Privacy Policy kediritot —
Your Data, Our Responsibility

Kediritot takes every player's privacy seriously. This document clearly explains what data we collect, why it is needed, how it is protected, and your rights as a user of our platform.

Updated: 1 January 2026
Encryption: 256-bit SSL
Language: Bahasa Melayu (Malaysia)
Version: 2.4
Quick Summary: kediritot collects only the data that is necessary, protects it with the strongest encryption, never sells it to anyone, and gives you full control over your information. Read the full details below.

1Introduction — kediritot Privacy Commitment

Kediritot understands that privacy is more than legal compliance — it is the foundation of trust between a platform and its users. We know that you share your personal information with us because you trust us to use it responsibly. We honour that trust with complete sincerity.

This Privacy Policy clearly explains how kediritot manages your personal data throughout your use of our platform — from the moment you register, throughout your usage, and through to account deletion should you choose to do so. It is written in plain language, not filled with confusing legal jargon.

This policy applies to all users of the kediritot platform regardless of how you access it — whether via a web browser on your computer or smartphone. It also applies to data collected through customer support communications and other interactions with the kediritot team.

2Personal Data We Collect

Kediritot collects data in two main categories: data you provide directly and data collected automatically during platform use.

Data you provide directly:

  • Full name as stated in your official identification document.
  • National identification number (MyKad) or passport number for identity verification (KYC) purposes.
  • An active email address and Malaysian mobile number.
  • Date of birth to verify that you meet the minimum age requirement of 18 years.
  • Bank account or digital wallet details for processing deposits and withdrawals.
  • Residential address for relevant regulatory compliance purposes.

Data collected automatically:

  • IP address, browser type, and device information used to access kediritot.
  • Session log data includes login times, game activity, and transactions carried out.
  • Cookies and web tracking technologies to enhance user experience (see Section 6).
  • Records of communications between you and the kediritot support team.
kediritot only collects data that is strictly necessary to deliver its services. We do not collect irrelevant or excessive information.

3How We Use Your Data

Every type of data we collect has a clear and legitimate purpose. kediritot does not use your data for purposes unrelated to the services you use. The following are the applicable data uses:

Data Type Purpose of Use Legal Basis
Name & IC / Passport KYC identity verification, anti-money laundering compliance Legal Obligation
Email & Phone Account communications, transaction notifications, customer support Service Contract
Bank / eWallet Details Processing deposits and fund withdrawals Service Contract
Session Log Data Account security, fraud detection, technical support Legitimate Interest
Device & IP Data Prevention of unauthorized access, security controls Legitimate Interest
Game Records Dispute resolution, financial reporting, internal audits Legal Obligation

4Data Sharing and Disclosure

Kediritot does not sell, lease, or trade your personal data to any third party for marketing or other commercial purposes. This is an absolute and unchanging commitment.

However, in the following limited situations, your data may be shared with certain third parties:

  • Payment service provider: Required transaction information is shared with DuitNow, FPX, Touch 'n Go, Boost, and GrabPay solely to process your financial transactions.
  • KYC service provider: Identity verification details are shared with approved KYC partners to meet regulatory compliance requirements.
  • Legal authorities: kediritot will disclose the required data to government authorities or law enforcement when mandated by a court order or valid legal requirement.
  • Business transfer: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of the business assets, subject to notice being given to users.

All third parties that receive your data are required to comply with privacy and security standards equal to or higher than kediritot's own policy. Written agreements bind them to strict data protection obligations.

5Encryption and Security Measures

Protecting your data from unauthorized access is kediritot's top technical priority. We continually invest in security infrastructure to ensure your data remains secure at all times.

  • 256-bit SSL encryption: All communications between your browser and kediritot's servers are encrypted using TLS 1.3 with 256-bit encryption. This means data in transit cannot be read even if intercepted by a third party.
  • Secure password storage: Your password is never stored in its original form. We use a one-way cryptographic hash function with a unique salt for each account.
  • Two-factor authentication (2FA): An additional security layer via SMS OTP verification is available and encouraged for all kediritot users.
  • 24-hour security monitoring: The automated monitoring system detects and alerts on suspicious activity in real time.
  • Financial data segregation: Your payment details are not stored in full on kediritot servers — we use tokenisation through certified payment providers.
While kediritot takes all reasonable technical measures, no security system is 100% perfect. You are also responsible for keeping your account password and login credentials secure.

6Cookies and Web Tracking Technologies

Kediritot uses cookies and similar web tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit a website.

We use several types of cookies:

  • Essential cookies: Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance cookies: Collects aggregated, anonymized usage data to help us understand how players use the platform and identify areas for improvement.
  • Functional cookies: Saves your preferences such as favorite games, display settings, and language selection for a smoother return experience.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect certain functions of the kediritot platform.

