Kembang777 Privacy Policy — Personal Data Protection for Malaysia Members

1Introduction & Scope of This Privacy Policy

Welcome to Kembang777's Privacy Policy. This document explains in detail how Kembang777 ("Platform", "We") collects, processes, stores, protects, and shares your personal data as a user or member of our platform at kembang777.best.

This Privacy Policy applies to all users who access or use Kembang777's services — including account registration, deposits via Touch 'n Go eWallet, DuitNow, GrabPay, ShopeePay, Boost or FPX, use of slots, live casino, fish shooting, lottery, sports betting on Malaysia Super League and EPL football, badminton, and e-sports including MLBB and Dota 2, as well as all other interactions with our platform.

Kembang777 operates in full accordance with the provisions of Personal Data Protection Act 2010 (PDPA Malaysia) and internationally recognised data security standards. By using the Kembang777 platform, you agree to the data collection and usage practices described in this Privacy Policy.

2Types of Personal Data We Collect

Kembang777 only collects personal data that is genuinely necessary to provide our services to you. The data we collect can be grouped into several categories:

Personal Identification Data:

• Full name as shown on your official identification document (MyKad).
• An active Malaysian phone number — used for registration OTP and important communications.
• Date of birth — for age verification to confirm you are 18 years or older.
• A copy of your MyKad or other identity verification document (collected during the KYC process for your first withdrawal).

Financial & Transaction Data:

• EWallet account numbers (Touch 'n Go, DuitNow, GrabPay, ShopeePay, Boost) used for deposits and withdrawals.
• Malaysian bank account number for withdrawals via FPX.
• Your deposit and withdrawal transaction history within your Kembang777 account.
• History of betting and gaming activity on the platform.

Technical & Usage Data:

• IP address and general location (state) at the time of platform access.
• Device type, operating system, and web browser used.
• In-platform activity logs — pages visited, session duration, and actions taken.
• Cookie data and other tracking technologies as described in Section 8.

3How We Collect Your Personal Data

Kembang777 collects your personal data through a variety of methods throughout your relationship with our platform:

Directly from you:

• Account registration form — you enter your phone number and password when signing up.
• The identity verification (KYC) process when applying for your first withdrawal — you will be required to upload proof of identity documents.
• Payment information you enter when making a deposit or adding a new withdrawal method.
• Your communications with the Kembang777 customer support team via Live Chat or email.
• Feedback, complaints or enquiries you submit to us.

Automatically when you use the platform:

• Our system automatically logs your gaming activity, betting history, and transactions for security and compliance purposes.
• Cookie and tracking pixel technologies record usage data to improve the platform experience.
• Device information and IP addresses are automatically recorded for fraud detection and account security purposes.

From authorised third parties:

• Third-party identity verification service providers we use for the KYC process.
• Payment providers such as Touch 'n Go, GrabPay, and FPX may share transaction verification details with us.
• In cases of fraud investigation or legal compliance, information may be received from the relevant authorities.

4How We Use Your Personal Data

Kembang777 uses your personal data only for the legitimate and specified purposes below. We do not use your data for any other purpose without prior notice and, in many cases, your consent:

• Identity and eligibility verification: Verifying that you meet the minimum age requirement of 18 years and the Kembang777 membership eligibility criteria.
• Account management: Managing your account, processing logins, handling account settings and responding to your enquiries.
• Financial transaction processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, ShopeePay, Boost and FPX, as well as managing withdrawals to your Malaysian eWallet or bank account.
• Provision of gaming services: Providing access to all games and services on the Kembang777 platform, including slots, live casino, Sports Betting, and e-sports.
• Security and fraud prevention: Identifying and investigating suspicious activity, fraud, money laundering, or violations of our Terms & Conditions.
• Legal compliance: Meeting reporting and compliance obligations under applicable Malaysian law.
• Service communications: Sending important notifications relating to your account, transactions, and security via SMS to your registered phone number.
• Customer support: Managing and resolving enquiries, complaints, and support requests from you.
• Platform improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve the platform's design, performance, and user experience.
• VIP programme and promotions: Managing your VIP reward points, cashback, and promotions that you are eligible for based on your betting activity.

5Data Sharing with Third Parties

Kembang777 takes seriously the trust you place in us when sharing your personal data. We only share your personal data under the following limited circumstances:

Authorised service providers: Kembang777 works with trusted third-party service providers to operate our platform. These include payment service providers such as Touch 'n Go, DuitNow, GrabPay, ShopeePay, Boost, and FPX, who are required to process your financial transactions, as well as identity verification service providers for the KYC process. All third-party providers are contractually bound to protect your data and may not use it for any purpose beyond what is required for their services.

Legal requirements: Kembang777 may be required to disclose your personal data to Malaysian authorities if mandated by applicable law, court order, or direction from a competent regulatory body. In such circumstances, we will notify you where we are legally permitted to do so.

Business transfers: In the event of any merger, acquisition, or transfer of Kembang777's business assets, members' personal data may be transferred as part of that transaction. In such cases, the receiving party will be bound by the same Privacy Policy or one that provides equivalent protection.

Kembang777 rights protection: Kembang777 reserves the right to disclose data as necessary to protect the legal rights, property or safety of Kembang777, our members or the public — in accordance with applicable laws.

