Privacy Policy kfc4u — Personal Data Protection for Malaysian Members

Welcome to the kfc4u Privacy Policy. This document outlines our commitment to protecting the personal data of all members and users of the kfc4u platform, operating under the domain kfc4u.onl ("Platform").

Kfc4u understands that your trust depends on how responsibly we handle your personal information. That is why we have developed this comprehensive privacy policy — so you always know what we do with your data, why we need it, and how we protect it.

By using the kfc4u platform, you agree to the terms set out in this Privacy Policy. This Policy should be read together with Terms and Conditions which together form the complete agreement between you and kfc4u.

Kfc4u collects several categories of information depending on how you interact with our platform. Below is what we may collect:

We only collect information that is strictly necessary for the stated purposes. kfc4u does not collect sensitive data such as medical information, religious beliefs, or political views unless required by law.

Information collected by kfc4u is used exclusively for the following purposes:

• Account management: Creating, verifying, and maintaining your member account on the platform.
• Transaction processing: Securely processing deposits, withdrawals, and payment verifications.
• KYC & AML Compliance: Verifying member identity to comply with Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements.
• Customer support: Responding to member enquiries, complaints, and assistance requests.
• Platform security: Detecting and preventing fraud, unauthorised access, and suspicious activity.
• Service improvement: Analysing usage patterns to enhance platform quality and user experience.
• Marketing communications: Sending promotional information and exclusive offers — only if you have given consent to receive them.
• Legal compliance: Meeting reporting and compliance obligations to relevant authorities when required.

Kfc4u takes a firm stance on data sharing. We do not sell, lease, or disclose members' personal information to third parties for marketing or commercial purposes under any circumstances.

However, there are limited situations where we may need to share data with certain parties:

• Payment service providers: Transaction details are shared with FPX providers, local banks, and e-wallet providers solely to process your payments.
• Technology providers: Third parties providing technical infrastructure, hosting, and security services are bound by strict confidentiality agreements.
• Legal authorities: kfc4u will disclose data when required by court order, criminal investigation, or direction from a legitimate regulatory authority.
• Business transfers: In the event of a merger or acquisition, member data may be transferred to the new entity and will be subject to an equally stringent privacy policy.

All third parties receiving data from kfc4u are required to comply with security and privacy standards equal to or higher than kfc4u's own standards.

The security of member personal data is kfc4u's highest priority. We implement multiple layers of technical and organisational protection to keep your data safe at all times:

• 256-bit SSL encryption for all data communications between your browser and our servers.
• Two-factor authentication (2FA) for member account login and internal staff access.
• 24/7 security monitoring using automated threat detection systems.
• Regular penetration testing conducted by independent security auditors.
• Passwords are stored using one-way hashing — kfc4u cannot view your original password.
• Role-based access control (RBAC) ensuring staff can only access data relevant to their designated responsibilities.
• Regular data backup procedures and a comprehensive disaster recovery plan.

Kfc4u uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login, session management, and security. Cannot be disabled.
• Performance cookies: Collecting information on how members use the platform to help us improve our services. All data is non-identifiable.
• Functional cookies: Remembering your preferences such as language, display settings, and login details for ease of use.
• Analytics cookies: Helping us understand aggregate user behaviour to improve platform design and content.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality of the kfc4u platform.

As a kfc4u member, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Right of access: You have the right to request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of any inaccurate or incomplete data.
• Right to erasure: Under certain circumstances, you may request that we delete your personal data.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where data processing is based on your consent, you may withdraw that consent at any time.
• Right to lodge a complaint: You have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your rights have been violated.

To exercise any of the above rights, please contact our support team via Live Chat or email at [email protected]. We will process your request within 30 business days.

Kfc4u retains members' personal data only for as long as necessary to fulfil the purpose of collection or as required by law. The following are our general data retention guidelines:

• Active account data: Retained for the duration the account remains active and updated regularly.
• Financial transaction records: Retained for a minimum of seven (7) years to meet financial compliance and audit requirements.
• Customer support communication logs: Retained for three (3) years.
• System and security log data: Retained for twelve (12) months.
• Closed account data: Retained for five (5) years after account closure, unless a longer period is required by law.

Once the retention period expires, your data will be deleted or anonymised in a secure and irreversible manner.

The kfc4u platform may contain links to third-party websites or services such as payment providers and technical partners. Please note that:

• The kfc4u Privacy Policy does not apply to such third-party websites or services.
• Kfc4u is not responsible for the privacy practices or content of third-party websites.
• You are encouraged to read the privacy policy of any third-party website before providing them with your personal information.

Kfc4u only works with third parties that uphold trusted privacy and security standards, though we cannot fully control their practices once data has been received.

Kfc4u services are intended solely for individuals aged 18 and above. kfc4u does not knowingly collect, store, or process any personal data from individuals under the age of 18.

Should we discover that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the associated account. Parents or guardians who find that their child has registered on kfc4u without permission are encouraged to contact us immediately.

Kfc4u reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new technologies we adopt. Members will be notified of any material changes via:

• Prominent notices on the platform's home page or dashboard.
• An email will be sent to the address registered to your account at least 7 days before the changes take effect.

The "Last Updated" date at the top of this document always reflects the date of the most recent revision. Continued use of the kfc4u platform after any amendment takes effect constitutes acceptance of the updated policy.

If you have any enquiries, concerns, or wish to exercise your personal data rights, please contact the kfc4u Data Protection Officer through the following channels:

• Live Chat 24/7 on kfc4u — the fastest way to get immediate assistance.
• Email: [email protected] — for written enquiries requiring a detailed response.

We are committed to responding to all privacy-related enquiries within 14 business days. For urgent security issues, please use Live Chat so we can respond more promptly.

For more information on how we operate our platform responsibly, please visit our Responsible Gaming and Terms and Conditions us.