Privacy Policy — Your Data, Protected

This Privacy Policy ("Policy") is published by KratonBet ("we", "us", "our"), the operator of the online gambling and sports betting platform accessible at kratonbet.cam. This Policy governs the collection, use, storage, disclosure, and protection of personal data relating to individuals ("you", "your", "Player", "User") who access or use the KratonBet platform and associated services.

KratonBet respects your privacy and is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection legislation. We collect only the data that is necessary for the purposes described in this Policy, and we do not sell personal data to third parties under any circumstances.

By registering an account on KratonBet, making use of our Services, or continuing to access the Platform after the publication of this Policy (or any subsequent revision), you acknowledge that you have read and understood its contents and consent to the processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably identify a natural person, directly or indirectly, including name, identification number, contact details, financial data, and online identifiers such as IP address.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, and destruction.
• "Data Controller" — KratonBet, as the entity that determines the purposes and means of processing Players' Personal Data.
• "Data Processor" — any third party that processes Personal Data on behalf of KratonBet in accordance with our instructions and subject to appropriate contractual safeguards.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "Cookie" — a small data file stored on a user's device by a website, used to remember user preferences, session data, and analytics information.
• "KYC" — Know Your Customer; the identity and age verification process required under KratonBet's licensing conditions and anti-money laundering obligations.
• "Platform" — the KratonBet website, mobile-optimised site, and all associated services accessible at kratonbet.cam.

KratonBet collects Personal Data through several channels, including account registration, KYC verification, financial transactions, Platform interactions, and customer support communications. The categories of data we collect are outlined below.

KratonBet does not collect sensitive personal data (such as health information, political opinions, or biometric data) unless strictly required by applicable law or regulatory obligation, in which case we will provide a separate notice at the point of collection.

KratonBet processes Personal Data only where we have a valid legal basis for doing so. The applicable legal bases are:

• Contractual Necessity: Processing is required to perform the contract between KratonBet and the Player — including account creation, payment processing, game delivery, and withdrawal handling. Without this data, we cannot provide our Services.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, KYC obligations, and reporting duties under our international gaming licence. This includes verifying player identity and age (21+ requirement) and monitoring transactions for suspicious activity.
• Legitimate Interests: Processing is necessary for KratonBet's legitimate business interests, provided those interests are not overridden by the Player's rights. This includes fraud prevention, platform security, responsible gambling monitoring, and service improvement analytics.
• Consent: Where KratonBet relies on consent as a legal basis (e.g., for optional marketing communications), consent is obtained explicitly and may be withdrawn at any time without affecting the lawfulness of prior processing. To withdraw marketing consent, contact support or update your communication preferences in your account settings.

KratonBet uses the Personal Data we collect for the following purposes:

1. Account Management: To create, maintain, and administer your KratonBet account, including identity verification, security checks, and account preference management.
2. Service Delivery: To provide access to casino games, live casino tables, sports betting markets, and all other Services available on the Platform, including real-time personalisation of your gaming experience.
3. Financial Transactions: To process deposits made via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Visa, Mastercard, and cryptocurrency channels; and to process withdrawal requests to verified payment methods.
4. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other forms of financial crime or Platform abuse.
5. Regulatory Compliance: To fulfil our obligations under KratonBet's applicable gaming licence, including KYC verification, transaction monitoring, and mandatory reporting to licensing authorities.
6. Responsible Gambling: To monitor betting patterns and account activity for indicators of problem gambling behaviour, and to apply responsible gambling tools (deposit limits, self-exclusion, session alerts) in accordance with the Player's instructions or, in appropriate circumstances, proactively.
7. Customer Support: To respond to queries, investigate complaints, and resolve disputes submitted through our live chat or email support channels.
8. Marketing Communications (Consent-Based): Where you have opted in, to send promotional offers, bonus notifications, and platform updates relevant to your account. You may opt out at any time.
9. Platform Improvement: To analyse aggregated usage data and behavioural patterns to improve Platform performance, game selection, and user experience — including optimising load times for players accessing from Kuala Lumpur, Penang, Johor Bahru, and other Malaysian cities.

KratonBet does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may, however, share Personal Data with the following categories of recipients where necessary and lawful:

• Payment Service Providers: Payment processors and financial institutions that facilitate deposit and withdrawal transactions on the Platform, including e-wallet operators and banking partners supporting FPX, DuitNow, and other Malaysian payment rails.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged to authenticate player identity documents and verify the 21+ age requirement.
• Game Software Providers: Licensed game studios and live casino operators whose games are offered through the KratonBet Platform. These providers receive only the data necessary to deliver the game experience and are bound by confidentiality obligations.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory direction, KratonBet may disclose Personal Data to relevant authorities, including licensing regulators, financial intelligence units, and law enforcement agencies.
• Professional Advisers: Lawyers, accountants, auditors, and other professional advisers who are bound by confidentiality obligations and engaged in connection with KratonBet's operations.
• Business Succession: In the event of a merger, acquisition, or sale of all or part of KratonBet's business assets, Personal Data may be transferred to the acquiring entity, subject to the same or equivalent privacy protections.