6Data Security — How We Protect Your Information

Kembang777 takes data security infrastructure seriously, investing heavily to ensure every member's personal information is protected to the highest standard. Our technical and organisational security measures include:

• 256-bit SSL encryption: All communications between your web browser and Kembang777's servers are encrypted using TLS 1.3 protocol with a 256-bit key — the same standard used by major Malaysian banks such as Maybank and CIMB.
• Data encryption at rest: Sensitive data stored in our databases — particularly financial and identity information — is encrypted at rest using military-grade encryption algorithms.
• Layered access controls: Only Kembang777 staff who require access to specific data in order to perform their official duties are granted authorisation. All access is automatically logged and monitored.
• Two-factor authentication (2FA): Internal staff accessing Kembang777 systems are required to use 2FA. We also encourage members to enable 2FA in their account settings.
• Regular security audits: Kembang777 conducts regular security audits and penetration testing to identify and address security vulnerabilities before they can be exploited.
• Suspicious activity monitoring: The Kembang777 system monitors account activity in real time to detect unauthorised access attempts, financial fraud, and other suspicious behaviour.
• Secure data backups: Member data is regularly backed up to a secure, separate location to ensure information can be recovered in the event of an unexpected system failure.

While Kembang777 takes all reasonable steps to protect your data, no security system in the world can guarantee 100% protection under all circumstances. It is important that you also take personal protective measures, such as using a strong and unique password for your Kembang777 account, not sharing your login credentials with anyone, and keeping your device protected with up-to-date antivirus software.

7Your Rights as a Data Subject

Under the Personal Data Protection Act 2010 (PDPA Malaysia), you as a Kembang777 member have the following rights regarding your personal data:

• Right to access data: You have the right to obtain a copy of the personal data we hold about you. Data access requests can be submitted via email or Live Chat and will be processed within 14 working days.
• Right to correct data: If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Basic details such as your phone number can be updated directly in your account settings.
• Right to request data deletion: You have the right to request deletion of your personal data from Kembang777's systems, subject to our legal data retention obligations (see Section 9). Account and data deletion requires a processing period of up to 30 business days.
• Right to withdraw consent: Where we process data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing carried out prior to the date of withdrawal.
• Right to restrict processing: Under certain circumstances, you have the right to request that we restrict how we process your data while a review or decision relating to your request is pending.
• Right to object: You have the right to object to the processing of your personal data for specific purposes, particularly for direct marketing where you have previously given consent.

To exercise any of the rights above, please contact the Kembang777 customer support team via Live Chat or email at support@kembang777.best. We will verify your identity before processing any data-related requests to ensure the security of your information.

8Cookies, Tracking & Similar Technologies

Kembang777 uses cookies and similar tracking technologies to enhance the user experience and platform security. Cookies are small data files stored on your device when you visit the Kembang777 platform. The following are the types of cookies we use:

• Session cookies: Required to maintain your login state during an active session. These cookies are automatically deleted when you close your web browser. They are essential cookies that cannot be disabled without affecting platform functionality.
• Preference cookies: Saving your preferences such as interface language to ensure Kembang777 displays according to your settings on every visit.
• Security cookies: Used to identify and prevent unauthorised access, account fraud, and cyberattacks against the Kembang777 platform.
• Analytics cookies: Collecting aggregated statistics on how the Kembang777 platform is used — such as most frequently visited pages and time spent — to help us improve the platform. This data is collected in aggregate form and does not identify individual users.

You can manage cookies through your web browser settings. Disabling certain cookies may affect the functionality of the Kembang777 platform. For more information on managing cookies in popular web browsers, please refer to your browser's help section.

9Data Retention & Deletion

Kembang777 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required under applicable Malaysian law. Our data retention policy is as follows:

• Active account data: Personal data is retained for as long as your account remains active and in use on the Kembang777 platform.
• Financial records data: Financial transaction records — including deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, FPX, and others — are retained for a minimum of 7 years from the transaction date, in line with Malaysian financial and tax legal requirements.
• Data after account closure: When an account is closed at your request, personal data will be deleted or anonymised within 90 days, except for data that must be retained to fulfil legal obligations or resolve any outstanding disputes.
• Support communication data: Chat logs with the customer support team are retained for 2 years for quality assurance purposes and for reference in the event that dispute resolution is required.
• Security log data: System security activity logs are retained for a minimum of 1 year for the purposes of security incident investigation.

When your personal data is no longer needed and there is no legal requirement to retain it, Kembang777 will securely delete or anonymise it so that it can no longer be linked back to you personally.

10Child Protection

The Kembang777 platform is strictly for users aged 18 and above. We do not knowingly collect personal data from children under the age of 18. All account registration processes require users to confirm that they are 18 years of age or older.

Should Kembang777 discover that personal data belonging to a minor under the age of 18 has been collected unintentionally — for example, through registration using another person's phone number or identity — that data will be deleted immediately and the account will be closed without recourse to appeal. Any account balance will be held pending investigation.

If you believe that someone under the age of 18 has registered a Kembang777 account without proper authorisation, please contact our customer support team immediately at support@kembang777.best. We will investigate and take immediate action.

11Privacy Policy Amendments & How to Contact Us

Kembang777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. Any material changes will be communicated to members via in-platform notifications or SMS to your registered phone number, with a minimum of 14 days' notice before the amendments take effect.

The date this Privacy Policy was last updated is shown in the hero section of this page. We encourage you to review this page periodically to stay informed about how we protect your personal data.

If you have any enquiries, concerns or wish to exercise your rights regarding your personal data, please contact Kembang777's Data Privacy Officer via:

• Email: support@kembang777.best
• Live Chat: Available on the Kembang777 platform, 24 hours a day, 7 days a week.
• Response time: Privacy-related enquiries are typically responded to within 2 business days.

We are committed to handling all privacy-related enquiries and complaints with seriousness and professionalism. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant Malaysian Personal Data Protection Department.