kfc4u is committed to protecting the personal data of every Malaysian player on our platform. This Privacy Policy explains what information we collect, why we collect it, how it is used, and the rights you hold over your own data. Please read this document carefully.
This Privacy Policy ("Policy") is published by kfc4u ("we", "us", "our", "the Company"), the operator of the online casino and sports betting platform accessible at kfc4u.cam (the "Platform"). This Policy applies to all individuals who access, browse, or use the Platform, including registered players, visitors, and any person who interacts with our services in any capacity.
kfc4u operates exclusively in the Malaysian market, serving players across Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and throughout the peninsula. Our Platform is designed to process transactions in Malaysian Ringgit (MYR) and to integrate with Malaysian payment systems including Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX. The processing of payments and player data through these locally integrated systems forms a significant component of our data operations as described in this Policy.
We take our obligations regarding the handling of personal data with the utmost seriousness. This Policy sets out, in plain and transparent terms, the categories of personal data we collect from you, the purposes for which that data is processed, the legal bases upon which we rely, how long we retain your data, and the rights you hold as a data subject. Your trust is fundamental to everything we do at kfc4u, and we are committed to earning maintaining it through responsible, lawful, and transparent data practices.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Definition |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, phone number, date of birth, national identity number, IP address, and financial account details. |
| "Data Controller" | kfc4u, the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" | Any third party that processes Personal Data on behalf of kfc4u, subject to our written instructions and data processing agreements. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, or deletion. |
| "Player" / "User" | A natural person who has registered an account on the kfc4u Platform or who accesses the Platform in any capacity. |
| "KYC" | Know Your Customer — the identity verification procedures applied to all kfc4u account holders, typically involving submission of a government-issued identity document and, where required, proof of address. |
| "Cookie" | A small text file placed on your device by a website server to store information about your browsing session, preferences, and interactions with the Platform. |
| "Sensitive Data" | A specific category of Personal Data warranting heightened protection, including data revealing health information, financial vulnerability, or other special-category attributes. |
kfc4u collects personal data across several categories, depending on how you interact with our Platform:
kfc4u collects personal data through the following channels and mechanisms:
Data you provide directly to us when you: register an account on the Platform; complete identity verification (KYC); make a deposit or withdrawal request; contact our support team via live chat, email, or WhatsApp; participate in a promotion or survey; or submit a complaint or feedback.
Data collected automatically as you use the Platform, including through cookies, web beacons, session tracking technologies, and server log files. This data helps us understand how players interact with the Platform and supports our security and fraud-detection obligations.
In limited circumstances, we may receive personal data about you from third parties, including: identity verification service providers (for KYC processing); payment processors facilitating transactions through DuitNow, FPX, or e-wallet platforms; fraud prevention and anti-money laundering (AML) screening services; and where applicable, responsible gambling support registries.
We process your personal data for the following clearly defined purposes. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your kfc4u player account, including authentication, password management, and profile updates. |
| Identity Verification (KYC) | Verifying your identity, age (21+), and residential address in compliance with our responsible gambling and AML obligations. Required for all withdrawal requests. |
| Payment Processing | Processing deposits via Maybank, CIMB, Touch 'n Go eWallet, DuitNow, FPX, and other Malaysian payment methods, and processing withdrawal requests to verified accounts. |
| Customer Support | Responding to queries, complaints, and disputes submitted via live chat, email, or WhatsApp. Maintaining records of interactions for quality assurance and dispute resolution. |
| Fraud & AML Prevention | Monitoring transactions and account activity to detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes. |
| Responsible Gambling | Administering deposit limits, cooling-off periods, self-exclusion elections, and other responsible gambling tools elected by the Player. |
| Platform Improvement | Analysing usage patterns and technical data to improve Platform performance, usability, game selection, and overall player experience. |
| Marketing (With Consent) | Sending promotional communications, bonus notifications, and personalised offers where you have opted in to receive such communications. You may opt out at any time. |
| Legal Compliance | Meeting our obligations under applicable laws, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records required for audit purposes. |
kfc4u processes personal data on the following legal bases:
kfc4u does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following limited and controlled circumstances:
We share data with trusted third-party service providers who act as Data Processors on our behalf, including: identity verification and KYC technology providers; payment gateway operators facilitating DuitNow, FPX, and e-wallet transactions; game software providers and RNG certification bodies; IT hosting, cloud infrastructure, and cybersecurity service providers; and customer support platform operators.
All such third-party processors are required to handle your personal data in accordance with our instructions, our Data Processing Agreements, and applicable data protection standards. They may not use your data for their own purposes.
kfc4u may disclose personal data to relevant authorities, regulators, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory directive — including for the purposes of anti-money laundering reporting or responsible gambling regulatory compliance.
