Official Document — Data Protection

Privacy Policy KLWIN — Malaysia Personal Data Protection 2026

KLWIN respects the privacy of every member. This document explains in detail how we collect, store, use, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026
Bahasa Melayu (ms-MY)
Applicable in: Malaysia
PDPA 2010 Compliant
SSL
256
01

Introduction & Scope of This Privacy Policy

The foundation of klwin's commitment to member privacy

KLWIN ("we", "platform") takes the protection of every member's personal data seriously. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of information you provide to us when using the KLWIN platform — including the website, football sports betting, live casino baccarat, blackjack, slots, lottery, and all other related services.

This policy applies to all KLWIN members in Malaysia regardless of how they access the platform — whether via laptop, mobile phone, or any other device. It also covers all financial transactions conducted in Malaysian Ringgit (RM) through local payment methods such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX.

This klwin Privacy Policy is prepared in accordance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia. By registering for or using the klwin platform, you confirm that you have read, understood, and accepted this Privacy Policy.

Our Commitment: KLWIN will not sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent.
02

Types of Personal Data We Collect

Information required for the operation of the klwin platform

2.1 Information You Provide Directly

When you register a klwin account or interact with our platform, we may collect the following information:

  • Identity Information: Full name, date of birth, Malaysian identity card number (MyKad), gender
  • Contact Information: Malaysian mobile number, email address, home address
  • Financial Information: Malaysian bank account details, digital wallet numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow), transaction records in RM
  • Verification Documents (KYC): MyKad copy, selfie with MyKad, proof of current address

2.2 Automatically Collected Information

While you use the klwin platform, we automatically collect certain technical information:

Data Type Example Purpose
Device DataDevice type, operating system, browserPlatform optimisation
Network DataIP address, ISP, approximate locationSecurity & Fraud Prevention
Session DataPages visited, session duration, clicksUser experience improvement
Game DataBetting history, game types, frequencyResponsible Gaming & Analytics
Cookie DataSession cookies, preference cookies, analytics cookiesPlatform Functionality & Marketing
Security Note: klwin does not store credit card numbers or complete payment details. All financial transactions are processed by licensed and secure payment processors.
03

How We Use Your Personal Data

Purposes of data processing at KLWIN

KLWIN uses your personal data only for legitimate and necessary purposes related to platform operations. We do not process your data beyond the stated purposes without your consent. The primary purposes for data use are as follows:

3.1 Account Management & Services

  • To create and manage your klwin member account
  • Processes deposits and withdrawals in RM via Touch 'n Go, GrabPay, DuitNow, FPX, and other local payment methods
  • Providing access to all games including live baccarat, blackjack, slots, football, and lottery
  • To send important notifications regarding your account, transactions, and platform updates

3.2 Security & Legal Compliance

  • To verify member identity and prevent fraud and money laundering (AML)
  • Monitoring suspicious activity and safeguarding the integrity of the KLWIN platform
  • To comply with applicable laws, regulations, and directives from relevant authorities
  • Resolving disputes and enforcing platform agreements

3.3 Service Improvement & Marketing

  • Analysing usage patterns to improve klwin platform functionality and user experience
  • Sending relevant promotional information, bonuses, and special offers (with your consent only)
  • Conducting member satisfaction surveys to continually improve service quality
Marketing Preferences: You may withdraw your marketing consent at any time by contacting the klwin support team or through your account settings.
04

Third-Party Data Sharing

When and how your data may be shared

Klwin does not sell or rent your personal data to any third party for their own purposes. However, in certain limited circumstances, your data may be shared as follows:

4.1 Trusted Service Providers

We work with selected third-party service providers to help operate the klwin platform. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the specific purposes we have defined:

  • Payment Processors: To process MYR deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, and FPX
  • Identity Verification Providers: To process KYC verification and identity documents
  • Game Providers: To provide live baccarat, blackjack, slots, and football betting services
  • Analytics Platforms: To understand usage patterns and improve the platform (data is anonymised)

4.2 Legal Requirements

KLWIN may disclose your personal data when required by law, court order, or competent authorities in Malaysia, including for the purposes of crime prevention, fraud investigation, or compliance with financial regulations.

Regulatory Compliance: klwin may be required to report certain transactions or activities to the relevant authorities under applicable Malaysian law, including the Anti-Money Laundering Act.
05

Security Measures & Data Protection

The technologies and procedures klwin uses to protect your data

Klwin invests seriously in security infrastructure to ensure every member's personal data is protected at all times. We employ multiple layers of technical and operational security:

5.1 Technical Security

  • 256-bit SSL Encryption: All communications between your browser and KLWIN's servers are fully encrypted
  • Hashed Password Storage: Your password is never stored in plain text — it is processed using the latest hashing algorithms
  • Two-Factor Authentication (2FA): Available as an additional security layer for your account
  • 24/7 Monitoring: Active intrusion detection systems operate around the clock
  • Multi-Layer Firewall: KLWIN's server infrastructure is protected by multi-layered firewalls

5.2 Operational Security

  • Only authorised staff have restricted access to member personal data
  • All klwin staff undergo regular data protection training
  • Independent security audits are conducted regularly by qualified third parties
  • A comprehensive data incident response procedure is in place and ready to be activated when needed
Shared Responsibility: While klwin takes all reasonable precautions, you are also responsible for maintaining the security of your account — including using a strong password and not sharing your login credentials with anyone.
06

Cookies & Tracking Technologies

How klwin uses cookies to enhance your experience

KLWIN uses cookies and similar tracking technologies to keep the platform running smoothly, remember your preferences, and deliver a better experience. You can manage your cookie preferences through your browser settings.

