Kedai88 takes the privacy of every member seriously. This Privacy Policy transparently explains how we collect, use, store, and protect your personal data as a user of Malaysia's trusted online casino and Sports Betting platform.
Before reading the full policy, familiarise yourself with the core principles that guide how Kedai88 handles the personal data of Malaysian members.
As a kedai88 member, you have certain rights over your personal data, all of which we fully respect.
This Privacy Policy ("Policy") is published by Kedai88 ("we", "our platform") and applies to all users of https://kedai88.xyz and any related services we provide, including our online casino platform, Sports Betting, Live Blackjack, Baccarat, slots, and all customer support channels.
We are committed to protecting the privacy and personal data security of every kedai88 member in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices. This policy transparently explains what data we collect, why we collect it, how we use it, and your rights as a data subject.
By registering as a Kedai88 member or using any of our services, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.
Note: This policy is to be read together with kedai88's Terms & Conditions and our Responsible Gambling Policy. All three documents together form the complete framework governing the agreement between you and kedai88.
Kedai88 collects personal data from you through several methods — directly when you register or use the platform, automatically as you browse our website, and in some cases from legitimate third-party sources.
| Data Category | Example Information | Collection Method |
|---|---|---|
| Identity Data | Full name, MyKad number, date of birth, gender | Registration, KYC |
| Contact Details | Malaysian phone number, email address, residential address | Registration, profile updates |
| Financial Data | Bank account number, account holder name, eWallet details | Payment method registration |
| Transaction Data | Deposit, withdrawal, betting, winnings, and bonus history | Automatically during use |
| Technical Data | IP address, device type, web browser, operating system | Automatically via server logs |
| Usage Data | Games played, session duration, clicks, page navigation | Automatically via cookies & analytics |
| Communication Data | Live Chat conversation records, support emails, feedback | Customer support interactions |
We do not collect: Full credit or debit card details (only payment tokens processed by payment service providers), plaintext passwords, or any biometric data.
Kedai88 collects and processes your personal data only for purposes that are lawful, relevant, and no greater than what platform operations require. The following are the primary purposes for which your data is used:
Kedai88 processes your personal data on valid legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA). Depending on the purpose of processing, we rely on the following bases:
You may withdraw your consent at any time for processing that relies on consent. Withdrawal does not affect the validity of any processing carried out prior to that point.
Kedai88 does not sell or trade members' personal data to any third party. However, in the course of operating the platform, we may share your personal data with certain third parties in limited and controlled circumstances:
Important: Every third party that receives your data is required to handle it to a security standard equal to or higher than Kedai88's, and is prohibited from using it for any purpose beyond what is specified in their agreement with us.
Kedai88 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by applicable Malaysian law.
| Data Type | Retention Period | Reason |
|---|---|---|
| Identity & account data | Throughout the active account period + 7 years | Malaysia PDPA & AML Requirements |
| Financial transaction records | 7 years from the transaction date | Tax & AML legal requirements |
| Customer support records | 3 years from the date of interaction | Dispute referral & quality assurance |
| Technical & security logs | 12 months | Fraud detection & security forensics |
| Usage analytics data | 24 months (in aggregated form) | Platform improvements |
| Marketing consent | Until withdrawn | Valid consent record |
Once the retention period expires, personal data will be securely deleted or permanently anonymised so that it can no longer be linked to any individual.
Kedai88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure.
Technical Measures:
Organisational Measures:
While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. You are also responsible for maintaining the security of your Kedai88 account password.
The kedai88 platform uses cookies and similar tracking technologies to enhance the user experience, maintain secure login sessions, and understand how members interact with our platform.
Types of Cookies We Use:
You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and overall experience of the Kedai88 platform.
Kedai88 respects your privacy rights and provides straightforward channels for you to exercise the personal data rights described above. To submit any data rights request, you may:
Kedai88 will respond to data rights requests within 30 business days of receipt. For complex requests, we may extend this period with prior notice to you. We may also need to verify your identity before processing certain requests to protect the security of your account.
Exemption: The right to data erasure does not apply in full where retention is required to fulfil legal obligations (such as the 7-year requirement under Malaysia's AML laws) or to defend legitimate legal interests.
Kedai88 services are exclusively available to individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.
If we find that personal data belonging to an individual under the age of 18 has been collected through our platform, we will take immediate steps to delete that data and close the relevant account. If you are aware that a minor has registered an account on Kedai88, please contact us immediately at support@kedai88.xyz so that appropriate action can be taken.
Kedai88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements in how we safeguard member privacy.
Any material changes to this Policy will be communicated to members via an in-platform notification or email to registered members at least 14 days before the changes take effect. For minor changes that do not materially affect your rights, we will update the "Last Updated" date at the top of this document.
Your continued use of the Kedai88 platform after any amendments take effect constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your privacy.
If you have any questions, concerns, or complaints regarding Kedai88's Privacy Policy or how we handle your personal data, please reach us through the following channels:
We also encourage you to review Terms & Conditions and Responsible Gaming Policy us for a full overview of our agreements and commitments to you as a Kedai88 member.
This Privacy Policy document was last updated on 1 January 2026 (Version 3.1) and supersedes all previously published versions of the Kedai88 Privacy Policy.
Many online casino players in Malaysia are unaware of just how important it is to read and understand a platform's Privacy Policy before signing up. Unlike regular online shopping, online casino platforms store far more sensitive information — including full identity data, bank account details, financial transaction history, and your betting activity patterns. A data breach of this kind can have consequences far more serious than the exposure of a name and email address.
At Kedai88, we do not merely meet the minimum requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) — we go further by embedding the principle of privacy by design into every aspect of platform development. This means privacy protection is considered from the outset for every new feature and process we introduce, not as an afterthought once development is complete.
One concern commonly raised by new Kedai88 members is the KYC (Know Your Customer) process. Why does Kedai88 need a copy of your MyKad and proof of address? This is a legal requirement under Malaysia's Anti-Money Laundering (AML) regulations that cannot be waived. That said, we ensure all KYC documents are encrypted, stored securely, and accessed only by personnel specifically authorised for the verification process — for no other purpose.
Regarding payment information, kedai88 does not store your full bank account or eWallet details in our systems. When you register a payment method such as Touch 'n Go, GrabPay, or a Maybank2u account for deposits and withdrawals, we only retain a token or reference that cannot be used to carry out transactions without your authorisation. Your actual details are stored and processed by the respective payment providers, who maintain their own industry-grade security systems.
Your betting history and transaction records on Kedai88 are data we protect with the utmost care. This information is never shared with advertisers or marketing parties, and is not used to build profiles that are sold to third parties. We use your activity data solely for internal purposes — securing your account, detecting fraud, and selectively recommending games or promotions that are relevant to your interests.
If you have privacy concerns in the context of responsible gambling, it is important to know that information about your use of self-control tools — such as deposit limits you have set or self-exclusion periods you have chosen — is strictly confidential and will not be shared with anyone unless required by law. kedai88 respects your decisions in managing your betting activity and will not use this information for unrelated purposes.
Ultimately, your trust is the foundation of Kedai88's continued growth. As Malaysia's trusted online casino and Sports Betting platform serving over 500,000 active members since 2019, we understand that trust must be earned every day through action — not just words. This Privacy Policy is not a formality — it is a genuine commitment from Kedai88 to you. If anything is unclear or you have questions, our support team is available via Live Chat 24/7 in Bahasa Melayu.