Privacy Policy

This Privacy Policy ("Policy") describes how Kepo88 ("we", "us", "our", "Platform") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "User", "Player") who access or use the Kepo88 online casino and sports betting platform available at kepo88.asia, including any associated mobile interfaces or services operated by Kepo88.

Kepo88 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection laws. This Policy forms part of our broader commitment to player privacy and security, and should be read in conjunction with our Terms & Conditions.

By registering an account, depositing funds, or using any feature of the Kepo88 platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not accept this Policy, you must not use the Kepo88 platform.

For the purposes of this Policy, the following terms carry the meanings defined below:

Kepo88, operating through kepo88.asia, acts as the Data Controller with respect to the personal data of its registered Players and website visitors. As Data Controller, Kepo88 is responsible for determining how and why your personal data is processed and for ensuring that processing is carried out lawfully, fairly, and transparently.

Where Kepo88 engages third-party service providers to process personal data on its behalf (for example, payment processors such as those facilitating DuitNow, FPX, or Touch 'n Go eWallet transactions), those providers act as Data Processors and are bound by written data processing agreements that restrict their use of your data to the specific purpose for which it was shared.

Kepo88 collects personal data across the following categories, depending on the nature of your interaction with the platform:

4.1 Registration Data

When you create a Kepo88 account, we collect: full legal name, date of birth, residential address (including city — for example, Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, or Shah Alam), nationality, contact email address, and mobile phone number. This data is necessary to establish your account and verify your eligibility to use the platform.

4.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify your age (21+ requirement), we may collect copies of government-issued identity documents (Malaysian IC / MyKad, Passport, or Driver's Licence), proof of residential address (utility bills or bank statements dated within 3 months), and a selfie photograph taken while holding your identity document.

4.3 Financial & Transaction Data

We collect records of deposits, withdrawals, bonus claims, and bet history associated with your account. Payment method information — including masked bank account numbers, e-wallet identifiers (Touch 'n Go eWallet, GrabPay, Boost), and cryptocurrency wallet addresses (USDT, BTC, ETH) — is collected for transaction processing and fraud prevention. Full card numbers are never stored directly by Kepo88.

4.4 Technical & Usage Data

When you access the Kepo88 platform, we automatically collect technical data including: IP address, device type, browser type and version, operating system, session duration, pages visited, game activity, and referring URL. This data is used for platform security, fraud detection, and platform performance optimisation.

4.5 Communications Data

Records of communications you initiate with Kepo88, including live chat transcripts, support email correspondence, and any complaint submissions, are retained for quality assurance, dispute resolution, and compliance purposes.

Kepo88 collects personal data through the following means:

• Directly from you: when you complete registration, submit KYC documents, make a deposit or withdrawal request, contact customer support, or participate in a promotion.
• Automatically: through cookies, server logs, and analytics tools when you browse the Kepo88 platform. This includes session data, clickstream data, and device fingerprinting used for fraud prevention.
• From third-party payment processors: when your payment is processed via DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, GrabPay, Boost, or cryptocurrency network providers, relevant transaction confirmation data is transmitted to Kepo88.
• From identity verification services: where a third-party KYC provider is used to verify your identity documents, the verification result and associated data is shared with Kepo88 under a data processing agreement.
• From fraud prevention and compliance databases: Kepo88 may cross-reference registration and transaction data against industry fraud lists and sanctions screening services as required by applicable law.

Kepo88 processes your personal data for the following specific purposes:

• Account creation and management: to register your account, verify eligibility, and maintain accurate account records throughout the lifecycle of your membership.
• Identity verification and KYC compliance: to verify your age (21+), confirm your identity, and meet anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
• Payment processing: to process deposits and withdrawals via your chosen payment method, including MYR bank transfers, e-wallet transactions, and cryptocurrency settlements.
• Platform security and fraud prevention: to detect and prevent unauthorised access, bonus abuse, collusion, money laundering, and other forms of fraudulent or prohibited activity.
• Customer support: to respond to your enquiries, resolve disputes, and provide assistance with account, payment, and game-related matters through live chat and email.
• Legal and regulatory compliance: to maintain records and report as required under applicable financial crime prevention legislation and any regulatory direction received by Kepo88.
• Platform improvement: to analyse aggregated, anonymised usage data to improve platform performance, game offering, and the overall user experience.
• Responsible gambling: to monitor account activity for signs of problem gambling behaviour and to apply responsible gambling tools including deposit limits and self-exclusion at your request.