Cookie Settings — Your Choice
07

Your Rights as a KLWIN User

Rights guaranteed under Malaysia's PDPA

As a klwin member and a Malaysian citizen protected under the Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data. klwin is committed to facilitating the exercise of these rights within a reasonable timeframe.

1
Right of Access

You have the right to request a copy of the personal data we hold about you. Requests are processed within 14 business days.

2
Right to Rectification

If your personal data is inaccurate or outdated, you have the right to request that we correct or update it.

3
Right to Erasure

You may request the deletion of your personal data, subject to applicable legal requirements and contractual obligations.

4
Right to Restrict Processing

You may object to the processing of your data for direct marketing purposes at any time, without providing a reason.

5
Data Portability Rights

You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform.

6
Right to Withdraw Consent

You may withdraw any consent previously given at any time. Withdrawal does not affect the validity of any processing carried out prior to that withdrawal.

How to Exercise Your Rights: Contact klwin's Data Protection Officer by email at privacy@klwin.im by including a copy of your MyKad for identity verification.
08

Child Data Protection

Klwin's Commitment to Minor Protection

The KLWIN platform is intended for individuals aged 18 years and above only. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

Should klwin discover that a child's personal data has been collected without our knowledge, we will immediately take the following steps: suspend the account in question, delete all related data within 30 days, and conduct an internal investigation to determine how the situation occurred.

To Parents & Guardians: If you have reason to believe that your child under 18 has registered or used klwin, please contact us immediately at support@klwin.im.
09

International Data Transfers

How your data is handled across borders

In operating the klwin platform, your personal data may be transferred to and stored on servers located outside Malaysia. When this occurs, klwin ensures that such transfers are carried out with adequate safeguards in accordance with Malaysia's PDPA.

All international data transfers by KLWIN are governed by data transfer agreements that comply with recognised data protection standards. Our third-party service providers who receive data from Malaysia are required to meet security standards equivalent to or higher than those practised in Malaysia.

10

Data Retention Period

How long klwin retains your data

Klwin retains your personal data only for as long as necessary for the stated purposes or as required by applicable Malaysian law. Our data retention guidelines are as follows:

Data TypeRetention PeriodReason
Active Account DataThroughout the active account periodService operations
MYR Transaction Records7 years after transactionLegal requirements & audit
KYC Documents5 years after account closureAML/KYC Compliance
Communication Logs2 yearsDispute Resolution
Game Data3 yearsResponsible Gaming & Analytics
Marketing DataUntil consent is withdrawnMarketing communications
11

Amendments to This Privacy Policy

How and when the klwin Privacy Policy may change

KLWIN reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, legal developments, or platform operations. Any amendments will be posted on this page with a new "last updated" date.

For material amendments that significantly affect your privacy rights, KLWIN will provide at least 14 days' notice before the changes take effect, via your registered email or an in-platform notification. Continued use of the platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

12

Contact klwin's Data Protection Officer

How to contact us regarding privacy matters

If you have any questions, concerns, or complaints regarding this Privacy Policy or how klwin handles your personal data, please contact our Data Protection Officer through the following channels:

Privacy Email
privacy@klwin.im
Response within 2 business days
24/7 Live Chat
Live Support
Response within 5 minutes
FAQ
Visit the FAQ page
Instant answers available

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia Personal Data Protection Department or the relevant regulatory authority.

KLWIN Privacy Guarantee

6 Reasons Why Your Data Is Safe with klwin

More than just promises — these are the real systems and procedures we put into practice every day.

Malaysia PDPA Compliant

The klwin Privacy Policy is designed and updated in full compliance with Malaysia's Personal Data Protection Act 2010. Your rights as a Malaysian user are respected and upheld.

256-bit SSL Encryption

All data travelling between your device and KLWIN's servers is protected by 256-bit SSL encryption — the same security standard used by the world's leading financial institutions.

No Data Selling

Klwin has never and will never sell, rent, or trade your personal data to any third party for commercial gain. Your data is not our product.

Strict Access Controls

Access to member personal data is restricted to authorised klwin staff on a need-to-know basis. All access is logged and periodically audited.

User Rights Respected

All privacy rights requests — access, correction, deletion, or objection — are processed within the stipulated timeframe at no additional charge to klwin members.

Regular Independent Audits

KLWIN's privacy and security practices are independently audited by qualified third parties. Audit findings are used for the continuous improvement of our data protection systems.

🔒
KLWIN Data Security Layers
256-bit SSL
100%
KYC Verification
100%
Access Controls
98%
24/7 Monitoring
100%
Independent Audit
96%
PDPA Compliant
100%
Privacy FAQ

What Members Ask Most About klwin Privacy

No. klwin does not store your full bank account details, card numbers, or sensitive digital wallet information (Touch 'n Go, GrabPay, DuitNow, etc.). All payment processing is handled by licensed and secure payment processors. klwin retains only transaction records (RM amount, date, payment method type) for audit and dispute resolution purposes.
Yes, you have the right to request deletion of your personal data. However, certain data may need to be retained for a specified period in accordance with Malaysian legal requirements (such as transaction records for 7 years for financial purposes). Submit your request to privacy@klwin.im along with your MyKad identity verification.
KLWIN only discloses data to authorities when lawfully required under Malaysian law, such as by court order or official investigation. We do not voluntarily share user data with any government agency without a valid legal mandate.
For more frequently asked questions, visit the klwin FAQ page us.

Your Data is Protected — Play with Confidence at KLWIN!

Klwin places your privacy and data security as our top priority. Trusted by over 500,000 members, enjoy live baccarat, Malaysia Super League football, slots, blackjack, and more — with complete peace of mind that your data is always protected.

PDPA Compliant
256-bit SSL
No Data Selling
Bahasa Melayu