Kerbau 28 Official Documents

Privacy Policy kerbau 28 – Malaysian Player Data Protection

Kerbau 28 takes every player's privacy seriously. This document clearly explains what data we collect, why we need it, how we protect it, and your rights over your own personal data.

Last updated: 1 January 2026 Bahasa Malaysia 256-bit SSL
Main Content
  • Data Collected
  • How We Use Your Data
  • Protection & Security
  • Data Sharing with Third Parties
  • Your Rights as a User
  • Cookies & Tracking Technologies
kerbau 28's Privacy Commitment
Six core principles that guide how we handle your personal data
256-bit SSL Encryption
All data transmitted between your device and kerbau 28's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's major banking institutions such as Maybank and CIMB. Your information is fully secured in transit.
No Data Sales
kerbau 28 has never sold, and will never sell, any player's personal data to third parties. Your information is not a commodity we trade in. Data is collected solely to deliver and improve the platform experience for you.
You're in Control
As a Kerbau 28 player, you have full rights to access your data, request corrections, or request deletion of your account and all associated data. This process can be initiated at any time through our support team, without any hassle.
Secure Data Storage
Your personal data is stored on servers protected by strict access controls, industry-grade firewalls, and 24/7 security monitoring. Only authorised personnel who require access for operational purposes are permitted to view your data.
Malaysian Legal Compliance
Kerbau 28 is in full compliance with applicable Malaysian data protection laws. This privacy policy is reviewed periodically to ensure it remains aligned with legal requirements and industry best practices in data protection.
Available in Bahasa Malaysia
This privacy policy is written in plain, straightforward language — not confusing legal jargon. We believe every player deserves to know exactly what happens to their data, and it is our responsibility to be fully transparent about it.

Important Note: By registering and using the Kerbau 28 platform, you agree to the collection and use of your personal data as described in this Privacy Policy. This policy forms part of the overall Kerbau 28 Terms & Conditions. If you have any questions, please contact us at support@kerbau28.wine.

1

Introduction

Kerbau 28 ("we", "the platform", or "kerbau 28") is an online entertainment platform operating at https://kerbau28.wine, designed exclusively for Malaysian players. This Privacy Policy explains how kerbau 28 collects, uses, stores, and protects your personal information when you use our platform.

We understand that privacy is a serious matter, especially on a platform that involves finances and entertainment. Your trust is the most valuable asset we hold, and we do not take that responsibility lightly. This policy is written with the genuine intention of giving you a clear and complete picture — not to obscure or hide anything.

This Privacy Policy applies to all users who access the Kerbau 28 website, register an account, make deposits or withdrawals, play any games on the platform, or contact our support team through any communication channel.

Quick summary: kerbau 28 collects only the data we need to operate our services. We protect your data with the strongest available encryption. We do not sell your data. You may request access to your data or have it deleted at any time.

2

Data Collected

Kerbau 28 collects two main categories of data: information you provide to us directly, and data collected automatically through your use of the platform.

2.1 Data You Provide Directly

When registering and using the Kerbau 28 platform, you may provide the following information:

Data Type Example When Collected
Identity Information Full name, national ID number (where required for verification) Registration / KYC Verification
Contact Information Malaysian phone number, email address Account registration
Financial Information E-wallet account numbers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) and FPX details Deposit / Withdrawal
Security Information Password (stored in an unreadable hashed format) Account registration
Communications Customer support chat records, complaints, and enquiries Contact Support

2.2 Automatically Collected Data

When you use the Kerbau 28 platform, our systems automatically collect certain technical information required for platform operations:

  • Device Data: Device type (Android/iOS/desktop), operating system, phone model, screen resolution
  • Connection Data: IP address, internet service provider (ISP) name, general location (state/city) based on IP
  • Usage Data: Pages visited within the platform, session duration, games played, betting history
  • Technical Data: Web browser type, software version, technical error logs

Usage data and betting records are retained for platform operations, fraud detection, and legal compliance purposes. Kerbau 28 does not track your precise physical location via GPS or similar technologies.

