Privacy Policy kit4d – Malaysian User Data Protection

This Privacy Policy ("Policy") describes how kit4d ("we", "us", "the Company") collects, uses, stores, and protects your personal information ("User", "Member") when you use the kit4d platform accessible at https://kit4d.click and all related services.

Kit4d operates under Malaysia's Personal Data Protection Act 2010 (PDPA) and is committed to ensuring your privacy is fully protected at all times. We do not treat your personal data as a business asset – it is your personal information, and we take our responsibility to safeguard it seriously.

This Policy applies to all kit4d users, including visitors browsing the site without a registered account, registered members, and active players using all kit4d services, including Sports Betting, Live Casino, poker, E-Sports, and cricket.

Kit4d collects personal information across several categories depending on the nature of your interaction with the platform. Below is a detailed breakdown of the data we collect:

Account Registration Information:

• Full name as stated on your national ID or passport
• Date of birth for age verification (minimum age requirement: 18 years)
• Active email address for account communications
• Malaysian mobile phone number
• Account password (stored as an irreversible hash)
• State and city of residence in Malaysia

Identity Verification (KYC) Information:

• Copy of Malaysian identity card (MyKad) or passport
• Proof of address (utility bill or bank statement not older than 3 months)
• Selfie or live photo for liveness identity verification in certain cases

Financial Information:

• Digital wallet account number (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow)
• Bank account number for FPX transfers (Maybank2u, CIMB Clicks)
• Records of all deposit and withdrawal transactions in MYR
• Betting and gaming activity history

Technical & Usage Information:

• IP address of the device used to access kit4d
• Device type, operating system, and web browser
• Login history including time, date, and approximate location
• Cookies and related tracking technology data (see Section 6)
• Platform activity logs for security and fraud detection purposes

Kit4d uses collected personal data solely for legitimate, clearly defined purposes. Below is a summary of our data processing purposes:

Kit4d will not use your personal data for any purpose beyond those stated above without first obtaining your consent. Should there be a need to process your data for a new purpose, we will notify you and seek your approval before any such new processing begins.

Kit4d does not sell, transfer, or disclose your personal data to third parties for commercial or marketing purposes without your written consent. However, there are limited circumstances in which kit4d is required to share your data with specific parties for legitimate operational purposes:

Payment Service Providers: To process deposit and withdrawal transactions in MYR, kit4d is required to share the necessary transaction details with digital wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and online banking systems (FPX, Maybank2u, CIMB Clicks). Data shared is kept to a minimum and limited strictly to what is needed to complete each transaction.

Identity Verification Provider: To ensure KYC compliance, kit4d uses approved third-party identity verification services. Data shared is limited to the identification documents required for the verification process and is not retained by the provider once verification is complete.

Legal Authorities: kit4d may be required to disclose user data to Malaysian authorities when compelled by a court order, search warrant, or other valid legal requirement. In such cases, kit4d will endeavour to notify the affected user unless doing so is prohibited by law or court order.

In the Event of a Business Acquisition: If kit4d is involved in a merger, acquisition, or asset sale, user data may be transferred as part of the business assets. In such cases, kit4d will notify users via their registered email and platform notifications at least 30 days before any data transfer takes place, and user rights under this Privacy Policy will continue to be upheld.

Kit4d continually invests in the latest cybersecurity infrastructure to protect users' personal data from unauthorized access, leaks, alteration, or destruction. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All communications between your device and kit4d's servers are encrypted using the latest version of Transport Layer Security (TLS) with strong cipher suites, ensuring that data transmitted over the internet cannot be read by unauthorised parties.
• Data-at-rest encryption: Sensitive data such as financial information and identity documents are stored in encrypted form on kit4d servers. Even in the event of unauthorised physical access to the servers, the data cannot be read without the correct encryption key.
• Internal access controls: Access to user data within kit4d is restricted to staff who require it to perform their duties. All access to sensitive data is logged and audited on a regular basis.
• Two-factor authentication (2FA): kit4d offers 2FA for all user accounts and actively encourages its use. kit4d's internal systems also require 2FA for staff access to user databases.
• Regular security testing: kit4d's infrastructure undergoes regular independent penetration testing and vulnerability assessments to identify and address potential security weaknesses before they can be exploited.
• Incident response plan: kit4d has a comprehensive cybersecurity incident response plan in place. In the event of a data breach, affected users will be notified within 72 hours and immediate remediation steps will be taken.

