Privacy Policy

kutu4d operates the online gambling and sports betting platform accessible at kutu4d.buzz, serving registered players across Malaysia, including users based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions throughout the country. In the course of providing our services — which include online slot games, live casino, sports betting, live football wagering, lottery, and other gaming products — we necessarily collect and process certain personal data about our users.

kutu4d takes the privacy of its players seriously. We apply appropriate technical and organisational safeguards to protect personal data against unauthorised access, disclosure, alteration, or destruction. We collect only the personal data that is necessary and proportionate for the purposes described in this Policy, and we do not sell personal data to third parties.

This Policy applies to all personal data processed by kutu4d in connection with the Platform, whether collected directly from you during registration, generated through your use of the Platform, or obtained through third-party payment processors and identity verification services.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and device or usage data.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" means kutu4d, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of kutu4d and subject to our instructions.
• "User" / "you" means any individual who accesses or uses the kutu4d platform, whether as a registered player or an unregistered visitor.
• "KYC Data" means identity documents and verification information submitted by a User to satisfy Know Your Customer compliance requirements.
• "Cookies" means small text files stored on your device by your browser when you visit the Platform, used to track session information and preferences.
• "Sensitive Data" means personal data that warants a higher level of protection, including financial account details, government-issued identification numbers, and health-related information where relevant to responsible gambling measures.

kutu4d collects the following categories of personal data in the course of providing and administering our services:

We do not intentionally collect sensitive data beyond what is necessary for identity verification and responsible gambling compliance. Where government-issued identification documents are submitted, they are processed solely for KYC purposes and are not retained beyond the period required by applicable law or regulation.

kutu4d collects personal data through the following channels and mechanisms:

4.1 Direct Collection

Information you provide directly when you register an Account, complete KYC verification, contact our support team, submit a complaint, or update your account settings. This includes all identity, contact, and financial data fields in the registration and verification flow.

4.2 Automated Collection

Technical and behavioural data collected automatically as you interact with the Platform, including IP addresses, device information, browser type, session data, and game activity logs. This data is collected through server logs, cookies, and similar tracking technologies described in Section 8 of this Policy.

4.3 Third-Party Sources

Data received from third-party service providers engaged by kutu4d to facilitate payment processing, identity verification, or fraud prevention. These providers include but are not limited to payment gateways such as FPX, DuitNow, and Malaysian banking partners (Maybank, CIMB, Public Bank, Hong Leong), as well as KYC verification services. Data obtained from these sources is used only for the purposes for which it was shared.

4.4 Publicly Available Sources

In limited circumstances, kutu4d may supplement account information with data from publicly available sources for the purpose of fraud investigation or regulatory compliance. This occurs only where there is a legitimate and proportionate need to do so.

kutu4d processes your personal data for the following specific purposes:

• Account Administration: To create, maintain, and administer your registered Account, process deposits and withdrawals, and manage your game and transaction history;
• Identity and Age Verification: To verify your identity and confirm that you meet the minimum age requirement of21 years in accordance with ourTerms & Conditions;
• Payment Processing: To facilitate deposits and withdrawals through your nominated payment method, including Malaysian banking and e-wallet channels;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the Platform;
• Regulatory Compliance: To comply with applicable anti-money laundering (AML), know-your-customer (KYC), and other regulatory obligations;
• Responsible Gambling: To monitor player behaviour patterns for indicators of problem gambling and to apply self-imposed limits, session alerts, or self-exclusion measures at the player's request or where required by our responsible gambling policy;
• Customer Support: To respond to your queries, complaints, and support requests and to maintain records of such correspondence;
• Platform Improvement: To analyse usage patterns and feedback in order to improve the quality, performance, and security of the Platform;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, subject to your communication preferences and applicable consent requirements.

kutu4d processes personal data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions agreement with you, including account administration, payment processing, and the provision of gaming services;
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and regulatory reporting;
• Legitimate Interest: Processing necessary for kutu4d's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and analytics provided such interests are not overridden by your fundamental privacy rights;
• Consent: Processing of personal data for marketing communications and optional personalisation features, where you have given your express prior consent. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting our support team.

kutu4d does not sell your personal data to any third party. We share personal data only in the following defined circumstances, and only to the extent necessary for each stated purpose:

7.1 Payment Service Providers

We share financial data with licensed payment processors and banking partners to facilitate the deposit and withdrawal transactions you initiate. This includes Malaysian e-wallet providers (Touch 'n Go, Boost, GrabPay), DuitNow, FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency processing services. These providers operate under their own privacy policies and process data solely for payment fulfilment purposes.

