Privacy Policy koko11 — Member Personal Data Protection

Welcome to the koko11 Privacy Policy page. We, koko11 Entertainment, as the operator of an online gaming platform in koko11.onl, taking the protection of your personal data very seriously. This policy has been established in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international standards in data management.

By registering an account, using the platform, or browsing the koko11 website, you agree to the collection and use of your personal information as described in this policy. We encourage you to read this document carefully and contact us if you have any questions.

1 Introduction & Scope of This Policy

This Privacy Policy applies to all users of the koko11 platform, including website visitors, registered members, and anyone who interacts with our services via web browser, mobile app, or any other digital channel operated by koko11.

This policy explains:

• The types of personal information we collect from you.
• The purpose for which the information is collected and used.
• Who we share your information with and under what circumstances.
• The security measures we take to protect your data.
• Your rights regarding your personal data and how to exercise them.

If you are a Malaysian resident, your rights under the Personal Data Protection Act 2010 (PDPA) also apply, and we fully respect those rights across all our operations.

2 Personal Data We Collect

Koko11 only collects data necessary to provide you with a safe, fair, and high-quality service. Below is a summary of the data we collect, organized by category:

We also collect data automatically when you use our platform, including log information, cookie data, and device information. This data helps us identify and prevent fraudulent activity and improve platform performance for a smoother gaming experience.

3 How We Use Your Data

Every use of your personal data by koko11 is based on a valid legal basis and limited to the stated purposes. Below are the key purposes for which we use your information:

• Account Management: Creating, verifying, and managing your member account, including KYC processes and identity verification.
• Transaction Processing: Processing deposits, withdrawals, and all other financial transactions securely and accurately.
• Service Provision: Enabling you to access all games and features on the koko11 platform that you are entitled to enjoy as a member.
• Fraud Prevention: Monitoring account activity to identify and prevent fraud, money laundering, and platform abuse.
• Service Communications: Sending important notices related to your account, security, terms changes, and transaction information.
• Targeted Marketing: With your consent, to send you promotional information, bonuses, and offers tailored to your preferences.
• Platform Improvements: Analysing usage patterns to improve user experience, platform performance, and the games catalogue.
• Legal Compliance: Fulfilling legal and regulatory obligations, including reporting requirements to the relevant authorities.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate support.

Koko11 will not use your data for any purposes beyond those stated above without obtaining your consent first, unless required by law.

4 Data Sharing with Third Parties

Koko11 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, we may share your information with the following parties under limited and controlled circumstances:

• Payment Service Provider: To securely process deposits and withdrawals. These providers are bound by strict data protection agreements.
• Game Software Provider: Minimum required data is shared with licensed game providers to enable you to access their games.
• Identity Verification Provider: To conduct KYC checks and age verification as required by regulators.
• Regulatory Bodies & Law Enforcement: When required by law, court order, or direction from a legitimate regulatory authority.
• Fraud Prevention Services: With providers who help us identify and prevent fraudulent activity and money laundering.
• Cloud Computing Provider: Our technology infrastructure uses certified cloud services that comply with international security standards.

All third parties who receive your data are bound by data processing agreements that require them to protect your information and use it only for authorized purposes.

5 Your Data Security

Koko11 continuously invests in the latest security infrastructure to ensure your personal data is always protected. Our comprehensive security measures include:

• 256-bit SSL Encryption: All data transmitted between your device and koko11's servers is encrypted using the latest SSL/TLS technology, making it unreadable to unauthorized parties.
• Stored Data Encryption: Sensitive data stored in our databases is encrypted using AES-256 encryption, the highest security standard in the industry.
• Strict Access Controls: Only koko11 employees who require access to specific data to perform their duties are granted access, and every instance of access is logged for audit purposes.
• Two-Factor Authentication: Our internal systems use multi-factor authentication to prevent unauthorized access to member data.
• 24/7 Monitoring: Our cybersecurity team monitors our systems around the clock to detect and respond to any security threats promptly.
• Regular Security Audits: We conduct regular penetration testing and security audits by accredited independent third parties.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% secure. We therefore encourage you to also take personal precautions, such as using a strong password and never sharing your login credentials with anyone.

6 Cookie Usage (Cookies)

Koko11 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. Below are the types of cookies we use:

You can control and manage cookie settings through your web browser settings. However, disabling certain cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's documentation.

7 Data Retention & Deletion

Koko11 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Retention periods vary by data type:

• Active Account Data: Retained for as long as your account is active and in use on the koko11 platform.
• Financial Transaction Data: Retained for a minimum of 7 years after the transaction in accordance with Malaysia's financial and tax legal requirements.
• KYC & Identity Verification Data: Retained for 5 years after account closure in accordance with anti-money laundering legal requirements.
• Security Logs: Retained for 2 years for security investigation and fraud prevention purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

When your data is no longer needed, we will securely delete or anonymise it using industry-standard methods. You may request deletion of your data at any time, subject to our legal obligations to retain certain data.

8 Your Rights Regarding Personal Data

As a koko11 member and Malaysian resident, you have the following rights under the Personal Data Protection Act 2010 and koko11's policies:

To exercise any of the above rights, contact our privacy team via Live Chat on the koko11 platform or by email at [email protected]. We will process your request within 30 business days. No fees are charged for reasonable data rights requests.

9 Cross-Border Data Transfers

To deliver high-quality services, some of your personal data may be processed or stored on servers located outside Malaysia. koko11 ensures that any such cross-border data transfers are carried out with adequate safeguards, including:

• Ensuring that recipient countries provide data protection standards equivalent to or exceeding those in Malaysia.
• Using approved standard contractual clauses to protect data during transfers.
• Ensuring all international cloud service providers comply with ISO 27001 or equivalent standards.

By using the koko11 platform, you agree to such data transfers subject to the protections described above. If you would like to learn more about the protection mechanisms used for data transfers to specific countries, please contact us.

10 Third-Party Links & Platforms

The koko11 platform may from time to time contain links to third-party websites or services, such as game providers or payment partners. koko11's Privacy Policy does not apply to those third-party websites or services.

We encourage you to read the privacy policy of every website you visit. koko11 is not responsible for the privacy practices or content of third-party websites, even if you access them via links on the koko11 platform.

11 Changes to This Privacy Policy

Koko11 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any material changes will be communicated to you via:

• A clear notice on the koko11 platform home page.
• Email the address registered to your account.
• In-app notifications on the koko11 mobile app.

Notice will be given at least 14 days before the changes take effect for material amendments. Your continued use of the koko11 platform after the effective date of such changes constitutes your acceptance of the updated policy.

We encourage you to review this page periodically to stay informed of our latest privacy practices. The "Updated" date at the top of this page indicates when the last revision was made.

12 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO):

• Privacy Email: [email protected]
• Live Chat: Available 24/7 on the koko11 platform
• Response Time: We will respond to privacy inquiries within 3 business days and resolve cases within 30 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body in your jurisdiction.