Member Data Protection

KW99 Privacy Policy – Malaysia Member Personal Data Protection

KW99 is committed to protecting the privacy and personal data of every member. This document clearly explains how we collect, use, store and safeguard your information.

Last updated: January 2026

Important Note: This Privacy Policy describes the data handling practices of KW99 as a data operator in relation to member personal information. By using our platform, you agree to the terms set out in this document. Please read it carefully and contact us if you have any questions.

Our Compliance
  • Personal Data Protection Act 2010 (PDPA)
  • PCI DSS Security Standards
  • 256-bit SSL Encryption
  • International KYC Protocols

At KW99, your privacy is not merely a legal obligation — it is a core value we uphold. We understand that member trust is our platform's most valuable asset, and that trust can only be built when you are confident your personal information is always in safe hands.

This Privacy Policy has been drafted to comply with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best standards in data handling. We do not sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent.

This policy applies to all information you provide to kw99 via the website, mobile app, email communications, and any other channels associated with our platform.

1 Personal Information We Collect

KW99 collects two main categories of information: information you provide directly, and information collected automatically when you use our platform.

Information You Provide Directly

  • Full name as shown on your official identity document
  • Date of birth and gender
  • Email address and mobile phone number
  • Current residential address
  • Bank account details and payment methods used
  • Identity document copies for the KYC process (ID card, passport)
  • Source of funds information (for anti-money laundering compliance)

Automatically Collected Information

  • IP address and geographic location data (city/state level)
  • Device type, operating system, and web browser used
  • In-platform activity data (games played, session duration, wagering)
  • Complete financial transaction records
  • Cookie and website usage data
  • Communication logs with the customer support team
Data Category Example Information Requirement
Identity Name, date of birth, ID document Mandatory (KYC)
Contact Email, phone number Mandatory
Financial Bank accounts, transaction records Mandatory
Technical IP, device, browser Automatic
Behaviour Gaming activity, preferences Automatic

2 How We Collect Your Information

KW99 collects personal information through a variety of legitimate and transparent channels:

  • Account registration process: Basic information you fill in when opening a new account.
  • KYC verification: Documents you upload for identity verification purposes.
  • Financial transactions: Details shared during the deposit and withdrawal process.
  • Platform usage: Data automatically generated while you browse and play at KW99.
  • Communications with us: Messages and information you share via live chat or support email.
  • Cookies and similar technologies: Session data and preferences stored on your device.
  • Legitimate third-party sources: Identity verification agencies and compliance data providers that work with KW99.

We only collect information that is strictly necessary for the stated purposes. KW99 does not collect sensitive data such as medical information or religious beliefs except in very limited circumstances and with your explicit consent.

3 How We Use Your Information

Every piece of data we collect has a clear and lawful purpose. kw99 uses your personal information for the following purposes:

  • Account management: Registering, verifying and maintaining your member account.
  • Transaction processing: Managing deposits, withdrawals and any related payments.
  • Legal compliance: Meeting KYC, anti-money laundering (AML) and applicable financial regulatory requirements.
  • Platform security: Detecting and preventing fraud, unlawful activity and system abuse.
  • Service improvements: Analysing usage patterns to improve the overall member experience.
  • Service communications: Sending important notices, account updates and security information.
  • Customer support: Helping resolve issues and enquiries you raise.
  • Responsible gaming: Monitoring gameplay patterns to identify support needs and early intervention.
  • Marketing (with consent): Sending relevant promotional offers and bonuses if you have opted in to receive them.

KW99 will not use your data for any purpose beyond those stated above without first obtaining your renewed consent.

4 Data Storage & Security

KW99 implements comprehensive security measures to protect your personal data from unauthorised access, loss or accidental disclosure.

Technical Security Measures

  • Data encryption in transit using TLS 1.3 and 256-bit SSL protocols
  • Encryption at rest for all sensitive information
  • Role-based access control — only authorised staff may access personal data
  • 24/7 security monitoring with automated intrusion detection systems
  • Regular vulnerability testing and security audits by independent third parties
  • Two-factor authentication (2FA) for all internal administrative access

Data Retention Period

Your personal data is retained for the period necessary to fulfil the purpose of collection or applicable legal requirements:

  • Active account records: For the duration of membership
  • Financial and transaction records: Minimum 7 years after account closure (compliance requirement)
  • Support communication logs: 3 years
  • Technical data and access logs: 12 months

Once the retention period has expired, your data will be securely deleted or anonymised in accordance with our standard procedures.

While no security system can guarantee 100% protection, kw99 continuously updates its security protocols to address the latest cyber threats and ensure your data remains protected at all times.

