Updated: January 2026

Privacy Policy kepo66 — Personal Data Protection for Malaysia Members

At kepo66, your privacy is not merely a legal obligation — it is our genuine commitment to every member. This document clearly explains how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Effective: 1 January 2026
PDPA 2010 Compliance
SSL 256-bit
Malaysia

Kepo66's Six Pillars of Data Protection

Kepo66 has built a comprehensive data protection system so you can play with peace of mind, knowing your personal information is always secure and fully under your control.

Industry-Grade Encryption

All data transmitted between your device and kepo66's servers is protected by SSL 256-bit encryption — the same standard used by leading financial institutions worldwide. None of your sensitive data travels without full protection.

Full PDPA 2010 Compliance

Kepo66's privacy policy is formulated in compliance with Malaysia's Personal Data Protection Act 2010. We adhere to all principles of fair, transparent, and responsible data processing as required under Malaysian law.

Data Control in Your Hands

You have the full right to access, correct, or request the deletion of your personal data at any time. The process is straightforward and completed within the stipulated timeframe without unnecessary bureaucracy.

No Data Sales

Kepo66 has never and will never sell, rent, or lend your personal information to third parties for marketing purposes. Your data is used solely for platform operations and to improve your experience.

Secure Data Storage

Your data is stored on servers protected by multi-layered firewalls, real-time intrusion detection systems, and regular backups. Physical and virtual access to our servers is strictly controlled 24 hours a day.

Data Breach Notification

In the event of any data security breach affecting your information, kepo66 is committed to notifying you within 72 hours, in line with international data protection best practices.

Privacy Questions?

Our privacy team is available 24/7 to assist you with any queries related to personal data protection.

View FAQ
To All kepo66 Members

This Privacy Policy applies to all personal information collected through kepo66.pro and the kepo66 mobile app. By registering or using our platform, you acknowledge that you have read and fully understood this policy.

1 Information We Collect

When you use the kepo66 platform, we collect several types of information to ensure our services run smoothly, securely, and meet your needs as a member. The information collected falls into two main categories:

Information You Provide Directly:

  • Registration Information: Full name, date of birth, identification card number, email address, and mobile phone number.
  • KYC (Know Your Customer) Information: Copy of identity card, passport, or other identification document; selfie for facial verification; and proof of address such as a utility bill or recent bank statement.
  • Financial Information: Bank account number, bank name, and digital wallet details you registered for deposit and withdrawal purposes. kepo66 does not store credit or debit card information directly.
  • Communications: Any messages, complaints, or enquiries you send to our customer support team via live chat, email, or other channels.

Automatically Collected Information:

  • Technical Data: IP address, web browser type and version, operating system type and version, screen resolution, and device information.
  • Usage Data: Pages visited, games played, session time and duration, click actions, and navigation patterns within the platform.
  • Location Data: General location information based on your IP address for legal compliance and fraud prevention purposes.
  • Cookie Data: Information collected through cookies and similar tracking technologies — described in further detail in Section 5.
Minimum Data Collection Principle: kepo66 only collects information that is strictly necessary to provide the services you request. We do not collect data that is excessive or irrelevant to the operation of our platform.

2 How We Use Your Data

The personal information we collect is used for the following purposes. We ensure every use of data is directly related to delivering quality and secure kepo66 services to you:

Purpose of Use Types of Data Used Requirements
Registration and account management Personal information, email, phone Mandatory
Identity verification (KYC) Identity documents, selfie Mandatory (regulatory)
Processing deposits and withdrawals Financial information, bank name Mandatory
Fraud and money laundering prevention Usage data, IP, transactions Mandatory (legal)
Customer Support Account information, communication history Mandatory
Platform improvement and analytics Usage data, cookies Optional
Marketing and promotional communications Email, phone number Optional (opt-out)

We will not use your data for any purpose beyond those listed above without first obtaining your explicit consent. If you do not wish to receive marketing communications, you may opt out at any time through your account settings.

3 Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010, kepo66 processes your personal information on the following legal bases:

  • Contract Performance: Processing necessary to fulfil the service agreement between you and kepo66, including account management, transaction processing, and delivery of gaming services.
  • Legitimate Interest: Processing for fraud prevention, platform security, usage analytics, and service improvement purposes — provided these interests do not override your fundamental privacy rights.
  • Legal Compliance: Processing required under Malaysian law, including KYC requirements, anti-money laundering (AML) reporting, and financial record-keeping obligations.
  • Consent: For optional marketing communications and non-essential cookie analytics, we obtain your explicit consent and provide you the right to withdraw that consent at any time.
Right to Withdraw Consent: For consent-based processing, you may withdraw your consent at any time without affecting the validity of processing carried out prior to that withdrawal.

4 Sharing Information with Third Parties

Kepo66 takes an extremely cautious approach to sharing members' personal information. We does not sell, rent, or transfer your personal information to third parties for their own commercial purposes. However, there are limited situations where sharing information is necessary:

  • Payment Service Providers: Required financial information is shared exclusively with our partner banks and registered digital wallet providers solely to process your deposit and withdrawal transactions.
  • Game Providers: Minimum required information (such as player ID) is shared with licensed third-party game providers to enable you to access their games through the kepo66 platform.
  • KYC and Verification Services: Identity documents are shared with registered identity verification service providers who assist us in meeting our regulatory obligations.
  • Statutory Authority: We will disclose legally required information to Malaysian authorities such as Bank Negara Malaysia, the Inland Revenue Board, or the police when mandated by a court order or statutory provision.
  • Professional Advisors: Limited information may be shared with our lawyers, accountants, or auditors who are subject to strict confidentiality obligations for legal compliance purposes.

