Privacy Policy — kiara32

This Privacy Policy (hereinafter "the Policy") is published by kiara32 (hereinafter "kiara32", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at https://kiara32.cam (hereinafter "the Platform" or "the Website").

This Policy explains how kiara32 collects, receives, uses, stores, shares, and protects personal data relating to individuals who access or use the Platform, including registered Account holders and unregistered visitors (hereinafter collectively "Users", "you", or "your").

By accessing the Platform, registering an Account, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which are incorporated by reference and form part of the overall agreement governing your use of the Platform.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, whether automated or manual, including collection, recording, organisation, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means kiara32, which determines the purposes and means of the Processing of Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of kiara32, such as payment service providers, identity verification partners, or cloud infrastructure providers.
• "Sensitive Personal Data" means Personal Data relating to health, biometrics, financial account credentials, or any other category of data afforded heightened protection under applicable data protection law.
• "Consent" means any freely given, specific, informed, and unambiguous indication by which you signify agreement to the Processing of your Personal Data for a stated purpose.
• "Cookie" means a small text file placed on your device by the Platform for the purposes described in Section 7 of this Policy.

kiara32 collects Personal Data through several channels, including account registration forms, KYC verification processes, payment transactions, customer support interactions, and automated technical means. The categories of data we collect are summarised below.

kiara32 processes your Personal Data only where we have a valid legal basis to do so. Depending on the specific processing activity, we rely on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and kiara32, including account management, payment processing, and the delivery of gaming services.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, and regulatory reporting duties.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and improving our services — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where required by law, we will seek your explicit consent before processing certain categories of Personal Data. You may withdraw consent at any time, although withdrawal will not affect the lawfulness of processing carried out prior to withdrawal.

kiara32 uses your Personal Data for the following purposes:

• Account Management: Creating, maintaining, and managing your kiara32 account, including processing registration, authentication, and account settings.
• Identity Verification: Conducting KYC checks to verify your identity, age (21+), and payment method ownership in compliance with applicable regulations.
• Payment Processing: Facilitating deposits and withdrawals through approved Malaysian payment methods, including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20.
• Platform Operation: Delivering gaming services, displaying personalised content, managing bonus eligibility, and maintaining the loyalty rewards programme.
• Fraud Prevention & Security: Monitoring transactions and user activity for signs of fraud, money laundering, multi-accounting, or other prohibited conduct.
• Responsible Gambling: Monitoring usage patterns to identify potential problem gambling behaviour and administering self-exclusion, deposit limits, and cooling-off requests.
• Customer Support: Responding to enquiries, resolving disputes, and maintaining records of support interactions.
• Legal & Regulatory Compliance: Meeting our obligations under applicable international gaming regulations, AML legislation, and data protection law.
• Service Improvement: Analysing aggregated and anonymised usage data to improve Platform performance, content, and user experience.

kiara32 does not sell, rent, or trade your Personal Data to third-party marketing companies or data brokers. We may share your Personal Data only in the following limited circumstances:

• Payment Service Providers: We share financial data with our approved payment processors — including those facilitating transactions via Maybank, CIMB, Public Bank, FPX, DuitNow, and e-wallets — solely for the purpose of processing your transactions. All such providers are bound by data processing agreements.
• Identity Verification Partners: We share identity documents and biometric data with licensed KYC verification providers for the purpose of satisfying our age and identity verification obligations.
• Technology Providers: We share technical data with our platform infrastructure, hosting, and security providers strictly as necessary to operate the Platform.
• Regulatory Authorities: We may disclose Personal Data to relevant regulatory authorities, law enforcement agencies, or financial intelligence units where required by law, court order, or regulatory directive — including in the context of AML reporting.
• Professional Advisers: We may share data with our legal counsel, auditors, and professional advisers where strictly necessary and subject to obligations of confidentiality.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the kiara32 business, Personal Data held by kiara32 may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations.

kiara32 uses cookies and similar tracking technologies on the Platform to enhance functionality, maintain session integrity, and gather anonymised analytics data. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for core Platform functionality such as maintaining your login session, remembering your account preferences, and preventing cross-site request forgery. These cookies cannot be disabled without affecting Platform performance.
• Analytics Cookies: Used to collect anonymised data about how users interact with the Platform — including pages visited, session duration, and device type — to help us improve the user experience. No personally identifiable information is included in this data.
• Security Cookies: Used to detect and prevent fraudulent activity, enforce geographic restrictions, and monitor for suspicious login behaviour.
• Preference Cookies: Used to remember your Platform settings, such as language preference and display options, between sessions.

