Privacy Policy

This Privacy Policy (the "Policy") issued by KLWinSlot (the "Company", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at the domain klwinslot.cam (the "Platform"). This Policy describes how we collect, use, store, transfer, and protect personal data relating to our users (hereinafter "you", "your", or "the Player") in connection with your access to and use of the Platform and its associated services.

KLWinSlot operates under an international online gaming licence and is subject to applicable data protection obligations under the licensing jurisdiction's requirements. We are fully committed to maintaining the privacy and security of your personal information and to complying with applicable data protection laws and best-practice standards.

By registering an account on klwinslot or by continuing to access and use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should cease using the Platform and contact us to request account closure.

For the purposes of this Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, IP address, or factors specific to the physical, economic, or social identity of that person.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. KLWinSlot is the Data Controller for personal data collected through the Platform.
• "Data Processor" means an entity that processes personal data on behalf of the Data Controller, such as a payment gateway provider or identity verification service.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
• "KYC" means Know Your Customer — the mandatory identity verification process conducted to comply with anti-money-laundering and player protection obligations.
• "Cookies" means small text files placed on your device by the Platform to enable certain functionality, remember preferences, and support analytics.

KLWinSlot collects personal data in several categories depending on the nature of your interaction with the Platform. The categories of data we collect include:

• Full legal name as it appears on government-issued identification.
• Date of birth (to verify you are aged 21or above).
• Malaysian MyKad number, passport number, or equivalent national identification number.
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Shah Alam, Petaling Jaya).
• Email address and mobile phone number.

• Payment method details (e.g., Touch 'n Go eWallet account reference, Boost account identifier, Maybank account suffix, GrabPay reference, DuitNow ID, cryptocurrency wallet address).
• Transaction history: deposit amounts, withdrawal requests, and processing dates.
• Bonus redemption records and wagering history associated with your account.

• IP address, device type, operating system, and browser type.
• Session timestamps, pages visited, features accessed, and betting patterns.
• Geolocation data (country and city level, derived from IP address) for compliance and fraud detection purposes.
• Log files and error reports generated during your use of the Platform.

• Content of live chat conversations, email correspondence, and support ticket records.
• Survey responses and voluntary feedback submissions.
• Preferences you set regarding promotional communications.

• Scanned copies or photographs of identity documents submitted for verification.
• Proof-address documents such as utility bills or bank statements.
• Source-of-funds documentation where enhanced due diligence is required.

We collect personal data through the following channels and mechanisms:

• Account Registration: Data you provide directly when creating an account on klwinslot, including name, date of birth, contact details, and chosen credentials.
• KYC Verification: Documentation you submit to fulfil identity verification requirements, whether during registration or at a later stage upon our request.
• Payment Transactions: Data generated when you make a deposit or withdrawal via supported Malaysian payment channels, including references provided by your payment provider.
• Platform Interaction: Data collected automatically as you navigate the Platform, including through server logs, cookies, and analytics tools.
• Customer Support: Data provided during live chat sessions, email communications, or feedback submissions.
• Third-Party Sources: Where permitted, we may receive supplementary data from identity verification services, fraud detection providers, or publicly available sources to validate information you have provided.

We process your personal data for the following defined purposes. Each processing activity is linked to a specific lawful basis described in Section 6 below.

KLWinSlot processes your personal data only where we have a valid legal basis to do so. The applicable legal bases are:

• Performance of a Contract: Processing necessary to fulfil our obligations to you under our Terms and Conditions, including account administration, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws, regulatory requirements, anti-money-laundering obligations, and our international gaming licence conditions.
• Legitimate Interests: Processing for our legitimate business interests, such as fraud prevention, platform security, and aggregate analytics, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for purposes where you have provided explicit, freely given consent, such as receiving promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

KLWinSlot does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with carefully selected third parties only in the following circumstances:

• Payment Service Providers: Processors facilitating your deposit and withdrawal transactions, including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks, and cryptocurrency processing services. These parties process data only as necessary to complete your transactions.
• Identity Verification Services: Third-party KYC and AML compliance providers that assist in verifying your identity, age, and source of funds in accordance with our regulatory obligations.
• Fraud Prevention and Security Providers: Services that assist in detecting, investigating, and preventing fraudulent activity, account takeover, and money laundering.
• Technology and Infrastructure Providers: Cloud hosting, database management, and software service providers who process data on our behalf under binding data processing agreements.
• Legal and Regulatory Authorities: Where required by law, court order, or regulatory direction, including disclosure to gaming regulators, financial intelligence units, or law enforcement agencies.
• Business Successors: In the event of a merger, acquisition, or sale of all or substantially all of KLWinSlot's assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

All third-party Data Processors engaged by KLWinSlot are required to process personal data only for the specified purpose, to maintain appropriate security measures, and to comply with applicable data protection obligations.

KLWinSlot operates internationally, and your personal data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, we ensure appropriate safeguards are in place to protect your data, which may include:

• Transfers to countries deemed provide an adequate level of data protection by the applicable regulatory body.
• Use of standard contractual clauses or equivalent binding corporate rules with the receiving entity.
• Contractual commitments to apply the same level of data protection as applied within our primary operating jurisdiction.

We retain personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law or our regulatory obligations. Our standard retention periods are as follows:

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents re-identification.

KLWinSlot uses cookies and similar tracking technologies on the Platform for the following purposes:

These cookies are essential for the Platform to function correctly. They enable session management, user authentication, security token validation, and other core functionality. You cannot opt out of these cookies without impairing the Platform's ability to function.

These cookies allow the Platform to remember your preferences and settings, such as language preference, display options, and previously entered information, to provide a more personalised experience.

We use anonymised analytical cookies to understand aggregate usage patterns — such as which pages are most visited, average session durations, and device types used by our player base across Malaysia. This data is used to improve the Platform's performance and user experience. Individual-level tracking data is not used for targeted advertising.

Certain cookies assist in detecting and preventing fraudulent activity, including session hijacking, credential stuffing, and automated bot traffic.

KLWinSlot implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for sensitive personal data and KYC documents stored on our infrastructure.
• Multi-factor authentication requirements for account access and for administrative personnel accessing data systems.
• Role-based access controls limiting internal data access to personnel with a documented business need.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified third-party security professionals.
• Automated fraud detection and anomaly monitoring systems operating continuously across all player accounts.
• Incident response procedures with defined escalation paths and notification timelines in the event of a data breach.

Despite these measures, no system is entirely immune from security risks. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, KLWinSlot will notify affected players and relevant authorities in accordance with applicable requirements.

As a data subject, you hold the following rights in respect of the personal data KLWinSlot processes about you. To exercise any of these rights, submit a verified request to our support team. We will respond within 30 days of receipt of a verified request.