Kera303 Privacy Policy – Malaysian User Data Protection

Welcome to the kera303 Privacy Policy. This document provides a transparent and detailed explanation of how the kera303 platform at kera303.my collecting, using, processing, storing, and protecting your personal data as a user of our platform in Malaysia.

This Privacy Policy applies to all users of the kera303 platform, including those who browse our website, register an account, make deposits, place bets, or use any of the services we offer — whether through the kera303 website or mobile app.

By using the kera303 platform, you agree to be bound by this Privacy Policy. If you do not agree with any provision of this policy, please discontinue use of our platform and contact us to close your account.

This Privacy Policy is to be read together with kera303 Terms & Conditions and constitutes the entire agreement between you and the kera303 platform regarding the use of your personal data.

Kera303 collects personal data through several means: directly from you during registration and platform use, automatically via tracking technologies, and occasionally from legitimate third-party sources. The following are the categories of data we collect:

Kera303 only collects data that is strictly necessary for legitimate platform operations. We practise the principle of data minimisation — collecting only what is necessary, and nothing more.

Every use of your personal data by kera303 has a clear purpose and a legitimate legal basis. We use your data for the following purposes:

• Account management: Creating, verifying and managing your user account on the kera303 platform.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals of winnings to registered accounts.
• Identity verification (KYC): Conducting identity verification checks required to comply with Malaysia's anti-money laundering (AML) laws.
• Customer support: Responding to enquiries, resolving complaints, and providing technical support to users.
• Platform security: Detecting and preventing fraud, bot activity, multiple accounts, and other prohibited activities on the kera303 platform.
• Service improvement: Analysing usage patterns to improve the Sports Betting, Live Casino, slots and e-sports experience on the platform.
• Marketing communications: Sending promotions, bonus offers, and platform update notifications — only where you have given your consent.
• Legal compliance: Fulfilling reporting obligations and compliance requirements with the relevant authorities in Malaysia.

Kera303 will not use your data for any purpose not stated here without first obtaining fresh consent from you.

Kera303 understands that sharing personal data is a sensitive matter. We will only share your data in the following limited circumstances and with strict controls in place:

• Payment service providers: Transaction information is shared with providers such as Touch 'n Go, GrabPay, DuitNow, and FPX partner banks solely for the purpose of processing your payments.
• Game software providers: Minimal gameplay data is shared with slots, Live Casino, and e-sports platform providers solely to enable game functionality.
• Analytics companies: Non-personally identifiable usage data is shared with analytics providers to help us understand platform usage patterns.
• Legal authorities: kera303 will disclose data where required by law, court order, or a lawful request from a Malaysian law enforcement authority.
• Business transfers: In the event of a company acquisition or merger, user data may be transferred as part of the business assets, with prior notice given to users.

All third parties with access to kera303 user data are bound by strict data protection agreements and are required to maintain security standards equivalent to or higher than those of kera303.

The kera303 platform uses cookies and similar tracking technologies to enhance the user experience, analyse traffic, and ensure the platform functions properly. The following are the types of cookies we use:

You can control and manage cookies through your web browser settings. However, disabling essential cookies may affect certain functions of the kera303 platform. For more information on managing cookies, please refer to your web browser's help documentation.

Kera303 continuously invests in the latest security infrastructure to ensure the personal data of all Malaysian users is protected at all times. Our security measures include:

• Data encryption: All data is encrypted using TLS 1.3 during transit and AES-256 when stored in our database.
• Two-factor authentication (2FA): We strongly encourage and support two-factor authentication for all user accounts as an added layer of security.
• Access controls: Access to user data is restricted to only those personnel who genuinely require it to perform their duties, based on the principle of least-privilege access.
• Regular security audits: kera303 systems undergo penetration testing and security audits by independent third parties at least twice a year.
• 24/7 Monitoring: Our security team continuously monitors our systems to detect any unusual activity or security threats.
• Data backup: User data is automatically backed up daily to separate locations to ensure rapid recovery in the event of a system disruption.

While we take all reasonable steps to protect your data, no system in the world is entirely 100% secure. We encourage users to also take their own precautions, such as using strong, unique passwords and never sharing login credentials with anyone.

As a kera303 user in Malaysia, you have specific rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). kera303 fully respects and facilitates the exercise of these rights:

Kera303 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. Below are our data retention guidelines:

• Active account data: Retained for the duration of your active account plus 7 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's Income Tax Act and AML legislation.
• Support communication logs: Retained for 3 years for reference and resolution of any disputes that may arise.
• Analytics data: Anonymised usage data is retained for a maximum of 2 years before being permanently deleted.
• Security logs: Retained for 90 days for security investigation and fraud prevention purposes.

Once data is no longer needed and there is no legal obligation to retain it, kera303 will securely delete or anonymise that data using industry-recognised methods.

Kera303 does not knowingly collect or process any personal data from individuals under the age of 18. Our registration process requires age verification and identity verification via official Malaysian documents (MyKad or passport).

Should we discover that personal data of a minor has been collected without valid parental or guardian consent, we will promptly delete such data and close the account in question. Any concerns regarding the use of our platform by minors may be reported directly to the kera303 support team via email at support@kera303.my.

Kera303 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform improvements. When material changes are made, we will notify you via:

• Pop-up notification upon logging in to the kera303 platform.
• Notification email sent to the address registered to your account.
• A prominent update to the "Last Updated" date at the top of this page.

Continued use of the kera303 platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how your data is managed.

This Privacy Policy was last updated on 1 January 2026. Previous versions are no longer in effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how kera303 handles your personal data, please reach out to us through the following channels:

• Privacy Email: privacy@kera303.my (response within 3 business days)
• General Support Email: support@kera303.my
• Live Chat: Available 24/7 via the kera303 platform

For data protection complaints that have not been satisfactorily resolved by kera303, you have the right to refer the matter to the Department of Personal Data Protection (JPDP) Malaysia through their official website. We are committed to cooperating fully with any investigation conducted by the relevant authorities.