What We Collect
Registration details, KYC documents, payment data, transaction records, device and browser information, and customer support communications.
Introduction
klwinmy ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at https://klwinmy.cam. In the course of providing our services to registered players in Malaysia and other eligible jurisdictions, we collect and process personal data. This Privacy Policy sets out, in formal and transparent terms, what personal data we collect, the purposes for which we process it, the legal bases on which we rely, how long we keep it, and the rights available to you in respect of your data.
This Policy applies to all personal data processed by klwinmy in connection with your use of the Platform, whether you are based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or any other location from which you access our services.
By registering a klwinmy account or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood the practices described herein. If you do not accept this Privacy Policy, you should not register an account or continue using the Platform.
This Privacy Policy should be read together with the klwinmy Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.
Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, email address, date of birth, payment details, and device identifiers. |
| Data Controller | klwinmy, as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| Data Processor | A third party engaged by klwinmy to process personal data on klwinmy's behalf under documented instructions (e.g., KYC verification providers, payment gateways). |
| Processing | Any operation performed on personal data, including collection, storage, use, disclosure, alteration, or deletion. |
| Player / User / You | A natural person who accesses or uses the klwinmy Platform, whether registered or unregistered. |
| KYC | Know Your Customer — the identity and address verification process applied by klwinmy to eligible registered accounts. |
| Cookies | Small data files stored on your device by the klwinmy Platform that record session and usage information. |
Data We Collect
klwinmy collects personal data through the following channels: directly from you during registration and account use; automatically through your interaction with the Platform; and from trusted third-party verification or payment partners where applicable. The categories of personal data we collect include the following:
Registration & Identity Data
- Full legal name and date of birth
- Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru)
- Email address and telephone number
- Username and encrypted password credential
- National identification document details (MyKad, passport, driver's licence) submitted during KYC
- Selfie image provided for identity verification purposes
Financial & Transaction Data
- Bank account details associated with DuitNow, FPX, and direct bank transfer requests
- E-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay, and similar approved services
- Deposit and withdrawal amounts, timestamps, and reference numbers
- Cryptocurrency wallet addresses used for BTC, ETH, or USDT transactions
- Bonus and promotional activity records
Technical & Usage Data
- IP address and approximate geographic location at time of login
- Device type, operating system, and browser version
- Session duration, pages visited, and game interaction logs
- Click-stream data and navigation patterns within the Platform
- Connection timestamps and login history
Customer Support Communications
- Live chat transcripts, email exchanges, and support ticket content
- Feedback, complaints, and dispute records
- Responsible gambling tool requests and self-exclusion communications
Purposes of Processing
klwinmy processes your personal data for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with those listed below, nor do we sell your personal data to third parties for marketing or commercial purposes.
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your registered klwinmy account, including password recovery, account settings, and preference management. |
| Identity Verification (KYC) | Confirming your age (21+), identity, and residential address to comply with applicable platform standards and prevent fraudulent account use. |
| Payment Processing | Processing deposits and withdrawals via MYR payment channels including DuitNow, FPX, e-wallets, and bank transfers, and resolving payment disputes. |
| Fraud Prevention & Security | Detecting and investigating suspicious activity, unauthorised access, money laundering risks, bonus abuse, and other platform integrity threats. |
| Regulatory Compliance | Meeting obligations under applicable laws and licensing conditions, including retention of transaction records and cooperation with lawful authority requests. |
| Customer Support | Responding to account queries, payment disputes, responsible gambling requests, and complaint resolution through live chat, email, and other support channels. |
| Platform Improvement | Aggregated, anonymised analysis of usage patterns to improve navigation, game performance, and platform reliability — not used to identify individual players. |
| Responsible Gambling | Processing data necessary to apply deposit limits, cooling-off periods, and self-exclusion tools requested by Players or triggered by safeguarding procedures. |
Legal Basis for Processing
klwinmy processes personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:
- Contractual Necessity: Processing required to perform our obligations under the klwinmy Terms & Conditions, including account registration, deposit processing, withdrawal management, and customer support delivery.
- Legal Obligation: Processing necessary to comply with applicable laws and regulatory requirements, including anti-money laundering obligations, identity verification standards, and mandatory record retention periods.
- Legitimate Interests: Processing that serves klwinmy's legitimate interests in fraud detection, platform security, and aggregated performance analysis, provided such interests do not override your fundamental privacy rights.
- Consent: Where we rely on your consent for a specific processing activity (e.g., certain optional analytics), you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent can be requested via our support team.
Data Sharing & Disclosure
klwinmy does not sell, rent, or exchange your personal data with third-party organisations for commercial marketing purposes. We share personal data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:
- Payment Service Providers: We share financial data with regulated payment processors and banking partners necessary to complete your deposit and withdrawal requests, including institutions such as Maybank, CIMB, Public Bank, RHB, Hong Leong, and approved e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX).
- KYC and Identity Verification Partners: Authorised third-party verification service providers may access identity documents submitted during the KYC process solely for the purpose of confirming eligibility.
- Fraud and Security Services: Specialist risk management and fraud detection providers may receive transaction and device data under strict confidentiality agreements.
- Legal and Regulatory Authorities: klwinmy will disclose personal data to competent courts, law enforcement agencies, or regulatory bodies when required to do so by applicable law, a valid court order, or legal process.
