KCD2 Privacy Policy – Our Commitment Protecting the Personal Data of Malaysian Players at kcd2.my

KCD2 (kcd2.my) is the data controller responsible for all personal data collected through our platform. As an online gaming platform serving Malaysian players, kcd2 takes data protection seriously. We understand that entrusting kcd2 with your personal information is a significant act of trust, and we are fully committed to honouring that trust with the utmost integrity.

This Privacy Policy applies to all individuals who interact with the kcd2 platform in any capacity — whether as a registered member actively playing slots such as Koi Gate, Ocean Fortune or Cai Shen, as a prospective member exploring the platform, or simply as a visitor browsing kcd2.my. All data collected from any of these interactions is protected under the same policy.

KCD2 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all regulations and guidelines issued thereunder. We continuously monitor developments in data protection legislation in Malaysia and internationally to ensure kcd2's practices remain at the highest standard of compliance.

KCD2 collects various categories of personal data depending on how you interact with our platform. Below is a detailed summary of the data we collect:

KCD2 practises the principle of data minimisation — we collect only what is genuinely necessary to deliver kcd2 services effectively and to meet applicable legal requirements. We do not collect sensitive data that is irrelevant to the operational purposes of the kcd2 platform.

Kcd2 collects your personal data through several transparent and controlled channels:

• Account Registration: When you register a new account at kcd2, you voluntarily provide basic information such as your name, email address, Malaysian phone number, and date of birth. This information is required to create and manage your kcd2 account.
• KYC Process (Identity Verification): To enable the withdrawal of winnings, kcd2 requires you to complete an identity verification process by uploading a valid proof of identity. This data is collected solely to fulfil anti-money laundering legal requirements and age verification.
• Financial Transactions: Every time you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u or CIMB Clicks, the relevant transaction details are automatically recorded by the kcd2 system for financial record-keeping purposes.
• Gaming Activity: The kcd2 system automatically records all your gaming activity, including slots played, bet amounts, game outcomes and session duration. These records are required for dispute resolution, ensuring game integrity and providing technical support.
• Cookies & Tracking Technologies: The kcd2 platform uses cookies and similar tracking technologies to enhance the user experience and analyse usage patterns. Further details on how cookies are used are explained in Section 7 of this policy.
• Customer Support Communications: When you contact the kcd2 support team via Live Chat, email, or Telegram, those conversations are recorded for quality control and future reference purposes.

KCD2 uses the personal data collected solely for the following legitimate and transparent purposes:

• Account Management: To create, manage and maintain your kcd2 account, including processing login requests, sending important account-related notices, and providing effective technical support.
• Financial Transaction Processing: To process your deposits using approved Malaysian local payment methods, to process withdrawals of winnings in under 5 minutes, and to maintain accurate financial records in accordance with legal requirements.
• Legal Compliance (KYC/AML): To fulfil Malaysian legal requirements relating to identity verification, anti-money laundering, and mandatory financial reporting to the relevant authorities.
• Platform Security: To detect, investigate and prevent fraudulent activity, multi-account usage, bonus exploitation and any other unlawful activity that may threaten the integrity of the kcd2 platform or the safety of other players.
• Service Improvement: To analyse usage patterns on the kcd2 platform for the purpose of improving the user experience, optimising technical performance and developing better new features for Malaysian players.
• Service Communications: To send important account-related information, notices of changes to terms or policies, security alerts and technical information relevant to your use of the kcd2 platform.
• Promotions & Marketing (with consent): To send promotional information, exclusive bonus offers and updates on new games at kcd2 — only to players who have given their consent to receive such marketing communications.
• Responsible Gambling: To monitor gameplay patterns that may indicate problem gambling risk, and to reach out to players who may benefit from support or information on responsible gambling.

KCD2 will not use your personal data for any purpose beyond those stated above without first obtaining your explicit consent. Any changes to how your data is used will be communicated to you via a clear notice within a reasonable period before such use begins.

KCD2 does not sell, rent or disclose your personal data to third parties for marketing or commercial purposes. This is an absolute commitment that has remained unchanged since kcd2 first began operating. However, there are certain circumstances in which kcd2 may need to share some of your data with the following parties:

• Payment Service Providers: Approved payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and Malaysia's FPX banks may receive transaction information required to process your deposits and withdrawals. These providers have their own privacy policies and adhere to strict financial security standards.
• Licensed Game Developers: Game developers providing slots and live casino games on the kcd2 platform may receive anonymised gameplay data for technical support and game maintenance purposes. No personally identifiable information is shared with these parties.
• Legal Authorities: kcd2 may be required to disclose your personal data to Malaysian government authorities or regulatory bodies when lawfully ordered to do so through the proper legal process. In every such instance, kcd2 will disclose only the data specifically identified in the relevant court order or official request.
• Audit & Compliance Services: Independent audit firms conducting legal compliance reviews and technical audits of the kcd2 platform may have limited access to certain data during the audit process. All such firms are bound by strict confidentiality agreements.

