Privacy Policy Kemang88 – Protecting Your Personal Data

1Introduction & Scope of Privacy Policy

Kemang88 is an online entertainment platform operating at kemang88.best and through our official mobile app for Android and iOS. We are committed to protecting the privacy of all members and visitors to our platform, in line with the best data protection standards applicable to our operations.

This Privacy Policy applies to all personal information collected by Kemang88 across all channels — website, mobile app, email communications, live chat and any other means through which you interact with Kemang88. "Personal data" in this context means any information that can be used to identify you, directly or indirectly, as an individual.

Kemang88 acts as the data controller for all personal data collected from members of our platform. This means we are responsible for ensuring your data is processed in a lawful, fair and transparent manner in accordance with our obligations under applicable laws.

2Types of Personal Data We Collect

Kemang88 collects various types of personal data depending on how you interact with our platform. Below is a detailed overview of the data we may collect:

Kemang88 does not collect data that is not required for platform operations. You are not obligated to provide certain data, but failing to do so may limit our ability to deliver specific services to you — for example, we cannot process a withdrawal without valid bank account or eWallet details registered in your name.

3How Kemang88 Uses Your Personal Data

Kemang88 uses the personal data we collect for lawful and limited purposes. We do not use your data for unrelated purposes without obtaining your consent beforehand. The following are the primary purposes for which your personal data is used:

• Account management: Creating, verifying and managing your Kemang88 account, including the identity verification (KYC) process required to confirm member eligibility and compliance with applicable laws.
• Financial transaction processing: Processes deposits via DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost and ShopeePay, and withdrawals of winnings to your Malaysian bank account or eWallet in Ringgit Malaysia (RM).
• Provision of gaming services: Gives you access to all Kemang88 games including live casino, poker, Sports Betting (Malaysia Super League, EPL, badminton, e-sports), lottery and slots.
• Service communications: Sending important notifications related to your account, transactions, policy changes, and security updates relevant to your use of the platform.
• Customer support: Processing and resolving enquiries, complaints, and support requests submitted to the Kemang88 support team.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorised access, and any misuse of the Kemang88 platform.
• Legal compliance: To fulfil the legal and regulatory obligations applicable to Kemang88's operations, including reporting requirements to lawful authorities.
• Platform improvements: Analysing usage patterns in aggregate (not at an individual level) to improve the design, performance, and overall experience of the Kemang88 platform.
• Marketing communications: Sending you information on promotions, bonuses, and the latest offers — but only if you have opted in to receive such communications. You may unsubscribe from marketing emails at any time.

Kemang88 ensures that every instance of personal data processing has a valid legal basis — whether it is the fulfilment of a contract, a legal obligation, a legitimate balanced interest, or your explicit consent.

4Data Sharing with Third Parties

Kemang88 does not sell, rent or trade our members' personal data to any third party for their own marketing purposes. This is an unwavering commitment and the foundation of the trust we have built with our member community.

However, there are certain situations where Kemang88 may need to share your data with specific parties, and we want to be transparent about this:

• Payment service providers: Required financial data is shared with authorised payment processors such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay providers solely for the purpose of processing your RM transactions.
• Game software providers: Third-party game platform providers used by Kemang88 may receive the minimum technical data required to ensure games function properly.
• Audit services: Independent third-party certification bodies that audit Kemang88's RNG systems and game fairness may receive the technical data necessary for their review — without any member personally identifiable information.
• Legal authorities: Kemang88 will disclose personal data to lawful authorities when required by court order, regulatory directive or applicable law. In such situations, we will endeavour to notify you unless prohibited from doing so by law.
• Business transfers: In the event of a merger, acquisition, or sale of Kemang88's assets, members' personal data may be transferred to the successor entity — and you will be notified in advance of any change in data controller.

In all of the above cases, Kemang88 ensures that any party receiving our members' personal data is bound by appropriate confidentiality agreements and data protection obligations before any sharing takes place.

