Privacy Policy koko46 – User Data Protection

Koko46 takes user privacy seriously. We understand that your trust in us depends largely on how we handle the personal information you share while using this platform. This Privacy Policy document is written in clear, easy-to-understand language — we don't want you to need a legal dictionary to understand your rights.

This policy applies to all personal information collected by koko46 through the koko46.app website, the koko46 mobile app, and all related services we offer to Malaysian users and international users accessing our platform.

If you have any questions about this Privacy Policy or how we manage your data, you can reach the koko46 privacy team through the channels listed at the end of this document.

Koko46 only collects information necessary to provide a secure service, comply with regulatory requirements, and improve the user experience. The following are the categories of data we collect:

Information You Provide Directly

• Registration Information: Full name, date of birth, email address, phone number, password (stored as a hash).
• Identity Verification (KYC): ID number, copies of identity documents, facial photo (selfie), residential address, and proof of address.
• Financial Information: Bank account number, e-wallet information (account number for withdrawal purposes only), deposit and withdrawal transaction history.
• Support Communications: Conversation history with the koko46 customer support team.

Automatically Collected Information

• Device Data: Device type, operating system, browser version, screen resolution, and unique device identifier.
• Usage Data: Pages visited, games played, session duration, in-platform actions, and betting history.
• Network Data: IP address, access country, internet service provider (ISP) name, and timestamp of each session.
• Cookie Data: Session cookie information, preference cookies, and analytics cookies (see the Cookies section for more details).

The data we collect is used for specific, legitimate, and transparent purposes. Below is a complete list of data usage purposes at koko46:

We do not use your data to make automated decisions that have legal or similarly significant effects on you without human intervention — unless explicitly stated and you are given the right to contest such decisions.

Koko46 does not sell your personal data to any third party. However, in the course of operating the platform, we share limited data with the following parties on a need-to-know and lawful basis:

• Payment Providers: Information required to process transactions with DuitNow, FPX, Touch 'n Go, Boost, and GrabPay providers — only the minimum data necessary for transaction verification.
• Game Providers: Session identifiers and wagering data are shared with third-party game providers (such as Evolution and Pragmatic Play) to ensure games function correctly.
• KYC Services: Identity verification data is shared solely with certified third-party KYC service providers for identity verification purposes only.
• Authorities: koko46 will disclose data to the relevant authorities when required by law, court order, or a valid government agency request.
• Analytics Services: Anonymised usage data (containing no personally identifiable information) is shared with analytics platforms for product improvement purposes.

All third parties we work with are required to comply with data protection standards equivalent to koko46's Privacy Policy and applicable laws.

We implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• Data-in-Transit Encryption: All communications between your browser/app and koko46 servers are secured with TLS 1.3 / 256-bit SSL.
• Data-at-Rest Encryption: Sensitive information such as passwords is stored using strong hashing algorithms. Financial information is stored in encrypted form.
• Access Control: Access to user data within koko46's internal systems is strictly controlled based on the principle of least privilege.
• Continuous Monitoring: Intrusion detection systems (IDS) and suspicious activity monitoring run 24 hours a day, 7 days a week.
• Penetration Testing: Security audits and penetration testing are conducted regularly by independent security experts.

Koko46 uses cookies and similar tracking technologies to enhance the user experience and enable certain platform functions to operate correctly. The following are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login authentication, session security, and language settings. These cookies cannot be disabled.
• Functional Cookies: Saves your preferences such as language, display settings, and game session information to enhance usability.
• Analytics Cookies: Helps us understand how users interact with the platform — frequently visited pages, time spent, and technical issues encountered. This data helps us make meaningful improvements.
• Security Cookies: Used to detect suspicious login attempts and protect your account from unauthorised access.

You can manage cookie settings through your browser settings. Disabling certain cookies may affect the functionality of some parts of the koko46 platform. The koko46 mobile app uses similar local storage technology for the same purposes.

Under Malaysia's Personal Data Protection Act 2010 and international privacy principles, you have the following rights regarding your personal data at koko46:

Koko46 retains your personal data for as long as your account is active or as long as necessary to provide ongoing services. Specific retention periods are as follows:

• Active Account Data: Retained for as long as your account remains active at koko46.
• Financial Transaction Records: Retained for a minimum of 7 years to comply with Malaysia's financial and taxation legal requirements.
• KYC Documents: Retained for a minimum of 5 years after account termination for AML compliance purposes.
• Security Activity Logs: Retained for 2 years for investigation purposes if required.
• Customer Support Records: Retained for 3 years to enable resolution of related disputes.

Once the defined retention period expires or there is no longer a legitimate need to retain the data, your personal data will be securely deleted or anonymised in accordance with industry-standard procedures.

Koko46 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technology we use. Any changes made will be published on this page with a new update date.

For changes deemed material or significant, koko46 will provide appropriate notice to users via registered email or in-platform notification before the changes take effect. We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your information.

Your continued use of the koko46 platform after any changes to this Privacy Policy will be considered your acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or how koko46 manages your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the koko46 platform or via the mobile App — the fastest way to get an immediate response.
• Email: [email protected] — for more detailed privacy inquiries or official data-related requests.

The koko46 privacy team will acknowledge every inquiry within 3 business days and resolve requests within the timeframe required by law. For complex requests such as data access or account deletion, identity verification may be required to protect the security of your account.