Official kedai168 Privacy Policy

Kedai168 Privacy Policy – Personal Data Protection Commitment for Malaysian Members

Kedai168 takes the privacy of every registered member seriously. This Privacy Policy clearly outlines what data we collect, how it is used, who it may be shared with, and your rights as a member to control your own personal information.

Register at Kedai168 Updated: January 2026
Main Content
  • Types of Data Collected
  • Purpose of Data Processing
  • Data Sharing With Third Parties
  • Security Measures & Protection
  • Your Privacy Rights as a Member
  • Use of Cookies & Tracking Technologies
Malaysia PDPA 2010
256-bit SSL Encryption
No Data Selling
Member Access Rights
Full Malay
Our Privacy Commitment

Six Data Protection Principles That We Stand By

The kedai168 Privacy Policy is built on these principles – not merely to satisfy legal requirements, but because we genuinely value your trust.

Security
256-bit SSL Encryption – All Data Secured in Transit

Every piece of information you send to Kedai168 — from login credentials and deposit details to conversations with our customer support team — is protected by the same 256-bit SSL encryption used by Malaysia's leading banks. None of your data is transmitted in plain text that could be intercepted by third parties.

Privacy
Your Data Is Never Sold to Any Party

Kedai168 has never and will never sell, rent, or trade members' personal data to third parties for marketing or commercial purposes. Your data is used solely for the operation of Kedai168's services and for purposes you have explicitly consented to. This is our absolute commitment to every Malaysian member.

Compliance
Full Compliance with the Personal Data Protection Act 2010

All of kedai168's data handling practices are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means we only collect data that is necessary, use it solely for the stated purposes, store it securely, and fully respect the rights granted to you as an individual under Malaysian law.

Member Rights
You Have the Right to Access, Amend & Delete Your Data

As a kedai168 member, you have the full right to request a copy of the personal data we hold about you, request corrections to any inaccurate data, and in certain circumstances request the complete deletion of your data. All such requests can be made through kedai168's official support channels and will be processed within 14 business days.

Minimal Data
We Only Collect What We Truly Need

Kedai168 follows a data minimisation principle — we only collect information that is genuinely necessary to provide our services safely and effectively. We do not request irrelevant information and do not retain data beyond what is required for operational purposes, legal compliance, or dispute resolution.

Controls
You Can Opt Out of Marketing Communications

If you no longer wish to receive promotional emails, SMS notifications, or marketing messages from Kedai168, you may unsubscribe at any time via the "unsubscribe" link in any of our marketing emails, or by contacting Kedai168 customer support. Unsubscribing will not affect essential operational communications such as transaction confirmations.

Important Notice Regarding Kedai168's Privacy Policy

By registering and using the kedai168 platform, you consent to the collection and use of your personal data as described in this Privacy Policy. Please read this document carefully. If you have any questions or concerns about your data privacy, contact us at support@kedai168.asia before using our services.

Section 1
Introduction – Who Is Responsible for Your Data

Kedai168, operating through the domain kedai168.asia, is the data controller for all personal information collected from members using our platform. This means kedai168 is responsible for determining the purposes and methods of processing your personal data, ensuring that data is adequately protected, and complying with all relevant obligations under applicable Malaysian law.

This Privacy Policy covers all services provided by kedai168 – including the slots gaming platform, Live Casino, table games, Sports Betting, and all related customer support channels. It applies to all registered kedai168 members in Malaysia regardless of the access method used, whether via web browser or mobile app.

Kedai168 operates and stores data in an environment that complies with Malaysia Personal Data Protection Act 2010 (PDPA). We are committed to ensuring that every aspect of our data handling meets the standards set by this legislation and relevant international industry best practices.


