Personal Data Protection

Privacy Policy Kerbau28 – How We Protect Your Data

At Kerbau28, your privacy is more than a legal obligation — it is a genuine commitment. This document clearly explains what data we collect, why we need it, how we use it, and the full rights you hold as a user of our platform in Malaysia.

Updated: January 2026
Language: Bahasa Malaysia

Kerbau28's Six Data Protection Principles

This is the foundation of how Kerbau28 manages your personal data — not just words on paper, but everyday practices we are committed to upholding.

Security
End-to-End 256-bit SSL Encryption
Every piece of information you send to kerbau28's servers — from your login credentials to Touch 'n Go and FPX transaction details — is encrypted with 256-bit SSL, the same standard used by Malaysia's major banks. Your data is protected both in transit and at rest.
Privacy
No Sale of Data to Third Parties
kerbau28 has never and will never sell, rent, or trade members' personal data to any third party for marketing purposes. Your data is not our product — you are our customer, not a commodity.
Minimisation
We Only Collect the Data We Need
kerbau28 follows the principle of data minimisation — we only collect information that is genuinely necessary to operate the platform, process payments, and meet legal requirements. We do not engage in excessive data collection for vague or undefined purposes.
Controls
You Have Full Control
Kerbau28 members have the full right to access, correct, download, or request deletion of their personal data at any time. You can manage your marketing communication preferences independently from your account control panel without needing to contact support.
Compliance
Personal Data Protection Act 2010
Kerbau28's Privacy Policy is built in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). All processing of our Malaysian members' personal data adheres to applicable local legal requirements, affording you meaningful legal protection.
Transparency
Immediate Data Breach Notification
In the event of a security incident involving members' personal data, Kerbau28 is committed to notifying affected members within the timeframe required by applicable law. We will not conceal security incidents from our users.
By using the Kerbau28 platform, you consent to the processing of your personal data as described in this Privacy Policy.
Also Read: Terms & Conditions

This Privacy Policy applies to all users who register and use the Kerbau28 platform at kerbau28.asia. This document is written in Bahasa Malaysia for the convenience of our members. If you have any questions about how we handle your data, please contact our privacy officer at support@kerbau28.asia.

1

Personal Data We Collect

Kerbau28 collects members' personal data through various channels throughout their use of the platform. Below is a comprehensive overview of the types of data we collect and how they are gathered:

1.1 Data You Provide Directly

When you register an account, fill in a form, contact support, or use any features on the kerbau28 platform, you may provide the following data:

  • Full name as stated on your Malaysian identity card (MyKad)
  • An active Malaysian phone number
  • Email address
  • Date of birth (for age verification)
  • Payment method details — Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay account numbers, or FPX bank account numbers
  • Identity verification documents when required for KYC purposes (copy of MyKad)
  • The content of your communications with our customer support team

1.2 Data Collected Automatically

When you use the Kerbau28 platform, our systems automatically collect technical and behavioural data, including:

  • IP address and approximate geographic location
  • Device type, operating system, and web browser used
  • Session times and duration
  • Pages visited and actions taken within the platform
  • Betting history and financial transaction records
  • Cookie data and device identifiers
Data Category Example Requirements
Identity Full name, date of birth, MyKad number Identity verification & KYC
Contact Phone number, email Communication & account verification
Finance Payment method, transaction history Deposit & withdrawal processing
Technical IP address, device type, browser Security & fraud detection
Behaviour Betting history and games played Responsible gaming monitoring

Kerbau28 does not collect information considered sensitive under Malaysia's Personal Data Protection Act 2010, such as health data, religion, political beliefs or biometric information, except in very limited circumstances and with your explicit consent.

2

How We Use Your Personal Data

Kerbau28 uses the personal data we collect for the following lawful and stated purposes. We do not use your data for any other purpose without your prior consent:

2.1 Platform Operations & Services

  • Creating and managing your account on Kerbau28
  • Processing deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX
  • Handles football betting, live casino, baccarat, lottery and virtual sports
  • Providing effective and personalised customer support
  • Sending transaction notifications, account updates and important security information

2.2 Security & Fraud Prevention

  • Detecting and preventing fraud, money laundering, and other irregularities
  • Identifying multiple account ownership
  • Monitors unusual transactions that require additional verification
  • Meeting Anti-Money Laundering (AML) and Know Your Customer (KYC) compliance requirements

2.3 Platform Improvements

  • Analysing usage patterns to improve the user experience
  • Identifying and resolving technical issues
  • Developing new features and services that are more relevant to Malaysian players

2.4 Marketing (With Your Consent)

Where you have given your consent, kerbau28 may use your data to:

  • Sending information about Kerbau28 promotions, bonuses and exclusive offers
  • Personalising content and offers relevant to your gaming preferences
  • Sending periodic newsletters on platform developments

You can withdraw your marketing consent at any time from your account settings or by contacting our support team.

