Privacy Policy

Section 1

Introduction

kfc2u ("we", "us", "the Platform", "the Operator") is committed to safeguarding the privacy and personal data of every individual who visits or registers on the kfc2u online gambling platform at https://kfc2u.cam. This Privacy Policy describes our practices regarding the collection, processing, storage, and disclosure of personal data in connection with the services we provide.

kfc2u operates as an English-language online gaming platform serving the Malaysia market. Our services include online casino games, live dealer tables, sports betting markets covering events such as the English Premier League (EPL), Liga Super Malaysia, and UFC, as well as related account management and payment processing functions. All financial transactions are conducted in Malaysian Ringgit (MYR) and processed through Malaysian payment channels.

This Policy applies to all personal data processed by kfc2u in connection with the above services, regardless of whether you are accessing the platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere. We encourage you to review this Policy in full and direct any questions to our support team using the contact details provided in Section 14.

Section 2

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

Section 3

Personal Data We Collect

kfc2u collects the following categories of personal data in connection with your use of our platform:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification document (MyKad or passport).
• Date of birth (for age verification — kfc2u is strictly 21+ only).
• Nationality and country of residence.
• Username and encrypted password.

3.2 Contact Information

• Email address used for account communications and notifications.
• Mobile phone number (for account verification and optional two-factor authentication).
• Residential address (collected at KYC verification stage).

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in MYR, timestamps, and payment method references.
• Payment method identifiers — such as your Maybank2u account reference, CIMB Clicks transaction ID, DuitNow reference, Touch 'n Go eWallet transaction ID, or FPX reference number. We do not store full bank account numbers or card numbers.
• Bonus and promotional credit history.
• Wagering history, game session data, and win/loss records.

3.4 Technical & Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser type.
• Session duration, login timestamps, and pages visited.
• Cookie identifiers and analytics data (see Section 9).

3.5 KYC Verification Documents

• Copies of government-issued photo identification (MyKad, passport, or equivalent).
• Proof of address documents (utility bills, bank statements).
• Proof of payment method ownership where required.

Section 4

How We Collect Your Data

kfc2u collects personal data through the following channels:

• Account Registration: Information you provide directly when creating a kfc2u account, including name, email address, date of birth, and contact number.
• KYC Verification: Identity and address documents submitted when completing our know-your-customer process prior to processing withdrawals.
• Payment Transactions: Data generated when you deposit or withdraw funds via Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX.
• Platform Activity: Data automatically collected when you navigate, play games, or interact with the kfc2u platform, including session logs and device information.
• Customer Support: Information provided when you contact our support team via live chat or email, including the content of your enquiry and any attachments.
• Cookies & Tracking Technologies: Automated data collection through cookies and analytics tools as described in Section 9.
• Third-Party Verification Services: Data received from identity verification providers used during the KYC process, or fraud screening services used to protect account security.

Section 5

Data Processing & Use

kfc2u processes your personal data only for the following specified purposes:

We do not use your personal data for any purpose not listed above without first obtaining your explicit consent or notifying you through an update to this Privacy Policy.

Section 6

Legal Basis for Processing

kfc2u processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and kfc2u — specifically, to manage your account, process deposits and withdrawals, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable gaming regulations, anti-money laundering laws, and age verification obligations.
• Legitimate Interests: Processing for fraud prevention, security monitoring, and platform improvement, where such interests are not overridden by your fundamental rights.
• Consent: Where you have provided explicit consent — for example, opting in to receive promotional communications. You may withdraw this consent at any time by contacting our support team.

Section 7

Data Sharing & Disclosure

kfc2u does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: Malaysian banking partners and e-wallet operators (including the FPX network, DuitNow infrastructure, and relevant e-wallet providers) to process your financial transactions.
• Game Providers: Licensed third-party game developers whose platforms integrate with kfc2u. These providers receive only the minimum data necessary to deliver game functionality and verify account eligibility.
• Identity Verification Services: Third-party KYC and fraud screening providers used to verify your identity and protect the platform from fraudulent accounts.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or regulatory direction, kfc2u may disclose personal data to competent authorities.
• IT & Hosting Providers: Infrastructure and cloud service providers who host the kfc2u platform and its data under strict confidentiality and security obligations.

Section 8

Data Retention

kfc2u retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. Our general retention periods are as follows:

• Account Data: Retained for the duration of your account relationship with kfc2u, and for a minimum of five (5) years following account closure, in accordance with applicable regulatory requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, as required by anti-money laundering and financial record-keeping obligations.
• KYC Documents: Retained for the duration of the account relationship and for five (5) years post-closure or as required by applicable law.
• Marketing Preferences: Retained until you withdraw consent or request deletion, whichever occurs first.
• Technical & Log Data: Retained for a maximum of twenty-four (24) months from collection, subject to active fraud investigation requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

Section 9

Cookies & Tracking Technologies

kfc2u uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly Necessary Cookies: Required for the platform to function correctly — including session management, login authentication, and security validation. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gambling tool configurations.
• Analytics Cookies: Collect anonymised data about how users navigate the platform — pages visited, time on site, and click patterns — to help us improve the user experience. No personally identifiable information is collected for analytics.
• Security Cookies: Assist in detecting fraud, bot activity, and abnormal session behaviour to protect accounts and platform integrity.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the kfc2u platform.

Section 10

Your Rights as a Data Subject

Subject to applicable law and verification of your identity, you have the following rights in relation to your personal data held by kfc2u:

• Right of Access: You may request a copy of the personal data we hold about you at any time.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit how we use your personal data in certain circumstances.
• Right to Data Portability: Where technically feasible, you may request a copy of your data in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object: You may object to processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, please contact our support team via live chat or at the email address provided in Section 14. We will respond to all verified requests within thirty (30) calendar days.

Section 11

Data Security

kfc2u implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the kfc2u platform.
• Encryption of sensitive personal data at rest, including KYC documents and financial records.
• Access controls ensuring that personal data is accessible only to authorised personnel on a strict need-to-know basis.
• Regular security audits and penetration testing of the platform infrastructure.
• Secure password hashing — kfc2u does not store passwords in plain text.
• Incident response procedures to detect, investigate, and mitigate data security breaches in a timely manner.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, kfc2u will notify affected users within a reasonable timeframe and take all necessary remedial action.

Section 12

Minors & Age Policy

If you are a parent or guardian and believe that a minor has registered an account on kfc2u, please contact our support team immediately at the address in Section 14. We will investigate and take appropriate action, including account closure and data deletion, without undue delay.

Section 13

Policy Amendments

kfc2u reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will provide reasonable advance notice — either through a prominent notice on the platform or by direct communication to registered account holders via email.

The effective date of the most current version of this Policy is displayed at the top of this page. Your continued use of the kfc2u platform following the publication of any revised Policy constitutes your acknowledgment and acceptance of the updated terms. If you do not agree to an updated Policy, you must cease using the platform and may request Account closure in accordance with our Terms & Conditions.

Section 14

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the kfc2u Data Protection team using the channels below. All enquiries are treated as confidential and handled in accordance with this Policy.

When submitting a data subject rights request, please provide sufficient information to verify your identity. We may need to ask for additional verification before processing your request to protect your data from unauthorised disclosure.