kclub99 Privacy Policy

1. Introduction

kclub99 ("kclub99", "we", "us", "our") operates the online gaming platform accessible at kclub99.co (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who access the Platform, register an account, or otherwise interact with our services.

This Privacy Policy ("Policy") describes in detail the categories of personal data we collect, the purposes for which that data is processed, the parties with whom we may share it, the security measures we apply to protect it, and the rights you hold as a data subject. This Policy applies to all kclub99 members, prospective members, and visitors to the Platform, regardless of location.

This Policy must be read in conjunction with the kclub99 Terms & Conditions, which also govern your use of the Platform. By accessing the Platform or registering an account, you confirm that you have read and understood this Policy and consent to the data processing activities described herein.

2. Personal Data We Collect

kclub99 collects personal data that you provide directly to us, data generated through your use of the Platform, and data received from third parties in connection with the operation of our gaming and payment services. The categories of personal data we collect include:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (collected for mandatory age verification — all kclub99 members must be 21 years of age or older).
• Residential address, including postcode and country of residence.
• Email address and mobile phone number registered to your account.
• Malaysian identity card number (MyKad) or equivalent government-issued identification, where provided for KYC verification purposes.

2.2 Financial Data

• Bank account details associated with your FPX or DuitNow transactions, including bank name and masked account number.
• E-wallet identifiers (Touch 'n Go eWallet, Boost) used for deposits or withdrawals.
• Transaction history, including deposit amounts, withdrawal requests, dates, and payment method references.
• Wallet balance and bonus credit records maintained within your kclub99 account.

2.3 Gaming and Behavioural Data

• Game participation records, including games played, wager amounts, game outcomes, and session duration.
• Bonus and promotion usage history.
• Self-exclusion and responsible gaming tool preferences set by you within your account dashboard.
• Customer support interaction records, including live chat transcripts and WhatsApp communication records where applicable.

2.4 Technical and Device Data

• IP address and approximate geographic location derived therefrom.
• Device type, operating system, browser type and version.
• Platform session data, including login timestamps, session duration, and navigation paths.
• Cookie identifiers and similar tracking technologies as described in Section 9 below.

3. How We Collect Your Data

kclub99 collects personal data through the following channels:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account profile.
• Automatically through Platform use: via server logs, cookies, and similar technologies that record your interaction with the Platform as described in Section 9.
• From payment processors: kclub99 receives transaction confirmation data from FPX, DuitNow, and e-wallet providers (Touch 'n Go eWallet, Boost) to verify and credit your deposits and process your withdrawals. We do not receive or store full bank account numbers — only the masked references provided by the payment gateway.
• From identity verification services: kclub99 may use third-party KYC service providers to verify the authenticity of identity documents submitted during account registration or at the time of withdrawal requests.
• From fraud prevention services: kclub99 may receive risk signals from third-party fraud detection and anti-money laundering screening providers as part of our compliance obligations under our gaming licence.

4. Purposes of Processing Your Personal Data

kclub99 processes your personal data for the following purposes:

• Account management: to create, maintain, and administer your kclub99 account, including authentication and access control.
• Age and identity verification: to verify that you meet the minimum age requirement of 21 years and to confirm your identity in compliance with our licensing obligations and anti-money laundering requirements.
• Payment processing: to process your deposits and withdrawal requests via your chosen payment method, and to maintain accurate financial records of all transactions.
• Game provision and personalisation: to deliver the games and services available on the kclub99 Platform, and to personalise your experience based on your activity and preferences.
• Responsible gaming compliance: to implement and monitor the responsible gaming tools you have activated on your account, including deposit limits and self-exclusion, and to detect potential problem gambling behaviour in accordance with our licence obligations.
• Fraud prevention and security: to detect, prevent, and investigate fraudulent transactions, money laundering, multi-accounting, and other prohibited activities.
• Legal and regulatory compliance: to comply with the requirements of our gaming licence, applicable anti-money laundering legislation, and any requests from competent regulatory authorities.
• Customer support: to respond to your enquiries, resolve disputes, and manage complaints through our live chat and WhatsApp support channels.
• Marketing communications: where you have provided your consent, to send you information about kclub99 promotions, new games, and platform updates. You may withdraw this consent at any time by contacting support.
• Platform improvement and analytics: to analyse aggregate, anonymised usage data to improve the performance, stability, and usability of the Platform.