Kerbau28 does not make automated decisions that significantly affect your rights or interests based solely on automated data processing without any human intervention, unless clearly stated and with the option for you to object.

3

Personal Data Sharing & Disclosure

Kerbau28 does not sell, rent, or share your personal data with third parties for their own marketing purposes. However, there are limited situations where we need to share data with certain parties for legitimate reasons:

3.1 Trusted Service Providers

Kerbau28 works with selected third-party service providers to help operate our platform. These include:

  • Payment processors: Such as FPX, Touch 'n Go, GrabPay, and other e-wallet gateway providers, to process your financial transactions
  • Cloud computing provider: Server infrastructure that stores and processes Kerbau28 platform data
  • Security software providers: Fraud detection and cybersecurity systems
  • Game software providers: Only the technical data required to operate casino and virtual sports games

All of these service providers are bound by strict data protection agreements and are permitted to use your data only for purposes specified by Kerbau28.

3.2 Legal Requirements

Kerbau28 may be required to disclose your personal data to the relevant authorities under Malaysian law, including:

  • A valid court order or legal writ
  • Requests from Malaysian law enforcement agencies in the course of criminal investigations
  • Reporting obligations to the Inland Revenue Board (LHDN) where applicable
  • AML requirements to Bank Negara Malaysia or the relevant regulatory authority

3.3 What We Do Not Do

  • Not selling your personal data to advertisers or marketing companies
  • We do not share your data with competitors or other platforms
  • Not transferring your data overseas without adequate safeguards
  • Your data is never shared with third parties without a valid legal basis

Should Kerbau28 need to share your data outside of the situations described above, we will obtain your explicit consent beforehand, unless we are legally prohibited from doing so.

4

Security & Data Retention

4.1 Security Measures

Kerbau28 implements multiple layers of technical and organisational safeguards to protect your personal data from unauthorised access, loss, misuse, or disclosure:

  • Data-in-transit encryption: 256-bit SSL/TLS encryption for all communications between your device and Kerbau28 servers
  • Stored data encryption: All sensitive data stored in our databases is encrypted using industry-standard encryption algorithms
  • Internal access controls: Access to members' personal data is restricted solely to Kerbau28 staff with a legitimate business need, based on a strict need-to-know principle
  • Two-factor authentication: 2FA options are available for member accounts as an added layer of security
  • Regular security audits: The Kerbau28 platform undergoes regular security assessments and penetration testing conducted by independent third parties
  • 24/7 Monitoring: Always-on automated monitoring systems to detect suspicious activity in real time

4.2 Data Retention Period

Kerbau28 retains your personal data for as long as necessary for the stated purposes, or for as long as your account remains active, taking into account the following legal requirements:

  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements
  • Identity verification data (KYC): Retained for the duration of the active account and 5 years after account closure
  • Activity and security logs: Retained for 2 years
  • Customer support communications: Retained for 3 years from the date of last communication

Once the applicable retention period has elapsed, your personal data will be securely deleted or anonymised in accordance with established procedures.

While we take comprehensive security measures, no system can guarantee absolute 100% security under all circumstances. You also play an important role in keeping your account secure by using a strong password and not sharing your login credentials with anyone.

5

Your Rights as a Kerbau28 Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Kerbau28's own policies, you hold the following rights regarding your personal data. You may exercise these rights by contacting us at support@kerbau28.asia:

Your Data Protection Rights at Kerbau28

You have meaningful control over your personal data. The following are the rights kerbau28 guarantees to every member.

01
Right of Access
You have the right to request and receive a copy of all personal data we hold about you. Data access requests will be processed within 21 business days.
02
Right to Rectification
If the personal data we hold about you is inaccurate or outdated, you have the right to request a prompt correction. Most basic information can be updated directly from your account settings.
03
Right to Erasure
You may request the deletion of your personal data under certain circumstances — for example, if the data is no longer needed or if you withdraw a previously given consent, subject to our legal obligations.
04
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time. Once your objection is received, we will immediately cease using your data for that purpose.
05
Right to Data Portability
You can request the personal data you have provided to us in a machine-readable format (such as CSV or JSON), making it easy to transfer should you wish to switch platforms.
06
Right to Complain
If you are dissatisfied with how Kerbau28 handles your personal data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or to contact our privacy officer directly.
Contact Us

To exercise your privacy rights or submit an enquiry regarding this Privacy Policy:

Privacy Email
support@kerbau28.asia
Live Chat
Available 24/7 on the platform
6

Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored by your web browser when you visit a website. kerbau28 uses cookies and similar tracking technologies to enhance the user experience and keep the platform running smoothly.