All third parties we work with are required to comply with data protection standards equal to or higher than our own. We conduct thorough due diligence before engaging any service provider that will handle kepo66 member data.

5 Cookies and Tracking Technologies

Kepo66 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies (Required): These cookies are required for core platform functions such as login session verification, security, and basic navigation. Without them, the platform cannot operate properly. This type of cookie cannot be disabled.
  • Functional Cookies: Saves your preferences such as language, display settings, and favourite game history to provide a more personalised experience on your next visit.
  • Analytical Cookies: Helps us understand how members use the platform by collecting anonymous information about pages visited and actions taken. This information is used solely to improve our services.
  • Marketing Cookies: Used to display relevant advertisements and promotions based on your interests. These cookies are only activated with your consent.
Managing Cookies: You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the kepo66 platform.

6 Data Retention and Deletion

Kepo66 retains your personal information only for as long as necessary for the purpose it was collected, or as required by Malaysian law. Our retention policy is as follows:

  • Active Account Data: Retained for the duration that your account remains active on the kepo66 platform.
  • Financial Transaction Records: Retained for a minimum of seven (7) years after the transaction date, in line with Malaysian financial and tax legal requirements.
  • KYC Documents: Retained for a minimum of five (5) years after account closure, in line with Malaysia's Anti-Money Laundering Act requirements.
  • Support Communication Logs: Retained for three (3) years for reference and dispute resolution purposes.
  • Anonymised Analytics Data: May be retained for a longer period as this information cannot be used to identify a specific individual.

Once the retention period expires or the purpose of processing no longer exists, kepo66 will delete or anonymise your data in a secure and irreversible manner. The data deletion process is carried out under strict security procedures to ensure your data cannot be recovered by any party.

7 Your Privacy Rights

As a kepo66 member and data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal information:

Right of Access

You have the right to request a copy of the personal information we hold about you. Requests will be processed within 21 business days.

Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request an immediate correction at no charge.

Right to Erasure

You may request the deletion of your personal data when it is no longer required, subject to applicable legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, and we will honour that request promptly.

Right to Data Portability

You may request your personal data in a machine-readable format for transfer to another service provider where applicable.

Right to Restriction of Processing

In certain circumstances, you may request that we restrict the processing of your data while a dispute regarding its accuracy or the legitimacy of processing is being resolved.

To exercise any of the above rights, please contact the kepo66 privacy team via email at [email protected], clearly stating the right you wish to exercise and your account information for identity verification. We will acknowledge receipt of your request within 3 business days.

8 Account and Data Security

Kepo66 implements multiple layers of technical and organisational security controls to protect your personal information from unauthorised access, disclosure, alteration, or destruction:

  • 256-bit SSL Encryption: All data communications between the platform and your device are protected by industry-standard encryption that cannot be easily broken.
  • Two-Factor Authentication (2FA): An additional security layer we strongly recommend all members enable to ensure only you can access your account.
  • 24/7 Monitoring: Our security monitoring systems operate around the clock to detect and respond to any suspicious activity in real time.
  • Employee Access Controls: kepo66 employees are only granted access to members' personal information based on their job requirements (need-to-know principle) and are subject to strict confidentiality agreements.
  • Regular Security Audits: The kepo66 platform undergoes regular penetration testing and security audits by independent cybersecurity experts to identify and address potential vulnerabilities.

However, you also play an important role in keeping your account secure. We recommend using a strong and unique password, not sharing your login credentials, and ensuring that the device you use to access kepo66 is always up to date with the latest security patches.

9 Changes to the Privacy Policy

Kepo66 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data processing practices, the latest legal requirements, or service improvements. Whenever a significant change occurs, we will:

  • Updating the "Last Updated" date shown at the top of this policy.
  • Displaying a prominent notice on the kepo66 homepage for at least 14 days before the changes take effect.
  • Sending email notifications to all active members informing them of key changes made.

Continued use of the kepo66 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account and request deletion of your data in accordance with the procedures set out in Section 7.

Regular Reviews: We encourage you to review this Privacy Policy periodically. The latest version will always be available on the kepo66.pro/privacy-policy.

10 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how kepo66 handles your personal information, please do not hesitate to contact us:

  • Privacy Email: [email protected] (state "Privacy Enquiry" in the email subject)
  • Live Chat: Available on the kepo66 platform 24 hours a day, 7 days a week
  • FAQ: Visit FAQ page for answers to the most frequently asked questions

We are committed to responding to all privacy-related enquiries within 3 business days. For more complex matters or those involving data rights requests, the full response period is 21 business days as stipulated by PDPA 2010.

If you believe that kepo66 has failed to adequately address your privacy concerns, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Digital.

Safe & Trusted

Your Data Is Safe with kepo66 — Register Now

With 256-bit SSL encryption, full PDPA 2010 compliance, and over 500,000 active members who trust us, kepo66 is Malaysia's most secure online gaming platform. Start your journey today with complete confidence.

Bahasa Melayu