Privacy Policy kfc 4 — Malaysia Member Data Protection Commitment

Kfc 4 (operated under the domain kfc4.click) is an online casino entertainment platform serving exclusively the Malaysian market. As a responsible data controller, we are fully committed to protecting the privacy and personal data security of every member who uses our services.

This Privacy Policy is drafted in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and international best practices in personal data management. It details the types of data we collect, the reasons for collection, how it is used, and the measures we take to ensure it remains protected at all times.

This Policy applies to all personal data collected through the kfc 4 platform — whether through the account registration process, use of services, financial transactions, communications with the support team, or any other interaction with kfc4.click. It also applies to data collected automatically when you visit or use our platform.

Kfc 4 collects various types of personal data depending on how you interact with our platform. Below is a full breakdown of the data categories we collect:

Kfc 4 not collect credit or debit card numbers directly. All payment transactions are processed through certified third-party payment gateways — such as processors for Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX — and we only receive transaction confirmations, not your card or bank account details.

Kfc 4 uses the personal data collected solely for legitimate purposes directly related to the provision of platform services. The following are the primary purposes for which your data is used:

• Account Management — creating and maintaining your member account, verifying identity during registration and login, and processing account-related requests.
• Service Provision — allowing you to access and play all games on kfc 4, process bets, and display game results accurately.
• Financial Processing — securely processing deposits and withdrawals through supported local Malaysian payment methods, verifying transactions and maintaining accurate financial records.
• Identity Verification (KYC) — fulfilling legal compliance obligations to verify member identity prior to withdrawal processing, in line with anti-money laundering requirements.
• Customer Support — enabling kfc 4's Malay-speaking support team to assist you effectively with any enquiries, complaints or technical issues.
• Security & Fraud Prevention — detecting and preventing suspicious activity, unauthorised logins, bonus abuse and any other security threats to your account and the platform.
• Experience Personalisation — displaying relevant games based on your play history, recommending suitable promotions, and optimising the interface according to your preferences.
• Service Communications — sends important notifications related to your account, system updates, policy changes, and security-related information.
• Marketing (with consent) — sending information about relevant kfc 4 promotions, bonuses and offers, only where you have given explicit consent to receive marketing communications.
• Analytics & Platform Improvement — analysing usage patterns in aggregate (without identifying individuals) to understand how the platform is used and drive continuous improvements.
• Legal Compliance — fulfilling applicable legal, regulatory, and reporting obligations.

Kfc 4 only processes your personal data where there is a valid legal basis for doing so. Depending on the purpose of processing, the following bases apply:

• Contract Performance — the majority of data processing is carried out because it is necessary for the performance of an agreement (Terms & Conditions) between you and kfc 4. This includes data processing for account management, game provision and payment processing.
• Legal Obligation — certain data processing is required to comply with applicable laws in Malaysia, including PDPA 2010, KYC requirements, and anti-money laundering regulations.
• Legitimate Interests — kfc 4 processes certain data on the basis of our legitimate interests, such as fraud detection, platform security and service improvement, where these interests do not override your fundamental rights and freedoms.
• Consent — for direct marketing and promotional communications, we rely on your explicit consent. You may withdraw this consent at any time.

Kfc 4 does not sell, rent, or trade your personal data to any third parties. However, in the course of operating the platform, we may need to share certain data with the following parties under limited and controlled circumstances:

• Game Providers — such as Pragmatic Play, PG Soft, Evolution Gaming and JILI Games require minimum game session data to deliver games and verify results. This data is transmitted through encrypted channels and these providers are bound by strict data protection agreements.
• Payment Processors — payment gateways for Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX receive only the minimum transaction data required to process your deposits and withdrawals. They do not receive your game data or account history.
• KYC & Identity Verification Services — authorised third-party identity verification service providers may receive identification documents for verification purposes during the KYC process.
• Legal Authorities — kfc 4 will disclose your personal data to Malaysian authorities when required to do so by law, court order or valid legal process.
• IT Service Providers — infrastructure service providers, cloud hosting and cybersecurity providers that assist in operating the kfc 4 platform may have limited access to data in the course of performing their technical duties, and they are bound by strict confidentiality agreements.