In the event of a merger, acquisition, or sale of all or substantially all of our assets, personal data held by kfc4u may be transferred to the successor entity, subject to equivalent privacy protections being maintained.
kfc4u retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to meet legal, regulatory, or audit obligations. Our standard retention periods are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Contractual obligation and legal compliance |
| KYC identity documents | Duration of account + 5 years post-closure | AML regulatory requirements |
| Transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Customer support records | 3 years from last interaction | Dispute resolution and quality assurance |
| Technical & session logs | Up to 12 months | Security monitoring and fraud prevention |
| Marketing preferences | Until opt-out or account closure | Consent-based marketing operations |
Following the applicable retention period, data will be securely deleted or anonymised in a manner that renders it permanently non-identifiable.
kfc4u implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:
kfc4u uses cookies and related tracking technologies to enhance your experience on the Platform, maintain session state, support security functions, and gather anonymised analytics data. The types of cookies we deploy are as follows:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Essential for the Platform to function — session management, login authentication, and security tokens. Cannot be disabled. | No |
| Functional | Remembers your preferences such as language settings, display options, and recently played games to personalise your experience. | Yes |
| Analytics | Collects anonymised data on how players navigate and use the Platform — used to identify usability improvements and optimise performance. | Yes |
| Security | Supports fraud detection, bot prevention, and suspicious activity monitoring. These are essential to platform integrity and account protection. | No |
You may manage your cookie preferences through your browser settings. Disabling strictly necessary or security cookies may impair Platform functionality and account access. Consent-based cookies may be rejected or withdrawn at any time without affecting your ability to use the Platform's core features.
As a user of the kfc4u Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us as described in Clause 15 of this Policy. We will respond to all valid requests within a reasonable timeframe.
kfc4u does not knowingly collect personal data from any individual under the age of 21 years. Our Platform is intended exclusively for adults who meet our minimum age eligibility requirement. All new accounts are subject to mandatory age verification as part of our KYC process, which requires submission of a valid Malaysian identity document (MyKad or passport).
If we become aware that personal data has been collected from an individual under the age of 21 — whether through a misrepresentation during registration or any other means — we will immediately suspend the associated account, delete the collected data, and take any further steps required to prevent ongoing harm. We reserve the right to withold any funds associated with such accounts pending investigation.
Parents and guardians who have reason to believe that a minor may have registered on our Platform, or may be accessing family member's account, are encouraged to contact our support team immediately.
While kfc4u's Platform is operated primarily for the Malaysian market, certain Data Processors — particularly providers of cloud hosting infrastructure, game software, and identity verification technology — may process data in jurisdictions outside of Malaysia. Where such international transfers occur, kfc4u ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that applied within Malaysia.
Safeguards for international transfers may include: contractual clauses binding the recipient to equivalent data protection standards; processing only by entities operating in jurisdictions recognised as providing adequate data protection; and additional technical security measures such as data minimisation and encryption prior to transfer.
kfc4u reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Where a material change to the Policy is made, we will notify active Players via a prominent on-Platform notification and/or email to the registered address associated with the account, at least seven (7) days before the change takes effect.
Non-material changes — such as clarifications of existing provisions or minor formatting adjustments — may be made without individual notification. The "Effective Date" shown at the top of this Policy reflects the date of the most recent revision. We encourage you to review this page periodically to stay informed of how we manage your data.
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by kfc4u, please contact us through any of the following channels. Our support team is available 24 hours a day, 7 days a week, in English, Bahasa Melayu, and Chinese.
Data subject rights requests must be submitted in writing via email to the address above. Please include your full name, registered email address, and a description of the right you wish to exercise. We will acknowledge your request within 5 business days and fulfil or respond substantively within 30 calendar days.
These are the core principles and technical commitments that underpin our approach to data privacy across the kfc4u Platform.
All data transmitted between your device and our Platform is secured with 256-bit SSL/TLS encryption — the same level of protection used by major Malaysian banks including Maybank and CIMB — ensuring your personal and financial data cannot be intercepted in transit.
kfc4u will never sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is used exclusively to operate your account, process payments, maintain Platform security, and improve your experience.
You retain full rights over your personal data at all times — including the rights to access, correct, delete, restrict, and export your data. All rights requests are handled promptly by our dedicated support team, available 24/7 in English, Bahasa Melayu, and Chinese.
We do not retain your data indefinitely. Every category of personal data has a defined retention period based on legal necessity. When that period expires, your data is securely and permanently deleted or anonymised — not archived indefinitely.
We deploy only four categories of cookies — strictly necessary, functional, analytics, and security. Non-essential cookies require your explicit consent. You can manage your cookie preferences through your browser settings without losing core Platform functionality.
We enforce a strict 21+ minimum age policy through mandatory KYC identity verification. We do not knowingly collect data from individuals under 21. Any under-age account identified will be immediately closed and all associated data deleted in accordance with this Policy.
Our 24/7 support team handles all data and privacy enquiries in English, Bahasa Melayu, and Chinese. Whether you want to access, correct, or delete your data — or simply have a question about how we use it — we are always available to assist.
kfc4u — protecting your data, protecting your play. For players aged 21 and above only.