Privacy Policy

Introduction

This Privacy Policy ("Policy") sets out how Kerang123 ("the Company", "we", "us", "our") collects, uses, stores, discloses, and protects personal data in connection with the operation of the online gaming platform accessible at kerang123.cam

Kerang123 takes the privacy and security of player data seriously. We operate under internationally recognised data protection principles and comply with the data processing requirements of our gaming licensing framework. This Policy applies to all Users of the Platform — including registered account holders, visitors who browse without registering, and individuals who contact our support team.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy. By creating an Account on the Platform or continuing to use the Platform following a published update to this Policy, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Account" — the personal account registered by a User on the Platform.
• "Cookie" — a small text file placed on your device by the Platform to enable certain functionality and to collect analytics data.
• "Data Controller" — the Company, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Subject" — any identified or identifiable natural person whose personal data is processed by the Company; in the context of this Policy, primarily the registered User.
• "KYC" — Know Your Customer; the identity and document verification process required by anti-money-laundering obligations and our licensing terms.
• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, phone number, identification documents, financial transaction records, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, and deletion.
• "Third Party" — any entity other than the User and the Company, including payment processors, KYC verification providers, analytics services, and customer support tool providers.
• "User" — any individual who accesses, registers on, or uses the Platform, referred to interchangeably as "you" or "your".

Personal Data We Collect

Kerang123 collects the following categories of personal data in connection with the operation of the Platform:

3.1 Registration Data

When you create an Account, we collect your full legal name, date of birth, residential address (including city — for example, Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam), email address, phone number, preferred currency (MYR), and login credentials (username and encrypted password hash).

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering obligations and our licensing requirements, we may collect copies of your government-issued identification documents (e.g., Malaysian MyKad or passport), proof of address documentation, and evidence of your payment method ownership.

3.3 Financial Data

We record details of deposits and withdrawals made through supported Malaysian payment methods — including Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX — including transaction amounts, timestamps, and payment reference numbers. We do not store full card numbers or complete e-wallet credentials.

3.4 Gaming & Activity Data

We collect records of your gaming activity on the Platform, including games accessed, bets placed, wager amounts, game outcomes, session duration, and bonus utilisation. This data is used for account management, responsible gambling monitoring, bonus verification, and dispute resolution.

3.5 Technical & Device Data

We automatically collect certain technical information when you access the Platform, including IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and session timestamps.

3.6 Communications Data

If you contact our support team via live chat or email, we retain records of those communications for quality assurance, dispute resolution, and training purposes.

How We Collect Personal Data

Personal data is collected through the following channels:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, claim a bonus, or contact customer support.
• Automatically — through cookies, web beacons, and server log files when you access the Platform via a browser or mobile device.
• Third-party providers — from payment processors (confirming transaction completion), KYC verification services (confirming identity document authenticity), and fraud detection services.

Purposes of Data Processing

Kerang123 processes personal data for the following specific purposes. We do not use personal data for purposes beyond those listed without obtaining additional consent where required.

Legal Bases for Processing

Kerang123 processes personal data under one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to upon registration — including account management, game provision, deposit/withdrawal processing, and customer support.
• Legal obligation: Processing required to comply with applicable anti-money-laundering legislation, counter-terrorism financing regulations, and the requirements of our international gaming licence — including KYC verification and regulatory reporting.
• Legitimate interests: Processing carried out for our legitimate business interests where these do not override your fundamental rights — including fraud detection, platform security, and aggregate analytics.
• Consent: Where processing relies on your consent (for example, optional marketing communications), you may withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

Data Sharing & Disclosure

Kerang123 does not sell, rent, or trade personal data to third-party marketers. We may share personal data with the following categories of third parties, strictly on a need-to-know basis and subject to contractual data protection obligations:

• Payment processors: To facilitate deposits and withdrawals via Malaysian payment channels including Maybank2u, CIMB Clicks, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, Public Bank, and Hong Leong Connect. These processors receive only the minimum data required to complete the transaction.
• KYC and identity verification providers: Third-party services engaged to authenticate identity documents as part of the mandatory KYC process.
• Fraud detection and risk management services: Providers engaged to identify unusual account behaviour, suspicious transaction patterns, and potential money laundering activity.
• Customer support platform providers: Services used to operate our live chat and ticketing system, which have access to communications data subject to strict confidentiality terms.
• Regulatory and law enforcement authorities: Where we are legally compelled to disclose data by a court order, regulatory directive, or applicable law — including AML reporting obligations.
• Business successors: In the event of a merger, acquisition, or sale of the Company's assets, personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection standards.

International Data Transfers

As an internationally licensed online gaming operator, Kerang123 may process and store personal data on servers located outside Malaysia. Where personal data is transferred to jurisdictions that may not provide the same level of data protection as Malaysia's domestic framework, the Company takes appropriate safeguards to ensure that such transfers are conducted securely, including the use of contractual data protection clauses with receiving entities.

By using the Platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred to and processed in countries outside Malaysia for the purposes described in this Policy.

Data Retention

Kerang123 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention considerations:

• Active Accounts: Personal and gaming data is retained for the duration of the active Account relationship plus a minimum of five (5) years following Account closure, as required by our licensing and AML obligations.
• KYC documents: Retained for a minimum of five (5) years following the cessation of the business relationship, in accordance with anti-money-laundering regulatory requirements.
• Transaction records: Financial transaction records are retained for a minimum of five (5) years for regulatory reporting and dispute resolution purposes.
• Communications records: Support communications are retained for a minimum of two (2) years from the date of the interaction.
• Technical log data: Automatically collected technical data is retained for a maximum of thirteen (13) months for security and analytics purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

Cookies & Tracking Technologies

Kerang123 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to collect aggregate analytics that help us improve the user experience.

10.1 Types of Cookies Used

• Strictly necessary cookies: Required for core Platform functionality including session management, login persistence, and security features. These cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Remember your preferences such as language settings, display preferences, and previously selected payment methods to provide a more personalised experience.
• Analytics cookies: Collect aggregated, anonymised data about how Users interact with the Platform — pages visited, session duration, error events — to help us identify and fix usability issues.
• Security cookies: Used to detect and prevent fraudulent activity, unusual login patterns, and session hijacking attempts.

10.2 Managing Cookies

You may configure your browser to refuse some or all cookies. However, disabling strictly necessary cookies will prevent you from logging in and using core Platform features. Instructions for managing cookie settings are available in your browser's help documentation.

Security Measures

Kerang123 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, and alteration. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encrypted storage of sensitive data at rest, including identity documents and financial records.
• Role-based access controls ensuring that employee access to personal data is limited to what is strictly necessary for their job function.
• Two-factor authentication (2FA) available to all registered Account holders.
• Continuous monitoring of Platform infrastructure for security incidents, intrusion attempts, and anomalous activity.
• Regular security assessments and penetration testing of Platform systems.

Notwithstanding these measures, no method of electronic transmission or storage is completely secure. While the Company takes every reasonable precaution, we cannot guarantee absolute security of your personal data. In the event of a data breach that poses a significant risk to your rights, we will notify affected users and relevant authorities as required by our obligations.

Your Rights as a Data Subject

As a User of the Kerang123 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or at the email address listed in Section 16.