In all of the above data-sharing instances, kfc 4 ensures that only the minimum necessary data is shared, and all receiving parties are bound by data protection obligations equivalent to or stricter than kfc 4's own standards.

Kfc 4 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction or accidental disclosure:

• 256-bit SSL Encryption — all data transmitted between your browser and kfc 4's servers is encrypted using the latest TLS protocol with 256-bit encryption strength — the same standard used by Malaysia's leading banking institutions.
• Data Encryption Inactive — sensitive personal data stored in the kfc 4 database — including identity information and KYC documents — is encrypted using robust encryption algorithms.
• Multi-Layer Access Control — only kfc 4 staff with a legitimate operational need are granted access to member personal data, and all access is logged and monitored.
• Two-Factor Authentication — kfc 4's internal systems containing member data are secured with two-factor authentication for all staff on duty.
• 24/7 Security Monitoring — an automated threat detection system monitors suspicious activity across the kfc 4 platform and infrastructure around the clock.
• Regular Security Audits — kfc 4 conducts regular internal and external security audits to identify and address any potential vulnerabilities.

Your personal data is retained for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law — typically for the duration your account remains active and up to 7 years after account closure for financial and compliance records. Data that is no longer required will be securely deleted or anonymised in accordance with kfc 4's data disposal procedures.

Kfc 4 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small data files stored on your device when you visit kfc4.click. The following are the types of cookies we use:

You can manage your cookie settings through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of the kfc 4 platform — particularly session cookies required to maintain your login status.

As a kfc 4 member based in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). kfc 4 is committed to facilitating the exercise of these rights in a straightforward and timely manner:

The kfc 4 platform is inappropriate and not permitted for individuals under the age of 18. kfc 4 does not knowingly collect any personal data from children or individuals under the age of 18.

If we discover or are informed that personal data belonging to a minor (under 18 years of age) has been collected through our platform, we will take immediate steps to delete that data and close the associated account. If you believe that your child or someone you know who is under 18 has registered an account on kfc 4, please contact our support team immediately at support@kfc4.click so that appropriate action can be taken without delay.

In the course of its operations, kfc 4 may need to transfer your personal data outside Malaysia — particularly when working with international game providers such as Evolution Gaming (Sweden), Pragmatic Play (Malta), and JILI Games (Asia). Cross-border data transfers may also occur through the use of cloud computing services or IT infrastructure operating across multiple geographic locations.

Kfc 4 ensures that all cross-border data transfers are carried out with adequate safeguards in place, including:

• Data processing agreements with standard protection clauses binding all international data recipients.
• Verifying that the recipient country maintains an adequate level of data protection.
• Limiting transfers to only the minimum data strictly necessary for the relevant operational purpose.

Kfc 4 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data protection practices, new legal requirements, or developments in platform operations. The latest version of the Privacy Policy will always be displayed on this page along with the date of the most recent update.

For significant amendments that materially affect how we use your personal data, kfc 4 will provide advance notice via your registered email or an in-platform notification at least 14 days before the amendment takes effect. Continued use of the kfc 4 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding kfc 4's Privacy Policy or how we handle your personal data, please reach out to us through any of the following channels:

• Privacy Email: support@kfc4.click — please mark the email subject as "Data Privacy Enquiry" to ensure it is handled by the appropriate team. We aim to respond within 3 business days.
• Live Chat: Available at kfc4.click — 24 hours a day, 7 days a week. Ideal for quick enquiries or for guidance on how to submit a data-related request.
• WhatsApp: Number available within the platform after login — for immediate enquiries in Bahasa Melayu.

Kfc 4 will endeavour to respond to all privacy-related enquiries and requests within 14 business days of receipt. For complex requests or those requiring thorough identity verification, the response time may be longer — and we will notify you if this is the case.

If you are dissatisfied with how kfc 4 handles your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.