Section 2
Types of Personal Data We Collect

Kedai168 collects various categories of personal data across different contexts — during account registration, while you use the platform, and during interactions with our support team. Below is a full breakdown of the data we may collect:

Identity & Registration Data

  • Full name as shown on your MyKad (National Identity Card) or Malaysian passport
  • Date of birth for age verification (18 years and above)
  • Email address for account communications and transaction verification
  • Mobile phone number for OTP verification and support communications
  • Username chosen during registration

Financial & Transaction Data

  • Payment method details used: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks, RHB Now)
  • Deposit and withdrawal history including dates, times, and amounts in Malaysian Ringgit (RM)
  • Records of activated bonuses and associated rollover status

Usage Data & Platform Activity

  • Gaming history – game types played, bet amounts, outcomes, and session duration
  • Sports betting history – matches wagered on (Malaysia Super League, EPL, badminton, e-sports, etc.), bet types, and outcomes
  • Login logs including date, time, and IP address
  • Device information – device type, operating system, and web browser used

Note: kedai168 does not store full credit or debit card numbers. Card transactions are processed directly by licensed and secure payment gateways. We only receive a transaction reference, not full card details.


Section 3
How & Why Your Data Is Used

Kedai168 uses collected personal data solely for legitimate and necessary purposes. Below are the primary purposes for which your data is processed, along with the legal basis that permits us to do so:

Purpose of Use Legal Basis
Account management & identity verification Fulfilment of service contract
Deposit & withdrawal processing Fulfilment of service contract
Age verification (18+) & KYC Legal obligations
Fraud detection & anti-money laundering Legal obligations & legitimate interests
Customer support & dispute resolution Contractual fulfilment & legitimate interests
Promotional communications & personalised offers Your consent (which can be withdrawn)
Usage analytics for platform improvement Kedai168's legitimate interests
Responsible gambling & risk detection Legal obligations & consumer protection

Kedai168 does not make fully automated decisions that have legal or similarly significant effects on you based on personal data processing, except in routine financial transaction verification processes that are protected by appropriate technical safeguards.


Section 4
Data Sharing With Third Parties

Kedai168 does not sell, rent, or trade members' personal data to any third party for their own marketing purposes. However, there are limited situations where we need to share data with certain parties to enable our services to function properly:

  • Payment Providers: Payment gateways such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX – receive only the transaction details necessary to process your deposits and withdrawals. Each of these providers maintains their own privacy policies and security standards.
  • Game Service Providers: Gaming software companies, such as slots providers and live casino platforms, receive the session data required to deliver your gaming experience. This data is generally limited to a session ID and does not include full personal identity information.
  • Regulatory Authority: Where required by Malaysian law or a valid court order, kedai168 will disclose the necessary information to the relevant authorities – including the Royal Malaysia Police (PDRM) or the Inland Revenue Board (LHDN) where applicable.
  • Auditors & Legal Advisors: Audit firms and legal advisors bound by strict confidentiality agreements may access certain data in the context of compliance audits or legal advice.

Our Commitment: Every third party granted access to Kedai168 member data is bound by a strict data protection agreement and is only permitted to use that data for the specific purposes related to the services they provide to Kedai168. They are not permitted to share that data with any other party or to use it for their own purposes.


Section 5
Technical & Operational Security Measures

Kedai168 continually invests in robust security infrastructure to protect members' personal data from unauthorised access, accidental disclosure, unlawful modification, or unauthorised destruction. The key security measures we have implemented include:

  • 256-bit SSL/TLS Encryption for all communications between your device and Kedai168's servers
  • Hashed password storage – your password is never stored in plain text; it is hashed using a strong cryptographic algorithm
  • Two-factor authentication (2FA) available and encouraged for all kedai168 members as an added layer of protection
  • 24/7 security monitoring – our systems continuously monitor for suspicious activity and take automated action against any unauthorised access attempts
  • Regular security audits by independent experts to identify and address vulnerabilities before they can be exploited
  • Strict internal access controls – only Kedai168 staff who require access to specific data in the course of their duties are authorised to do so, based on a strict "need-to-know" principle
  • Secure data backups performed regularly to ensure data recovery in the event of a technical failure

While no security system is entirely foolproof, kedai168 is committed to employing the latest and most robust security measures to protect your data. If you suspect any suspicious activity on your account, contact kedai168 support immediately.


