Privacy Policy – klwin.one

1. Introduction

This Privacy Policy ("Policy") is issued by klwin ("klwin", "we", "us", "our") and governs the collection, use, storage, disclosure, and protection of personal data obtained from individuals ("you", "Player", "User") who access or use the website located at klwin.one and any associated services, applications, or content (collectively, the "Service").

klwin is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection standards. By accessing or using the klwin Service, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy should be read together with our Terms & Conditions.

If you do not agree with the practices described in this Policy, please discontinue your use of the klwin platform and do not submit personal data to us. For players across Kuala Lumpur, Penang, Johor Bahru, and other regions of Malaysia, this Policy constitutes the primary notice of how klwin processes your information.

2. Data We Collect

2.1 Registration Data

When you create a klwin account, we collect the following information: full legal name, date of birth (to verify 21+ eligibility), email address, contact telephone number, and residential address. This information is required to establish your account and is verified against identity documents submitted during the KYC process.

2.2 Identity Verification Documents

As part of mandatory KYC compliance, klwin collects copies of government-issued identity documents, which may include: Malaysian IC (MyKad), passport, or other nationally recognised identification. For enhanced verification, klwin may additionally request proof of address (such as a utility bill or bank statement dated within 3 months) and source-of-funds documentation.

2.3 Financial Data

klwin collects transactional data associated with your account, including deposit amounts, withdrawal requests, payment method identifiers (such as e-wallet account references or masked bank account numbers), and transaction timestamps. klwin does not store full bank account numbers, card numbers, or full e-wallet credentials on its own servers.

2.4 Usage and Behavioural Data

klwin automatically collects data about how you interact with the Service, including: pages visited, games played, bet history, session duration, login timestamps, device type and operating system, browser type and version, IP address, and approximate geolocation derived from IP data.

2.5 Communications Data

If you contact klwin support via live chat, email, or any other channel, klwin retains records of those communications including the content of messages, the subject matter, and the outcome of any support ticket or complaint resolution process.

2.6 Marketing Preferences

Where you have opted in to receive marketing communications from klwin, we retain your marketing preference settings and records of any promotional emails or notifications sent to you.

3. How We Use Your Data

klwin processes personal data for the following purposes:

• Account Creation and Management — To establish, maintain, and manage your klwin account, including processing deposits and withdrawals in MYR.
• Identity and Age Verification — To fulfil KYC obligations and enforce the 21+ age restriction across all klwin services.
• Transaction Processing — To process deposits via Touch 'n Go eWallet, Boost, DuitNow, FPX, and other supported payment methods, and to process withdrawal requests to your verified payment accounts.
• Fraud Prevention and AML — To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Customer Support — To respond to your enquiries, resolve disputes, and provide 24/7 assistance through klwin's English-language support channels.
• Platform Improvement — To analyse usage patterns, identify technical issues, and improve the klwin user experience across desktop and mobile platforms.
• Legal Compliance — To fulfil obligations under applicable laws and regulatory requirements, including data retention mandates and reporting obligations.
• Marketing Communications — Where you have provided explicit consent, to send promotional offers, bonus notifications, and platform updates via email or SMS. You may withdraw consent at any time via your account settings or by contacting [email protected].

4. Legal Basis for Processing

klwin processes personal data on the following legal grounds:

• Contractual Necessity — Processing required to fulfil our obligations under the klwin Terms & Conditions, including account management, payment processing, and service delivery.
• Legal Obligation — Processing required to comply with applicable laws, including KYC/AML obligations and data retention requirements.
• Legitimate Interests — Processing conducted in pursuit of klwin's legitimate business interests, including fraud prevention, platform security, and service quality improvement, where such interests are not overridden by your fundamental rights.
• Consent — Processing based on your explicit consent, specifically for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing

5.1 Service Providers

klwin shares personal data with carefully selected third-party service providers who assist in operating the klwin platform. These include: payment processing providers (for deposit and withdrawal facilitation), KYC and identity verification services, fraud detection and AML screening services, customer support platform providers, and cloud infrastructure and hosting providers. All such providers are engaged under contractual obligations that include data protection and confidentiality requirements.

5.2 Game Software Providers

klwin's game library is powered by licensed third-party software providers including but not limited to Evolution Gaming, Pragmatic Play, and NetEnt. Limited transactional data (such as session tokens and game-round identifiers) may be shared with these providers to deliver the gaming experience. No personally identifiable information beyond what is technically required is shared.

5.3 Legal and Regulatory Disclosure

klwin may disclose personal data to law enforcement authorities, regulatory bodies, or other third parties where required by law, court order, or legitimate legal process. klwin will notify affected players of such disclosures to the extent permitted by applicable law.

5.4 No Commercial Data Sales

klwin does not sell, rent, trade, or otherwise transfer personal data to any third party for commercial or marketing purposes. This commitment is unconditional and applies regardless of any business structure changes.