7Data Retention Period

Kediritot does not store your data indefinitely. Each data type has a defined retention period based on service needs and legal obligations:

  • Active account data: Retained for the duration your account is active and used to provide ongoing services to you.
  • Financial transaction records: Retained for a minimum of 7 years after the transaction, in line with Malaysian financial legal requirements.
  • KYC documents: Retained for a minimum of 5 years after account closure for anti-money laundering compliance purposes.
  • Support communication logs: Retained for 2 years after case resolution for reference should further action be required.
  • Session log data: Retained for 90 days for security purposes and then automatically deleted.

Once the designated retention period has expired, your data will be securely deleted or anonymized using procedures that ensure it cannot be recovered or re-linked to you.

8Your Rights as a User

As a kediritot user, you have clear rights regarding your personal data. kediritot respects and facilitates the exercise of these rights:

Right to Access

You have the right to request a copy of all personal data kediritot holds about you. This request will be processed within 14 working days.

Right to Rectification

If any information we hold about you is inaccurate or outdated, you have the right to request an immediate correction via your account profile or our support team.

Right to Erasure

You may request deletion of your personal data under certain circumstances. Please note that data required by law cannot be deleted until the minimum retention period has lapsed.

Right to Object to Processing

You may object to the processing of your data for certain purposes, including direct marketing communications. Opt-out requests will be actioned within 48 hours.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format (JSON or CSV) for transfer to another service should you choose to do so.

9Privacy Complaints & Contact Us

If you have any concerns, questions, or complaints about how kediritot handles your personal data, our team is ready to help. We take every privacy complaint seriously and are committed to resolving it promptly and transparently.

To submit any privacy-related enquiries or requests, contact the kediritot support team through the following channels:

  • Support email: [email protected] (please state "Privacy Inquiry" in the subject line)
  • Live support via the platform during 24/7 operating hours.

Kediritot aims to respond to all privacy enquiries within 3 working days and resolve complaints within 14 working days. If the case requires further investigation, we will keep you updated on its progress.

10Amendments to This Privacy Policy

Kediritot reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements based on user feedback. All amendments will be displayed on this page with a clear update date.

For significant amendments, kediritot will notify users via:

  • In-platform notification upon your next login.
  • Email sent to the address registered to your account.
  • A prominent notice banner on the kediritot platform homepage.

Continued use of the kediritot platform after any amendments take effect constitutes your acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account and withdraw your remaining balance before the new policy comes into effect.

Six Ways kediritot Protects Your Privacy

These are not empty promises. Every point below is a concrete measure that kediritot has implemented and continues to uphold to protect your data.

256-bit SSL Encryption

Every byte of data transmitted between your device and kediritot's servers is encrypted using TLS 1.3 protocol — the same standard used by leading international financial institutions.

No Data Sales

Kediritot has never and will never sell your personal data to any third party for marketing purposes. Your data is not our business commodity — it is a trust you have placed in us.

Strict Access Control

Only kediritot staff who require access to specific data to carry out their assigned duties are authorized. All access is automatically logged and monitored without exception.

Payment Data Tokenisation

Your bank card and eWallet account details are not stored in full on kediritot servers. We use a tokenisation system where sensitive payment information is handled by certified payment providers.

Real-Time Threat Monitoring

Kediritot's security systems operate 24 hours a day to detect suspicious activity, unauthorised login attempts, and other security threats. Automated responses are triggered immediately upon detection.

Guaranteed User Rights

You have full rights to access, correct, transfer, or request deletion of your data. kediritot has clear and responsive procedures in place to facilitate the exercise of these rights.

Questions About kediritot Privacy

These are questions frequently asked by players regarding how kediritot manages their personal data.

All FAQs

kediritot will only disclose user data to government authorities or law enforcement when mandated by a valid court order or applicable legal requirement. We do not voluntarily disclose data without a solid legal basis. Every such request is reviewed by our legal team before any data is handed over.

Yes, you have the right to request deletion of your personal data. Please note, however, that certain data such as financial transaction records and KYC documents must be retained for the minimum period required by Malaysian law (typically 5–7 years). Data not subject to legal retention requirements will be deleted within 30 days of the request being received.

When your account is closed, data that does not require legal retention will be deleted or anonymised. Data that must be retained for legal reasons will be kept for the prescribed period but will no longer be accessible for marketing or analytics purposes. Once the mandatory retention period expires, all data will be permanently deleted.

In the event of a data breach affecting your personal information, kediritot is committed to notifying you within 72 hours of becoming aware of the breach, in line with industry best practices. Notification will be sent via your registered email and in-platform notification. We will also inform you of the steps taken to contain and remediate the situation.

Confident with kediritot Privacy Protection?

Your data is safe with us. Register a free kediritot account today and enjoy a safe, secure, and responsible gaming experience.

Bahasa Melayu