7.2 Identity Verification Services

We share identity and KYC documentation data with third-party verification service providers engaged to authenticate your identity and confirm age eligibility. These providers are contractually bound to process such data only for verification purposes and to maintain appropriate security standards.

7.3 Legal and Regulatory Authorities

We may disclose personal data to relevant law enforcement agencies, regulatory bodies, or judicial authorities where we are legally required to do so, or where disclosure is necessary to prevent, detect, or prosecute fraud, money laundering, or other criminal activity.

7.4 Group Companies and Service Providers

We may share data with affiliated entities and contracted service providers (such as cloud infrastructure providers, analytics platforms, and customer support tools) that process data on our behalf under strict data processing agreements. These parties are not authorised to use your data for any purpose other than providing the specified service to kutu4d.

kutu4d uses cookies and similar technologies on the Platform to support core functionality, enhance security, and analyse usage patterns. The following categories of cookies are used:

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without affecting the usability of the Platform;
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and last-visited pages, to improve your experience on return visits;
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform, including pages visited, session duration, and navigation paths. This data is used solely for platform improvement and is not linked to individual user identities;
• Security Cookies: Used to detect and prevent fraudulent activity, including bot traffic, account takeover attempts, and abnormal betting patterns.

You may adjust your browser settings to block or delete cookies. However, please note that disabling essential cookies may impair your ability to log in or use core features of the Platform. Continuing to use the Platform without adjusting your cookie settings constitutes your agreement to our use of cookies as described above.

kutu4d retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active Accounts: Personal data associated with active Accounts is retained for the duration of the account relationship and for a period thereafter as required by applicable law and regulatory obligations;
• Closed Accounts: Following account closure, we retain transaction records, KYC documentation, and correspondence records for a minimum of five (5) years in accordance with standard AML and financial record-keeping requirements;
• Marketing Data: Where consent-based marketing data is held and consent is subsequently withdrawn, the relevant data will be removed from active marketing lists within a reasonable timeframe, not exceding 30 days from the date of withdrawal;
• Technical and Log Data: Server logs and device-level technical data are retained for up to 12 months for security monitoring and fraud investigation purposes, after which they are anonymised or deleted;
• Support Records: Customer support correspondence is retained for a period of three (3) years from the date of the last interaction to support dispute resolution and quality assurance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents reconstruction of identifiable information.

kutu4d applies a layered set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encrypted storage of sensitive data including financial identifiers and identity documents at rest;
• Two-factor authentication (2FA) for player accounts and administrative access to data systems;
• Role-based access controls that restrict data access to authorised personnel on a need-to-know basis;
• Regular security audits and penetration testing of Platform infrastructure;
• A dedicated security operations monitoring function that operates around the clock to detect anomalous access patterns.

While kutu4d implements robust security standards, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your own account credentials. In the event of a suspected data breach that materially affects your personal data, kutu4d will notify affected users in accordance with applicable notification obligations.

Subject to applicable data protection law and the specific circumstances of each request, registered users of kutu4d have the following rights with respect to their personal data:

To exercise any of these rights, please contact our Data Privacy team at [email protected] with the subject line "Data Privacy Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 days. Requests that are manifestly unfounded or excessive may be subject to a reasonable administrative fee or declined, with written reasons provided.

kutu4d employs age verification checks during the registration process, including the collection of date of birth and government-issued identification documents, to ensure that all Account holders meet the minimum age requirement. These checks are a mandatory part of the KYC process and are not optional.

kutu4d's primary operations are directed at Malaysian users, and the majority of data processing activities occur within the region. However, certain technology infrastructure components — including cloud hosting, analytics, and security monitoring services — may involve the transfer of data to servers located in other jurisdictions.

Where personal data is transferred internationally, kutu4d ensures that appropriate safeguards are in place to protect the transferred data to a standard equivalent to that applied within Malaysia. Such safeguards may include standard contractual clauses, data processing agreements, or reliance on the recipient jurisdiction's adequacy status where applicable.

By using the kutu4d platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards and protections described above.

kutu4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where amendments are material, we will notify registered users via email or in-platform notification prior to the changes taking effect.

The current version of this Policy is always available on this page, and the "Last Updated" date at the top of the page reflects the most recent revision. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the amended Policy, you should discontinue use of the Platform and request account closure through our support team.

If you have questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact our Data Privacy team using the details below:

For questions about responsible gambling tools, self-exclusion, or account limits, please refer to our Responsible Gambling page. For general platform terms, please review our Terms & Conditions.