke427 collects various types of personal data depending on how you interact with our platform. The following are the categories of data we may collect:

Personal Identity Data:

• Your full name as it appears on your official Malaysian identity document (MyKad or passport)
• Date of birth (required for mandatory 18+ age verification)
• National Identity Card (MyKad) number or passport number — collected only during the KYC (Know Your Customer) process when required
• Gender

Contact Details:

• Active email address
• Malaysian mobile phone number
• Residential address (required for certain verification purposes)

Financial & Payment Data:

• Malaysian bank account numbers or e-wallet account details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) for the purpose of processing deposits and withdrawals.
• Deposit and withdrawal transaction history on the ke427 platform
• Information required for anti-money laundering (AML) compliance

Technical & Usage Data:

• Your device's IP address
• Device type, operating system, and web browser used
• Activity history on the ke427 platform — games played, time spent, and betting records
• Login and logout session logs
• Cookie data and similar tracking technology data (see Section 7)

Ke427 does not collect data considered sensitive in nature, such as medical information, sexual orientation, or religious and political beliefs. We collect only data that is relevant and necessary to provide you with our online casino services.

Ke427 collects your personal data through a variety of means. Understanding how this collection works helps you make more informed decisions about how you interact with our platform:

Directly from You:

• During the ke427 account registration process — when you complete the online registration form.
• During the identity verification (KYC) process when required by compliance regulations.
• When you contact the ke427 support team via Live Chat, email, or WhatsApp
• When you make a deposit or submit a withdrawal request.
• When you complete a feedback form or participate in a member satisfaction survey.
• When you fill in information under your ke427 account profile settings

Automatically via Technology:

• Cookies and similar tracking technologies when you visit the ke427 website
• Server logs recording technical activity while you use the ke427 platform
• Usage analytics that help us understand how members interact with platform features
• Automated fraud detection system that monitors suspicious activity patterns

From Third Parties (Limited):

• Third-party identity verification service provider used for KYC
• Financial institutions to verify payment details for anti-money laundering purposes
• Recognised gambling blacklist databases to ensure responsible gaming compliance

Ke427 uses your personal data only for lawful, clearly defined, and limited purposes as outlined below. We do not use your data for any other purpose without giving you prior notice and obtaining your consent:

• Account Management: Creating, verifying, and maintaining your ke427 account; processing logins and ensuring account security.
• Service Provision: Enabling you to access all features and games on the ke427 platform, including slots, Live Casino, and table games.
• Financial Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX; processing withdrawals to your Malaysian bank account or e-wallet.
• Identity Verification & Compliance: Verifying your age and identity in accordance with legal requirements; complying with Anti-Money Laundering (AML) and Know Your Customer (KYC) obligations.
• Customer Support: Addressing enquiries, resolving complaints, and providing technical assistance via Live Chat, email, and WhatsApp.
• Platform Security: To detect and prevent fraud, money laundering, account misuse, and other suspicious activities that may compromise the ke427 platform or its members.
• Responsible Gaming: Monitoring play patterns to identify signs of problem gambling and offering appropriate support to members who may need it.
• Platform Enhancement: Analysing usage data in aggregate (without identifying individuals) to improve the user experience, enhance platform features, and select new games suited to ke427 members.
• Marketing Communications (with consent): Sending notifications about ke427 promotions, bonuses, and special offers — only if you have agreed to receive such communications during registration or through your account settings.

Ke427 treats your personal data with the utmost confidentiality. We does not sell, rent, or trade member personal data to any third party for commercial purposes. However, under the limited and specific circumstances set out below, ke427 may need to share your data:

Trusted Third-Party Service Providers:

• Payment verification service providers and payment gateways that process your deposit and withdrawal transactions via local e-wallets and FPX
• Identity verification (KYC) service providers that help us validate your information for compliance purposes
• Gaming platform technology providers and game providers that supply game titles on ke427 — strictly limited to data required for gaming functionality only
• IT support and cybersecurity service providers that assist ke427 in maintaining platform security

All third-party service providers that ke427 works with are bound by strict data confidentiality agreements and are only permitted to use your data for the specific purposes stated in those agreements.

Legal Requirements:

• To Malaysian government authorities or law enforcement agencies when required to do so by law, court order, or valid legal process
• To regulatory bodies responsible for overseeing the online gambling industry, for the purpose of licence compliance.
• To prevent, detect, or investigate criminal activity including money laundering and fraud

In all of the data-sharing scenarios described above, ke427 discloses only the minimum data necessary for the relevant purpose, and nothing beyond that.

