Privacy Policy kangtoto2 –
Our Commitment to Protecting Your Data

Kangtoto2 is an online betting platform offering Sports Betting, Live Casino, slots, blackjack, and e-sports services to users in Malaysia. This Privacy Policy clearly sets out how we, as the data controller, collect, process, use, store, and protect your personal information.

This policy applies to all individuals who access or use the kangtoto2 platform, including unregistered website visitors, registered members, and anyone who interacts with our platform in any capacity. It also covers information collected through the kangtoto2.ws website and our mobile application.

Kangtoto2 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA), which establishes individuals' rights over their personal data and the responsibilities of organisations that process such data. We take these obligations seriously and adopt all reasonable measures to ensure full compliance.

Kangtoto2 collects personal data from you through various channels when you use our platform. The following are the categories of data we collect:

Your data is collected only when you provide it voluntarily (such as during registration), automatically through your use of the platform, or from authorised third parties such as payment service providers for transaction verification.

Kangtoto2 uses your personal data only for legitimate, clearly stated purposes. We do not process your data for any other purpose without your prior consent:

• Account Management: To create, manage, and maintain your account on the kangtoto2 platform, including secure login and identity verification.
• Transaction Processing: To process deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks, and your winnings withdrawals in Malaysian Ringgit (MYR).
• Anti-Money Laundering (AML) Compliance: To fulfil our legal obligations in preventing money laundering and the financing of unlawful activities through our platform.
• Platform Security: To detect and prevent fraud, account misuse, unauthorised access, and other suspicious activity.
• Customer Support: To resolve complaints, respond to enquiries, and provide you with efficient technical support.
• Responsible Gambling: To monitor usage patterns and identify users who may need support with gambling-related concerns.
• Product Improvement: To analyse aggregated usage patterns (without identifying individuals) in order to improve our products and services.
• Service Communications: To send you important information regarding your account, changes to our terms, security updates, and relevant notifications.
• Marketing (with consent): To send you promotional offers, bonuses, and the latest updates from kangtoto2 — only where you have given consent to receive such communications.

Kangtoto2 does not sell, rent, or transfer your personal data to any third party for marketing or commercial purposes without your consent. However, we may share your data in the limited circumstances described below:

• Payment Service Providers: Transaction information required for payment processing is shared exclusively with payment processors (such as Touch 'n Go, GrabPay, DuitNow, and FPX-participating banks) solely to facilitate your financial transactions.
• Technology Service Providers: Infrastructure service providers, cloud computing platforms, and analytics tools bound by strict confidentiality agreements, who may only use your data in accordance with our instructions.
• Law Enforcement Authorities: Where required by law, court order, or a lawful request from Malaysian authorities for the purposes of criminal investigation.
• Anti-Fraud Enforcement: To relevant industry bodies for fraud prevention and to protect the integrity of the betting industry.

Kangtoto2 implements multiple layers of technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit SSL Encryption: All data transmitted between your device and kangtoto2 servers is encrypted using the latest Transport Layer Security (TLS) protocol.
• Two-Factor Authentication (2FA): An additional security layer that can be enabled on your account to prevent unauthorised access even if your password is compromised.
• Internal Access Controls: Access to user data within kangtoto2's internal systems is restricted to staff who require it to perform their duties, based on a need-to-know principle.
• Regular Security Audits: Our systems and infrastructure undergo regular security audits and penetration testing by independent security experts.
• 24/7 Monitoring: Our cybersecurity team monitors the kangtoto2 platform around the clock to promptly detect any threats or suspicious activity.
• Secure Data Backup: Your data is backed up regularly and stored across separate secure locations to ensure recovery in the event of a technical incident.

While we take all reasonable precautions, no security system can guarantee absolute 100% protection. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities within the timeframe required by law.

Kangtoto2 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law. The following are general guidelines for our data retention periods:

• Active Account Data: Retained for as long as your account remains active and throughout any post-closure period required for legal compliance.
• Financial & Transaction Records: Retained for 7 years after each transaction, in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• Identity Verification Records (KYC): Retained for 5 years after the business relationship ends.
• Support Communication Logs: Retained for 2 years following the resolution of each support case.
• Session & Technical Log Data: Retained for 90 days for security and troubleshooting purposes.

Once the applicable retention period has lapsed, your data will be securely deleted or anonymised in a way that can no longer be used to identify you personally.

As a kangtoto2 user in Malaysia, you have certain rights under the Personal Data Protection Act (PDPA) 2010 with respect to your personal data. kangtoto2 fully respects and supports the exercise of these rights:

Kangtoto2 uses cookies and similar tracking technologies to enhance your experience, analyse traffic, and ensure platform security. The following are the types of cookies we use:

You can manage your cookie settings through your browser at any time. Please note that disabling essential cookies may affect the functionality of the kangtoto2 platform.

Kangtoto2 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

Should we discover that personal data of an individual under the age of 18 has been collected without appropriate age verification, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered on kangtoto2 are encouraged to contact us immediately.

Kangtoto2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. Whenever this Privacy Policy is updated, the "Last Updated" date at the top of the document will be revised to reflect the date of the latest amendment.

For material amendments — that is, changes that significantly affect how we process your data — we will notify you at least 14 days before changes take effect, via your registered email or a prominent in-platform notification. For minor changes that do not materially affect your rights, updates may be made without prior notice.

Your continued use of the kangtoto2 platform after any amendments take effect constitutes acceptance of the updated terms. We encourage you to review this Privacy Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how kangtoto2 handles your personal data, please contact our Data Protection Officer through the following channels:

• Email: support@kangtoto2.ws (please indicate "Privacy Enquiry" in the subject line)
• Live Chat: Available 24 hours a day, 7 days a week via the kangtoto2 platform
• Response Time: Within 3 business days for general enquiries; 21 business days for formal PDPA rights requests

You may also lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe your privacy rights under the PDPA 2010 have been violated and we have failed to resolve your concerns satisfactorily.