Privacy Policy KudaHoki – Malaysian Player Personal Data Protection

KudaHoki is an online betting platform operating in kudahoki.my and is intended exclusively for adult players in Malaysia. We understand that privacy is a matter our Malaysian users take seriously — and so do we. This Privacy Policy has been carefully drafted to ensure every KudaHoki player knows exactly what happens with their data.

This Privacy Policy applies to all personal information collected through the KudaHoki website, mobile applications, interactions with our customer support team, and any other official KudaHoki communication channels. It covers all player categories — from newly registered members to long-standing Platinum VIP players.

KudaHoki operates under strict data protection principles and is committed to ensuring your personal information is processed lawfully, fairly, and transparently. We only collect data that is genuinely necessary to provide our services — no excessive collection, no irrelevant data. This policy may be updated from time to time, and the most recent revision date will always be displayed at the top of this document.

KudaHoki collects several categories of personal information from our players. Each category is collected for a specific and legitimate purpose:

Data is collected through three main methods: first, information you provide directly during account registration, the KYC process, or when communicating with our support team. Second, data generated automatically as you use the platform, such as activity logs, game statistics, and device technical information. Third, information received from third-party payment providers, such as transaction verification data from DuitNow, Touch 'n Go eWallet, or GrabPay, for the purpose of verifying your deposits and withdrawals.

KudaHoki uses the personal data we collect for legitimate and necessary purposes in order to deliver the best possible service to Malaysian players. We never use your data for purposes unrelated to platform operations without your consent.

• Account Management: Creating and maintaining your player account, processing deposits and withdrawals in MYR, and managing your VIP Rewards programme.
• Identity Verification (KYC): Ensuring all players meet the minimum age requirement of 21 and are based in Malaysia — an important safeguard that protects everyone involved.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, duplicate accounts, money laundering, and any unauthorised use of the platform.
• Customer Support: Resolving complaints, answering queries, and providing technical support to players via live chat, email, and official messaging channels.
• Platform Improvement: Analysing usage patterns on an aggregate (not individual) basis to better understand Malaysian players' needs and continuously improve the platform experience.
• Legal Compliance: Fulfilling reporting obligations to the relevant authorities when required under applicable Malaysian law.
• Service Communications: Sending important account-related notifications such as deposit confirmations, withdrawal alerts, security notices, and Terms & Conditions updates.

For marketing communications — such as the latest promotions, VIP Rewards bonuses, or upcoming Malaysia Super League and EPL match notifications — we will only send you emails or messages if you have given explicit consent to receive such communications during registration or through your account settings. You may opt out of marketing communications at any time by using the "unsubscribe" link in any email or by contacting our support team.

KudaHoki firmly believes that your personal data belongs to you. We never sells or rents your personal data to any third party. Data sharing only takes place in limited and necessary situations, as outlined below:

• Payment Providers: Necessary transaction information is shared with payment providers such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX banks (Maybank, CIMB) solely for the purpose of processing your deposits and withdrawals. These providers are governed by their own privacy and data security policies.
• Technology Providers: Third-party services we use for platform infrastructure, security systems, and analytics (in anonymised data form) may process some technical data. All such providers are bound by strict data confidentiality agreements with KudaHoki.
• Competent Authorities: When lawfully required by Malaysian law, a court order, or an official investigation by the relevant authorities, KudaHoki will comply with such directives. We will not disclose information beyond what is legally required.
• With Your Consent: If you have explicitly authorised us to share your information with a specific party for a specific purpose, we will do so upon obtaining your written consent.

KudaHoki continuously invests in robust data security infrastructure to ensure the personal and financial information of all Malaysian players remains protected at all times. The key security measures we employ are:

• 256-bit SSL Encryption: All communication between your device and KudaHoki's servers is encrypted using 256-bit TLS/SSL — the most robust standard in the industry, the same used by Malaysia's leading banking institutions.
• Multi-Layered Firewall: KudaHoki's servers are protected by a multi-layered firewall system that automatically filters and blocks unauthorised access attempts.
• Intrusion Detection System (IDS): A 24/7 intrusion detection system that monitors the network and platform in real time for any unusual activity.
• Two-Factor Authentication (2FA): 2FA is available for all accounts — we strongly encourage all players to enable it for maximum protection.
• Regular Security Audits: KudaHoki undergoes regular independent security audits to identify and address vulnerabilities before they can be exploited.
• Secure Password Storage: Player passwords are never stored in plain text — they are processed through an irreversible cryptographic hashing algorithm.

While KudaHoki takes all reasonable precautions, no online system can guarantee absolute 100% security. We encourage players to play their part in keeping their accounts safe — use a strong, unique password, never share your login credentials with anyone, and enable 2FA. If you notice any suspicious activity on your account, contact KudaHoki's support team immediately.

KudaHoki uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small files stored on your device when you visit our website. Below are the categories of cookies we use:

You can manage your cookie settings through your web browser's preferences. However, disabling essential cookies may affect the functionality of the KudaHoki platform. For guidance on managing cookies in popular browsers, please refer to the official documentation for Chrome, Firefox, Safari, or Edge.

KudaHoki respects and facilitates the exercise of your rights regarding personal data. As a KudaHoki player, you have the following rights, which may be exercised at any time by contacting us at support@kudahoki.my:

To exercise any of the above rights, please submit a written request to support@kudahoki.my with the subject line "Privacy Rights Request". KudaHoki will process your request within a reasonable timeframe, typically within 14 working days. We may require identity verification before processing your request to ensure the security of your data.

KudaHoki retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law. Retention periods vary by data category:

• Identity Verification (KYC) Data: Retained for the duration of the active account and for a minimum of five years following account closure, in accordance with standard anti-money laundering compliance requirements.
• Financial Transaction Records: Retained for seven years from the transaction date in accordance with standard accounting and audit requirements.
• Betting Records: Retained for two years from the date of the bet for dispute resolution and fair game audit purposes.
• Support Communication Logs: Retained for one year from the date of interaction for service improvement and complaint resolution purposes.
• Technical Data (Access Logs, IP): Retained for 90 days for security and fraud detection purposes, then deleted or anonymised.

Once the retention period ends and there is no longer a legitimate reason to keep the data, KudaHoki will securely delete or anonymise it. Deletion is carried out using methods that ensure the data cannot be recovered by any party.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how KudaHoki handles your personal data, our team is ready to help. KudaHoki takes every privacy complaint seriously and is committed to resolving each one thoroughly and in a timely manner.

For any matter relating to data privacy, please contact us via:

• Email: support@kudahoki.my — with the subject line "Privacy Policy Enquiry" or "Privacy Complaint"
• Live Chat: Available 24/7 directly within the KudaHoki platform — average response time under two minutes
• Official Contact Channels: Available under the "Contact Us" section on the platform

KudaHoki will acknowledge your complaint within 24 hours and provide a substantive response within 14 working days. If your issue requires a more thorough investigation, we will keep you updated on the progress of your case on a regular basis. All privacy enquiries and complaints are handled by a team that is fluent in Malay and familiar with the local Malaysian context.