6.2 Types of Cookies We Use

  • Essential cookies (required): These cookies are required for core platform functions such as login, session security, and transaction processing. The platform cannot operate properly without them.
  • Performance cookies: Collecting anonymised information about how users interact with the platform to help us understand performance and improve the user experience.
  • Functional cookies: Remembering your preferences such as language, region and personal settings to deliver a more tailored experience.
  • Marketing cookies (with consent): Only activated with your consent, used to display more relevant offers and promotions based on your activity on the platform.

6.3 Managing Your Cookie Preferences

You can manage or decline cookies at any time through your web browser settings. Please note that disabling essential cookies may affect the functionality of the Kerbau28 platform. For non-essential cookies, you can update your preferences from the privacy settings panel in your Kerbau28 account.

Kerbau28 does not use third-party cookies for cross-platform advertising or to track your activity outside of the kerbau28 website. All data collected through cookies is used solely for the purposes stated above.

7

Contact kerbau28's Privacy Officer

If you have any questions, concerns, or complaints about how kerbau28 handles your personal data, or if you wish to exercise any of the privacy rights outlined in this document, please reach out to us through the following channels:

  • Email: support@kerbau28.asia (subject label: "Data Privacy Enquiry")
  • Live Chat: Available 24/7 on the Kerbau28 platform — the fastest way to get an immediate response

We will endeavour to respond to all privacy-related enquiries within 7 business days of receipt. For more complex data access requests, processing may take up to 21 business days.

If you are unsatisfied with our response, you have the right to lodge a formal complaint with the Department of Personal Data Protection Malaysia under the Personal Data Protection Act 2010.

8

Changes to This Privacy Policy

Kerbau28 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or technological developments. The latest version of this Privacy Policy is always available on this page, with a clearly displayed "Updated" date.

For material changes — that is, changes that significantly affect how we use your personal data or your rights — we will provide advance notice through:

  • Email to your registered email address
  • Clear in-platform notifications on Kerbau28 when you log in

Your continued use of the Kerbau28 platform after notification of material changes has been sent will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes, you should cease using the platform and request account closure before the date the changes take effect.

This Privacy Policy was last updated on January 2026. We recommend checking this page from time to time to stay informed of the latest way we handle your personal data.

Questions About Privacy & Data at Kerbau28

No. kerbau28 has never and will never sell, rent, or trade members' personal data to any third party for their own marketing purposes. Your data is only shared in very limited circumstances — with service providers that help us operate the platform (such as Touch 'n Go or GrabPay payment processors) or when required by Malaysian law. All such service providers are bound by strict confidentiality agreements.

All financial transaction information at Kerbau28 — whether via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay or FPX — is protected by 256-bit SSL encryption in transit and encrypted at rest. Kerbau28 does not store your full bank account number or payment card details on our servers; we retain only the unique identifiers required to process transactions. All payments are processed through payment gateways that are registered and compliant with Malaysian financial security standards.

Yes, you can request deletion of your personal data by contacting support@kerbau28.asia. However, please be aware that in certain cases we may need to retain some data to fulfil our legal obligations — for example, financial transaction records that must be kept for a minimum of 7 years under Malaysia's anti-money laundering laws. In such cases, we will inform you which data can be deleted and which must be retained, along with the reasons. Data not subject to any legal retention requirement will be securely deleted within 30 days of receiving your request.

Yes, kerbau28 retains your full betting and transaction history. This is standard operational practice to ensure fairness, resolve any disputes that may arise, satisfy audit requirements, and comply with applicable legal obligations. You can access your own betting history at any time from your account panel. This history is also used by our responsible gambling monitoring team to help identify betting patterns that may require attention or support.

You can stop receiving promotional emails from Kerbau28 in two ways: first, click the "unsubscribe" link found at the bottom of any promotional email we send; or second, log in to your Kerbau28 account, go to Account Settings, and update your marketing communication preferences. Changes will take effect within 3 business days. Please note that opting out of promotional emails does not stop important emails such as transaction confirmations, security notifications, or essential account information — these will continue to be sent as they are necessary for the security and operation of your account.

Your Privacy Is Protected. Ready to Get Started?

Join over 500,000 Malaysian players who trust kerbau28 — a secure, transparent platform that respects your privacy at all times.

Bahasa Melayu