Katsu5 Privacy Policy – Malaysian Player Data Protection

katsu5 ("we", "platform") operate an online casino and Sports Betting platform at katsu5.best. We understand that entrusting your personal information to any online platform is a significant decision, and we do not take that trust lightly.

This Privacy Policy is designed to explain clearly and transparently the types of personal data we collect from players katsu5, the purposes for which it is collected, how we protect your data, and the rights you hold over that data under the Personal Data Protection Act 2010 (PDPA) Malaysia.

This Policy applies to all users of the platform katsu5, including visitors who have not registered, registered members, and former members whose accounts have been closed. Data collected prior to account closure remains subject to this policy until the applicable retention period expires.

katsu5 collects personal data from you through several different means. Below is a full breakdown of the data types involved:

Data you provide directly:

• Full name as stated on your Malaysian Identity Card (MyKad)
• An active Malaysian phone number (used for OTP verification)
• A valid email address
• Date of birth (to verify the minimum age requirement of 18 years)
• Payment method details — account name for Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, or FPX (we do not store your card number or banking passwords)
• Identity verification document (MyKad) when KYC is required for withdrawals exceeding RM5,000

Data collected automatically during use:

• IP address and device information (operating system, browser type, phone model)
• Login session data including the time, date, and duration of each session
• Game and betting history (required under compliance regulations)
• Deposit and withdrawal transaction history
• Cookie data and related tracking technologies (see Section 5)

Personal data collected by katsu5 is used solely for purposes directly related to delivering the platform's services to you. Below is a summary table of data usage purposes:

katsu5 does not use your personal data for third-party marketing purposes without your explicit consent. If you have agreed to receive promotional communications from katsu5, you may withdraw that consent at any time through your account settings or by contacting our support team.

katsu5 does not sell players' personal data. However, there are limited circumstances where we need to share data with certain parties to keep the platform functioning properly and to comply with applicable laws:

• Technical Service Providers: Companies that provide server infrastructure, payment processing, and identity verification systems. They receive only the data necessary for their specific tasks and are bound by strict confidentiality agreements.
• Game Providers: Slot and casino game developers such as Pragmatic Play, PG Soft, and others receive anonymous game session data for technical maintenance purposes. They do not receive any of your personally identifiable information.
• Regulatory Authority & Compliance: When required by Malaysian law, a court order, or a legitimate investigation request from the relevant authorities.
• Fraud Prevention: Limited data sharing with industry fraud detection systems to protect the entire player ecosystem from bad actors.

Platform katsu5 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform's technical functions run smoothly. The types of cookies we use are as follows:

• Session Cookies (Required): Required to maintain your login session and ensure continuity during gameplay. This cannot be disabled as it is essential to the platform's core functionality.
• Preference Cookies: Stores your preferences such as language, default bet values, and display layout, enabling a more personalised experience.
• Security Cookies: Used to detect suspicious activity, prevent CSRF attacks, and protect your session from account takeover.
• Analytics Cookies: Collects anonymous information about how players interact with the platform for improvement purposes. This data contains no information that can personally identify you.

You can manage your cookie settings through your web browser. However, disabling essential cookies will affect platform functionality and may prevent you from logging in or making transactions. katsu5 does not use third-party cookies for advertising purposes.

The security of your personal data is an absolute priority for katsu5. We implement multiple layers of technical and operational safeguards to ensure your data remains protected at all times:

• Transmission Encryption: 256-bit SSL/TLS encryption for all communications between your device and katsu5's servers
• Storage Encryption: Sensitive data such as payment information and KYC documents are stored in encrypted form within our databases
• Access Controls: Principle of least privilege — staff may only access the data they need for their specific duties, nothing more
• Audit Logs: All access to player personal data is automatically logged for audit and investigation purposes when required
• Security Testing: The platform undergoes regular independent penetration testing
• 24/7 Monitoring: Round-the-clock security monitoring to detect and respond to threats promptly

While we have taken all reasonable steps to protect your data, no online system can be guaranteed 100% secure against all threats. katsu5 will notify you promptly in the event of a data breach affecting your personal information.

katsu5 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by law. The following are our data retention guidelines by category:

• Active account data: Throughout the active account period and for 5 years after closure
• Financial transaction records: 7 years in accordance with Malaysian legal compliance requirements (Companies Act and anti-money laundering regulations)
• KYC documents (MyKad, etc.): 5 years after the business relationship ends
• Customer support communication log: 3 years
• Session cookie data: Deleted immediately upon logout or session timeout
• Anonymised analytics data: Up to 3 years; cannot be linked back to you as an individual

Once the retention period expires, your data will be securely deleted using procedures that ensure it cannot be recovered. If you request early deletion and there is no legal obligation preventing it, we will process your request within 30 days.

As a player katsu5 as a user based in Malaysia, you hold the following rights under the Personal Data Protection Act 2010 (PDPA). We fully respect and support the exercise of these rights:

Platform katsu5 is strictly for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

All account registrations require OTP verification via a Malaysian phone number, along with age confirmation by the user. For withdrawals exceeding RM5,000, MyKad verification is carried out to confirm the player's age.

Platform katsu5 may contain links or integrations with third-party services required for certain functions, such as payment processors for Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and online banking via FPX.

When you interact with these third-party services — for example, when making a deposit through the Touch 'n Go eWallet app — you will be subject to their own privacy policies for the duration of that interaction. katsu5 is not responsible for the separate privacy practices of these third parties.

We encourage you to read the privacy policy of any payment service you use to interact with katsu5. Please note, however, that information you share with a payment processor during a transaction is not transmitted to or stored by katsu5 in its raw form.

katsu5 reserves the right to update or amend this Privacy Policy from time to time in response to changes in legislation, technology, or improvements to our privacy practices. You will be notified of any material changes through:

• A notice prominently displayed on the platform's main page for at least 14 days before the changes take effect
• A notification email sent to the address registered on your account
• An in-account notification the next time you log in

The "Updated" date at the top of this document will always reflect the date the current version came into effect. We encourage you to check this page periodically, even if you have not received a change notification.

Continued use of the platform katsu5 after the effective date of the changes will be considered acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account before that date.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by katsu5, please contact us through the following channels:

We are committed to addressing all privacy enquiries seriously and in a timely manner. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia as provided under PDPA 2010.

This Privacy Policy and all disputes arising from it are governed by the laws of Malaysia and subject to the jurisdiction of Malaysian courts.