Official Data Protection Document

Privacy Policy klwin39 – Malaysia Player Data Protection

At klwin39, your privacy is more than a legal obligation — it is our genuine commitment. This page transparently explains how we collect, use, store, and protect your personal information.

Last Updated: 1 January 2026
How klwin39 Protecting Your Privacy

Six core pillars of data protection ensuring your information stays safe with us.

256-bit SSL Encryption

All data transmitted between your device and klwin39's servers is protected with 256-bit SSL encryption — the same standard used by leading Malaysian banking institutions. None of your data travels in an unsecured state within our systems.

Secure Data Storage

Your personal and financial information is stored on servers protected by strict access controls. Passwords are stored in hashed form and cannot be read by anyone — including klwin39's own internal staff.

Not Sold to Third Parties

Klwin39 has never and will never sell, rent, or trade your personal data to any third party for marketing purposes. Your data belongs to you — we only use it to operate your account and improve your experience on the platform.

KYC for Your Protection

The identity verification (KYC) process we carry out is not only required for regulatory compliance — it is an important layer of protection that ensures no one can use your identity to open an account or make withdrawals from your account.

Control in Your Hands

You have the right to access, correct, and in certain circumstances request the deletion of your personal data. We make this easy through our 24/7 customer support team, always ready to help you manage your data.

Malaysia Legal Compliance

The klwin39 Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards. We ensure every aspect of our data handling aligns with applicable legal requirements.

1

Personal Data We Collect

Klwin39 collects your personal information only when it is necessary to provide services, comply with legal obligations, or improve your experience on the platform. We do not collect unnecessary or excessive data.

1.1 Information You Provide Directly

  • Full name as stated on your identity document (MyKad)
  • Identity card number (MyKad) or passport number
  • Email address and mobile phone number
  • Date of birth for age verification
  • Residential address
  • Bank account or e-wallet information for transaction purposes
  • KYC supporting documents such as a selfie with your identity document

1.2 Information Collected Automatically

  • IP address and device information (type, operating system, web browser)
  • Login session data including timestamps and approximate location
  • Gaming activity and transaction history within the platform
  • Website usage data via cookies and similar tracking technologies
Data Type Primary Purpose Retention Period
Identity (name, IC) KYC, fraud prevention Duration of active account + 7 years
Contact information Communications, support Duration of active account
Financial data Transaction processing 7 years (tax requirements)
Login data Account security 90 rolling days
Gaming history Services, audit 5 years
2

How We Use Your Data

The data we collect is used for specific, legitimate purposes only. We will not use your data for any purpose not stated in this policy without obtaining your prior consent.

2.1 Account Management and Services

The primary purpose of data collection is to operate your klwin39 account — from processing registration and identity verification to handling deposits and withdrawals and providing effective customer support. Without this essential data, we are unable to provide services to you.

2.2 Security and Fraud Prevention

Your account activity data is continuously analyzed to detect and prevent suspicious activity, hacking attempts, or fraud. This includes monitoring login patterns, transaction activity, and unusual gameplay behavior — all done solely to protect your interests.

2.3 Communications and Notifications

We use your email address and phone number to send important account-related notifications — such as transaction confirmations, security alerts, and important updates about our services. You may opt out of marketing communications at any time.

2.4 Service Improvement

Aggregated usage data (without individual identification) is used to understand how players interact with the klwin39 platform, enabling us to make meaningful improvements over time.

3

Data Security & Encryption

Klwin39 implements multiple layers of technical and organizational security to ensure your data is always protected against unauthorized access, disclosure, alteration, or deletion.

3.1 Encryption in Transit

All communications between your browser or app and klwin39's servers are protected by the latest TLS (Transport Layer Security) protocol with 256-bit encryption. This ensures that data in transit — including login credentials, payment details, and personal data — cannot be intercepted by unauthorized parties.

3.2 Encryption at Rest

Sensitive data stored in our databases — including financial information and identity documents — is encrypted using AES-256 encryption. Account passwords are stored as hashed values (bcrypt) that cannot be decrypted by anyone.

