Your data is protected with 256-bit SSL — the bank-level security at KudaHoki We comply with PDPA Act 2010 fully Malaysian KudaHoki does not sell your personal data to any third party Secure deposits via Touch 'n Go, GrabPay, DuitNow & FPX You have the right to access, correct, and delete your data – please contact support@kudahoki.run Your account information never shared without your consent Your data is protected with 256-bit SSL — the bank-level security at KudaHoki We comply with PDPA Act 2010 fully Malaysian KudaHoki does not sell your personal data to any third party Secure deposits via Touch 'n Go, GrabPay, DuitNow & FPX You have the right to access, correct, and delete your data – please contact support@kudahoki.run Your account information never shared without your consent
  1. Home
  2. Privacy Policy
Updated: 1 January 2026

Data Protection & User Privacy

KudaHoki Privacy Policy – How We Protect the Personal Data of Malaysian Players

Your privacy is our priority KudaHoki. This document clearly and transparently explains how we collect, use, store, and protect your personal information in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. Please read it carefully before using our platform.

Register Securely Terms & Conditions
PDPA 2010 Compliant
256-bit SSL Encrypted
No Data Sales
Secure Servers

Our Privacy Commitment

How KudaHoki Protects Your Data

Six data protection principles we uphold every day to ensure your personal information remains secure on the KudaHoki platform.

Data Encryption
256-bit SSL – Bank-Grade Protection
All data transmitted between your device and our servers KudaHoki encrypted using 256-bit SSL — the same encryption standard used by major Malaysian banks such as Maybank and CIMB. This means your login credentials and payment details via Touch 'n Go, GrabPay, DuitNow, or FPX cannot be intercepted by any third party during transmission.
PDPA Compliance
Compliant with the Personal Data Protection Act 2010
KudaHoki operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means we only collect data that is strictly necessary, use it solely for the stated purposes, and do not retain it longer than required. You have every right to know what data we hold about you and to request its deletion at any time.
No Data Sales
Your Data Is Never Sold to Third Parties
KudaHoki has never and will never sell, rent, or transfer your personal data to any advertiser, data broker, or third party unrelated to platform operations. Data sharing is limited solely to payment providers required to process your transactions — and only the minimum information necessary for that purpose is ever shared.
Secure Storage
Secure Servers with Restricted Access
Your personal data is stored on servers protected by multiple layers of physical and digital security. Access to the member database is restricted to authorised personnel only, and every access is logged for audit purposes. Data backups are performed regularly to separate secure locations to ensure your data is not lost in the event of any technical incident.
User Controls
You Are in Control of Your Own Data
Every member KudaHoki have full control over their data. From your account settings, you can view the information we hold, update your personal details, request an export of all your data in a readable format, or request the deletion of your account and all associated data. Such requests are processed within 30 business days in accordance with PDPA requirements.
Communication Controls
Select the Types of Communications You Wish to Receive
You can control the types of marketing communications you receive from KudaHoki — including promotional emails, bonus notifications, and platform updates. An unsubscribe option is available in every email we send, or directly from your account settings. Important communications relating to account security and transactions cannot be disabled, as they form part of your account protection.
Content
Clause 1

Scope & Application of KudaHoki's Privacy Policy

This Privacy Policy ("Policy") describes our data protection practices KudaHoki ("Platform", "We") regarding personal information collected from users ("You") who register for or use the platform's services KudaHoki at kudahoki.run.

This Policy applies to all information collected through the platform KudaHoki including the website, mobile app (where available), customer support services, and any communications between you and the KudaHoki. By using any KudaHoki service, you agree to the collection and use of data in accordance with this Policy.

Legal Basis: This Privacy Policy is drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). KudaHoki is committed to complying with all provisions of this Act in every aspect of how we handle users' personal data.

KudaHoki is the data controller responsible for all personal data collected through this platform. If you have any questions or concerns about how we handle your personal data, please contact us at support@kudahoki.run.

Clause 2

Types of Personal Data Collected

KudaHoki collects personal data in three main categories: data you provide directly, data automatically generated during your use of the platform, and data we receive from relevant third parties.

