Privacy Policy klwinclub – Personal Data Protection for Malaysia Members

Klwinclub ("we", "the platform" or "klwinclub.net") is committed to protecting the privacy of all its users. This Privacy Policy outlines our practices regarding the collection, processing, storage, and protection of personal data of members using the klwinclub platform.

This policy applies to all personal data collected through the klwinclub.net website, our mobile app, and all our communication channels including live chat and customer support. It is governed by Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related laws.

We update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.

Klwinclub collects various types of data depending on how you interact with our platform. Below is an overview of the data we collect:

Data You Provide Directly

Most of this data is provided directly by you — when registering an account, completing your profile, making deposits or withdrawals, contacting customer support, or participating in promotions. We only request data that is strictly necessary for those purposes.

Automatically Collected Data

When you use the klwinclub platform, our systems automatically record technical information such as IP address, device type, operating system, access time, and in-platform activity. This data is used for security purposes and to improve the user experience.

Klwinclub uses your personal data only for legitimate purposes directly related to the services we offer. The following are the primary purposes for which your data is used:

• Account management: Creating, maintaining, and protecting your account at klwinclub.
• Transaction processing: Processing all your deposits, withdrawals, and bonus payments accurately and promptly.
• Identity verification (KYC): Meeting legal requirements to verify that you are who you claim to be and are 18 years of age or older.
• Fraud prevention: Monitoring and detecting any suspicious activity to protect your account and funds.
• Customer support: Helping you resolve any issues or inquiries related to your account.
• Service communications: Sending important account-related notices such as transaction confirmations, security alerts, and policy updates.
• Platform improvement: Analyzing usage patterns in aggregate to improve our platform's design and functionality.
• Legal compliance: Fulfilling legal obligations that require us to retain certain records for a prescribed period.

Klwinclub does not sell or rent your personal data to any third party. However, there are certain situations where we may need to share your data:

Trusted Third-Party Service Providers

We share limited data with service providers that help us operate the platform — such as payment processing providers, identity verification services, and technology infrastructure providers. All these providers are bound by strict confidentiality agreements and are only permitted to use your data for the specific agreed purposes.

Legal Requirements

Klwinclub will disclose your personal data if required by law or a valid court order — including to law enforcement authorities, tax agencies, or relevant regulatory bodies. In all such cases, we only disclose the minimum information necessary.

Legitimate Interest Protection

In situations where it is necessary to prevent or investigate fraud, money laundering, or other criminal activity involving our platform, klwinclub reserves the right to share relevant information with the appropriate authorities.

Klwinclub uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information about how you use the platform to help us improve it. This data is collected in aggregate and anonymized.
• Functional Cookies: Saving your preferences such as language and display settings for a more convenient return experience.
• Security Cookies: Helping detect and prevent suspicious or unauthorized activity within your session.

You can manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the klwinclub platform.

The security of your data is a top priority at klwinclub. We implement multiple layers of technical and organizational protection to safeguard your data from unauthorized access, disclosure, alteration, or destruction.

Technical Protection

• 256-bit SSL encryption for all data transmission between your device and our servers.
• Encryption of sensitive data such as financial information within our databases.
• Two-factor authentication (2FA) for more secure account access.
• 24/7 real-time security monitoring by our systems and security team.
• Regular penetration testing conducted by certified independent parties.
• An active intrusion detection system (IDS) monitors for any unusual activity.

Internal Access Controls

Access to members' personal data within the klwinclub organisation is restricted and governed by a "need-to-know" principle — only staff who genuinely require the data to perform their duties are permitted to access it. All staff with data access are bound by confidentiality agreements and strict security training.

Klwinclub retains your personal data only for as long as necessary to fulfil the purposes stated in this privacy policy or as required by applicable law.

• Active account data: Retained for as long as your account is active and for a reasonable period after account closure.
• Financial transaction records: Retained for a minimum of 7 years as required by Malaysian financial law.
• KYC Records: Retained for the period specified by anti-money laundering compliance requirements.
• Support communication logs: Retained for 2 years for dispute resolution and quality control purposes.
• Technical data and security logs: Typically retained for 90 days unless required for a specific investigation.

Once data is no longer needed and there is no legal obligation to retain it, klwinclub will securely delete or anonymise that data.

As a klwinclub member, you have the following rights regarding your personal data under the Personal Data Protection Act 2010:

Klwinclub does not provide services to individuals under the age of 18. We do not knowingly collect or process personal data of anyone under 18 years of age.

If we discover that personal data of individuals under 18 has been collected without our knowledge, we will take immediate action to delete that data and close the account in question. If you are aware that someone under 18 has registered on our platform, please contact our customer support immediately.

Klwinclub employs multiple mechanisms to prevent registration by underage individuals, including date of birth verification and a KYC process that requires official identification documents.

Klwinclub reserves the right to update or amend this Privacy Policy at any time. Any material changes will be communicated to you via a prominent notice on our platform or by email to the address registered with your account.

Minor changes such as language corrections or clarifications without substantive changes may be made without special notice, but the "updated" date at the top of this document will always reflect the latest version.

Continued use of the klwinclub platform after any privacy policy changes take effect is considered your acceptance of the updated policy. If you disagree with the changes made, you have the right to close your account and request deletion of your data.