Your privacy matters to us. This Privacy Policy explains exactly what personal data kilat404 collects from Malaysian players, how we use it, who we share it with, and how you can exercise your rights over your own information.
kilat404 ("kilat404", "the Company", "we", "us", "our") is committed to protecting and respecting the privacy of all individuals who access or use the kilat404 platform at kilat404.cam. This Privacy Policy ("Policy") sets out in clear terms how we collect, use, process, store, share, and protect your personal data in connection with your use of our online casino, sports betting, and related services.
This Policy forms part of kilat404's broader legal framework alongside the Terms & Conditions and the Responsible Gambling Policy. By registering an account or otherwise using the kilat404 platform, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein.
kilat404 processes personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, integrity and confidentiality, and accountability. While kilat404 is not subject to Malaysian domestic data protection legislation (the Personal Data Protection Act 2010, "PDPA") as an international operator, we voluntarily align our data practices with the PDPA's core principles as a baseline standard for serving Malaysian players.
Our commitment: kilat404 will never sell, rent, or trade your personal data to third parties for their own commercial marketing purposes. Your data is used exclusively to operate, maintain, and improve the kilat404 platform and to comply with our legal obligations.
In this Privacy Policy, the following terms carry the meanings set out below:
kilat404 collects the following categories of personal data from users, collected at different stages of the account and gameplay lifecycle:
kilat404 collects personal data through the following primary channels:
kilat404 does not collect sensitive personal data categories (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless this information is voluntarily provided by the user in a specific context — for example, where a user discloses a gambling-related health concern when requesting self-exclusion.
kilat404 processes your personal data for the following specific purposes:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Registration data, KYC data | Contract performance |
| Age and identity verification (KYC) | Identity documents, facial image, date of birth | Legal obligation, contract |
| Processing deposits and withdrawals | Financial and transaction data, payment method details | Contract performance |
| Providing gaming and betting services | Gaming and activity data, financial data | Contract performance |
| Fraud prevention and AML compliance | Transaction data, KYC data, technical data | Legal obligation, legitimate interest |
| Customer support delivery | Registration data, support communication records | Contract performance, legitimate interest |
| Responsible gambling monitoring | Gaming activity data, session data, self-exclusion records | Legal obligation, legitimate interest |
| Promotional communications (opt-in) | Email, mobile number, gaming preferences | Consent |
| Platform security and technical maintenance | Technical and device data, IP address | Legitimate interest |
| Analytics and platform improvement | Anonymised activity data, cookie data | Legitimate interest |
kilat404 processes your personal data under one or more of the following legal bases:
kilat404 does not sell, rent, or trade your personal data to third parties. We share your data only in the following specific and necessary circumstances:
All third-party processors engaged by kilat404 are subject to contractual data protection obligations that require them to process your personal data only on kilat404's documented instructions, implement appropriate security measures, and not use your data for their own commercial purposes.
kilat404 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, or contractual obligations. The following general retention periods apply:
Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with kilat404's internal data disposal procedures.
kilat404 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
While kilat404 takes all reasonable precautions, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying kilat404 immediately if you suspect unauthorised access to your account.
kilat404 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that allow kilat404 to recognise you between sessions and collect data about your platform interactions.
kilat404 uses the following categories of cookies:
You may configure your browser to refuse or delete cookies. Note that disabling essential cookies will prevent the kilat404 platform from functioning correctly and you will be unable to access your account or use the gaming services.
kilat404 recognises and respects your rights in relation to your personal data. Subject to applicable law and the limitations set out below, you have the following rights:
To exercise any of the above rights, please contact kilat404's support team via live chat or by email at [email protected]. kilat404 will respond to data subject requests within 30 calendar days of receipt. We may request proof of identity before processing your request to protect against unauthorised access to your data.
Please note that certain rights are subject to limitations. kilat404 may be unable to delete your personal data where retention is required to comply with legal obligations — for example, AML record-keeping requirements that mandate retention of transaction records for a minimum of five years. In such cases, kilat404 will inform you of the relevant limitation and the legal basis for it.
kilat404 strictly prohibits access to its platform by individuals under the age of 21 years. kilat404 does not knowingly collect, process, or retain personal data from individuals under 21.
Age verification is conducted as part of the KYC process for all new accounts. Where kilat404 reasonably suspects or discovers that a registered account belongs to a person under 21, that account will be immediately suspended, all associated balances will be held pending investigation, and the matter will be reviewed in accordance with our responsible gambling and compliance procedures.
If you are a parent or guardian and believe that your child may have registered an account on kilat404, please contact us immediately via live chat or email so that we can investigate and take appropriate action.
kilat404 is an internationally operated platform. Your personal data may be processed by kilat404 staff, systems, or third-party processors located outside of Malaysia. Such transfers are necessary for the delivery of the services described in this Policy.
Where personal data is transferred internationally, kilat404 ensures that appropriate safeguards are in place to protect your data in accordance with recognised data protection standards. These safeguards may include contractual clauses that bind the receiving party to data protection obligations equivalent to those kilat404 applies internally, or reliance on the recipient jurisdiction's adequacy status under applicable international frameworks.
kilat404's cloud infrastructure is hosted by reputable providers operating geographically distributed data centres. Data residency configurations are reviewed periodically to ensure alignment with our security and compliance obligations.
kilat404 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform operations. Revised versions will be published at kilat404.cam/privacy-policy with an updated "Last updated" date.
For material changes to this Policy — such as new categories of data collection or new purposes for processing — kilat404 will notify registered users via email or an in-platform notification at least seven (7) days prior to the changes taking effect. Your continued use of the platform following the effective date of a revised Policy constitutes acceptance of the updated terms.
We encourage you to review this Policy periodically to remain informed about how kilat404 protects your personal data.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact kilat404 through the following channels:
When submitting a data subject access request or any other rights request, please include your registered email address and account username so that our team can locate your records efficiently. We may ask you to provide proof of identity before releasing any personal data to protect against unauthorised requests.
Privacy protection at kilat404 is not a checkbox exercise — it is an operational standard embedded in every part of how we build and run the platform.
Every data exchange between your browser or device and the kilat404 servers is protected by 256-bit TLS encryption — the same standard used by major Malaysian banks including Maybank and CIMB. Sensitive data at rest is encrypted with AES-256.
kilat404 only collects the personal data that is strictly necessary for the purpose it is being collected. We do not request information that has no operational or legal justification, and we do not retain data beyond its defined retention period.
kilat404 will never sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is used exclusively to operate the platform and comply with our legal obligations. This commitment is absolute and unconditional.
Every third-party processor engaged by kilat404 — including KYC providers, payment processors, and cloud hosting partners — operates under a contractual data processing agreement that binds them to the same data protection standards kilat404 applies internally.
Your right to access, correct, delete, or export your personal data is not just stated in a document — it is supported by operational procedures. Data subject requests submitted to our support team are acknowledged within 24 hours and resolved within 30 calendar days.
kilat404 commissions independent third-party security audits and penetration tests on a regular basis to identify and remediate vulnerabilities before they can be exploited. Results inform ongoing improvements to our data protection architecture.
Questions About Your Data?
kilat404's support team is available 24/7 to assist with any privacy enquiry, data access request, or account concern. For players aged 21 and above only.