5 Data Sharing & Disclosure

KW99 does not sell or rent your personal data to any third party. However, there are limited situations where we may need to share certain information:

  • Payment processor: Transaction information required to securely process your deposits and withdrawals.
  • KYC service provider: Identity information shared with registered verification agencies for compliance purposes.
  • Technology service provider: Companies that help operate the platform infrastructure, subject to strict confidentiality agreements.
  • Regulatory authority: Information required by regulatory bodies, courts or law enforcement agencies when legally mandated.
  • Game providers: Minimum data required to enable third-party games to function within the KW99 platform.

All third parties that receive your data are bound by strict data processing agreements and are required to protect that information to a standard no less stringent than our own.

KW99 will never disclose your password to anyone, including our own staff.

6 Cookies & Tracking Technologies

KW99 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
  • Performance Cookies: Collecting anonymised data on how you use the platform to help us improve the user experience.
  • Functional Cookies: Saving your preferences such as language, region and display settings so you do not need to reset them each time.
  • Analytics Cookies: Helping us understand platform traffic and usage patterns in aggregate, without identifying individuals.

You can manage or block cookies through your web browser settings at any time. Please note that blocking essential cookies may affect the functionality of the KW99 platform.

7 Your Privacy Rights as a KW99 Member

Under Malaysia's Personal Data Protection Act 2010 and KW99's internal policies, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of all personal data we hold about you at any time.

Right to Rectification

If your data is inaccurate or outdated, you may request a correction or update to that information.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data, subject to legal retention requirements.

Right to Restriction

You may request that we restrict the processing of your data in certain circumstances as provided by law.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without penalty.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service.

To exercise any of the above rights, please contact our Data Protection Officer by email at [email protected]. We will process your request within 30 business days.

8 Children's Privacy

The kw99 platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of anyone under the age of 18.

Should we discover that information belonging to someone under the age of 18 has been collected without our knowledge, the associated account will be closed immediately and all data will be deleted in accordance with our security procedures. Parents or guardians who become aware that their child has registered a kw99 account are urged to contact us immediately.

9 Changes to This Privacy Policy

KW99 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, the latest legal requirements, or improvements to our platform services.

When material changes are made, we will notify you via a prominent notice within the platform or by email to your registered address at least 14 days before the changes take effect. The "Last updated" date at the top of this page always reflects the latest version.

Continued use of the kw99 platform after the notification date is considered acceptance of the updated policy.

10 Contact Our Privacy Officer

If you have any questions, concerns or complaints regarding how we handle your personal data, our privacy team is here to help:

We are committed to addressing all privacy-related enquiries seriously and within a reasonable timeframe. An initial response will be provided within 3 business days.

Why Your Data Is Safe with KW99

Advanced-Level Encryption

All data transmitted between your device and kw99 servers is protected with 256-bit SSL encryption — the same standard used by leading banking institutions.

Secure KYC Process

Identity documents you submit are processed through a certified integrated KYC system, with access strictly limited to authorized personnel only.

24/7 Security Monitoring

KW99's cybersecurity team monitors the platform around the clock to promptly detect and respond to any threats or suspicious activity.

Malaysia PDPA Compliance

KW99 operates in full compliance with Malaysia's Personal Data Protection Act 2010, ensuring all our data processing practices meet local legal requirements.

No Data Sales

We have never sold, rented or traded members' personal data to advertisers, data brokers or any third party for commercial gain, and we never will.

Full Control in Your Hands

You have full control over your data — access, correct, delete, or export your personal information at any time through the channels we provide.

Questions About kw99 Privacy & Data Security

Yes, absolutely. Your bank account information is protected with 256-bit SSL encryption and stored in accordance with PCI DSS security standards. We never store full card numbers or sensitive financial information in unencrypted form. All transactions are processed through secure, certified payment channels.

Yes, you have the right to request deletion of your personal data. However, certain data must be retained for a specified period to meet legal requirements — for example, financial records must be kept for a minimum of 7 years under tax and anti-money laundering laws. Data not subject to these legal requirements will be deleted within 30 days of your request.

When an account is closed, your data enters a restricted archiving phase. Information not required for legal compliance will be deleted within 90 days. Financial and identity records mandated by law will be retained for the stipulated period, then securely deleted or anonymized.

You can unsubscribe from promotional emails at any time by clicking the "unsubscribe" link at the bottom of any of our marketing emails, or by contacting our support team to update your communication preferences. Requests will be processed within 5 business days. Please note that transaction-related and account security emails cannot be stopped as they are essential to your account operations.

Any data sharing within the kw99 group of companies is conducted solely for service delivery and operational compliance purposes, subject to strict internal confidentiality agreements. Your data is not shared with entities outside the group for marketing or commercial purposes without your explicit consent.

Play with Peace of Mind — Your Data is Protected at KW99

Join millions of members who already trust kw99 as their preferred wagering platform. Register today and enjoy a safe, fair, and exciting gaming experience.

Bahasa Melayu