Data Category Type of Information How It Is Collected
Identity Data Full name, MyKad number, date of birth Registration form
Contact Data Malaysian phone number, email address Registration form
Financial Data Bank account number, eWallet account holder name Withdrawal/deposit forms
Verification Data MyKad copy, bank statement (if requested) KYC Process
Usage Data Betting logs, transaction history, usage patterns Automatic – platform system
Technical Data IP address, device type, web browser, approximate location Automatic – server logs
Communication Data Live chat records, support emails, complaints Customer support interactions

KudaHoki adheres to the principle of minimal data collection — we only collect data that is genuinely necessary to deliver our services, meet legal obligations, and safeguard platform security. We do not collect sensitive data such as health information or religious beliefs unless a specific legal requirement compels us to do so.

Clause 3

Purpose of Personal Data Use

KudaHoki uses collected personal data solely for legitimate, stated purposes. Below is a complete list of how your data is used on the KudaHoki:

  • Account Management: Creating, verifying, and maintaining your KudaHoki account, including the required identity verification (KYC) process
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX, as well as withdrawals to your Malaysian bank account or eWallet
  • Platform Security: Detecting and preventing fraud, money laundering, duplicate accounts, and other suspicious activities that compromise the integrity of the platform
  • Legal Compliance: To comply with PDPA requirements, anti-money laundering laws (AMLA), and any other applicable legal reporting obligations in Malaysia
  • Customer Support: Providing technical support, resolving disputes, and responding to your enquiries effectively
  • Platform Improvements: Analyzing usage patterns in aggregate (not at an individual level) to improve the user experience, technical performance, and platform features
  • Service Communications: Sending important notifications relating to your account, security, transactions, and material changes to our terms
  • Marketing (With Consent): Sending promotional information, bonus offers, and platform updates — only to users who have given their consent and may unsubscribe at any time
  • Responsible Gambling: To monitor betting patterns for early signs of problem gambling and provide appropriate assistance where needed
KudaHoki's Commitment: Your data will not be used for any purpose beyond those stated above without first obtaining your renewed consent. Whenever we intend to use your data for a new purpose, you will be informed and given the choice to agree or decline.
Clause 4

Data Sharing with Third Parties

KudaHoki does not sell, rent, or share your personal data for third-party marketing purposes. Data sharing occurs only in the following limited situations and exclusively with parties that hold strict data protection obligations:

  • Malaysian Payment Providers: The minimum information required to process deposits and withdrawals is shared with Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX partner banks (Maybank, CIMB). This is a technical and legal requirement for processing your financial transactions
  • Malaysian Authorities: KudaHoki is required by law to disclose information to the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or other relevant authorities when requested through a valid legal process
  • Technical Service Providers: Third parties providing technical infrastructure (hosting, CDN, cybersecurity) may have limited access to data within the scope of their technical work. All such providers are bound by strict data protection agreements
  • Fraud Detection: In cases of suspected fraud or money laundering, KudaHoki may share relevant information with enforcement bodies or other platforms in the industry through legitimate fraud prevention networks

In all data sharing instances, KudaHoki only shares the minimum information necessary and ensures that recipients maintain a level of data protection equal to or greater than what we provide to you.

Clause 5

Data Security Measures

KudaHoki implements multiple layers of technical and organisational security controls to protect your personal data from unauthorised access, alteration, disclosure, or destruction:

  • 256-bit SSL Encryption: All data transmitted between your browser and KudaHoki's servers is encrypted using the latest TLS protocol
  • Encryption of Stored Data: Sensitive data, including financial details and identity verification information, is encrypted within our database using AES-256 encryption
  • Internal Access Controls: Access to user data is restricted to staff who have been granted specific authorisation based solely on the requirements of their role. The principle of least privilege is strictly enforced
  • 24/7 Monitoring: An automated security monitoring system operates around the clock to detect suspicious activity, intrusion attempts, or unusual data anomalies
  • Regular Security Audits: Internal and external security audits are conducted on a regular basis to identify and address vulnerabilities before they can be exploited
  • Two-Factor Authentication (2FA): Available to all accounts KudaHoki as an additional layer of protection to prevent unauthorised access even if your password is compromised
In the Event of a Data Breach: In the event of a security breach that may compromise your personal data, KudaHoki will notify you via your registered email within 72 hours of detecting the incident, in line with best practices and applicable legal requirements.