6. Data Retention

klwin retains personal data for as long as necessary to fulfil the purposes outlined in this Policy and to comply with applicable legal and regulatory retention obligations. Specific retention periods include:

• Account and identity data — Retained for the duration of your active klwin account plus a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory requirements.
• Transaction records — Retained for a minimum of seven (7) years from the date of each transaction.
• Support communications — Retained for a minimum of three (3) years from the date of the communication.
• Marketing data — Retained until consent is withdrawn or for a maximum of two (2) years from your last interaction with klwin marketing communications, whichever is earlier.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

7. Cookies & Tracking Technologies

7.1 Types of Cookies Used

klwin uses the following categories of cookies on klwin.one:

• Strictly Necessary Cookies — Required for the klwin platform to function. These include session authentication cookies, CSRF protection tokens, and load balancing cookies. These cannot be disabled without preventing the Service from operating.
• Analytical Cookies — Used to understand how players navigate the klwin platform, which pages are visited most frequently, and where technical errors occur. This data is used in aggregate form to improve the Service.
• Preference Cookies — Used to remember your platform settings such as language preferences and interface configurations.

7.2 No Third-Party Advertising Cookies

klwin does not deploy third-party advertising or tracking cookies. Your browsing activity on klwin.one is not shared with advertising networks or data brokers.

7.3 Managing Cookies

You may control cookie behaviour through your browser settings. Disabling strictly necessary cookies will impair or prevent your ability to use the klwin Service. Disabling analytical and preference cookies will not affect core functionality but may result in a less personalised experience.

8. Data Security

klwin implements a multi-layered security framework to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• TLS 1.3 encryption for all data transmitted between your device and klwin's servers
• Bcrypt hashing for all stored account passwords — plain-text passwords are never stored
• Access controls limiting internal data access to personnel with a legitimate operational need
• Regular security audits and penetration testing of the klwin platform infrastructure
• Intrusion detection systems monitoring for anomalous access patterns
• Secure, encrypted storage for KYC identity documents with restricted access permissions

While klwin employs robust security measures, no internet transmission or electronic storage system is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, klwin will notify affected players without undue delay in accordance with applicable breach notification requirements.

9. International Data Transfers

klwin may process or store personal data on servers located outside of Malaysia, including in jurisdictions where data protection laws may differ from those applicable in Malaysia. Where personal data is transferred internationally, klwin ensures that appropriate safeguards are in place, including contractual data protection obligations with receiving parties that meet the standard required under applicable data protection frameworks.

By using the klwin Service, you acknowledge that your data may be transferred to and processed in jurisdictions outside your country of residence as described in this section.

10. Your Data Rights

Subject to applicable law and certain legal exceptions, klwin players have the following rights with respect to their personal data:

• Right of Access — Request a copy of the personal data klwin holds about you.
• Right of Rectification — Request correction of inaccurate or incomplete personal data.
• Right of Erasure — Request deletion of your personal data, subject to klwin's legal retention obligations. Note that data subject to regulatory retention requirements (such as KYC records) cannot be deleted within mandated retention periods.
• Right to Restrict Processing — Request that klwin temporarily restrict the processing of your data in certain circumstances.
• Right to Data Portability — Request a machine-readable copy of personal data you have provided to klwin.
• Right to Withdraw Consent — Withdraw consent for marketing communications at any time via your account settings or by emailing [email protected].
• Right to Object — Object to processing of your personal data based on legitimate interests.

To exercise any of these rights, please contact klwin at [email protected] with your registered email address and a clear description of your request. klwin will respond within thirty (30) days. Identity verification may be required before processing data rights requests.

11. Children's Privacy

The klwin Service is strictly not intended for individuals under the age of 21. klwin does not knowingly collect, process, or retain personal data from individuals under 21 years of age. If klwin becomes aware that personal data has been collected from an individual under 21, that data will be deleted immediately and the associated account suspended. If you believe a minor may have registered a klwin account, please contact [email protected] immediately.

12. Third-Party Links

The klwin platform may contain references to third-party service providers in the context of payment methods (such as Touch 'n Go eWallet, Boost, or Maybank). klwin is not responsible for the privacy practices of any third-party services. When you interact with a third-party payment provider, their own privacy policy governs the handling of data collected by that provider. klwin recommends reviewing the privacy policies of all third-party services you use in connection with your klwin account.

13. Changes to This Policy

klwin reserves the right to update or amend this Privacy Policy at any time. When material changes are made, klwin will notify registered players via email to the address associated with their klwin account at least fourteen (14) days prior to the changes taking effect. The updated Policy will be published on klwin.one with a revised "Last Updated" date. Your continued use of the Service following the effective date of any amendments constitutes your acceptance of the revised Policy.

14. Contact & Complaints

For all privacy-related enquiries, data rights requests, or complaints regarding klwin's data handling practices, please contact the klwin data protection team:

If you are dissatisfied with klwin's response to a privacy complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction. klwin cooperates fully with regulatory investigations conducted by competent authorities.