Privacy Policy

1Data Controller

1.1 The data controller responsible for personal data collected through the klwin32 Platform is the operator of klwin32, a company holding a valid gaming licence issued by an international gaming authority ("the Operator").

1.2 References to "klwin32", "we", "us", and "our" in this Privacy Policy refer to the Operator. References to "you", "your", and "Member" refer to any individual who has registered an Account or otherwise provided personal data to klwin32.

1.3 For all data protection enquiries, including data subject access requests, correction requests, and complaints, please contact us at the details provided in Section 14 of this Policy.

2Personal Data We Collect

2.1 klwin32 collects personal data in the categories described below. The specific data collected depends on how you interact with the Platform and what stage of account registration or verification you are at.

2.2 klwin32 does not collect special category data (such as health data, racial or ethnic origin, or political opinions) as part of normal platform operation, except where a Member voluntarily discloses such information in the context of a responsible gaming assessment or self-exclusion request.

3How We Collect Your Data

3.1 Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, set responsible gaming preferences, or respond to a survey or promotion.

3.2 Automatically — when you access the Platform, we collect technical data through server logs, session cookies, and analytics tools. This includes your IP address, device identifiers, pages visited, and interaction events within the Platform.

3.3 From payment processors — when you deposit or withdraw using Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, or other supported methods, we receive transaction confirmation data from the relevant payment processor sufficient to verify and record the transaction.

3.4 From identity verification services — klwin32 may use licensed third-party KYC verification services to cross-reference identity documents submitted by Members. These services return a verification outcome (pass/fail/refer) and do not provide raw identity data back to klwin32 beyond what was submitted.

4Lawful Basis for Processing

4.1 klwin32 processes personal data on the following lawful bases:

• Contract performance — processing necessary to create and manage your Account, process deposits and withdrawals, and provide gaming services as agreed in the Terms & Conditions.
• Legal obligation — processing required to comply with our international gaming authority licence conditions, Anti-Money Laundering (AML) obligations, and other applicable regulatory requirements including identity verification and transaction monitoring.
• Legitimate interests — processing for fraud prevention, platform security, abuse detection, internal analytics, and improving the Platform, where these interests are not overridden by your data protection rights.
• Consent — processing for direct marketing communications, where you have opted in to receive such communications. You may withdraw consent at any time through your account settings.

5How We Use Your Personal Data

5.1 klwin32 uses personal data for the following purposes:

• Registering and maintaining your Account, including identity and age verification.
• Processing deposits, withdrawals, and in-game transactions in MYR.
• Providing customer support, responding to complaints, and resolving disputes.
• Complying with our AML monitoring obligations, including transaction screening and suspicious activity reporting.
• Enforcing our Terms & Conditions, including investigation of prohibited conduct and account fraud.
• Administering bonuses, promotions, and the VIP programme.
• Implementing and monitoring responsible gaming measures, including deposit limits, loss limits, and self-exclusion.
• Sending transactional communications (account confirmations, withdrawal receipts, security alerts).
• Sending promotional communications where you have opted in (new promotions, events, offers relevant to the Malaysian market).
• Conducting internal analytics to improve Platform performance, game selection, and user experience.
• Meeting reporting obligations to the Gaming Authority as required by our licence.

6Data Sharing & Disclosure

6.1 klwin32 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

6.2 We may share personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors — to process your deposits and withdrawals via Touch 'n Go, Boost, GrabPay, Maybank, CIMB, and other supported methods.
• KYC / identity verification providers — to verify your identity and age as required by our licence.
• Game providers — game studios integrated into the klwin32 Platform receive a pseudonymous player identifier and game outcome data necessary to operate the game and settle results. No full personal identity data is shared with game providers.
• Fraud prevention and AML service providers — to screen transactions and player profiles against watchlists as required by our regulatory obligations.
• The Gaming Authority — klwin32 is required to provide player data and transaction reports to our licensing authority upon request or as part of routine regulatory compliance reporting.
• Law enforcement and regulatory bodies — where we are legally obliged to disclose data in response to a valid legal order, court process, or regulatory investigation.
• Successor entities — in the event of a merger, acquisition, or business sale, Member data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

6.3 All third-party service providers engaged by klwin32 are required to process personal data only on our documented instructions and to maintain appropriate technical and organisational security measures.

