At KeraHoki, your privacy is not a formality — it is a responsibility we take seriously every day. This document transparently explains how we collect, use, store, and protect your personal data as a member of our platform.
This Privacy Policy describes our data protection practices KeraHoki (referred to as "we", "platform", or "KeraHoki") regarding the website kerahoki.ws and all related services. This policy applies to all users of our platform, including visitors, registered members, and prize winners. By using kerahoki's services, you agree to the data protection practices described here. This document should be read in conjunction with Terms & Conditions us.
KeraHoki committed to protecting the privacy of every individual who interacts with our platform. This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs how organisations in Malaysia collect, process, store, and disclose personal data.
The scope of this policy covers all personal data collected through:
Important Note: This policy is updated periodically to reflect changes in our practices or legal requirements. The latest update date is stated at the top of this page. Continued use of the KeraHoki platform after any changes take effect constitutes acceptance of the updated policy.
KeraHoki only collects data that is strictly necessary to deliver a quality and secure service to you. The categories of data we collect are as follows:
| Data Categories | Type of Information | Requirements |
|---|---|---|
| Identity | Full name, date of birth, MyKad/passport number | Mandatory |
| Contact | Malaysian phone number, email address | Mandatory |
| Financial | Bank account number, e-wallet details (TnG, GrabPay, DuitNow) | Mandatory |
| Technical | IP address, device type, web browser, operating system | Automatic |
| Behavioural | Game history, betting patterns, session duration | Automatic |
| KYC | MyKad copy, bank statement, verification selfie | For withdrawals |
| Location | General location based on IP (state/city only) | Automatic |
Note: KeraHoki does not collect credit/debit card numbers directly. All payments are processed through secure payment gateways that comply with PCI-DSS standards.
KeraHoki collects data through several transparent and lawful means:
This includes data you provide during account registration, KYC verification, deposit or withdrawal transactions (MYR), enquiries to our support team, and participation in promotions or contests.
When you use the KeraHoki, our systems automatically record technical information such as your IP address, device type, browser version, pages visited, session duration, and system log data. This information is used for security purposes and platform improvement.
In certain cases, we may receive data from authorised payment service providers such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and Malaysian banks (Maybank, CIMB) for the purposes of financial transaction verification and fraud prevention.
KeraHoki uses your personal data solely for legitimate and necessary purposes. Your data will never be used beyond what is stated below without your consent:
KeraHoki's Commitment: Your personal data will not be used to build discriminatory risk profiles, sold to advertisers, or shared with any party not directly involved in delivering our services to you.
KeraHoki does not sell, rent, or trade your personal data to any party. However, under limited circumstances and with strict controls, we may share data with the following parties:
We work with selected service providers who help us operate the platform, including game software providers, payment processors (Touch 'n Go, DuitNow, GrabPay), secure cloud service providers, and customer support systems. All such providers are bound by strict confidentiality agreements and are prohibited from using your data for any other purpose.
KeraHoki may disclose your personal data when required by Malaysian law, court orders, or directives from competent authorities such as Bank Negara Malaysia or the Securities Commission — but only to the extent strictly necessary.
In cases involving fraud, money laundering, or serious security threats, KeraHoki reserves the right to share necessary information with relevant authorities or other platforms within the industry for the purposes of crime prevention.
International Data Transfers: Should your data need to be transferred outside Malaysia (for example, to international server providers), we ensure that protection equivalent to PDPA 2010 standards is fully upheld through lawful data transfer agreements.
KeraHoki continuously invests in security infrastructure to ensure your data remains protected at all times. The key security measures we have in place are:
Shared Responsibility: While we take every reasonable measure to protect your data, account security also depends on your own actions. Please use a strong password, never share your login credentials, and enable 2FA for optimal protection.
KeraHoki retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required under Malaysian law. The following are our data retention guidelines:
| Data Type | Retention Period | Justification |
|---|---|---|
| Active Account Data | For as long as the account is active | Ongoing account management |
| Transaction Records (MYR) | 7 years after the transaction | Malaysian tax compliance requirements |
| KYC Documents | 5 years after account closure | AML/compliance requirements |
| Security Logs | 2 years | Security incident investigation |
| Support Communications | 3 years | Dispute records and quality audit logs |
| Marketing Data | Until consent is withdrawn | Based on consent |
Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked back to you.
KeraHoki uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:
These cookies are required for core platform functions such as maintaining your login session, remembering language preferences, and securing transactions. They cannot be disabled without affecting platform functionality.
We use analytics cookies to understand how members use our platform — which pages are visited most, how long sessions last, and which game types are most popular. This information helps us improve the platform KeraHoki.
These cookies remember your preferences — such as display settings, language choice, and login details (if you enable the "remember me" feature) — for a smoother experience on future visits.
You can manage your cookie preferences through your web browser settings. Disabling certain cookies may affect your experience on the KeraHoki platform.
As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by KeraHoki:
To exercise any of the above rights, please contact us at support@kerahoki.ws by stating the right you wish to exercise along with sufficient information for us to identify your account. We will respond within 21 working days from the date the request is received.
Platform KeraHoki is intended strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.
If you become aware that a minor has registered or is using our platform, please notify us immediately via support@kerahoki.ws. We will take immediate action to close the account in question and delete all associated data.
To Parents and Guardians: If you are concerned about a child accessing the KeraHoki platform, please use parental control software or device security settings to restrict access. KeraHoki fully supports all efforts to prevent gambling by minors.
KeraHoki reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements to the way we protect your data.
When material amendments (significant changes) are made, we will notify you via:
Minor amendments may be made without specific notice; however, the "Updated" date at the top of this page will always reflect the most current version. We encourage you to review this Privacy Policy periodically.
For any enquiries, requests, or concerns regarding this Privacy Policy or how KeraHoki handles your personal data, please contact us:
For more information on the Personal Data Protection Act 2010 and your rights as a data subject in Malaysia, you may refer to the official website of the Department of Personal Data Protection Malaysia.
This Privacy Policy forms part of the overall agreement between you and KeraHoki, which also includes Terms & Conditions and Responsible Gaming Policy.
A concise overview of your personal data lifecycle from start to finish
These rights are guaranteed under Malaysia's PDPA 2010 and KeraHoki's own policy
You may request a copy of all personal data we hold about you within 21 working days from the date of your request.
If your data is inaccurate or incomplete, you have the right to request a correction at no charge.
In certain circumstances, you may request that your personal data be deleted from KeraHoki's systems.
You may object to the processing of your data for direct marketing purposes at any time, without having to give a reason.
Consent you have given for a specific purpose may be withdrawn at any time, without affecting any prior processing.
If you believe your privacy rights have been violated, you may lodge a formal complaint with the Department of Personal Data Protection Malaysia.
Our multi-layered security approach to safeguarding every piece of your personal information
All data transmitted between you and KeraHoki's servers is encrypted with 256-bit SSL/TLS. No third party can read this data during transmission.
Our system uses artificial intelligence to identify unusual access patterns and suspicious activity in real time, 24/7.
2FA adds an extra layer of security to your account. Even if someone knows your password, they cannot log in without your OTP code.
Your data is stored in certified data centres with physical access controls, surveillance cameras, and comprehensive disaster recovery systems.
Independent security experts conduct regular penetration testing and security audits to identify and address any system vulnerabilities.
A strict "need-to-know" principle is enforced — only staff who require your data to perform their job duties are granted access, and every instance of access is audited.
We have been transparent about how we protect your privacy. Now it's time to enjoy Malaysia's best gaming experience — with full confidence that your data and your RM are in safe hands.
18+ only. Gamble responsibly. Terms & conditions apply.