Kepo88 relies on the following legal bases for processing personal data:

Kepo88 does not sell, rent, or trade your personal data. We share data with third parties only to the extent necessary and only with parties who are contractually bound to process it in accordance with applicable data protection standards. The categories of third parties with whom we may share personal data are:

• Payment processors and financial institutions: including the processors operating DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, Maybank, CIMB, Public Bank, and Hong Leong transaction infrastructure, as well as cryptocurrency settlement providers. Data shared is limited to what is required to complete the requested transaction.
• KYC and identity verification providers: licensed third-party services used to verify the authenticity of identity documents submitted by Players. These providers are bound by strict data handling obligations and may not use your data for any purpose beyond verification.
• Fraud prevention and risk intelligence services: industry-standard fraud detection providers may receive technical data including IP addresses, device identifiers, and transaction patterns for the purpose of identifying and preventing fraudulent activity.
• Regulatory and law enforcement authorities: Kepo88 may be required by applicable law or court order to disclose personal data to regulators, law enforcement agencies, tax authorities, or other governmental bodies. We will notify you of such disclosures where we are legally permitted to do so.
• Professional advisors: legal, financial, and compliance advisors who provide services to Kepo88 may have access to personal data on a need-to-know basis and are bound by professional confidentiality obligations.

Some of the third-party service providers used by Kepo88 may be located outside of Malaysia, and your personal data may consequently be transferred to and processed in jurisdictions outside Malaysia. Such transfers may include, for example, the processing of technical data by cloud infrastructure providers or the routing of KYC verification through internationally licensed identity verification services.

Where personal data is transferred internationally, Kepo88 takes reasonable steps to ensure that the recipient jurisdiction provides an adequate level of data protection, or that appropriate contractual safeguards — such as standard data processing clauses — are in place to protect your data in transit and at rest. By using the Kepo88 platform, you acknowledge and accept that your personal data may be transferred and processed internationally in accordance with this Policy.

Kepo88 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is required for ongoing legal proceedings, the retention period will be extended until those proceedings are concluded.

Kepo88 implements a layered approach to data security designed to protect your personal data against unauthorised access, loss, disclosure, alteration, or destruction. Our security measures include:

• Transport Layer Security (TLS/SSL): all data transmitted between your browser or device and the Kepo88 platform is encrypted using 256-bit SSL/TLS protocols. Look for the padlock icon in your browser address bar.
• Encryption at rest: sensitive personal data — including KYC documents and payment identifiers — is encrypted when stored on our servers.
• Access controls: access to personal data within Kepo88 is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and undergo data protection training.
• Fraud detection systems: real-time monitoring systems analyse transaction patterns and login behaviour to detect and respond to suspicious activity.
• Regular security reviews: Kepo88 conducts periodic security assessments and works with its hosting and infrastructure providers to maintain current security standards.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login protection.

Subject to applicable law, you hold the following rights in respect of your personal data held by Kepo88. To exercise any of these rights, please contact us using the details in Section 16. We will acknowledge rights requests within 5 business days and aim to resolve them within 30 days.

Please note that certain rights may be subject to limitations where processing is required for legal compliance, fraud prevention, or the defence of legal claims. Where a limitation applies, we will explain the reason in our response to your rights request.

The Kepo88 platform uses cookies and similar tracking technologies to support platform functionality, maintain your login session, detect fraudulent access, and analyse aggregated usage patterns. The categories of cookies used are as follows:

• Strictly necessary cookies: essential for the platform to function. These enable session management, login persistence, and fraud prevention mechanisms. They cannot be disabled without affecting platform functionality.
• Functional cookies: remember your preferences such as language settings and game lobby display options. These improve your experience but are not essential to access the platform.
• Analytics cookies: collect aggregated, anonymised data on how Players use the platform — for example, which game categories are most popular. This data is used internally to improve the platform. Individual player activity is not reported to external third parties through analytics cookies.
• Security cookies: used for fraud detection and anti-bot measures. These cookies analyse device and behavioural signals to distinguish legitimate players from automated threats.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary or security cookies may impair your ability to access certain features of the Kepo88 platform, including login and payment functions.

The Kepo88 platform is strictly intended for individuals aged 21 years and above. Kepo88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe your child has registered on the Kepo88 platform, please contact us immediately through the support channels described in Section 16. We will investigate and, if confirmed, delete all associated personal data and close the account.

Kepo88 may revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory guidance, or platform features. When material changes are made, we will update the "Effective Date" at the top of this document and, where appropriate, notify registered Players by email or via an in-platform notification.

Continued use of the Kepo88 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease use of the platform and may request account closure in accordance with the process described in our Terms & Conditions.

We encourage you to review this page periodically to stay informed about how Kepo88 handles your personal data. Archived versions of this Policy are available upon request from our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Kepo88, please contact us through the following channels. We are committed to responding promptly and transparently to all privacy-related communications.

• Live Chat: Available 24 hours a day, 7 days a week via the Kepo88 platform. Average first response time is under 3 minutes. For privacy-related queries, request to be connected to our Data Privacy team.
• Support Email (plain text — not a link): [email protected] — please include "Privacy Request" in your subject line along with your registered account username.
• Response timelines: Privacy rights requests will be acknowledged within 5 business days and resolved within 30 calendar days where technically and legally possible. Complex requests may require additional time; we will notify you where this applies.