- Business Transfers: In the event of a merger, acquisition, or asset sale, personal data may be transferred to the acquiring entity, subject to the same privacy standards described in this Policy.
We do not sell your personal data. klwinmy does not share your information with third-party advertisers, data brokers, or social media platforms for commercial targeting purposes.
Data Retention
klwinmy retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention principles apply:
- Account and identity data is retained for the duration of the active account and for a minimum of five (5) years following account closure, in line with standard compliance and record-keeping obligations.
- Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
- KYC verification documents are retained for the period required by applicable regulatory standards following account closure or failed verification.
- Customer support communications are retained for a minimum of three (3) years from the date of the interaction.
- Technical and session log data is typically retained for a shorter period and may be anonymised or aggregated after thirty (30) to ninety (90) days.
Where personal data is no longer required, klwinmy will securely delete or anonymise it in accordance with established data disposal procedures.
Data Security
klwinmy implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security practices include:
- 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the klwinmy Platform.
- Encrypted storage of sensitive account credentials including passwords, which are stored using industry-standard hashing algorithms.
- Access controls restricting personal data to authorised personnel with a documented business need.
- Regular security assessments and vulnerability monitoring of Platform infrastructure.
- Incident response procedures for the prompt identification, containment, and notification of data security incidents.
While klwinmy takes reasonable precautions to secure your data, no internet transmission is entirely risk-free. You are responsible for maintaining the confidentiality of your account login credentials and for reporting suspected unauthorised access to our support team promptly.
Cookies & Tracking Technologies
klwinmy uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device that enables the Platform to recognise your session, remember preferences, and record usage patterns.
Types of Cookies Used
- Strictly Necessary Cookies: Required for the Platform to function. These enable session management, login authentication, and security features. They cannot be disabled without impairing core functionality.
- Functional Cookies: Remember your language preference, currency settings (MYR), and display preferences to improve your experience on return visits.
- Analytics Cookies: Collect aggregated, anonymised data about how visitors navigate the Platform, enabling us to improve performance and content. No individual player is identified through analytics data.
- Security and Fraud Prevention Cookies: Assist in identifying potentially fraudulent sessions or unusual access patterns by recording device and connection fingerprint information.
You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the klwinmy Platform. Strictly necessary cookies cannot be rejected as they are essential to session integrity.
International Data Transfers
klwinmy may transfer personal data to, or store it in, locations outside Malaysia where processing infrastructure or third-party service providers are located. When such transfers occur, klwinmy ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards may include:
- Transfers to jurisdictions recognised as providing an adequate level of data protection.
- Use of contractually binding data processing agreements with third-party processors that impose equivalent data protection obligations.
- Transfer only to third parties who have demonstrated compliance with applicable data protection standards.
Protection of Minors
The klwinmy Platform is strictly intended for users aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts.
If klwinmy identifies that personal data has been collected from an individual who is under 21 years of age, such data will be deleted promptly and the associated account will be closed. Any funds held in the account will be handled in accordance with the klwinmy Terms & Conditions and applicable regulations.
21+ Only. If you are aware of a minor who has accessed or registered on the klwinmy Platform, please contact our support team immediately via live chat or at [email protected].
Your Data Rights
As a data subject whose personal information is processed by klwinmy, you have the following rights, which you may exercise by contacting us through the channels listed in Clause 14 below. We will respond to verified rights requests within a reasonable period, typically within thirty (30) days of receipt.
Right of Access
Request a copy of the personal data klwinmy holds about you and information on how it is used.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your account.
Right to Erasure
Request deletion of personal data where it is no longer required, subject to overriding legal retention obligations.
Right to Restriction
Request that processing of your data be limited in specific circumstances, such as during a dispute.
Right to Portability
Request that account data be provided to you in a structured, commonly used, machine-readable format where technically feasible.
Right to Object
Object to processing based on legitimate interests, including profiling for fraud detection purposes where klwinmy's interests do not override yours.
Some rights may be limited where klwinmy has an overriding legal obligation to retain or process data (e.g., regulatory record-keeping requirements, fraud investigation, or active dispute resolution). We will explain any applicable limitation when responding to your request.
Changes to This Privacy Policy
klwinmy may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform services. When we make material changes, we will publish the updated Policy on this page with a revised effective date, and we may notify registered Players by email or via a notice displayed on the Platform.
Your continued use of the klwinmy Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. We recommend reviewing this Policy periodically, particularly prior to making deposits or accepting new promotional offers.
Contact Us
If you wish to exercise any of your data rights, raise a privacy concern, request clarification on any provision of this Policy, or submit a data-related complaint, please contact the klwinmy privacy team through the following channels:
Privacy Enquiries & Data Rights Requests
Support Email:
[email protected]
Live Chat:
Available 24 hours a day, 7 days a week via the klwinmy Platform. Average response time: 3–5 minutes. Available in English, Bahasa Melayu, and Chinese.
When submitting a data rights request, please include your registered account email address and a brief description of your request. klwinmy will verify your identity before processing any access, deletion, or portability request, and will respond within thirty (30) days of verification. For complex requests, we may extend this period by a further thirty (30) days with prior notice.
Please include "Privacy Request" in the subject line of any email enquiry to ensure prompt routing to the relevant team. For responsible gambling data requests (e.g., self-exclusion records, deposit limit history), please specify "Responsible Gambling — Data Request" for priority handling.