KCD2 stores your personal data on servers protected by comprehensive physical and digital security layers. kcd2's data storage infrastructure is built on a "defence in depth" principle – meaning multiple layers of defence must be breached before your data can be accessed, making the risk of a data breach extremely minimal.

In terms of data retention periods, kcd2 retains your personal data for as long as your account remains active and for an additional period following account closure as required by applicable Malaysian law — typically five to seven years for financial records, for tax compliance and anti-money laundering purposes. Once the mandatory retention period has expired, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

The key technical security measures kcd2 has implemented to protect your data include:

• 256-bit SSL encryption for all data in transit between your device and kcd2 servers.
• Data-at-rest encryption for all database files containing players' personal information.
• A Role-Based Access Control system ensures that only authorised kcd2 staff can access specific categories of data relevant to their designated responsibilities.
• Comprehensive, tamper-proof audit logs for all access to sensitive player data.
• Penetration testing by an independent cybersecurity firm at least once a year.
• An active vulnerability management programme with security patches applied within 48 hours of release.

The kcd2 platform uses cookies and similar tracking technologies to enhance your experience, maintain the security of your login session, and help us understand how Malaysian players use the kcd2 platform so we can continue to improve it.

The types of cookies used by kcd2 are as follows:

• Essential Session Cookies: These cookies are strictly necessary for the kcd2 platform to function properly — including maintaining your secure login session, saving your language preferences, and ensuring games run smoothly. They cannot be disabled without affecting platform functionality.
• Analytics Cookies: Used to understand, in aggregate and anonymised form, how players use the kcd2 platform — for example, which pages are visited most, which slots are most popular, and what the average session length is. This data helps kcd2 improve the platform for all Malaysian players.
• Functional Cookies: Storing your personal preferences – such as your last bet size, favourite games and display settings – to deliver a more personalised experience every time you log in to kcd2.
• Security Cookies: Helps the kcd2 system detect unauthorised access attempts, bot activity, and suspicious login patterns to safeguard your account security.

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the kcd2 platform and your overall gaming experience.

As a kcd2 player and data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data kcd2 holds about you:

To exercise any of the above rights, please contact the kcd2 team at [email protected] clearly stating the right you wish to exercise and providing sufficient information for us to verify your identity. kcd2 will process your request within 30 business days.

KCD2 strictly prohibits individuals under the age of 18 from registering or using the kcd2 platform in any capacity. This is an absolute policy with no exceptions. The kcd2 platform is designed exclusively for adult entertainment, and all content, games, and promotions within it are intended solely for adults aged 18 and above.

Kcd2 does not knowingly collect personal data from minors. Should kcd2 discover that a minor's personal data has been collected without the knowledge or consent of a legal guardian, we will take immediate steps to delete that data and close the account in question. Any winnings generated from that account will be forfeited.

To parents and guardians: please take appropriate steps to ensure that children in your care are unable to access the kcd2 platform or any online gambling platform. Use parental control software on shared devices, and keep your kcd2 account login details secure and out of reach of children.

KCD2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or feedback from Malaysian players. When material amendments are made, kcd2 will take the following steps to ensure you are informed:

• Publishing an updated version of the Privacy Policy on kcd2.my with a new "Last Updated" date at the top of the document.
• Displaying a clear notice on the kcd2 platform homepage for at least 14 days following the publication of any amendment.
• Sending email notifications to all registered kcd2 members whenever significant changes are made to how their data is used or protected.

Continued use of the kcd2 platform after any amendments are published will be considered your acceptance of the latest version of this Privacy Policy. We encourage all kcd2 players to review this Privacy Policy periodically — at least once every three months — to stay informed about how your data is managed.

If you have any questions, concerns or complaints regarding this Privacy Policy or how kcd2 handles your personal data, our data privacy team is ready to assist. We take every privacy enquiry seriously and are committed to responding promptly within the stated timeframe.

For requests relating to personal data rights (access, correction, deletion), please submit your request by email to [email protected] with the subject line "Personal Data Rights Request" and include sufficient information for us to verify your identity. kcd2 will process your request within 30 business days of receiving the completed request.