klwin19 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is published by klwin19 ("klwin19", "we", "us", "our"), the operator of the online gaming platform at klwin19.org ("Platform"). This Policy applies to all personal data collected from individuals who visit, register on, or otherwise interact with the klwin19 Platform, including players based in Malaysia and any other jurisdiction from which the Platform is accessed.

klwin19 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection legislation. This Policy explains what data we collect, why we collect it, how we use and protect it, and what rights you have in relation to it. By using the klwin19 Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the klwin19 Terms & Conditions, which govern the broader relationship between klwin19 and registered players. In the event of any conflict between this Policy and the Terms & Conditions on a data protection matter, this Policy shall prevail.

2. Data Controller

For the purposes of applicable data protection law, klwin19 acts as the data controller in respect of personal data collected through the Platform. As data controller, klwin19 determines the purposes and means of processing your personal data. Contact details for data-related enquiries are set out in Section 15 of this Policy.

3. Data We Collect

klwin19 collects the following categories of personal data from players and Platform visitors:

Category	Examples	When Collected
Identity Data	Full name, date of birth, MyKad number, passport number, nationality	Registration; KYC verification
Contact Data	Email address, Malaysian mobile number, residential address	Registration; account updates
Financial Data	Bank account details, e-wallet identifiers (Touch n Go, Boost, GrabPay), transaction history	Deposit; withdrawal; KYC
Gaming Data	Bet history, game sessions, winnings, losses, bonus usage, VIP tier	Ongoing platform use
Technical Data	IP address, device type, browser type, operating system, session timestamps	Every Platform visit
KYC Documents	Scanned or photographed MyKad, passport, proof of address	KYC verification process
Communications Data	Live chat transcripts, email correspondence, support tickets	When you contact support
Marketing Preferences	Promotional opt-in/opt-out status, communication channel preferences	Registration; account settings

klwin19 does not intentionally collect special category data (such as health data, racial or ethnic origin, or political opinions) unless such data is voluntarily provided in the context of a responsible gaming assessment or a support interaction where it is directly relevant.

4. How We Collect Data

4.1 Directly from You

The majority of personal data klwin19 holds is provided directly by you — through the registration form, KYC submission process, deposit and withdrawal requests, live chat and email support, promotional opt-ins, and account settings updates. You are not required to provide all requested information, but failure to provide mandatory fields (such as identity and contact data) will prevent account registration or KYC completion.

4.2 Automatically

When you visit or use the klwin19 Platform, certain technical data is collected automatically through cookies, server logs, and similar technologies. This includes your IP address, device identifiers, browser configuration, pages visited, session duration, and referral source. See Section 10 for full details of our cookie use.

4.3 From Third Parties

klwin19 may receive data from third parties in limited circumstances, including: identity verification service providers used during KYC processing; payment processors who confirm transaction statuses; fraud detection and anti-money laundering screening services; and, where required by law, regulatory or law enforcement authorities.

5. Legal Bases for Processing

klwin19 processes personal data on the following legal bases:

• Contract performance: Processing necessary to register your account, accept and settle wagers, process deposits and withdrawals, and provide the services you have requested.
• Legal obligation: Processing required to comply with anti-money laundering ("AML") laws, gaming licensing conditions, KYC requirements, tax obligations, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, service improvement, and analytical purposes — where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where you have provided express opt-in consent. You may withdraw consent at any time by updating your account marketing preferences or contacting support.

6. How We Use Your Data

klwin19 uses personal data for the following purposes:

• Registering and managing your klwin19 account
• Processing deposits, withdrawals, and bet settlements in MYR
• Verifying your identity and age (21+ requirement) through KYC processes
• Detecting, investigating, and preventing fraud, money laundering, and cheating
• Monitoring gaming activity for responsible gaming purposes and identifying problem gambling indicators
• Administering VIP loyalty programmes and promotional offers
• Providing customer support via live chat and email
• Sending service communications (account alerts, security notifications, transaction confirmations)
• Sending promotional communications where you have opted in
• Conducting analytics to improve Platform performance and user experience
• Complying with legal and regulatory obligations under applicable gaming and financial laws

klwin19 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects, except where required by AML screening obligations — in which case you have the right to request human review of any automated determination.