3.3 Internal Access Controls

Access to user data within klwin39 is strictly limited on a need-to-know basis. All access is logged in an audit trail for regular security reviews.

Klwin39 conducts regular security assessments and penetration testing by independent third parties to ensure our security infrastructure remains robust and up to date against the latest cyber threats.

4

Data Sharing with Third Parties

Klwin39 does not sell or trade your personal data. However, under certain limited and legitimate circumstances, we may share data with specific third parties as described below.

4.1 Service Providers

We share necessary data with service providers who help us operate the platform — including payment processing providers, identity verification service providers, and cloud infrastructure providers. All these providers are bound by strict confidentiality and data protection agreements.

4.2 Legal Requirements

Klwin39 will disclose personal information to relevant authorities when required by law, court order, or in cooperation with a legitimate official investigation. In all such cases, we will disclose only the minimum information necessary.

4.3 Anti-Money Laundering (AML) Compliance

As part of our AML compliance program, klwin39 may be required to report suspicious transactions to Malaysia's financial authorities. This is a legal obligation that cannot be exempted.

Klwin39 has never and will never sell your personal data to advertisers, marketing companies, or any third party wishing to use it for direct marketing purposes without your explicit consent.

5

Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding your personal data held by klwin39. We fully respect and facilitate the exercise of these rights.

👁️
Right of Access

Request a copy of the personal data we hold about you in a readable format.

✏️
Right to Rectification

Request that we correct any inaccurate or incomplete information in your records.

🚫
Right to Object

Object to the processing of your data for direct marketing purposes at any time, without providing a reason.

🗑️
Right to Erasure

Request deletion of your data under certain circumstances, subject to legal retention obligations.

⏸️
Right to Restriction

Request that we temporarily restrict the processing of your data under certain permitted circumstances.

📦
Right to Portability

Request your data in a structured format that can be transferred to another platform should you wish to do so.

To exercise any of the above rights, contact our data protection team via klwin39 customer support. We will process your request within 30 days from the date the application is received. We may require identity verification before processing your request to ensure the security of your data.

6

Use of Cookies and Similar Technologies

Klwin39 uses cookies and similar tracking technologies to ensure the platform functions properly and to enhance the user experience. Below is an explanation of the types of cookies we use.

6.1 Essential Cookies

These cookies are required for the platform to function properly. They store your login session information, language preferences, and security settings. Without these cookies, some functions of the klwin39 platform will not work correctly. Essential cookies cannot be disabled.

6.2 Analytics Cookies

We use analytics cookies to understand how users interact with the platform — which pages are visited most frequently, how long users spend on certain pages, and common navigation paths. This data is used in aggregate and non-identifiable form solely for platform improvement purposes.

6.3 Managing Cookie Settings

You can manage or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the klwin39 platform.

7

Children's Data Protection

Klwin39 is not designed for individuals under 18 years of age, and we do not intentionally collect personal data from minors. Our platform performs age verification through the KYC process to ensure all members are qualified adults.

Should we discover that we have inadvertently collected personal data of someone under the age of 18, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who become aware of such a situation are urged to contact us immediately.

8

Amendments to This Privacy Policy

Klwin39 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or improvements to the services we offer. All amendments take effect as soon as they are published on this page.

For significant changes, we will notify you at the registered email address at least 14 days before the changes take effect. The last updated date is always displayed at the top of this page for your reference.

We encourage you to review this Privacy Policy periodically. Your continued use of the klwin39 platform following any amendments constitutes your acceptance of the updated terms.

9

Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact the klwin39 Data Protection Officer (DPO) through any of the following methods:

We are committed to responding to all privacy-related inquiries within 5 business days. For more comprehensive data access requests, the processing period is up to 30 days in accordance with applicable legal provisions.

More information on how we ensure a safe and responsible gaming experience is also available on the Responsible Gaming and Terms and Conditions us.

Page Related

Also read our other important policies and guidelines for a more complete understanding of the klwin39 platform.

🔐
Your Data Secure With klwin39

Join over 500,000 Malaysian players who trust klwin39 for a safe, fair, and enjoyable gaming experience — with your privacy fully protected.

Bahasa Melayu