Privacy Policy kembang128 – Privacy & Personal Data of Malaysian Members Fully Protected

This Privacy Policy explains how kembang128 ("we", "Platform") collects, uses, stores, discloses, and protects your personal information when you use our platform. This includes the kembang128.im website, mobile applications for Android and iOS, and all related services – EPL and Malaysia Super League Sports Betting, live casino, slots, table games, and all promotions.

This Policy is drawn up in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best-practice data protection principles. By using the kembang128 platform, you consent to the collection and use of information as described in this Policy.

Kembang128 only collects data that is strictly necessary to provide the platform's services. Below are the categories of data we collect and their purposes:

We do not collect sensitive data such as health information, religious beliefs, or political orientation. All data is collected directly from you or generated automatically when you use the kembang128 platform.

Kembang128 uses your personal data solely for legitimate, stated purposes as outlined below. We will not use your data for any other purpose without obtaining fresh consent from you:

• Account Management: Creating, verifying, and maintaining your kembang128 account, and processing all login and logout activity.
• Transaction Processing: Securely processes all deposits and withdrawals in MYR via Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay.
• Identity Verification (KYC): Verifying your age (21 and above) and identity to comply with operating licence requirements and prevent fraud.
• Platform Security: Detect and prevent fraudulent activity, money laundering, and unauthorised access to your account.
• Customer Support: Resolving queries, complaints, and requests related to your account or transactions via 24/7 live chat.
• Service Communications: Sending important notifications regarding your account, security, policy changes, and platform updates.
• Marketing (with consent): Keep you informed about relevant kembang128 promotions, bonuses, and special offers – only with your consent.
• Responsible Gambling: Monitoring usage patterns to identify signs of problem gambling and provide the necessary support.

Kembang128 does not sell or rent your personal data to any third party. However, we may share your information with certain parties in the following limited and lawful circumstances:

• Payment Processors: Malaysian payment service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and the FPX network need to receive transaction information in order to process your MYR deposits and withdrawals.
• Technology Service Providers: Cloud infrastructure and security providers that support the operation of our platform. They are bound by strict confidentiality agreements.
• Regulatory Body & Law Enforcement: When required by Malaysian law or upon direction from a relevant authority.
• Audit & Compliance: Independent auditors who verify game fairness and our licensing compliance – data is shared in anonymised form wherever possible.

Protecting your personal data is kembang128's highest technical and operational priority. We continuously invest in the latest security technologies to keep your information safe at all times:

• Transmission Encryption: All data transmitted between your device and kembang128 servers is protected by TLS 1.3 encryption with a 256-bit SSL certificate.
• Storage Encryption: Sensitive data such as identity card information and payment details are stored in encrypted form in our databases.
• Multi-Layer Access Control: Only specifically authorised staff may access sensitive data, with two-factor authentication mandatory for all administrative access.
• 24/7 Security Monitoring: An automated monitoring system detects and raises alerts for any suspicious activity or unauthorised access attempts in real time.
• Regular Security Audits: Penetration testing and security audits are conducted regularly by independent security experts.

Kembang128 does not retain your personal data longer than necessary for the stated purposes or as required under Malaysian law. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account remains active and for 5 years after account closure, for audit and legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian tax and financial regulatory requirements.
• Support Communication Logs: Retained for 2 years for complaint resolution and service improvement purposes.
• Marketing Data (with consent): Retained until you withdraw your consent to receive marketing communications.
• Technical Data (logs): Retained for 90 days for technical troubleshooting and security purposes.

Upon expiry of the retention period, data will be securely deleted or anonymised in accordance with kembang128's internal procedures, which comply with international security standards.

Under Malaysia's PDPA 2010 and kembang128's privacy commitments, you have the following rights regarding your personal data. All requests can be submitted to us via email or 24/7 live chat:

The kembang128 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect the functionality of the kembang128 platform. For optional cookies, you may withdraw your consent at any time.

The kembang128 platform may contain links or integrations with third-party services, including payment providers such as Touch 'n Go, GrabPay, DuitNow, and FPX, for the purpose of processing your MYR transactions.

This Privacy Policy applies solely to the kembang128 platform. kembang128 is not responsible for the privacy practices or content of any third-party websites or services. We encourage you to read the privacy policy of each service provider you use separately.

In operating the kembang128 platform, your personal data may be processed or stored on servers located outside Malaysia as part of our cloud infrastructure. When this occurs, we ensure that protections equivalent to Malaysia's PDPA 2010 standards are applied through:

• Binding data processing agreements with all third-party service providers.
• Use of recognised data transfer mechanisms, including standard data protection clauses.
• Periodic assessments of data protection standards in recipient countries.

Financial transaction data involving payments in Malaysian Ringgit (RM) is processed and stored in Malaysia in accordance with local financial legislation.

Kembang128 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to our services. Each update will be reflected by a new "Updated" date at the top of this document.

For material changes that significantly affect how we use your data, we will notify you via your registered email or through an in-platform kembang128 notification at least 14 days before the changes take effect. Continued use of the platform after the notice period is considered acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how kembang128 handles your personal data, please contact our privacy team through the following channels:

• Email: support@kembang128.im (please state "Privacy Enquiry" in the subject line)
• Live Chat: Available 24/7 via the kembang128 platform
• Response Time: Within 3 business days for general enquiries; 10 business days for formal data rights requests

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Multimedia Malaysia.