Privacy Policy krickex — Our Commitment to Protecting the Personal Data of Every Malaysian User

Important: This Privacy Policy describes the data processing practices of krickex ("we", "Platform" or "company") relating to user personal information ("you" or "member"). This policy applies to all your interactions with krickex through our website and mobile applications. By using the krickex platform, you confirm that you have read and understood this policy.

1 Introduction — Why Your Privacy Matters to krickex

At krickex, we understand that entrusting personal information to any online platform is an action that requires high confidence. We do not take that trust lightly. Since day one of krickex's establishment, user data protection has been at the core of how we operate — not just a legal obligation, but part of our company's fundamental values.

Krickex operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We appoint an internal compliance officer responsible for ensuring all our data processing practices meet current legal requirements and industry best practices.

This document is written in clear and easy-to-understand language. We deliberately avoid the use of difficult-to-read legal jargon so that you can truly understand your rights and how your data is handled by krickex.

2 Types of Information We Collect

Krickex collects several categories of information depending on how you interact with our platform. Below is a detailed description of each category:

• Identity Information: Full name, date of birth, identity card or passport number.
• Contact Information: Email address, phone number and residential address.
• Financial Information: Bank account details, e-wallet account numbers, and registered payment method information.
• KYC Documents: Copy of identity card, passport, utility bill or bank statement as proof of address.
• Account Information: Username, password (in encrypted form), security questions.

• Technical Data: IP address, browser type, operating system, screen resolution and app version.
• Usage Data: Pages visited, session duration, games played and actions taken on the platform.
• Device Data: Unique device identifier, device model and mobile system information.
• Location Data: General location based on IP address for geographic region compliance purposes.

In certain contexts, krickex may receive information about you from third-party payment processors for the purpose of transaction verification, or from credit and identity checking agencies for the purpose of anti-money laundering (AML) legal compliance.

3 How We Use Your Personal Data

Krickex uses the information collected for legitimate and necessary purposes to operate our platform effectively. We do not use your data for any purpose other than those stated below:

For marketing communications, you may withdraw consent at any time through your account settings or by contacting our support team. Withdrawal of consent does not affect the core krickex services you use.

4 Sharing Information with Third Parties

Krickex does not sell, rent or trade your personal data to third parties for their own commercial purposes. Full stop. This is our core commitment to user privacy.

However, there are situations where krickex needs to share your data with certain parties for legitimate operational purposes:

• Service Providers: Payment processors, gaming software providers, customer service providers and technology infrastructure vendors working on behalf of krickex. All such parties are bound by strict data protection agreements.
• Regulatory Authority: Where required by law, we will disclose necessary information to regulatory bodies, law enforcement authorities or courts.
• Fraud Prevention Agencies: As part of efforts to combat online fraud and money laundering, krickex shares necessary information with recognized agencies.
• Business Transfers: In the event of a merger, acquisition or sale of krickex assets, user data may be transferred as part of those assets, with prior notice to users.

5 Cookies and Tracking Technologies

The krickex Platform uses cookies and similar tracking technologies to enhance user experience, ensure session security, and understand how users interact with our platform.

• Essential Cookies: Required for basic platform functions such as login, session management and security. These cookies cannot be disabled.
• Performance Cookies: Collects information on how users use the platform to help us improve performance and user experience.
• Functionality Cookies: Saves your preferences such as language, theme and display settings so you do not need to reset them every time you log in.
• Analytics Cookies: Helps us understand aggregate and anonymised usage patterns for continuous improvement purposes.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the krickex platform. For non-essential cookies, you may grant or withdraw consent through the cookie settings panel available on the platform.

6 Data Security Measures

Krickex continuously invests in security infrastructure to ensure your personal data is protected to the highest standards. The following are the key security measures we implement:

• 256-bit SSL/TLS Encryption on all communications between your device and krickex servers.
• Data encryption at rest (at-rest encryption) for all sensitive data stored in our databases.
• Two-Factor Authentication (2FA) available for all accounts and highly encouraged for additional protection.
• 24/7 security monitoring by the internal cybersecurity team monitoring suspicious activity in real time.
• Penetration testing conducted periodically by independent third-party security firms.
• Strict access controls ensures only authorised personnel can access user data, and only to the extent necessary for their duties.
• Backup and disaster recovery ensures your data is not lost even in the event of unexpected technical disruption.

7 Your Rights Relating to Personal Data

Under the Personal Data Protection Act 2010 Malaysia and krickex policy, you have several important rights relating to your personal data. We are committed to making it easy for you to exercise these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You may request us to correct inaccurate or incomplete information.
• Right to Deletion: In certain situations, you may request the deletion of your personal data ("right to be forgotten").
• Right to Object to Processing: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Restriction of Processing: You may request us to restrict the processing of your data under certain circumstances.
• Right to Data Portability: You have the right to receive your data in a machine-readable format for transfer to another provider.

To exercise any of these rights, please contact the krickex support team or email your request to [email protected]. We will process your request within 30 working days. In complex cases, this period may be extended up to 60 days with notice to you.

8 Data Retention Period

Krickex retains your personal data only for as long as it is needed for the purposes stated in this policy or as required by applicable law. The following are general data retention guidelines:

• Active Account Data: Retained as long as your account is active and actively used.
• Closed Account Data: Retained for up to 7 years after account closure for financial and AML legal compliance purposes.
• Financial Transaction Records: Retained for at least 6 years in line with Malaysia's tax and financial legal requirements.
• Security Logs: Retained for 12 months for security incident investigation purposes.
• Support Communication Data: Retained for 2 years after the last interaction for quality control purposes.

After the relevant retention period expires, your data will be securely deleted or permanently anonymised so it can no longer be associated with you individually.

9 Child Protection

The krickex Platform is exclusively for users aged 18 and above. We do not knowingly collect or process personal data of individuals under 18. If we discover that a child's data has been collected inadvertently, we will take immediate steps to delete that information and close the account.

10 Amendments to This Privacy Policy

Krickex may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the technologies we use. When we make material amendments, we will notify you via in-platform notifications or your registered email at least 14 days before the changes take effect.

We encourage you to review this page regularly to ensure you are always aware of the current privacy policy in effect. The "Effective" date at the top of this document indicates the date the current version came into effect. Continued use of the krickex platform after amendments take effect is deemed acceptance of the updated policy.

11 Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding how krickex handles your personal data, we encourage you to contact us directly. We are committed to addressing every concern seriously and within a reasonable timeframe.

How to contact the krickex Privacy Team:

• Privacy Email: [email protected]
• General Support: [email protected]
• Live chat within the krickex app or website (fastest response)
• Section FAQ for frequently asked questions

We also accept complaints via Responsible Gaming page if your concern relates to data used in the context of responsible gaming.