5Cookies & Tracking Technologies

Kemang88 uses cookies and similar tracking technologies on our website and mobile app to ensure the platform functions properly and to deliver the best possible experience to you. The following are the types of cookies we use:

• Essential cookies: Cookies required for the platform's core functions, such as maintaining login sessions, security verification, and transaction processing. These cookies cannot be disabled without affecting the platform's functionality.
• Performance cookies: Collecting information on how you use the Kemang88 platform — pages visited, time spent and any errors encountered — to help us improve platform performance and usability.
• Functional cookies: Saving your preferences such as preferred language and display settings so you do not need to reconfigure them every time you log in to Kemang88.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality or user experience of the Kemang88 platform. The Kemang88 mobile app uses similar technologies governed by the privacy settings on your Android or iOS device.

6Data Security Measures

Kemang88 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or accidental destruction.

• 256-bit SSL Encryption: All communications between your device and Kemang88's servers are encrypted using 256-bit Secure Socket Layer (SSL) — the same security standard used by Malaysia's major banks, including Maybank and CIMB.
• Stored data encryption: Sensitive data stored in Kemang88's databases, including financial information and identity verification details, is encrypted using robust encryption algorithms.
• Layered access controls: Access to members' personal data is restricted to Kemang88 staff who require it to perform their duties, and every access is recorded in a maintained audit log.
• Two-factor authentication: Kemang88 encourages and supports two-factor authentication (2FA) for member accounts to add an extra layer of security beyond just a password.
• Continuous monitoring: Kemang88's security systems are continuously monitored to detect any suspicious or unusual activity that may indicate an unauthorised access attempt.
• Regular security testing: Kemang88 conducts regular penetration testing and security vulnerability assessments by independent cybersecurity experts to ensure our systems remain robust at all times.

While Kemang88 takes every reasonable measure to protect your data, no security system is entirely impenetrable. You also play an important role by keeping your account password confidential, using a strong and unique password, and reporting any suspicious activity to our team promptly.

7Data Retention & Deletion

Kemang88 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law. We do not keep data for longer than is necessary.

• Active account data: For as long as your account remains active with Kemang88, we retain all data necessary to operate your account and provide services to you.
• Data after account closure: After account closure, Kemang88 will retain your personal data for the minimum period required by laws governing financial compliance and anti-money laundering — typically between 5 and 7 years depending on the type of data.
• Communication data: Customer support communication records are retained for 3 years for reference, dispute resolution and service improvement purposes.
• Technical data (logs): System logs and technical data are retained for 12 months for security and system debugging purposes.

Once the specified retention period has ended and there are no legal obligations preventing deletion, Kemang88 will securely delete or anonymise your personal data using methods that ensure it cannot be recovered.

If you request deletion of your data before the standard retention period has elapsed, Kemang88 will assess the request and inform you whether it can be fulfilled in full or only in part due to ongoing legal retention requirements.

8Your Rights Over Your Personal Data

As a Kemang88 member, you have certain rights regarding your personal data that we take seriously and fully respect. Your key rights are as follows:

To exercise any of the above rights, please contact the Kemang88 privacy team at support@kemang88.best by clearly stating your request. We will verify your identity before processing the request to protect your data security, and will respond within 14 business days.

9Children's Privacy & Protection of Minors

Kemang88 takes child protection extremely seriously. Our platform strictly does not target individuals under the age of 18, and we do not knowingly collect personal data from minors or underage individuals.

All account registrations at Kemang88 require age verification — you must confirm that you are 18 years of age or older at the point of registration. If Kemang88 discovers that personal data belonging to someone under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and discover that your underage child has registered an account with Kemang88, please contact us immediately at support@kemang88.best and we will address the matter promptly and confidentially.

10Changes to the Privacy Policy

Kemang88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. We are committed to notifying you of any material changes.

When material changes are made to this Privacy Policy, Kemang88 will:

• Sending a notification to your registered email address no less than 7 days before the changes take effect
• Displaying a clear notice on the main page of the Kemang88 platform
• Updating the "Last Updated" date at the top of this document
• For highly material changes, seeking your renewed consent before the changes take effect on your account

We encourage you to review this Privacy Policy page periodically. Your continued use of the Kemang88 platform after notice of any changes is considered acceptance of the updated terms, unless you choose to discontinue use and close your account.

11How to Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by Kemang88, we encourage you to reach out to us directly. Our team is ready to assist you.

Please include "Privacy Enquiry" in your email subject line so our team can route your request to the right person promptly. For requests relating to your personal data rights, include your account number or registered email address for identity verification.