3

Purpose of Data Collection

Kerbau 28 collects and uses your personal data solely for legitimate and transparent purposes. The following is a complete list of data use purposes:

3.1 Platform Operations

  • Creating and managing your player account on Kerbau 28
  • Processing deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX, and other methods
  • Enabling access to all games and services on the platform
  • Calculating and crediting bonuses, cashback, and rebates to your account
  • Providing effective customer support in Bahasa Malaysia

3.2 Security & Compliance

  • Verifying your identity to prevent fraud and account misuse
  • Detecting and investigating suspicious activity or potential money laundering
  • Compliant with applicable laws and regulations in Malaysia
  • Conducting Know Your Customer (KYC) procedures when required

3.3 Service Improvements

  • Analysing usage patterns to improve the interface and user experience
  • Identifying the games and features most popular among Malaysian players
  • Optimising platform performance on Android and iOS mobile devices
  • Improving the deposit and withdrawal process based on user feedback

3.4 Communications

  • Sending important notifications regarding your account, transactions, or policy changes
  • Keeping you informed about kerbau 28 promotions, bonuses, and special offers (where you have opted in to receive marketing communications)
  • Respond to your enquiries and complaints effectively

Kerbau 28 does not use your data for any purpose beyond those stated above without first obtaining your separate consent.

4

Legal Basis for Data Processing

Kerbau 28 processes your personal data on one or more of the following lawful legal bases:

  • Contract Performance: Data processing necessary to provide platform services to you — including account management, payment processing, and access to games. Without this data, we are unable to deliver the services you signed up for.
  • Legal Obligation: In certain cases, kerbau 28 is legally required to collect and retain specific data — including financial transaction records for compliance with anti-money laundering legislation.
  • Legitimate Interest: Data processing carried out in the legitimate interests of kerbau 28 — such as fraud detection, platform security, and abuse prevention — provided those interests do not override your fundamental rights and interests.
  • Consent: For marketing communications and certain cookies, we obtain your explicit consent. You may withdraw this consent at any time.
5

Data Protection & Security

Kerbau 28 invests significantly in security infrastructure to ensure your data is protected at all times. Our security measures span technical, organisational, and procedural layers.

5.1 Technical Security

  • Encryption in Transit: All communications between your browser and Kerbau 28 servers are protected with 256-bit TLS/SSL encryption. This means data in transit — including login credentials, payment details, and game records — cannot be read by any third party.
  • Data-at-Rest Encryption: Sensitive data stored in kerbau 28's databases — including financial information and personal identification details — is encrypted using industry-leading encryption algorithms.
  • Password Protected: Your password is never stored in its original form. Kerbau 28's system uses robust hashing (bcrypt), meaning that even in the event of a server breach, your password cannot be recovered.
  • Firewall & Monitoring: Kerbau 28's servers are protected by a multi-layered firewall and an intrusion detection system (IDS) that monitors incoming and outgoing traffic around the clock.

5.2 Access Control

Access to player data within the Kerbau 28 system is restricted to authorised personnel who require it to carry out specific operational duties. All internal access is logged and monitored. No staff member has full, unmonitored access to all player data.

5.3 Security Incident Response

In the event of a security incident affecting players' personal data, kerbau 28 is committed to notifying affected players within a reasonable timeframe once we become aware of and have confirmed the incident. We will provide details on the nature of the incident, the data that may have been compromised, and the steps players can take to protect themselves.

While kerbau 28 takes all reasonable steps to protect your data, no digital security system can be guaranteed 100% breach-proof. We encourage you to use a strong, unique password for your kerbau 28 account and never share your login credentials with anyone.

6

Data Sharing with Third Parties

Kerbau 28 does not sell, rent, or disclose players' personal data to third parties for marketing or commercial purposes. However, there are limited situations where Kerbau 28 may need to share data with certain parties to ensure the smooth and secure operation of the platform.

6.1 Technical Service Providers

Kerbau 28 works with trusted third-party providers to support the platform's technical operations, including payment processing providers (to facilitate transactions via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX), hosting and cloud infrastructure providers, and game providers such as Pragmatic Play, Evolution Gaming, and SA Gaming. All these providers are bound by strict confidentiality agreements and may only use shared data for the purposes specified in those agreements.

6.2 Legal Requirements

Kerbau 28 may disclose players' personal data to the relevant authorities if we are required to do so by a court order, applicable law, or a lawful request from a Malaysian law enforcement agency. In such circumstances, Kerbau 28 will disclose only the minimum data necessary to comply with the relevant legal requirement.

6.3 Fraud Prevention

To protect players and the platform from fraud and unlawful activity, kerbau 28 may share limited information with industry fraud prevention services and relevant financial institutions. Such sharing only occurs where there are reasonable grounds to suspect fraudulent activity or money laundering.

6.4 Business Transfers

If Kerbau 28 is involved in a merger, acquisition, or business asset transfer, player data may be transferred as part of that transaction. In such cases, Kerbau 28 will ensure the receiving party adheres to the same or higher data protection standards, and players will be notified of the transfer.