While we take all reasonable steps to protect your data, no security system is entirely foolproof. You also play an important role in keeping your account safe — use a strong password, never share your login credentials, and enable 2FA for maximum protection.

Clause 6

Cookies, Tracking & Similar Technologies

Platform KudaHoki uses cookies and similar tracking technologies to enhance the user experience, maintain login sessions, and understand platform usage patterns in aggregate. The cookies we use fall into several categories:

  • Required Cookies: Required for core platform functionality, including login session authentication, form security, and language preferences. These cookies cannot be disabled as they are essential for the platform to operate correctly
  • Functional Cookies: To save your preferences such as display settings, game configurations, and information you've entered in forms, making return visits more convenient
  • Analytics Cookies: Helps us understand how users interact with the platform in aggregate — which pages are visited most frequently, time spent in each section, and general navigation flow. This data is used solely to improve the KudaHoki platform
  • Security Cookies: Used to detect and prevent fraudulent activity, duplicate accounts, and unauthorized access to your account

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the platform KudaHoki. KudaHoki does not use third-party tracking cookies for advertising or marketing purposes across other websites.

Clause 7

Data Retention & Deletion

KudaHoki retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy or as required under applicable Malaysian law. Our general data retention principles are as follows:

  • Active Account Data: Retained for the duration of your active account at KudaHoki plus the minimum retention period required by law
  • Financial Transaction Records: Retained for 7 years from the transaction date as required under Malaysian law governing financial records and anti-money laundering (AMLA)
  • Support Communication Logs: Retained for 2 years from the date of the last communication, for the purpose of resolving any disputes that may arise at a later stage
  • Technical Data & Server Logs: Retained for 90 days for the purpose of troubleshooting technical and security issues, after which it is automatically deleted
  • Closed Account Data: After an account is closed, identity information is anonymised within 90 days, while transaction records are retained as required by the applicable laws above

Once the retention period expires, KudaHoki will delete or anonymise your personal data in a secure and irreversible manner. You may also request early deletion of your data by contacting us — such requests will be processed in accordance with your rights under the PDPA and within 30 business days.

Clause 8

User Rights Under Malaysia's PDPA

As a user of the platform KudaHoki, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA):

Right of Access
Request a copy of all personal data we hold about you in a readable format.
Right to Rectification
Amend or update inaccurate or incomplete personal data via your account settings or through our support team.
Right to Erasure
Request the deletion of your personal data, subject to applicable legal retention requirements.
Right to Object
Object to the processing of your data for marketing purposes or in certain other reasonable circumstances.
Right to Portability
Receive your data in a structured, machine-readable format for transfer to another platform.
Right to Restriction
Request a temporary restriction on the processing of your data while a dispute or review is in progress.

To exercise any of the rights above, please contact us at support@kudahoki.run by clearly stating your request. KudaHoki will process your request within 30 business days and may require identity verification before handling sensitive requests, to ensure we only disclose or modify data to the verified account owner.

Clause 9

Protection of Children's Data

Platform KudaHoki is strictly for adult users aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

Minor Protection Commitment: If KudaHoki becomes aware that we have inadvertently collected personal data from a minor, we will take immediate action to delete that data and close the account in question. If you believe a child has registered on our platform, please contact us immediately at support@kudahoki.run.

Parents and guardians with concerns about a minor's use of the platform are encouraged to contact us directly. We are fully committed to protecting children from exposure to online betting platforms and will cooperate completely with authorities or families in any such case.

Clause 10

Privacy Policy Amendments

KudaHoki may update this Privacy Policy from time to time to reflect changes in our data practices, evolving legal requirements, or platform service improvements. All updated versions of the Privacy Policy will display a clear effective date at the top of the document.

For material amendments — that is, changes that significantly alter how we use your personal data — KudaHoki will:

  • Sending email notifications to all registered members at least 14 days before the amendments take effect
  • Displaying a clear notice on the platform's main page regarding upcoming changes
  • Giving you the option to reject the changes and close your account if you do not agree with the new terms

Continued use of the platform KudaHoki after the effective date of the amendment will be considered acceptance of the updated Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your data.