Section 6
Data Retention & Deletion

Kedai168 does not retain your personal data for longer than is necessary for the purposes it was collected, or longer than required under applicable Malaysian law. Below is a guide to the retention periods for different categories of data:

  • Active account data: Retained for the duration of the active account and two years after account closure for audit and dispute resolution purposes
  • Financial transaction records: Retained for seven years following a transaction, in accordance with Malaysian financial and tax compliance requirements
  • Customer support communication logs: Retained for three years for dispute reference and service improvement purposes
  • Access and security log data: Retained for 12 months for security and fraud detection purposes
  • Inactive account data: Accounts with no activity for 24 months will be archived and excess data deleted, with only basic records retained for legal requirements

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered by any party. If you request early account deletion, kedai168 will process that request subject to the applicable minimum data retention obligations under the law.


Section 7
Use of Cookies & Tracking Technologies

Kedai168 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform usage patterns. Cookies are small text files stored on your device when you visit our website.

  • Essential Cookies: Required for core platform functions such as maintaining your login session, remembering language preferences, and securing transactions. These cookies cannot be disabled without affecting platform functionality.
  • Analytics Cookies: Helps us understand how members use the kedai168 platform — which pages are visited most frequently, where users spend more time, and any technical issues that may arise. This data is collected in aggregate and does not identify any individual specifically.
  • Preference Cookies: Remembers your preferences such as interface language, favourite game settings, and display preferences for a more personalised experience whenever you return to kedai168.
  • Third-Party Advertising Cookies: Kedai168 does not use third-party advertising cookies that track you across other websites for targeted advertising purposes. We do not share your tracking data with any advertising networks.

You can manage cookies through your web browser settings. Please note that disabling essential cookies may affect your ability to log in and use certain kedai168 features properly.


Section 8
Your Privacy Rights as a Kedai168 Member

Under Malaysia's Personal Data Protection Act 2010 and the privacy principles adopted by Kedai168, you have the following rights regarding your personal data. Kedai168 is committed to respecting and facilitating the exercise of all these rights:

Right of Access

You have the right to request a copy of the personal data Kedai168 holds about you. Requests will be processed within 14 business days.

Right to Rectification

If your data is inaccurate or out of date, you have the right to request a correction without undue delay.

Right to Erasure

In certain circumstances, you may request the deletion of your data, subject to any applicable legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, without having to provide a reason.

Right to Restriction

In certain circumstances, you may request that we temporarily restrict the processing of your data — for example, while the accuracy of that data is under review.

Data Portability

You have the right to receive your data in a structured, machine-readable format for transfer to another service provider.

To exercise any of the rights above, contact the Kedai168 privacy team at support@kedai168.asia with the subject line "Privacy Rights Request", and include your full name and registered account email for identity verification. Kedai168 will respond within 14 business days of receiving a complete request.


Section 9
Child Protection & Underage Players

Kedai168 takes its responsibility to protect minors extremely seriously. Our platform is strictly for individuals aged 18 and above only. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

The kedai168 registration process requires date of birth verification, and we reserve the right to request age verification documents (MyKad or passport) at any time as part of our KYC (Know Your Customer) process. Any account suspected of belonging to an underage individual will be immediately suspended and investigated.

If you discover that someone under the age of 18 has registered an account on kedai168, please contact us immediately at support@kedai168.asia. We will take immediate action to close the account and delete all associated data.

Parents & Guardians: If you are concerned about a child or dependent accessing online betting platforms, we recommend using suitable parental control software to block access to betting sites. Kedai168 fully supports efforts to protect minors from early exposure to gambling.