Please note: Kerbau 28 never shares your data with advertisers, marketing companies, or any third party for the purpose of sending you unsolicited advertisements or offers.

7

Data Storage & Retention Periods

Kerbau 28 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law.

7.1 General Retention Period

Data Type Retention Period Reason
Active account data For the duration of the active account Platform operations
Financial transaction records 7 years after account closure Financial regulatory compliance
Betting & game records 3 years after last activity Dispute resolution, audits
Customer support records 2 years after case closure Referrals & service improvements
Technical & security logs 1 year Security & fraud detection
Closed account data 5 years after closure Prevention of prohibited re-registration

7.2 Data Deletion

Once the specified retention period has ended, Kerbau 28 will securely delete or anonymise your personal data from all systems and backups. Deletion is carried out using methods that ensure the data cannot be recovered. In cases where immediate full deletion is not possible (for example, due to system backup requirements), the relevant data will be anonymised so that it can no longer be linked to you personally.

8

Cookies & Tracking Technologies

Kerbau 28 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform usage patterns.

8.1 Types of Cookies Used

  • Essential Cookies (Required): Required for core platform functions such as login session authentication, account security, and bet slip operations. Without these cookies, the platform will not function properly. These cookies cannot be disabled.
  • Performance Cookies (Analytics): Collecting information on how you use the platform — most frequently visited pages, time spent in each section, and errors encountered. This data is used in aggregate form (not individually) to improve the platform.
  • Functional Cookies: Saving your preferences such as language, display settings, and game configurations so you don't have to reconfigure them each time you log in.

8.2 Managing Cookies

You can manage cookies through your web browser settings. Most modern browsers allow you to view, delete, or block specific cookies. Please note that disabling essential cookies may affect the functionality of the Kerbau 28 platform. For guidance on managing cookies in your browser, refer to your browser's help documentation.

8.3 Other Tracking Technologies

In addition to cookies, kerbau 28 may use web beacons (pixel images) and similar technologies for internal analytics purposes. These technologies are used solely to help us understand platform performance and are not used to track your activity outside the kerbau 28 website.

9

Your Rights as a User

As a Kerbau 28 player, you have important rights regarding your personal data. Kerbau 28 respects and facilitates the exercise of these rights.

Right of Access

You have the right to request a copy of the personal data we hold about you. Kerbau 28 will provide this information in a readable format within 30 days of receiving your request.

Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Kerbau 28 will update the relevant data as promptly as possible upon receiving your request.

Right to Erasure

You may request the deletion of your account and personal data. kerbau 28 will process such requests subject to any legal data retention obligations that may prevent the immediate deletion of certain records.

Right to Restriction of Processing

In certain circumstances, you have the right to request that kerbau 28 restrict the way we process your data — for example, while a dispute regarding data accuracy is being resolved.

Right to Data Portability

You have the right to receive the personal data you have provided to us in a structured, machine-readable format, and to transfer it to another service provider should you wish to do so.

Right to Object

You may object to the processing of your personal data for marketing communication purposes at any time. Upon receiving your objection, Kerbau 28 will cease using your data for that purpose immediately.

To exercise any of the rights above, contact the Kerbau 28 support team via Live Chat or email at support@kerbau28.wine. Please include your account number and specify the right you wish to exercise. We will respond within 5 business days.

10

Child Protection

The Kerbau 28 platform is intended solely for individuals aged 18 and above. Kerbau 28 does not knowingly collect any personal data from anyone under the age of 18.

Should we discover that we have collected data from a minor, we will immediately close the account in question and delete all associated data. Any funds deposited by a minor will be returned to the responsible party once identity has been verified.

Parents or guardians who become aware that their child has registered an account on Kerbau 28 are encouraged to contact us immediately at support@kerbau28.wine so that the account can be closed without delay.

Kerbau 28 encourages parents and guardians to use parental control software on shared devices as an additional precaution against unintended access to online gambling platforms.

11

Privacy Policy Amendments

Kerbau 28 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes in platform operations. All amendments will be recorded with a clear update date at the top of this document.

For material amendments — those that significantly change how we use or protect your data — Kerbau 28 will notify you via a prominent notice on the platform or by email to the address registered to your account, at least 14 days before the changes take effect.

Continued use of the kerbau 28 platform after any Privacy Policy amendment takes effect will be considered acceptance of those changes. If you do not agree with the amendments, you have the right to request account closure and data deletion before they come into effect.

The latest version of the Privacy Policy will always be available on the kerbau 28 website and can be accessed at any time without logging in.

