Privacy Policy

This Privacy Policy ("Policy") describes how klwin ("klwin", "we", "us", "the Platform") collects, processes, stores, and protects the personal data of users ("Player", "you") who access and use the klwin online casino and sportsbook platform available at klwin.bio.

klwin operates under internationally recognised gaming authority oversight. As a regulated gaming operator, klwin is subject to data handling obligations arising from both gaming regulatory requirements and applicable data protection standards. We take those obligations seriously and have designed our data practices accordingly.

By registering a klwin account or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not use the klwin platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy.

klwin collects personal data through several touchpoints across the platform lifecycle. The categories of data we collect include the following:

2.1 Registration Data

When you create a klwin account, we collect the information you provide during the registration process, including your full legal name, date of birth, email address, mobile phone number, and country of residence.

2.2 Identity Verification Data

As a regulated gaming platform, klwin is required to verify the identity of its players prior to processing withdrawals and in certain other circumstances. This may involve collecting copies of government-issued identification documents (such as a MyKad, passport, or driving licence), proof of residential address (such as a recent utility bill or bank statement), and, where applicable, proof of payment method ownership.

2.3 Financial Data

klwin collects data relating to your transactions on the platform, including deposit amounts, withdrawal requests, payment method identifiers (e.g. masked card numbers or e-wallet account references), and transaction timestamps. klwin does not store full card numbers on its servers — full payment card data is handled exclusively by our PCI-DSS compliant payment processors.

2.4 Gaming Activity Data

klwin records your gaming activity on the platform, including game sessions, bet amounts, game outcomes, bonus usage, and account balance history. This data is used for regulatory compliance, dispute resolution, responsible gaming monitoring, and platform improvement purposes.

2.5 Technical & Device Data

When you access klwin, we automatically collect certain technical data, including your IP address, browser type and version, device type, operating system, session timestamps, pages visited, and clickstream data. This data is used for security monitoring, fraud detection, and platform analytics.

klwin uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and secure your klwin account, including processing your login credentials and managing account settings.
• Identity verification: To verify that you meet klwin's eligibility requirements, including age verification (21+) and identity checks required under our regulatory obligations.
• Payment processing: To process your deposits and withdrawal requests via your selected payment method (Touch n Go eWallet, Boost, Maybank, CIMB, and other supported methods).
• Regulatory compliance: To comply with applicable gaming authority regulations, anti-money laundering (AML) requirements, and know-your-customer (KYC) obligations.
• Fraud and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other security incidents.
• Responsible gaming: To monitor gaming patterns that may indicate problematic behaviour and to apply responsible gaming tools where appropriate.
• Customer support: To respond to your enquiries, resolve disputes, and provide platform assistance.
• Platform improvement: To analyse usage patterns and improve the klwin platform's performance, features, and user experience.
• Marketing communications: To send you promotional offers and platform updates, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time via your account settings.

klwin processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract with you — i.e., to operate your klwin account, process transactions, and deliver the gaming service.
• Legal obligation: Processing required to comply with our regulatory and legal obligations as a licensed gaming operator, including AML/KYC requirements.
• Legitimate interests: Processing in pursuit of klwin's legitimate interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, primarily in the context of marketing communications. You may withdraw consent at any time.

klwin does not sell your personal data to third parties. We may share your data with the following categories of recipients in the circumstances described:

• Payment processors: To process your deposit and withdrawal transactions. These processors operate under strict data security standards (PCI-DSS) and are contractually prohibited from using your data for any purpose other than payment facilitation.
• Identity verification providers: To fulfil our KYC obligations. Document verification is handled by regulated third-party providers operating under appropriate data processing agreements.
• Game content providers: Game studios such as Evolution, Pragmatic Play, and PG Soft may receive certain gameplay data in connection with the delivery of their games on the klwin platform.
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory directive, klwin will disclose data to competent authorities. This includes reporting obligations under applicable AML regulations.
• Professional advisors: Legal counsel, auditors, and other professional advisors engaged by klwin who are bound by confidentiality obligations.

klwin uses cookies and similar tracking technologies to enhance platform functionality, maintain session continuity across your klwin login, and gather aggregated analytics about platform usage. The types of cookies we use include:

• Strictly necessary cookies: Essential for the operation of the klwin platform, including session management and security functions. These cannot be disabled without disrupting the service.
• Functional cookies: Used to remember your preferences and settings on the klwin platform, such as language and display preferences.
• Analytics cookies: Used to collect aggregated, anonymised information about how players interact with the klwin platform. This data is used solely to improve platform performance and user experience.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the klwin platform.

klwin retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. Specific retention periods are as follows:

• Active account data: Retained for the duration of your klwin account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Identity verification documents: Retained for a minimum of five (5) years following the end of the business relationship, as required by applicable AML regulations.
• Transaction records: Retained for a minimum of five (5) years following the transaction date.
• Support communications: Retained for up to three (3) years from the date of the interaction.
• Technical logs: Retained for up to twelve (12) months, unless a longer retention period is required for security investigation purposes.

Following the expiry of applicable retention periods, klwin will securely delete or anonymise your personal data.

klwin implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and klwin servers.
• Encrypted storage of sensitive account data, including hashed password storage.
• Access controls limiting internal data access to authorised personnel on a need-to-know basis.
• Real-time security monitoring and intrusion detection systems.
• Regular security assessments and penetration testing.

While klwin takes all reasonable precautions to protect your data, no internet-based service can guarantee absolute security. You are responsible for maintaining the security of your klwin login credentials. If you believe your account has been compromised, contact our support team immediately via live chat.

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by klwin:

• Right of access: You may request a copy of the personal data klwin holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to our legal and regulatory data retention obligations.
• Right to restriction: You may request that klwin restrict processing of your data in certain circumstances, for example while a dispute is being resolved.
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (e.g. marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact klwin support via live chat or at the email address provided in Section 14. klwin will respond to valid requests within thirty (30) days. Please note that certain rights may be limited where klwin has overriding legal obligations that require data retention.

The klwin platform is strictly for persons aged 21 and above. klwin does not knowingly collect personal data from anyone under the age of 21. If klwin becomes aware that personal data has been collected from a minor, that account will be immediately closed, the data will be deleted, and any deposits will be returned. If you believe a minor has accessed the klwin platform, please contact our support team immediately.

As an internationally operating gaming platform, klwin may transfer your personal data to servers or processors located outside of Malaysia. Where such transfers occur, klwin ensures that appropriate safeguards are in place — including contractual data processing agreements — to ensure your data receives a standard of protection equivalent to that applicable under international data protection standards.

In particular, transfers to game content providers (including studios such as Evolution and Pragmatic Play, which operate infrastructure across multiple jurisdictions) are governed by data processing agreements that comply with applicable regulatory requirements.

The klwin platform does not include links to external third-party websites for general browsing purposes. Where third-party services are integrated into the platform (such as payment processors and game providers), those services operate under their own privacy policies. klwin is not responsible for the data practices of third-party providers beyond the scope of the data processing agreements we have entered into with them.

klwin reserves the right to update or amend this Privacy Policy at any time. Where changes are material, klwin will notify registered users via an in-platform notification or by email to the address on file. The revised Policy will take effect from the date stated at the top of the document. Your continued use of the klwin platform following the effective date constitutes acceptance of the revised Policy.

For any questions, concerns, or requests related to this Privacy Policy or klwin's handling of your personal data, please contact the klwin support team via live chat (available 24/7 within the platform) or by email at [email protected].

klwin is committed to addressing all privacy-related enquiries promptly and in good faith. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection or regulatory authority in your jurisdiction.