7. Data Sharing and Disclosure

klwin19 does not sell, rent, or trade your personal data to third-party marketers or data brokers. Personal data is shared only in the following circumstances:

7.1 Service Providers

klwin19 engages third-party service providers to support Platform operations. These include payment processors (for deposit and withdrawal handling), identity verification providers (for KYC), fraud and AML screening services, cloud infrastructure providers, and customer support tooling. All service providers are required to process data only on klwin19's instructions and to maintain appropriate security standards.

7.2 Regulatory and Legal Disclosure

klwin19 may disclose personal data to gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies where required by applicable law, court order, or regulatory obligation. Such disclosures will be limited to the minimum data necessary to satisfy the legal requirement.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of the klwin19 business or Platform, personal data held by klwin19 may form part of the transferred assets. Players will be notified of any such transfer and the applicable privacy arrangements before any change takes effect.

8. International Data Transfers

klwin19 may transfer personal data to, or process it in, countries outside your country of residence, including countries that may not provide the same level of data protection as Malaysian law. Where such transfers occur, klwin19 ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent mechanisms — to protect your data in transit and in the recipient jurisdiction.

9. Data Retention

klwin19 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention requirements:

• Account and identity data: Retained for the duration of the account and for a minimum of five (5) years following account closure, to comply with AML and gaming licence record-keeping obligations.
• Transaction and gaming records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial and gaming regulations.
• KYC documents: Retained for a minimum of five (5) years following account closure. Physical documents are not retained — digital copies are stored in encrypted form.
• Support communications: Retained for three (3) years from the date of the last interaction, unless the communication is relevant to an ongoing legal or compliance matter.
• Technical and log data: Retained for up to twelve (12) months from collection, subject to security and fraud investigation requirements.

After applicable retention periods expire, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

10. Cookies and Tracking Technologies

The klwin19 Platform uses cookies and similar tracking technologies to operate and improve the Platform. Cookies used by klwin19 fall into the following categories:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as language settings, previously used deposit methods, and display options. Disabling these may affect your experience but will not prevent access to the Platform.
• Analytics cookies: Used by klwin19's internal analytics tooling to understand aggregate usage patterns — pages visited, session lengths, error rates. Data is anonymised before analysis. klwin19 does not use third-party advertising cookies.

You can manage cookie preferences through your browser settings. Note that blocking strictly necessary cookies will prevent login and full Platform access.

11. Security Measures

klwin19 implements technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, access controls restricting data access to authorised personnel on a need-to-know basis, two-factor authentication for internal system access, regular security assessments and penetration testing, and incident response procedures for data breach scenarios.

Despite these measures, no system is completely immune to security incidents. In the event of a data breach affecting your rights and freedoms, klwin19 will notify affected individuals and relevant supervisory authorities within the timeframes required by applicable law.

12. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by klwin19:

• Right of access: Request a copy of the personal data klwin19 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction: Request that processing of your personal data be restricted in certain circumstances.
• Right to data portability: Request a structured, machine-readable copy of data you have provided to klwin19 where processing is based on contract or consent.
• Right to object: Object to processing of your data where klwin19 relies on legitimate interests as the legal basis, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact klwin19 at [email protected]. klwin19 will respond to verified requests within thirty (30) days. Identity verification will be required before requests can be actioned to protect against unauthorised access to personal data.

13. Children and Minors

The klwin19 Platform is strictly restricted to individuals aged 21 years and above. klwin19 does not knowingly collect personal data from persons under the age of 21. If klwin19 becomes aware that personal data has been collected from an underage individual, that data will be deleted immediately and the associated account closed. Parents or guardians who believe a minor has registered on the Platform should contact klwin19 support immediately.

14. Changes to This Policy

klwin19 may update this Privacy Policy from time to time to reflect changes in its data processing activities, applicable law, or regulatory requirements. Material changes will be communicated to registered users via email to the address on file or via a prominent notice on the Platform prior to the change taking effect. The effective date at the top of this Policy will be updated accordingly. Continued use of the Platform following publication of an updated Policy constitutes acknowledgement of the changes.

15. Contact and Complaints

For any queries, concerns, or requests relating to this Privacy Policy or klwin19's data processing activities, please contact the klwin19 Data Protection team:

Email: [email protected]
Subject line: Privacy / Data Request
Response target: Within 30 days of receipt of a verified request

klwin19 encourages players to contact us directly in the first instance to resolve any data-related concern. If you remain dissatisfied after engaging with klwin19 support, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.