Clause 11

How to Contact KudaHoki Regarding Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or how KudaHoki handles your personal data, we encourage you to reach out to us through the following channels:

  • Privacy Email: support@kudahoki.run — please include "Privacy Inquiry" in the subject line of your email
  • Live Chat: Available 24/7 within the KudaHoki platform — our Malay-speaking agents are ready to assist you
  • Response Time: We are committed to responding to all privacy enquiries within 5 business days and resolving data requests within 30 business days

If you are not satisfied with the response from KudaHoki regarding your privacy concerns, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body for PDPA in Malaysia. Further information on how to file a complaint with the JPDP is available through their official channels.

Security Reminder: KudaHoki will never ask for your password, PIN, or OTP via email, WhatsApp, or any other communication channel. If you receive such a message claiming to be from KudaHoki, it is a fraudulent attempt — please disregard it and report it to us immediately at support@kudahoki.run.

Why Data Privacy Matters When You Play at KudaHoki

When you register on any online platform, you are entrusting your personal information to that company. Your name, phone number, bank account details, transaction records — these are all sensitive pieces of information that require serious protection. At KudaHoki, we do not take this responsibility lightly. Every technical decision we make — from how we store data to who on our team can access it — is made with your privacy protection as the top priority.

One of the most important things for you to know is how your deposits and withdrawals are handled from a privacy standpoint. When you deposit via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX through Maybank2u or CIMB Clicks, KudaHoki does not store your full bank card number, bank account number, or eWallet PIN on our servers. Payments are processed through a secure payment gateway, where this sensitive information is handled directly by the respective payment provider and never passes through or is stored in KudaHoki's systems. What we do retain are transaction records — the amount, date, and method — for account management and legal compliance purposes.

A common concern among Malaysian players is data being shared with third parties for advertising purposes. Many have experienced signing up on one platform only to suddenly receive related ads on social media or other platforms. At KudaHoki, this does not apply. We do not use user data for advertising retargeting on external platforms, we do not sell or rent member email lists or phone numbers to any advertiser, and we do not share data with digital behavioural tracking networks. Your data remains within the KudaHoki ecosystem and is used solely to enhance your experience on our own platform.

Regarding betting activity records — this is among the most sensitive data we hold, as it reveals a person's habits and behavioral patterns. KudaHoki retains your betting records for several legitimate reasons: dispute resolution in the event of questions regarding betting outcomes, AMLA legal requirements mandating the retention of financial transaction records, and to support responsible gambling features that monitor betting patterns to identify warning signs of problem gambling. These records are not shared with any third party except where a specific legal obligation exists, and once the statutory retention period expires, they are securely deleted from our systems.

Identity verification (KYC) is also a common source of understandable privacy concerns. Why does KudaHoki need a copy of your MyKad? This is a legal requirement under Malaysian law, not a choice we make. AMLA (the Anti-Money Laundering Act) and online gambling industry regulations require platforms to verify user identity for withdrawals above a certain threshold or when risk indicators are present. The MyKad copy you provide is stored in encrypted storage, accessible only by staff with specific authorisation for verification purposes, and deleted once no longer required in accordance with the prescribed retention schedule. We do not use your MyKad image for any purpose other than identity verification.

In closing, we want to reaffirm once more: your privacy is not merely a legal obligation to KudaHoki — it is part of the trust you place in us when you choose to play on our platform. The trust of over 320,000 Malaysian members who have registered with us is something we will never take for granted. If you have any privacy concerns not addressed in this document, our door is always open at support@kudahoki.run.

Play with Confidence

Your Data is Safe at KudaHoki – Register & Get Started Now!

You've read our transparent Privacy Policy. KudaHoki protects your data with 256-bit SSL, complies with PDPA 2010, and never sells your data. Register in 2 minutes, make your first deposit of RM 50 via Touch 'n Go, GrabPay, DuitNow, or FPX — and claim your free RM 50 Welcome Bonus.

Register Free Already have an account? Log In
Contact Us Regarding Privacy — For any enquiries, data access requests, or privacy complaints, please contact the KudaHoki at support@kudahoki.run. We comply with PDPA 2010 and will process your request within 30 business days. For more information on our terms of use, please read Terms & Conditions us.
Bahasa Melayu