kuatbox Privacy Policy

This Privacy Policy ("Policy") is issued by kuatbox ("kuatbox", "we", "us", "our") and governs the collection, use, storage, disclosure and protection of personal data submitted to or collected through the kuatbox platform, accessible at https://kuatbox.cam.

kuatbox is an English-language casino and sports betting information brand created specifically for Malaysian users, including players based in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam and all other locations within Malaysia. All transaction values and financial references within this Policy are expressed in Malaysian Ringgit (MYR / RM) unless stated otherwise.

By registering an account, using any kuatbox service or making a deposit or withdrawal, you confirm that you have read, understood and agreed to the terms of this Policy. If you do not accept this Policy, you must not create an account or engage with any kuatbox product or service.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

kuatbox collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and from trusted third-party verification and payment providers.

Registration and Account Data

• Full legal name, date of birth and nationality
• Malaysian residential address (including city and postcode)
• Email address and mobile phone number
• Username and encrypted account credentials
• Preferred language and communication preferences

Identity Verification (KYC) Data

• Government-issued identity documents (MyKad, passport or equivalent)
• Proof of residential address (utility bill, bank statement)
• Selfie or biometric photograph where required for identity matching
• Source of funds documentation for enhanced due diligence accounts

Financial and Transaction Data

• Payment method details — e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account numbers (Maybank, CIMB, Public Bank, Hong Leong, RHB), DuitNow IDs and FPX references
• Deposit and withdrawal amounts, dates and processing status
• Bonus claims, wagering activity and balance history
• Cryptocurrency wallet addresses where applicable (BTC, ETH, USDT, LTC)

Technical and Device Data

• IP address and approximate geographic location
• Browser type, version and operating system
• Device identifiers and screen resolution
• Session logs, navigation paths and time-on-page data

The personal data collected by kuatbox is processed for the following clearly defined purposes. We do not use your data for any purpose incompatible with those disclosed in this Policy.

kuatbox processes personal data only where a valid legal basis exists. The primary legal bases applicable to our processing activities are as follows:

• Contractual Necessity: Processing required to perform the contract between kuatbox and the User, including account creation, payment processing and service delivery.
• Legal Obligation: Processing necessary to comply with applicable anti-money-laundering regulations, age verification requirements and any regulatory reporting obligations.
• Legitimate Interests: Processing conducted to prevent fraud, maintain platform security and improve kuatbox services, provided these interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes — primarily marketing communications — conducted only where you have given freely given, informed and withdrawable consent.

kuatbox does not sell, rent or lease personal data to unaffiliated third parties for their independent commercial purposes. We share data only in the circumstances described below, and only to the minimum extent necessary.

Permitted Sharing Categories

• Payment Processors: Malaysian payment partners including FPX gateway operators, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong and cryptocurrency network providers receive the transaction data necessary to execute your payment instructions.
• KYC Verification Partners: Authorised identity verification service providers receive identity document data strictly for the purpose of confirming account eligibility and fulfilling regulatory obligations.
• Regulatory Authorities: We disclose personal data to competent regulatory or law enforcement authorities when legally required to do so, or when disclosure is necessary to protect the safety and rights of users or third parties.
• Technology and Hosting Providers: Contracted infrastructure and software providers who process data solely on our behalf under binding data processing agreements.
• Professional Advisers: Legal, audit and compliance advisers who require access to data in the course of providing professional services to kuatbox, subject to strict confidentiality obligations.

All third-party processors engaged by kuatbox are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with our documented instructions.

kuatbox retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation.

• Active Account Data: Retained for the duration of your active kuatbox account relationship.
• Transaction and Financial Records: Retained for a minimum of five (5) years following the last transaction, as required for anti-money-laundering compliance.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure, unless a longer period is mandated by applicable regulation.
• Marketing Consent Records: Retained for three (3) years from the date of consent or until consent is withdrawn, whichever is sooner.
• Support Correspondence: Retained for three (3) years from the date of the final interaction, to support dispute resolution and ongoing service quality review.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

kuatbox implements industry-standard technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include, but are not limited to:

• Transport layer security (TLS) encryption for all data transmitted between your browser and the kuatbox platform
• Encrypted storage of passwords and sensitive account credentials
• Role-based access controls limiting internal staff access to personal data to those with a documented operational need
• Regular security assessments and penetration testing by qualified third-party professionals
• Incident response procedures enabling prompt identification, containment and notification of data security events

Notwithstanding these measures, no data transmission over the internet is entirely risk-free. You are responsible for maintaining the confidentiality of your kuatbox account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

The kuatbox platform uses cookies and similar tracking technologies to maintain session continuity, remember user preferences, measure platform performance and support responsible gambling controls such as session time tracking.

Types of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function correctly, including login session management and security tokens. These cannot be disabled without impacting platform functionality.
• Performance Cookies: Collect anonymised data about how users navigate the platform, used exclusively to identify and fix usability issues.
• Functional Cookies: Remember your preferences — such as language settings and responsible gambling limit configurations — across sessions.
• Analytics Cookies: Aggregate, non-personal usage data used to understand broad patterns of platform engagement and improve content relevance.

You may manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the kuatbox platform, including the ability to maintain an active login session.

Subject to applicable law, you have the following rights in relation to the personal data kuatbox holds about you. To exercise any of these rights, please contact us at [email protected]. We will respond within thirty (30) calendar days of receiving a valid request.

Where you believe that kuatbox has not handled your personal data in accordance with this Policy, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

The kuatbox platform is strictly intended for persons aged 21 years and above. We do not knowingly collect or process the personal data of individuals below the age of 21. During registration, all users are required to confirm that they meet the minimum age requirement, and KYC verification procedures are used to enforce this restriction.

If kuatbox becomes aware that personal data has been collected from a person under the age of 21 without the required verification, we will take immediate steps to suspend the associated account, delete the data and, where applicable, report the matter to the relevant authority.

Parents and guardians who believe that a minor may have accessed the kuatbox platform are encouraged to contact us immediately at [email protected] so that the situation can be investigated and resolved promptly.

In the course of providing the kuatbox platform, personal data may be transferred to and processed in jurisdictions outside of Malaysia. Such transfers occur only where one or more of the following safeguards are in place:

• The receiving country has been assessed as providing an adequate level of data protection by the relevant authority
• The transfer is governed by a binding data processing agreement incorporating appropriate contractual safeguards
• The transfer is necessary for the performance of a contract between you and kuatbox (for example, processing a payment through an international payment network)

kuatbox does not transfer personal data to jurisdictions that do not meet the applicable adequacy or safeguard requirements. If you have questions about the specific safeguards in place for your data, please contact [email protected].

kuatbox reserves the right to revise this Privacy Policy at any time to reflect changes in applicable law, platform functionality or our data processing practices. Where a change is material — particularly any change that affects your rights or the purposes for which we process your data — we will provide reasonable advance notice via the platform interface or by email to your registered address.

The revised Policy will carry an updated "Last Reviewed" date at the top of this page. Your continued use of the kuatbox platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised terms, you should close your account and cease using the platform before the amendment takes effect.

If you have any questions, concerns or requests relating to this Privacy Policy or the way kuatbox processes your personal data, please reach out to our team through the following channel:

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, seven days a week via the kuatbox platform
• Response Time: Live chat first response targeted within 2 minutes; email responses typically within 4 hours under standard service conditions
• Data Requests: Please include "Privacy Request" in your message and specify which right you wish to exercise. We will acknowledge receipt within 48 hours.

This Privacy Policy was last reviewed and updated in January 2026. The current version supersedes all prior versions of this document.