You may manage or disable cookies through your browser settings. Please note that disabling certain categories of cookies may impair your ability to use some features of the Platform. kiara32 does not use cookies to serve third-party advertising.

kiara32 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including meeting our legal, regulatory, and contractual obligations. Our general retention guidelines are as follows:

• Account Data: Retained for the duration of your Account's active status plus a minimum of five (5) years following Account closure, to satisfy AML and regulatory record-keeping requirements.
• Transaction Records: Retained for a minimum of seven (7) years in accordance with applicable financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship.
• Support & Communication Records: Retained for up to three (3) years following the last interaction, or longer where a dispute remains unresolved.
• Technical & Log Data: Retained for up to twelve (12) months unless required for longer retention for security or regulatory purposes.

Where Personal Data is no longer required for any legitimate purpose, we will securely delete or anonymise it in accordance with our data disposal procedures.

kiara32 implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data in transit between your device and the Platform;
• AES-256 encryption for sensitive data at rest within our infrastructure;
• Role-based access controls limiting employee access to Personal Data on a strict need-to-know basis;
• Multi-factor authentication requirements for all administrative access to Platform systems;
• Regular penetration testing and security audits conducted by independent third-party providers;
• Incident response procedures for the detection, containment, and notification of data security events.

Subject to applicable law and certain limited exceptions, you have the following rights with respect to your Personal Data held by kiara32:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any Personal Data that is inaccurate, incomplete, or outdated.
• Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to Restrict Processing: You have the right to request that we temporarily suspend the processing of your Personal Data in certain circumstances, such as where you contest its accuracy.
• Right to Data Portability: You have the right to receive Personal Data you have provided to us in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Object: You have the right to object to the processing of your Personal Data where we rely on legitimate interests as the legal basis.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact our Data Protection team via live chat on the Platform or by email at [email protected]. We will respond to all verifiable requests within 30 days. In certain cases, we may require identity verification before processing a data rights request.

The kiara32 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from individuals below the minimum age threshold. If we become aware that Personal Data has been collected from a minor — whether through misrepresentation or otherwise — we will take immediate steps to delete that data and close the associated Account.

If you have reason to believe that a minor has registered or is using an Account on kiara32, please contact us immediately via live chat or at [email protected] so that we can investigate and take appropriate action.

The kiara32 Platform integrates with a number of third-party service providers to deliver core functionality, including payment gateways, identity verification services, analytics tools, and customer support technology. Each of these providers processes data under their own privacy policies and contractual obligations to kiara32.

kiara32 is not responsible for the privacy practices of third-party service providers operating outside the scope of a contractual data processing agreement with us. We encourage you to review the privacy policies of any third-party service you interact with independently of the kiara32 Platform.

All payment processing partners engaged by kiara32 for Malaysian payment methods — including those facilitating transactions via FPX, Touch 'n Go eWallet, DuitNow, Boost, GrabPay, and major Malaysian banks — are required to maintain data security standards consistent with PCI DSS and applicable Malaysian financial regulations.

As an internationally operated platform, kiara32 may transfer your Personal Data to, and process it in, countries other than Malaysia. Where such transfers occur, kiara32 takes appropriate steps to ensure that the receiving party provides an adequate level of data protection consistent with applicable law.

These safeguards may include contractual clauses requiring the data recipient to protect Personal Data to the same standard as kiara32 is required to under this Policy, or reliance on applicable regulatory frameworks for international data transfers.

kiara32 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy will be communicated to registered Account holders by email or via a prominent notice on the Platform. The effective date at the top of this Policy will be updated to reflect the date on which any revision takes effect.

Your continued use of the Platform following publication of any amended Policy constitutes your acceptance of the revised terms. Where Applicable Law requires us to obtain your fresh consent for a material change in how we process your Personal Data, we will do so before the change takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by kiara32, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform. This is the fastest channel for data access and deletion requests.
• Email: [email protected]

Our support team serves Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia. We are able to assist in both English and Bahasa Malaysia and will respond to all data protection enquiries within 30 days of receipt.