Kit4d uses cookies and similar tracking technologies to enhance the user experience, maintain account security, and understand how users interact with our platform. Below is an explanation of the types of cookies we use:

Essential Cookies (Required): These cookies are required for the kit4d platform to function properly and cannot be disabled. They include session login cookies that keep you signed in throughout your session, security tokens to prevent CSRF attacks, and your language and region preferences.

Performance & Analytics Cookies: These cookies help us understand how users interact with the kit4d platform so we can improve the user experience. Data collected is in aggregate, anonymous form and cannot be used to identify you as an individual.

Functional Cookies: These cookies store your preferences — such as display settings, preferred language, and interface options — to ensure a more personalised experience each time you use kit4d.

Managing Your Cookie Preferences: You can manage and delete cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the kit4d platform, including your ability to log in to your account.

As kit4d involves financial transactions in MYR, we take additional steps to safeguard users' financial information. All deposits and withdrawals are processed entirely in MYR through approved Malaysian payment methods.

Supported payment methods and how your financial data is protected:

• Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow: Transactions via digital wallets are processed through a securely integrated gateway. kit4d does not store your wallet PIN or password – we only receive the transaction authorisation token issued by the respective wallet provider.
• FPX (Maybank2u, CIMB Clicks and other banks): FPX transactions are processed through the FPX system operated by Payments Network Malaysia (PayNet). kit4d never sees or stores your online banking login credentials — authentication takes place directly on your bank's portal.
• Transaction records: A complete history of all deposit and withdrawal transactions is securely stored and accessible to you at any time through the transaction history section of your kit4d account.

Kit4d makes it straightforward to exercise your privacy rights. Here is a step-by-step guide on how to submit a request relating to your personal data:

1. Submit your request: Email support@kit4d.click with the subject line "Data Privacy Request – [Request Type]". Include your full name and the email address registered to your kit4d account.
2. Identity Verification: To protect your account, kit4d will ask you to verify your identity before processing any data request. This may involve verification via your registered email address or security questions.
3. Request processing: kit4d will process your request within 14 business days from the date of successful identity verification. For complex requests, this period may be extended to up to 30 days, with prior notice to you.
4. Feedback: kit4d will provide a written response detailing the action taken on your request, or an explanation — along with valid reasons — if the request cannot be fully fulfilled.

Kit4d does not charge any fees for reasonable data privacy requests. However, for requests that are repetitive or unreasonable, kit4d reserves the right to charge an administrative fee or decline the request based on a case-by-case assessment.

Kit4d retains your personal data for as long as your account remains active or as needed to provide services to you. When you close your kit4d account, your personal data will be handled as follows:

• Basic account data: Deleted within 90 days of account closure, unless a legal requirement mandates longer retention.
• Financial transaction records: Retained for seven years in accordance with Malaysian legal requirements on financial records and AML compliance. After this period, records are securely deleted.
• Identity Verification Documents (KYC): Retained for five years following account closure in accordance with KYC compliance requirements under Malaysian law.
• Security log: Retained for two years for security investigation and fraud prevention purposes, then permanently deleted or fully anonymised.
• Cookies and analytics data: Session cookie data is deleted when your session ends or you log out. Aggregated analytical data that cannot identify individuals may be retained for a longer period for platform improvement purposes.

Kit4d reserves the right to amend or update this Privacy Policy from time to time in line with changes to Malaysian law, technological developments, or changes in how we operate. Any material amendments will be communicated to all members via their registered email at least 14 days before the changes take effect.

Your continued use of the kit4d platform after any amendment takes effect constitutes your acceptance of the revised policy. It is your responsibility to review this page periodically. The "Updated" date at the top of this page will always reflect the most current version of the Privacy Policy.

This Privacy Policy and all disputes relating to personal data protection at kit4d are governed by Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable Malaysian law. Any dispute that cannot be resolved amicably may be referred to the Department of Personal Data Protection Malaysia.

For any questions, concerns, or requests relating to this Privacy Policy, please contact the kit4d Data Privacy Officer at:

• Email: support@kit4d.click (subject: "Data Privacy Inquiry")
• Live chat: Available 24/7 within the kit4d platform in Bahasa Malaysia
• Frequently Asked Questions: kit4d.click/faq for general enquiries