kembang128 Privacy Policy

Introduction

This Privacy Policy ("Policy") issued by kembang128 ("we", "us", "the Platform") and applies to all personal data collected through the website located at https://kembang128.cam and any related applications, services or tools operated under the kembang128 brand.

kembang128 is committed to handling personal information responsibly, transparently and in accordance with applicable international data protection standards. By creating a kembang128 account or otherwise interacting with the platform, you acknowledge that you have read and understood this Policy and that you consent to the processing activities described herein to the extent required by law.

This Policy should be read together with the kembang128 Terms and Conditions and Responsible Gambling Policy, both of which are incorporated by reference. Where any conflict exists, the more specific document shall prevail.

Definitions

The following terms carry the meanings stated below throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Subject" means the individual to whom Personal Data relates — in this context, a registered kembang128 user.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under contractual obligation.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to Processing.
• "KYC" means Know Your Customer — identity and age verification procedures required before full account access or withdrawals.
• "Cookies" means small text files placed on a user's device to store session, preference and analytical information.

Data Controller

kembang128 acts as the Data Controller for Personal Data collected through this platform. The Data Controller is responsible for determining how and why your data is processed, and for ensuring appropriate safeguards are in place.

Where kembang128 engages third-party Data Processors — such as payment gateway operators, identity verification providers or analytics services — written data processing agreements are maintained that restrict the processor's use of your data to the specific services they provide.

For all data-related enquiries, please use the contact details provided in Section 15 of this Policy.

Data We Collect

kembang128 may collect the following categories of Personal Data depending on how you interact with the platform:

Identity and Contact Data

• Full legal name, date of birth and gender (collected during account registration and KYC).
• Email address and, where provided, a contact telephone number.
• Residential address, including city and country.
• Government-issued identity document details submitted during verification (e.g., MyKad number, passport number).

Financial and Payment Data

• Payment method identifiers associated with deposits via Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX or cryptocurrency networks.
• Transaction history including deposit amounts in MYR, withdrawal requests, wager values and bonus activations.
• Full payment card numbers and bank account details are not stored directly by kembang128 — these are handled by PCI-DS-compliant payment processors.

Technical and Usage Data

• IP address, browser type, operating system and device identifiers.
• Session timestamps, pages visited, features used and navigation paths within the platform.
• Geolocation data derived from your IP address (approximate only; not precise GPS location).
• Cookies and similar tracking technologies as described in Section 8.

Communications Data

• Content and metadata from support interactions, complaint records or account queries submitted to kembang128.
• Records of marketing preference settings and opt-out requests where applicable.

Legal Basis for Processing

kembang128 processes your Personal Data one or more of the following legal bases:

• Contractual necessity: Processing required to create and manage your account, process payments, settle wagers and provide core platform services.
• Legal obligation: Processing required to comply with anti-money-laundering regulations, fraud prevention requirements age verification obligations and other applicable legal duties.
• Legitimate interests: Processing carried out to protect platform security, prevent abuse, improve service quality and communicate relevant operational updates, where these interests are not overridden by your fundamental rights.
• Consent: Processing of Personal Data for optional purposes such as personalised marketing communications, where your explicit opt-in is required and freely withdrawable at any time.

Purposes of Processing

kembang128 processes your Personal Data for the following defined purposes:

• Creating and maintaining your registered kembang128 account.
• Verifying your identity and age in accordance with KYC requirements before granting full account access or processing withdrawals.
• Processing MYR deposits and withdrawals through supported Malaysian payment channels and cryptocurrency networks.
• Managing wagering activity, calculating returns and recording transaction history.
• Administering bonus eligibility, wagering requirements and promotional entitlements.
• Detecting, investigating and preventing fraud, money laundering, underage gambling and other prohibited conduct.
• Responding to account enquiries, complaints and support requests.
• Sending transactional notifications including deposit confirmations, withdrawal updates and security alerts.
• Complying with applicable legal and regulatory obligations.
• Improving platform functionality, user experience and responsible gambling tools through aggregated analytics.