7Cookies & Tracking Technologies

7.1 klwin32 uses cookies and similar technologies to operate the Platform, maintain your session, and gather analytics data. Cookies are small text files stored on your device by your browser.

Types of Cookies Used

• Strictly necessary cookies — required for the Platform to function, including session management, authentication tokens, and security checks. These cannot be disabled without breaking core functionality.
• Performance / analytics cookies — used to understand how Members interact with the Platform, which pages are visited most, and where errors occur. Data collected is aggregated and anonymised where possible.
• Functional cookies — used to remember your preferences, such as language settings and responsible gaming configuration, so you do not need to re-enter them on each visit.
• Marketing cookies — used only where you have consented, to deliver relevant promotional content. You may opt out of marketing cookies through your browser settings or account preferences.

7.2 You can control cookies through your browser settings. Blocking strictly necessary cookies may impair your ability to use the klwin32 Platform.

8Data Retention

8.1 klwin32 retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and contractual obligations.

8.2 Account data (identity, contact, financial, and gaming records) is retained for a minimum of five (5) years following account closure, as required by our AML obligations and international gaming authority licence conditions.

8.3 Customer support communications are retained for a minimum of two (2) years from the date of the interaction.

8.4 Technical log data (IP logs, session records) is retained for a minimum of twelve (12) months for security and fraud investigation purposes, after which it is deleted or anonymised.

8.5 Where you have withdrawn consent to marketing communications, we retain a record of your opt-out status to ensure we honour that preference going forward.

9Data Security

9.1 klwin32 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS encryption for all data transmitted between your device and klwin32 servers.
• Encryption of sensitive fields (passwords, payment identifiers) at rest using industry-standard algorithms.
• Role-based access controls limiting internal access to personal data to staff members who require it for their job function.
• Regular security assessments and vulnerability testing of the Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems holding Member data.
• Incident response procedures for detecting, assessing, and responding to data breaches.

9.2 In the event of a data breach that is likely to result in a risk to the rights and freedoms of Members, klwin32 will notify affected Members without undue delay and will report the breach to the Gaming Authority in accordance with our licence obligations.

9.3 No security system is impenetrable. While klwin32 takes reasonable precautions, we cannot guarantee the absolute security of data transmitted over the internet. Members are responsible for keeping their own login credentials confidential.

10Your Data Rights

10.1 Subject to applicable law and our regulatory obligations, klwin32 Members have the following rights with respect to their personal data:

10.2 To exercise any of the above rights, submit a written request to klwin32 support (see Section 14). We will respond within 30 days. We may ask you to verify your identity before processing the request.

10.3 Some rights may be limited by our regulatory obligations — for example, we are required to retain certain records for AML compliance regardless of an erasure request. Where this applies, we will inform you of the relevant legal basis for continued retention.

11Children's Privacy

11.1 The klwin32 Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from persons under 21 years of age.

11.2 If we become aware that an Account has been registered by an individual under the eligible age, we will immediately suspend the Account, delete the associated personal data to the extent not required for regulatory purposes, and return any Real Money Balance to the depositing payment method.

11.3 If you believe that a minor has registered an Account on the klwin32 Platform, please contact us immediately so we can take appropriate action.

12International Data Transfers

12.1 klwin32's primary servers are located in the jurisdiction of our licensing authority. Some third-party service providers engaged by klwin32 (such as cloud infrastructure, KYC, or analytics vendors) may process data in jurisdictions outside Malaysia.

12.2 Where personal data is transferred internationally, klwin32 ensures that appropriate safeguards are in place, including contractual data processing agreements with standard data protection clauses, and that recipient service providers maintain security standards equivalent to those required under our licence.

12.3 We do not transfer Member data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate additional safeguards.

13Changes to This Privacy Policy

13.1 klwin32 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features.

13.2 Material changes will be communicated to Members via email or in-platform notification at least seven (7) days before they take effect. The "Last Updated" date at the top of this page reflects the most recent version.

13.3 Continued use of the klwin32 Platform after any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure.

13.4 Prior versions of this Policy are available upon written request to klwin32 support.

14Contact & Complaints

14.1 For data protection enquiries, subject access requests, or complaints regarding how klwin32 handles your personal data, please contact our support team:

14.2 If you are not satisfied with our response to a data protection complaint, you may escalate the matter to the Gaming Authority under whose jurisdiction klwin32 is licensed, or to the relevant data protection regulatory body in your jurisdiction.