KratonBet retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to overriding legal and regulatory retention obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements and gaming licence obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial regulations.
• KYC Documentation: Retained for the period specified by the applicable licensing authority, typically five (5) years from the date of verification or account closure, whichever is later.
• Customer Support Communications: Retained for a period of three (3) years from the date of last communication, unless a longer retention period is required by an ongoing dispute or legal proceeding.
• Marketing Data: Retained until you withdraw consent or opt out, after which it is promptly deleted or anonymised.
• Technical and Analytical Data: Retained in anonymised or aggregated form for up to two (2) years for Platform improvement and security monitoring purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction or re-identification.

KratonBet uses cookies and similar tracking technologies on the Platform to provide core functionality, improve user experience, and analyse Platform usage. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These enable core functions such as session management, account authentication, and security monitoring. These cookies cannot be disabled without significantly impairing Platform functionality.
• Functional Cookies: Used to remember user preferences and settings, such as language preferences, display settings, and previously selected game categories.
• Analytical Cookies: Used to collect aggregated, anonymised data on how players navigate and interact with the Platform. This data helps us identify areas for improvement and optimise the user experience. We use privacy-respecting analytics tools with IP anonymisation enabled.
• Security Cookies: Used to detect and prevent fraudulent activity, unusual login patterns, and unauthorised account access attempts.

On your first visit to kratonbet.cam, you will be presented with a cookie consent notice. You may accept all cookies or configure your preferences. Please note that disabling certain cookies may affect the performance and functionality of the Platform.

You may also manage cookie preferences directly through your browser settings. For guidance on cookie management in popular browsers, refer to your browser's help documentation.

KratonBet implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, and destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the KratonBet Platform is encrypted using 256-bit SSL/TLS encryption.
• Encryption at Rest: Sensitive Personal Data stored in our systems, including identity documents and financial records, is stored in encrypted form using industry-standard algorithms.
• Access Controls: Access to Personal Data within KratonBet's internal systems is restricted on a strict need-to-know basis, with role-based access controls and multi-factor authentication required for all administrative systems.
• Regular Security Audits: KratonBet conducts periodic internal and external security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses.
• Incident Response: KratonBet maintains a documented data breach response procedure. In the event of a security incident affecting your Personal Data, we will notify affected individuals in accordance with applicable legal obligations.
• Staff Training: All KratonBet personnel who access Personal Data receive regular data protection and security awareness training.

Subject to applicable data protection law, you have the following rights in relation to your Personal Data held by KratonBet. To exercise any of these rights, please contact us using the details in Section 15. We will respond to verified requests within 30 days.

KratonBet's Services are strictly intended for persons aged 21 years and above. We do not knowingly collect, process, or retain Personal Data relating to any individual under the age of 21.

All account registrations are subject to age verification as part of the KYC process. Where KratonBet identifies or is notified that an account has been registered by a person under the age of 21, all data associated with that account will be securely deleted and the account will be permanently closed, with any deposited funds voided in accordance with our Terms and Conditions.

If you become aware that a minor has registered or is using a KratonBet account, please notify us immediately via our 24/7 live chat support or by email at [email protected] so that we can take prompt action.

As an internationally licensed online gaming platform, KratonBet may process or store Personal Data in countries outside of Malaysia, including the jurisdictions in which our hosting infrastructure, data processors, or licensing authority are located. Where such transfers occur, KratonBet ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to or exceeding the protections available under applicable Malaysian data protection law.

Safeguards may include contractual data protection clauses with the receiving entity, transfer to jurisdictions with an adequate level of data protection as recognised by relevant authorities, or other mechanisms approved under applicable law.

For further information on the safeguards applicable to any specific international transfer of your data, please contact us using the details in Section 15.

The KratonBet Platform integrates certain third-party services necessary for its operation, including but not limited to: game software providers, payment processors (such as those supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX channels), and identity verification vendors. These integrations may involve the sharing of limited Personal Data as set out in Section 6.

KratonBet does not maintain responsibility for the privacy practices of any external entity. Where you choose to interact with a third-party service — such as funding your account via your bank's online portal — that interaction is subject to the third party's own privacy policy. We encourage you to review the privacy documentation of any third-party service you use in connection with your KratonBet account.

KratonBet does not include third-party advertising trackers, social media pixels, or behavioural advertising technologies on the Platform without your explicit consent.

KratonBet reserves the right to amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, operational practice, or technology. The "Last Updated" date at the top of this page reflects the most recent revision.

Where amendments are material — for example, where we intend to process your Personal Data for a new purpose, or share it with a new category of recipients — we will notify you by email to your registered address and/or via a prominent notice on the Platform prior to the change taking effect. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.

If you do not accept any amendment to this Policy, please cease using the Platform and contact support to request account closure. We will process any remaining real-money balance in accordance with our Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by KratonBet, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the KratonBet Platform. This is the fastest way to reach our support team for privacy queries.
• Email: [email protected]. Please include your registered username, a clear description of your request, and — where applicable — the specific right you wish to exercise.

KratonBet aims to acknowledge all written privacy-related requests within 48 hours and to respond substantively within 30 calendar days of receipt. Where requests are complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.