Data Sharing

kembang128 does not sell or rent your Personal Data to third parties. We may share your information with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: Financial institutions and payment gateway operators facilitating deposits and withdrawals, including those supporting Malaysian FPX, DuitNow, e-wallet and banking channels.
• Identity verification providers: Specialist third-party KYC services used to verify identity documents and confirm age eligibility before account activation.
• Fraud and risk management services: Providers that assist in detecting unusual transaction patterns, account abuse or potential money-laundering activity.
• Technology infrastructure providers: Cloud hosting, content delivery and database service providers operating under binding data-processing agreements.
• Regulatory and law enforcement authorities: Where kembang128 is required by applicable law or a binding legal order to disclose Personal Data, such disclosure will be made to the extent legally required.

Cookies & Tracking Technologies

kembang128 uses cookies and similar technologies to operate and improve the platform. Cookies are small files stored on your device when you visit the kembang128 website. They help us keep you logged in, remember your preferences and understand how the platform is used.

• Strictly necessary cookies: Essential for account sessions, security tokens and core platform functionality. These cannot be disabled without disrupting service.
• Functional cookies: Store optional preferences such as language, display settings and responsible gambling limit reminders.
• Analytical cookies: Collect aggregated, anonymised data about page visits and feature usage to help improve the kembang128 experience.
• Security cookies: Support fraud detection and account protection mechanisms.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality. kembang128 does not use cookies to deliver third-party advertising on external websites.

Retention Periods

Personal Data is retained only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following general retention periods apply:

Following expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data disposal procedures.

Data Security

kembang128 implements technical and organisational security measures proportionate to the sensitivity of the data processed and the risks involved. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers.
• Access controls and role-based permission systems limiting internal data access to authorised personnel only.
• Regular internal reviews of data handling practices and security configurations.
• Incident response procedures to detect, contain and notify in the event of a data breach where required by law.

You also play an important role in keeping your account data secure. Use a strong, unique password, enable available two-factor authentication and do not share your login details with anyone. If you suspect your kembang128 account has been compromised, contact our support team immediately.

International Data Transfers

kembang128 operates through infrastructure that may be located in jurisdictions outside Malaysia. Where Personal Data is transferred internationally, we rely on recognised safeguards — such as contractual standard clauses, binding corporate rules or equivalent transfer mechanisms — to ensure that your information receives a level of protection consistent with this Policy.

By using kembang128, you acknowledge that your Personal Data may be transferred to, stored and processed in countries other than Malaysia. We will not make such transfers to jurisdictions that we consider to provide inadequate safeguards without first implementing appropriate protective measures.

Your Rights as a Data Subject

Subject to applicable law, you have the following rights in relation to your Personal Data held by kembang128:

• Right of access: You may request a copy of the Personal Data we hold about you and information about how it is processed.
• Right to rectification: You may ask us to correct any inaccurate or incomplete Personal Data. Some corrections require supporting documentation.
• Right to erasure: You may request deletion of your Personal Data in certain circumstances. This right does not apply where retention is required by law or for the establishment, exercise or defence of legal claims.
• Right to restriction of processing: You may ask us to limit processing of your data in defined circumstances, such as while a rectification request is under review.
• Right to data portability: Where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for fraud detection, where your particular circumstances justify an override.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact kembang128 using the details in Section 15. We will respond within a reasonable timeframe and may require identity verification before actioning a request. Requests will be processed at no charge unless clearly unfounded or excessive.

Minors

kembang128 is strictly intended for adults aged21 and above. We do not knowingly collect or process Personal Data from any individual under the age of 21. Where we discover or have reasonable grounds to suspect that an account has been registered by or on behalf of a person under 21, the account will be immediately suspended, the data reviewed and, where applicable, permanently deleted and the matter reported in accordance with our compliance obligations.

If you believe a minor has registered a kembang128 account, please report this to our support team immediately using the contact details in Section 15.

Policy Amendments

kembang128 reserves the right to update this Privacy Policy at any time. The effective date at the top of this page reflects the most recent revision. Material changes will be indicated by an updated version number and, where reasonably practicable, communicated to registered users through a platform notification.

Continued use of the kembang128 platform following the publication of an updated Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically. If you do not accept a revised Policy, please discontinue use and contact support to close your account.

Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the kembang128 data team using the information below.

Website email: [email protected]

Please include your registered account email address and brief description of your enquiry or request so we can respond efficiently. Do not include your password or full payment details in any communication.

For questions about account rules and eligibility, see the Terms & Conditions. For responsible gambling resources and self-exclusion, visit the Responsible Gambling page. For general platform questions, see the FAQ.