Section 10
Changes to This Privacy Policy

Kedai168 reserves the right to update this Privacy Policy from time to time in response to changes in law, technology, or the way we operate our services. When significant changes are made, we will take the following steps to ensure you are informed:

  • Submit email notifications to all active members at least 7 days before the changes take effect
  • Display in-platform notifications during your login session prior to the effective date of the changes
  • Update "Last Updated" date at the top of this page so you can easily review the latest version

Continued use of the Kedai168 platform after the effective date of any changes will be considered acceptance of the updated Privacy Policy. We recommend reviewing this page periodically.


Section 11
Contact Us About Your Data Privacy

If you have any questions, concerns, or complaints regarding how Kedai168 handles your personal data, our privacy team is here to help. We take every privacy enquiry seriously and will respond within a reasonable timeframe.

Privacy Email
support@kedai168.asia – Subject: "Privacy Policy Inquiry"
Live Chat
Available 24/7 within the platform – response time < 2 minutes
Telegram
Contact us via kedai168's official Telegram channel

This Privacy Policy is to be read together with Terms & Conditions kedai168 and forms part of the overall agreement between you and kedai168.

FAQs

Frequently Asked Questions About Kedai168 Privacy

Answers to the questions Malaysian members ask most frequently about how their personal data is handled at Kedai168.

No. kedai168 does not store full credit or debit card numbers. When you make a card transaction, those details are sent directly to a licensed and secure payment gateway – whether that is Touch 'n Go eWallet, GrabPay, or FPX. kedai168 only receives a transaction reference (transaction ID) and payment status, not the actual card details. This is an industry-standard security practice that ensures your sensitive financial information is never stored in our systems.

Yes, you may request deletion of your personal data by emailing support@kedai168.asia with the subject line "Data Deletion Request". Please note, however, that Kedai168 has a legal obligation to retain financial transaction records for seven years in accordance with Malaysia's financial compliance requirements. Data subject to this legal obligation cannot be deleted earlier. All other data not bound by such obligations will be deleted within 30 days of the request being received and verified. We will notify you in writing specifying which data has been deleted and which must be retained, along with the reasons.

No. Kedai168 does not use your personal data for targeted advertising on other websites or platforms. We do not share your data with third-party advertising networks such as Google Ads or Meta Ads for retargeting purposes. Your data is used exclusively within the context of Kedai168's services. If you see Kedai168 ads on other websites, they are part of general marketing campaigns that are not based on the personal data of individual members.

A kedai168 account that shows no activity (login, deposit, or wagering) for 24 consecutive months will be classified as an "inactive account". In such cases, kedai168 will send warning email notifications to your registered email address at the 22nd and 23rd month to remind you of your account status. If there is no response or activity after 24 months, excess data will be archived and partially deleted in accordance with our data retention policy, while the minimum records required for legal obligations will be retained. Any valid cash balance in an inactive account will be preserved and can be claimed by contacting kedai168 support and providing the required identity verification.

Responsible Gaming – Your Data, Your Safety

Some of the usage data kedai168 collects is used to support our responsible gaming programme – to identify playing patterns that may indicate risk and to ensure a healthy gaming experience for all members. This includes automated monitoring for sharp increases in wagering amounts or unusually high gaming frequency. If our system detects a concerning pattern, our team may reach out to you with relevant support information. Learn more about Responsible Gambling at Kedai168.

Your Data Is Safe at Kedai168

Play With Peace of Mind – Your Privacy Fully Protected

Kedai168 protects your personal data with 256-bit SSL encryption, complies with Malaysia's PDPA 2010, and never sells your data to third parties. Register with confidence and enjoy over 1,000 games with secure deposits via Touch 'n Go eWallet, GrabPay, or FPX.

PDPA 2010 Compliant 256-bit SSL No Data Selling 24/7 Support

Terms and conditions apply. For users aged 18 and above only. Please gamble responsibly.

Bahasa Melayu