5. Legal Basis for Processing

kclub99 processes your personal data on the following legal bases:

• Contractual necessity: processing required to perform our obligations under the kclub99 Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: processing required to comply with our gaming licence conditions, anti-money laundering obligations, and tax reporting requirements.
• Legitimate interests: processing for fraud prevention, platform security, and aggregate analytics, where such interests are not overridden by your rights and interests.
• Consent: processing for optional marketing communications, where you have explicitly provided your consent. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6. Sharing of Personal Data

kclub99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors: FPX network operators, DuitNow, Touch 'n Go eWallet, and Boost, for the purpose of processing your financial transactions.
• KYC and identity verification providers: third-party services engaged to verify identity documents submitted in connection with account registration or withdrawal processing.
• Fraud prevention and AML screening services: third-party risk and compliance service providers used to detect prohibited activity and meet our regulatory obligations.
• IT and hosting service providers: cloud infrastructure and server hosting providers who process data on behalf of kclub99 under strict data processing agreements.
• Gaming software and live dealer providers: game content providers who may receive technical session data necessary to deliver game content within the Platform.
• Regulatory and law enforcement authorities: where required by applicable law, court order, or the terms of our gaming licence, kclub99 may disclose personal data to competent authorities.

All third-party service providers engaged by kclub99 are contractually obligated to process personal data only for the specified purpose and to maintain appropriate security standards.

7. International Data Transfers

7.1 As an internationally licensed gaming platform, kclub99 may transfer your personal data to third-party service providers located outside Malaysia. Where such transfers occur, kclub99 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent contractual protections — to maintain a standard of data protection consistent with this Policy.

7.2 Your data is never transferred to jurisdictions that do not offer adequate protections for personal data without appropriate safeguards being implemented.

8. Data Retention

8.1 kclub99 retains your personal data for as long as your account remains active and for a further period of five (5) years following account closure, unless a longer retention period is required by our gaming licence conditions, anti-money laundering obligations, or applicable law.

8.2 Financial transaction records, KYC documentation, and game history records are retained for a minimum of five (5) years in accordance with standard gaming industry regulatory requirements.

8.3 Where personal data is no longer required for the purpose for which it was collected and no legal retention obligation applies, kclub99 will securely delete or anonymise that data.

9. Cookies and Tracking Technologies

9.1 kclub99 uses cookies and similar client-side storage technologies to operate and improve the Platform. The categories of cookies used are:

• Strictly necessary cookies: required for the Platform to function, including session management and authentication. These cookies cannot be disabled.
• Functional cookies: used to remember your preferences, such as language and display settings, to improve your experience on return visits.
• Analytics cookies: used to collect aggregated, anonymised data about how users navigate the Platform, to help us identify areas for improvement. No individually identifiable data is shared with analytics providers.

9.2 kclub99 does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking technologies without your explicit consent.

9.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to use the Platform, including the ability to log in to your kclub99 account.

10. Security Measures

10.1 kclub99 implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data in transit between your device and kclub99 servers.
• Encryption of sensitive data at rest on kclub99's servers, including financial records and identity documents.
• One-way cryptographic hashing of all account passwords — passwords are never stored in readable form.
• Role-based access controls limiting internal access to personal data to staff with a documented business need.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication (2FA) available to all kclub99 account holders to protect against unauthorised account access.

10.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, kclub99 will notify affected individuals without undue delay and in accordance with our obligations under applicable data protection law.

11. Your Data Subject Rights

As a kclub99 member, you have the following rights with respect to your personal data:

• Right of access: the right to request a copy of the personal data kclub99 holds about you.
• Right to rectification: the right to request correction of inaccurate or incomplete personal data.
• Right to erasure: the right to request deletion of your personal data, subject to our legal retention obligations described in Section 8.
• Right to restriction of processing: the right to request that we limit the processing of your data in certain circumstances.
• Right to data portability: the right to receive your personal data in a structured, machine-readable format where technically feasible.
• Right to object: the right to object to processing carried out on the basis of legitimate interests, including direct marketing.
• Right to withdraw consent: where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact kclub99 customer support via live chat or email. We will respond to all data subject requests within thirty (30) calendar days of receipt. We may need to verify your identity before processing certain requests.

12. Children and Minors

12.1 The kclub99 Platform is strictly restricted to individuals aged 21 years and above. kclub99 does not knowingly collect or process personal data from individuals under the age of 21.

12.2 If we become aware that personal data has been collected from an individual under 21, we will immediately close the associated account, delete the personal data, and return any deposited funds to the originating payment method.

12.3 If you believe that a minor has registered an account on the Platform, please contact our support team immediately so that we can investigate and take appropriate action.

13. Third-Party Links

The kclub99 Platform does not contain links to third-party websites. All links on the Platform are internal to kclub99. kclub99 is not responsible for the privacy practices or content of any external websites that may link to or from the Platform through means outside our control.

14. Amendments to This Policy

14.1 kclub99 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. Material changes will be communicated to members via their registered email address and/or through an in-platform notification at least seven (7) days before the changes take effect.

14.2 Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or kclub99's data processing activities, please contact our Data Protection team through the following channels:

• Live Chat: available 24/7 directly on the kclub99 Platform.
• WhatsApp: 24/7 support via our official channel.
• Email: [email protected]

We are committed to resolving all privacy-related queries and requests promptly and transparently. kclub99 strives to ensure that every member — whether based in Kuala Lumpur, Penang, Johor Bahru, or elsewhere in Malaysia — can use the Platform with full confidence in how their personal data is handled.