Kfc2u Privacy Policy – Data Protection Malaysian Users

1. Introduction

Welcome to kfc2u. We understand that when you entrust us with your personal information, you expect us to handle it responsibly and transparently. This Privacy Policy ("Policy") sets out clearly how kfc2u collects, uses, protects, and in certain circumstances shares your personal data.

This Policy applies to all users of the kfc2u website, the kfc2u mobile app, and all services provided by kfc2u. By using any kfc2u service, you acknowledge that you have read and understood this Privacy Policy.

Kfc2u operates in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and are committed to ensuring your personal data is managed in accordance with robust and responsible data protection principles.

2. Personal Data We Collect

Kfc2u collects various types of personal data depending on how you interact with our platform. Below is an overview of the data we collect:

2.1 Data You Provide Directly

• Full name as per MyKad
• Identity card number (MyKad) for verification purposes
• Date of birth
• An active Malaysian mobile number
• Email address (if applicable)
• Bank account or e-wallet details for payment processing
• Information you provide when contacting customer support

2.2 Automatically Collected Data

• IP address and approximate location information (state/region)
• Device type, operating system and web browser version
• Platform usage data, including pages visited, time spent, and actions taken
• Betting history and gaming activity on the kfc2u platform
• Deposit and withdrawal transaction logs
• Cookie data and similar tracking technologies (see Section 6)

2.3 Data from Third-Party Sources

In certain circumstances, kfc2u may receive data about you from legitimate third-party sources, including identity verification service providers, payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as fraud prevention agencies for security purposes.

3. How We Use Your Data

Kfc2u uses your personal data for the following purposes, each grounded in a valid legal basis under Malaysia's PDPA:

Kfc2u will not use your data for any purpose beyond those stated above without first obtaining your renewed consent.

4. Sharing Data with Third Parties

Kfc2u does not sell, rent, or disclose your personal data to third parties for marketing purposes. We only share data in the following limited and necessary circumstances:

4.1 Service Providers

Kfc2u works with a carefully selected network of third-party service providers to help us deliver our services to you. These include technology infrastructure providers, payment processing providers (Touch 'n Go, DuitNow, FPX, GrabPay, Boost, ShopeePay), identity verification service providers, and platform analytics providers. All service providers are bound by strict data protection agreements and are only permitted to use your data for the specific purposes required.

4.2 Legal Requirements

Kfc2u may disclose your data to government authorities, law enforcement agencies or regulatory bodies when required by Malaysian law or a valid court order. This includes requirements related to crime prevention, fraud investigations or regulatory compliance.

4.3 Protection of kfc2u's Rights

Where it is necessary to protect kfc2u's legitimate rights, enforce our Terms & Conditions, or safeguard the safety of other users, we may disclose relevant data to legal advisers or other parties involved in legal proceedings.

5. Data Security

Kfc2u continuously invests in the latest security infrastructure to protect your personal data. Key security measures we have implemented include:

• 256-bit SSL Encryption for all data transmitted between your device and kfc2u's servers — no data can be read in transit
• Encryption of data at rest for all sensitive data stored in the kfc2u database
• Two-factor authentication (2FA) available on all user accounts as an additional layer of security
• 24/7 Security Monitoring by the kfc2u cybersecurity team to detect and respond to any threats in real time
• Regular security audits by qualified independent third parties to ensure our security standards remain current
• Strict access controls – only kfc2u staff with specific authorisation may access user data, and solely for legitimate operational purposes
• Incident response procedures that has been tested and documented to ensure a swift and effective response in the event of a security breach

While kfc2u implements all reasonable security measures, no online security system can be guaranteed to be completely free from all threats. You also play an important role in protecting your account — use a strong and unique password, never share your login credentials, and always log out of your kfc2u account when using a shared device.

6. Cookies & Tracking Technologies

Kfc2u uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the kfc2u website or use the kfc2u app.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login session authentication, betting slip management and security settings. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how users interact with the kfc2u platform – most visited pages, time spent and errors encountered. This data is used for platform improvement.
• Functional Cookies: Saving your preferences such as language, display settings, and favourite sports so you do not have to reconfigure them each time you log in.
• Analytics Cookies: Helps kfc2u understand aggregated platform usage trends for product development and service improvement purposes.

6.2 Managing Cookies

You can manage and delete cookies through your web browser settings. Please be aware that disabling certain cookies may affect the functionality and your experience on the kfc2u platform. For guidance on managing cookies in popular browsers, please refer to your browser's help section.

7. Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by kfc2u:

To exercise any of the rights above, please contact the kfc2u privacy team by email at support@kfc2u.biz or via live chat on the platform. We will process your request within 30 days of receipt. In the case of complex requests, this period may be extended, and you will be notified accordingly.

8. Protection of Children's Data

Kfc2u services are strictly restricted to individuals aged 18 and above. kfc2u does not knowingly collect or process personal data from children or individuals under the age of 18.

Should we discover that personal data of a child under the age of 18 has been inadvertently collected, we will take immediate steps to delete that data and close the associated account.

9. Cross-Border Data Transfers

In the course of its operations, kfc2u may transfer your personal data to servers or service providers located outside Malaysia. Where such transfers occur, kfc2u ensures that adequate protection is afforded to your data through:

• Data processing agreements that comply with international standards
• Standard contractual clauses recognised for cross-border data transfers
• Selection of service partners who comply with data protection standards equivalent to or higher than Malaysia's PDPA

Kfc2u prioritises the use of local Malaysian service providers where practical and cost-effective, in order to minimise the need for cross-border data transfers.

10. Data Retention Period

Kfc2u retains your personal data for as long as necessary to fulfil the purposes set out in this Policy, subject to applicable legal data retention obligations. Our general data retention guidelines are as follows:

• Active Account Data: Retained for the duration of your active account plus any required period following account closure for compliance purposes
• Financial Transaction Records: Minimum 7 years in accordance with Malaysia's financial regulatory requirements
• Support Communication Logs: 2 years from the date of last interaction
• Analytics Data: In anonymised form, may be retained for longer periods for internal statistical purposes
• KYC Data: Minimum 5 years from account closure in accordance with AML requirements

Once the retention period has lapsed and there is no legal requirement to retain the data further, kfc2u will securely delete or anonymise the data in question.

11. Amendments to the Privacy Policy

Kfc2u reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or the services we offer. When significant amendments are made, kfc2u will:

• Displaying clear notices within the kfc2u platform regarding upcoming changes
• Sending notification emails to your registered address
• Updating the "last updated" date at the top of this document

Continued use of the kfc2u platform after any amendments take effect will be considered acceptance of the revised policy. If you do not agree with the changes made, you have the right to close your account before the effective date of those changes.

We encourage you to review this Privacy Policy periodically to stay informed about how kfc2u manages your data.

12. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how kfc2u handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

• Email: support@kfc2u.biz (for privacy inquiries, please include "Privacy Inquiry" in the email subject line)
• Live Chat: Available 24/7 within the kfc2u platform – the fastest way to get immediate assistance
• WhatsApp: Contact the official kfc2u support number listed on the platform

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex requests such as data access or data deletion, the processing period may take up to 30 business days.