12

Contact Us

If you have any questions, concerns, or complaints regarding Kerbau 28's Privacy Policy or how we handle your personal data, we encourage you to reach out to us directly. Our Bahasa Malaysia-speaking support team is available to assist you 24 hours a day, 7 days a week.

Available contact channels:

  • Live Chat: Click the Live Chat button on the Kerbau 28 platform — the fastest way to get an immediate response
  • WhatsApp: Available via the official number displayed in the platform's contact us section
  • Telegram: Through the official Kerbau 28 channels listed on the platform
  • Email: support@kerbau28.wine — please include "Privacy Enquiry" in the email subject line for faster routing

For privacy matters requiring immediate attention — such as suspected unauthorised access to your account — please use Live Chat or WhatsApp for the fastest response. For general Privacy Policy enquiries, email is the appropriate channel, with responses within 24 hours.

Kerbau 28 aims to resolve all privacy-related requests within 30 days of receipt. For more complex cases requiring in-depth investigation, we will keep you updated on the progress of your case on a regular basis.

Current Privacy Policy Version

This Privacy Policy was last updated on 1 January 2026 and takes effect from that date. Any enquiries regarding this policy may be directed to the Kerbau 28 support team via email at support@kerbau28.wine. For more information on your rights and responsibilities, please also read Terms & Conditions us.

FAQ – Kerbau 28 Privacy Policy
Frequently asked questions about how kerbau 28 handles players' personal data

Kerbau 28 does not sell or share your personal data for marketing or commercial purposes. We only share data with third parties in three limited situations: first, with technical service providers necessary for platform operations (such as payment providers to process Touch 'n Go, DuitNow, and other transactions, or game providers); second, when required by Malaysian law or court order; and third, in cases of suspected fraud or money laundering. In all such cases, only the minimum necessary data will be shared.

You may request a copy of the personal data Kerbau 28 holds about you by contacting our support team via email at support@kerbau28.wine. Please include your account number and state that you are making a "Data Access Request". Kerbau 28 will process your request and provide the relevant data in a readable format within 30 days of receipt. No fee is charged for the first data access request made within any 12-month period.

When you close your Kerbau 28 account, your active profile data will be deactivated immediately. However, certain data may need to be retained for a specified period due to legal requirements — for example, financial transaction records may need to be kept for up to seven years to comply with Malaysian financial laws. Once the mandatory retention period ends, the relevant data will be permanently deleted or anonymised. You may contact us for more details on what specific data will be retained after your account is closed.

kerbau 28 does not store your full bank account or credit card details in our systems. All FPX transactions (Maybank2u, CIMB Clicks, and others) are processed directly through a secure, PCI-DSS-compliant payment gateway. For e-wallets such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and DuitNow, kerbau 28's system retains only your e-wallet account number or user ID to facilitate withdrawal processing — not your password or any other e-wallet security credentials.

Yes, you can opt out of marketing communications from Kerbau 28 at any time. The easiest way is to contact our support team via Live Chat or email at support@kerbau28.wine and let us know you wish to unsubscribe from marketing communications. Kerbau 28 will process your request within 24 hours. Please note that unsubscribing from marketing communications will not affect essential operational communications such as transaction notifications, account security alerts, and important platform change notices.

Play at Kerbau 28 – A Platform That Protects Your Privacy

Kerbau 28 operates with 256-bit SSL encryption, zero data selling, and a full commitment to the privacy rights of every Malaysian player. Deposit from RM20 via Touch 'n Go or DuitNow, enjoy 500+ games, and withdraw your winnings in 15 minutes.

Responsible Gambling at kerbau 28

Kerbau 28 believes betting entertainment should be enjoyed within healthy limits. We provide deposit limit, betting limit, and self-exclusion tools to help you stay in control. Your usage data may also be used to identify concerning patterns — with the aim of helping you, not monitoring you.

Learn More
Kerbau 28 Terms & Conditions

This Privacy Policy should be read alongside kerbau 28's Terms & Conditions, which govern the overall use of the platform, including deposit, withdrawal, bonus, and gameplay terms. Together, these two documents form your complete agreement with kerbau 28.

Read Terms & Conditions

Your Data is Safe. Your Game is Fun. Kerbau 28.

50,000+ Malaysian players already trust Kerbau 28 with their data and winnings. 256-bit SSL encryption, no data sales, 24/7 support in Bahasa Malaysia. Register free — takes just two minutes.

256-bit SSL No data sales Min. deposit RM20 15-Minute Withdrawal
Bahasa Melayu