Privacy Policy kera77 — Malaysia User Data Protection

Kera77 is an online entertainment platform that operates fully responsibly for players in Malaysia. We understand that user trust is our most valuable asset, and that trust begins with transparent and responsible management of personal data.

This Privacy Policy is prepared in accordance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia and the guidelines set by the Personal Data Protection Commissioner of Malaysia. We are committed to ensuring that every piece of information you share with us is handled with the highest level of security and confidentiality.

This document clearly outlines the types of data we collect, the purpose of that collection, who can access your data, how long your data is retained, and your rights as a data owner. We encourage you to read this document carefully and contact our support team if any section is unclear.

Kera77 has never and will never sell, rent, or transfer user personal data to any third party for marketing purposes without the user's explicit consent. This is our promise to every loyal member of the kera77 platform.

In the course of operating the platform, kera77 collects several categories of personal data from users. This data collection is necessary to enable us to provide a secure, seamless service tailored to each user's needs.

Kera77 does not collect sensitive data such as health information, religious beliefs, political affiliations, or biometric data unless specifically required for identity verification purposes and only with the user's explicit consent.

Every piece of data collected by kera77 is used for legitimate purposes that have been disclosed to users at the time of collection. We do not use user data for any purpose other than those described below without first obtaining additional consent.

• Account Management: Creating, verifying, and maintaining your user account on the kera77 platform, including all required KYC processes.
• Transaction Processing: Managing deposits, withdrawals, and all financial activities within your account securely and accurately.
• Security and Fraud Prevention: Detecting and investigating suspicious activity, preventing unauthorized access, and protecting your account from external threats.
• Legal Compliance: Fulfilling legal obligations under PDPA, anti-money laundering (AML) regulations, and relevant regulatory reporting requirements.
• Service Enhancement: Analyzing aggregated and anonymized usage data to improve platform quality, enhance the user interface, and develop new features.
• Service Communications: Sending important notifications regarding your account, transactions, security updates, and changes to terms of service.
• Customer Support: Providing effective technical support and customer service whenever you contact the kera77 support team.
• Responsible Gaming: Monitoring gameplay patterns to identify users who may require support or intervention regarding their playing habits.

If kera77 intends to use your data for direct marketing purposes such as sending promotions and special offers via email or SMS, we will obtain your explicit consent beforehand. You may withdraw this consent at any time through the notification settings in your account.

Kera77 understands that sharing personal data with other parties is a sensitive matter. We only disclose user personal data in very limited situations and with strict controls as follows:

• Payment Service Providers: Required financial data is shared with registered payment providers such as FPX, TNG eWallet, and other payment gateways solely to facilitate the processing of your transactions.
• Game Providers: Minimum technical information required is shared with licensed game providers to enable access to game content within the kera77 platform.
• Identity Verification Services: KYC documents are shared with accredited identity verification service providers to ensure legal compliance.
• Legal Authority: Data may be disclosed to Malaysian authorities such as the police, courts, or regulatory bodies when required by law or a valid court order.
• Cybersecurity Services: Minimal technical data is shared with security service providers who help us detect and prevent cyber threats and fraud.

Kera77 has never sold, rented, or traded user personal data to any party for commercial or marketing purposes. This is a core principle we do not compromise under any circumstances.

User data security is the top priority in every technical decision made by the kera77 team. We continuously invest in the latest security infrastructure to ensure your data is always protected from both internal and external threats.

The technical security measures we have implemented include:

• 256-bit SSL Encryption: All communications between your device and kera77's servers are encrypted using the TLS 1.3 protocol with 256-bit encryption keys that meet international financial industry standards.
• Data-at-Rest Encryption: Sensitive data stored in the kera77 database — including financial information and identity documents — is encrypted using the AES-256 algorithm.
• Two-Factor Authentication (2FA): A 2FA system is available for all user accounts to add an extra layer of security during login.
• Continuous Security Monitoring: A SIEM (Security Information and Event Management) system monitors all platform activity in real time 24/7 to detect threats or anomalies.
• Network Segregation: Servers storing personal and financial data are isolated within a private network with strict access controls.
• Regular Security Audits: Penetration testing and security audits are conducted regularly by independent cybersecurity experts.
• Secure Data Backup: Data backups are performed automatically and stored at a separate location with full encryption to ensure continuity of service.

Kera77 only retains user personal data for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable laws and regulations. We do not retain data beyond the necessary period.

• Active Account Data: Retained for the duration of active membership and up to 7 years after account closure to meet financial record-keeping and legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's Companies Act requirements and anti-money laundering (AML) regulations.
• KYC Documents: Retained for the duration of active membership plus 7 years, or longer if required by the authorities.
• Security & Technical Logs: Retained for 90 days to 1 year depending on the log type and security investigation requirements.
• Customer Support Records: Retained for 2 years from the date of last interaction for reference and service quality improvement.

Once the retention period expires, personal data will be permanently deleted or anonymised so it can no longer be linked to any individual. The deletion process uses methods that meet international data security standards to ensure data cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as the personal data owner have certain rights that we fully respect. Below is a summary of your rights and how to exercise them:

To exercise any of the above rights, please contact the kera77 support team via 24/7 Live Chat or our official email. We will respond to your request within the timeframe stipulated by applicable law.

Kera77 reserves the right to update or modify this Privacy Policy from time to time in line with changes in legislation, industry practices, or technological developments. Any material changes will be communicated to registered users via email or in-platform notification at least 14 days before the changes take effect.

The latest version of this Privacy Policy will always be available on this page with the update date clearly stated. We encourage you to review this page periodically to ensure you are always informed about how we protect your privacy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the kera77 Data Protection Officer via:

• Live Chat: Available 24/7 via the chat icon on the kera77 platform
• Support Email: [email protected]
• Response Time: Within 3 business days for email, immediately for Live Chat