Privacy Policy KenzoToto – Data Protection & Privacy for Malaysian Users

This Privacy Policy ("Policy") is published by KenzoToto ("we", "Platform") and applies to all individuals who access or use the website kenzototo.run and all services provided through it, including Sports Betting, live casino, slots, and other games available on our platform.

This document outlines:

• The types of personal information we collect from you when you register and use KenzoToto.
• The purpose and legal basis for processing that data.
• How we protect and store your personal information.
• Your rights regarding the personal data we hold about you.
• How you can contact us with any privacy-related enquiries.

By registering a KenzoToto account or continuing to use this platform, you confirm that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein.

KenzoToto collects several categories of personal information depending on how you interact with our platform. Below is a detailed breakdown of the data we may collect:

KenzoToto does not collect sensitive data such as medical information, political affiliations, or biometric data unless specifically required for identity verification purposes and with your explicit consent.

The personal data we collect is used for the following purposes, which are necessary to provide and improve KenzoToto's services:

• Account Management: To create, verify, and manage your KenzoToto member account, including the KYC (Know Your Customer) process required to comply with anti-money laundering regulations.
• Transaction Processing: To process your deposits and withdrawals via local Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX including Maybank2u and CIMB Clicks.
• Gaming Services Provision: To allow you to access and play all games available on KenzoToto, including tracking your game history and managing your account credits.
• Service Communications: To send you important account-related notifications, including transaction confirmations, security updates, and relevant policy changes.
• Platform Security: To detect and prevent fraud, unauthorised access, money laundering, and other forms of platform abuse.
• Legal Compliance: To comply with applicable legal obligations, including reporting requirements to competent authorities where necessary.
• Platform Improvements: To analyse aggregated usage patterns in order to improve the user experience, enhance platform features, and develop more relevant gaming products for users in Malaysia.
• Marketing Communications: To keep you informed about promotions, bonuses, and new offers from KenzoToto — only with your consent, and you may unsubscribe at any time.

KenzoToto processes your personal data on valid legal grounds in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Depending on the purpose of processing, the applicable legal basis is:

• Contract Performance: Processing required to fulfil the service agreement between you and KenzoToto — including account management, transaction processing, and the provision of access to games.
• Legitimate Interests: Processing for the purposes of fraud prevention, platform security, and service improvement — where KenzoToto's interests and the protection of other members outweigh the individual privacy interests of the person concerned.
• Legal Compliance: Processing required to fulfil legal obligations, such as KYC requirements, AML reporting, and the retention of financial records.
• Consent: For marketing communications and other optional purposes not required for the provision of core services — we will request your explicit consent, which you may withdraw at any time.

KenzoToto does not sell or rent members' personal data to any third party. However, there are certain circumstances in which your data may need to be shared with trusted parties in order for us to deliver our services fully:

• Payment Providers: Information required to process transactions is shared with approved payment service providers, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX operators. This sharing is strictly limited to data necessary for transaction processing.
• Game Providers: Minimal technical data necessary for games to function correctly may be accessed by licensed game providers such as Pragmatic Play and PG Soft solely in a technical maintenance capacity.
• Regulatory Authorities: KenzoToto may be required to disclose certain information to competent authorities in accordance with applicable laws or valid court orders.
• Consultants & Auditors: Third parties appointed to provide professional services to KenzoToto may have limited access to certain data and are bound by strict confidentiality agreements.

KenzoToto continually invests in security infrastructure to ensure your personal data remains protected at all times. The key security measures we have in place include:

• 256-bit SSL Encryption: All communications between your device and KenzoToto's servers are encrypted using the latest TLS/SSL protocols, ensuring that no third party can intercept your data in transit.
• Secure Storage: Personal data is stored in a protected server environment with layered access controls, enterprise-grade firewalls, and continuous security monitoring.
• Two-Factor Authentication: We offer two-factor authentication (2FA) for all accounts to provide an additional layer of security against unauthorised access.
• Stored Data Encryption: Sensitive data such as financial information and identity documents is encrypted at rest, not only during transmission.
• 24/7 Monitoring: An intrusion detection system and suspicious activity monitoring operate around the clock to identify and respond to any security threats promptly.
• Staff Training: All KenzoToto staff with access to user data undergo regular data protection training and are bound by strict confidentiality policies.

While we take all reasonable steps to protect your data, please be aware that no security system is completely infallible. If you suspect your account has been compromised, please contact the KenzoToto support team immediately at support@kenzototo.run.

KenzoToto does not retain your personal data for longer than is necessary for the purposes for which it was collected, or beyond the period required by applicable legal obligations. Our data retention policy is as follows:

• Active Account Data: Retained for the duration your account remains active with KenzoToto, and for a reasonable period following account closure to allow for the resolution of any issues that may arise.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable legal and financial regulatory requirements in Malaysia.
• Security Logs: Retained for 12 months for the purposes of security incident investigation and fraud prevention.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications from KenzoToto.
• KYC Documents: Retained for a minimum of 5 years following account closure, in accordance with applicable anti-money laundering (AML) requirements.

Once the retention period expires, data will be securely deleted or anonymised in accordance with established procedures. You may request early deletion of your data by contacting us, subject to any legal requirements that mandate continued retention.

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia and KenzoToto's internal policies, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact us by email at support@kenzototo.run, specifying the right you wish to exercise along with sufficient information for us to verify your identity. We will respond within 14 business days.

KenzoToto uses cookies and similar tracking technologies to enhance your experience, analyse platform performance, and secure your login session. Below are the types of cookies we use:

• Session Cookies (Required): Required to maintain your login session and ensure session security while using KenzoToto. These cookies are automatically deleted when you close your web browser.
• Preference Cookies (Optional): Stores your preferences and settings, such as language and interface display, to provide a more personalised experience on your next visit.
• Analytics Cookies (Optional): Helps us understand how members use the platform — most visited pages, session duration, and navigation patterns — to improve KenzoToto's design and functionality.
• Security Cookies (Required): Used to detect suspicious activity, prevent fraud, and protect the integrity of the platform from misuse.

You can manage your cookie settings through your web browser's preferences. However, disabling essential cookies may affect the core functionality of the KenzoToto platform and your ability to log in to your account.

KenzoToto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, evolving legal requirements, or improvements to the services we offer to our members in Malaysia.

When material changes are made to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying clear in-platform notifications on KenzoToto about any changes made.
• Sending email notifications to the address registered to your account to inform you of any significant changes.

We encourage you to review this Privacy Policy periodically. Continued use of the KenzoToto platform after any amendments take effect will be considered your acceptance of the updated terms. If you do not agree with the changes, you may request account closure before they take effect by contacting support@kenzototo.run.