Ke427 takes the security of our members' personal data extremely seriously. We have implemented multiple layers of technical and organisational protection to ensure your data remains secure at all times:

• 256-Bit SSL Encryption: All communications between your browser and ke427's servers are encrypted using TLS 1.3 with AES-256 encryption — the highest standard currently available, and the same used by major financial institutions.
• Data-at-Rest Encryption: Your personal and financial data stored in ke427's databases is also encrypted — meaning that even if someone were to gain physical access to the database, the data would be unreadable without the appropriate encryption key.
• Role-Based Access Control: Only ke427 staff with a legitimate business need are permitted to access member personal data, and only to the extent required for their role. All data access is logged and monitored.
• Two-Factor Authentication (2FA): ke427 encourages and supports the use of two-factor authentication on member accounts for an added layer of protection.
• Continuous Security Monitoring: ke427's cybersecurity team monitors the platform 24 hours a day to detect any suspicious activity or intrusion attempts.
• Regular Security Testing: ke427 conducts regular penetration testing and security audits to identify and address any vulnerabilities before they can be exploited.

While ke427 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against all cyber threats. In the event of a data breach that affects your privacy rights, ke427 is committed to notifying you within the timeframe prescribed by Malaysia's PDPA and taking immediate remedial action.

Ke427 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit ke427.my.

Types of cookies used by ke427:

• Essential Cookies (Required): These cookies are essential for the basic functioning of the ke427 platform — including verifying your login session, retaining your language preferences, and maintaining platform security. The ke427 platform cannot operate properly without them.
• Performance & Analytics Cookies: ke427 uses analytics tools to understand how members interact with the platform — which pages are visited most frequently, how long users spend on them, and where users encounter difficulties. This data is collected in aggregate form and does not identify any specific individual.
• Functional Cookies: These cookies save your preferences — such as language settings, preferred betting limits, and display configurations — so you don't have to reconfigure them each time you log in to ke427.
• Security Cookies: Used to detect suspicious login patterns, fraud attempts, and unusual activity in order to protect your ke427 account.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the ke427 platform. Your continued use of the ke427 platform after the cookie notice has been acknowledged is considered consent to the use of cookies as described in this Policy.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and this ke427 Privacy Policy, you have the following rights with respect to the personal data we hold about you:

• Right of Access: You have the right to request and receive a copy of the personal data ke427 holds about you. ke427 will provide this information within a reasonable timeframe upon receiving your request.
• Right to Rectification: If the personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request a correction. We encourage you to update your profile information directly through your ke427 account settings at any time.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may have the right to request the deletion of your personal data. However, this right may be limited in cases where ke427 is legally required to retain specific records.
• Right to Restriction of Processing: You have the right to request that ke427 restrict how we process your personal data in certain situations — for example, while you are disputing the accuracy of your data or while an investigation is ongoing.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may withdraw your consent to receive marketing communications via the "unsubscribe" link in any email we send you.
• Data Portability Right: Under certain circumstances, you have the right to receive the personal data you have provided to ke427 in a structured, machine-readable format.

To exercise any of the rights above, please contact the ke427 privacy team by email at [email protected] by clearly stating your request. We will process it within 30 business days and may require identity verification before proceeding with requests involving data disclosure or deletion.

Ke427 does not retain your personal data longer than is necessary for the purposes for which it was collected, or beyond the periods prescribed under Malaysian law. ke427's data retention policy is as follows:

• Active Account Data: For as long as your ke427 account remains active and in use.
• Financial Transaction Data: A minimum of seven (7) years from the date of the transaction, in accordance with Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).
• KYC Record Data: A minimum of five (5) years after the business relationship with ke427 has ended.
• Support Communication Data: Up to three (3) years after a conversation or support ticket is closed.
• Technical Log Data: Typically between 90 days and two (2) years, depending on the type of log and security requirements.

Once the data retention period has expired and there is no legal requirement to retain it further, ke427 will securely delete or anonymise your personal data using industry-approved data deletion methods.

If you close your ke427 account, we will process your data deletion request subject to the mandatory retention requirements outlined above. Data that must be retained for legal or compliance purposes will continue to be stored in a restricted and secure manner.

The ke427 platform is intended for adults aged 18 and above only. ke427 does not knowingly collect personal data from individuals under the age of 18.

All ke427 account registrations go through an age verification process to ensure only eligible individuals can access our platform. Should ke427 discover that we have inadvertently collected personal data from an underage individual, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and believe your child has registered with ke427 without authorisation, please contact us immediately at [email protected] so we can take the appropriate action without delay.

Ke427 reserves the right to review and update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological developments. The "Updated" date at the top of this document indicates when this Policy was last revised.

When we make significant changes to this Privacy Policy, ke427 will notify members via email or an in-platform notification at least seven (7) days before the changes take effect. For minor changes that do not materially affect your privacy rights, we may not issue such notice, but the "Updated" date will be revised accordingly.

Your continued use of the ke427 platform after any amendments take effect constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your privacy.

If you have any questions, concerns, or complaints regarding ke427's Privacy Policy or the way we handle your personal data, we strongly encourage you to contact us directly. ke427 is committed to resolving any privacy issues promptly, transparently, and fairly.

If you feel that ke427 has not handled your privacy complaint to your satisfaction, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP), the designated regulatory body for PDPA compliance in this country.