Privacy Policy 19klwin — Personal Data Protection for Malaysia Members

1Personal Information We Collect

We collect various types of personal information from you when you register and use the 19klwin platform. The types of information collected depend on how you interact with our platform.

1.1 Information You Provide Directly

1.2 Information Collected Automatically

• Your IP address and network information when you access the platform.
• Device type, operating system, phone model and app version used.
• Gaming activity history, access dates and times, and session duration.
• Cookie data and device identifiers to enhance the user experience.
• Transaction logs including deposits, withdrawals and wagering activity.

2How We Use Your Information

The personal data we collect is used responsibly for legitimate and clearly defined purposes. We do not use your information for any purpose beyond what is described here.

2.1 Platform Operations

• Create and manage your member account at 19klwin.
• Process deposits and withdrawals securely and accurately.
• Verify your identity through the KYC process to meet legal requirements.
• Provide effective and responsive customer support.

2.2 Security & Compliance

• Detect and prevent fraud, money laundering and suspicious activity.
• Comply with applicable legal and regulatory obligations.
• Maintain audit logs for security and dispute resolution purposes.

2.3 Service Improvement

• Analyse usage patterns to improve platform design and user experience.
• Tailor promotional offers based on your preferences and gaming habits (with your consent).
• Send notifications about the latest promotions, platform updates and important account information.

3Third-Party Information Sharing

19klwin does not sell or rent your personal data to any party. However, in the normal course of platform operations, we may share certain information with trusted parties in the following limited circumstances:

3.1 Service Providers

We work with responsible and trusted third-party service providers for specific operations such as payment processing, platform analytics and IT infrastructure. All service providers are bound by strict data protection agreements and may only use your data for the specified service purposes.

3.2 Legal Requirements

We may need to disclose your personal information if required by law, court order or direction from a competent authority. This includes compliance with anti-money laundering (AML) and counter-terrorism financing (CTF) requirements.

3.3 Protection of Interests

In cases where 19klwin needs to protect the legitimate interests of the platform, prevent fraud, or defend legal claims, we may share necessary information with relevant parties, including law firms or independent investigators.

4Cookies and Tracking Technologies

The 19klwin platform uses cookies and similar tracking technologies to enhance your experience, maintain your login session, and understand how the platform is used. Below are the types of cookies we use:

• Essential Cookies: Required for core platform operations such as login and session security. These cookies cannot be disabled.
• Performance Cookies: Collect information about how you use the platform to help us improve our services. Data is collected anonymously.
• Functional Cookies: Remember your preferences such as language choice and display settings for a more personalised experience.
• Analytics Cookies: Help us understand overall platform usage patterns for product improvement purposes.

You can manage cookie settings through your browser settings. However, disabling certain cookies may affect the functionality of the 19klwin platform.

5Data Security

The security of your personal information is a responsibility we take very seriously. 19klwin implements a range of technical and organisational measures to protect your data from unauthorised access, alteration, disclosure or destruction.

5.1 Technical Measures

• Data in transit is encrypted using 256-bit TLS/SSL protocols.
• Passwords are stored in hashed form using strong cryptographic algorithms — we do not store passwords in plain text.
• Multi-layered firewalls and an intrusion detection system that monitors network traffic 24/7.
• Regular penetration testing by independent security experts to identify system vulnerabilities.
• Two-factor authentication (2FA) is available for all member accounts as an added layer of security.

5.2 Organisational Measures

• Mandatory data security training for all 19klwin staff who handle personal information.
• Minimum access control policy — staff may only access data required for their role.
• Internal data security audits are conducted every six months.
• A clear data incident response procedure to ensure any breach is addressed promptly and effectively.

6Data Storage & Deletion

We retain your personal information for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law.

• Active account data: Retained for as long as your account is active on 19klwin.
• Financial record data: Retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial records and AML.
• Activity logs: Retained for 2 years for security and dispute resolution purposes.
• Marketing data (with consent): Retained until you withdraw your consent.

When data is no longer needed, it is securely deleted or anonymised using methods that ensure it cannot be recovered or re-linked to you.

7Your Rights as a Data Subject

As a 19klwin member, you have certain rights regarding your personal data under Malaysia's PDPA. We fully respect and support the exercise of these rights.

To exercise any of the above rights, contact our data protection team via email at [email protected] or through live chat in the app. We will respond to your request within 30 business days.

8Children's Data Protection

19klwin services are intended for individuals aged 18 and above only. We do not knowingly collect or process personal data from anyone under the age of 18.

If you believe a minor has provided us with personal information without parental or guardian consent, please contact us immediately and we will take steps to remove that information from our systems as soon as possible.

9Amendments to This Privacy Policy

19klwin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform operations. All changes will be posted on this page along with the updated date.

For significant amendments that materially affect how we handle your data, we will notify you via in-app notification or your registered email at least 14 days before the changes take effect. Continued use of the platform after the effective date of any amendment constitutes acceptance of the updated policy.

10Contact Our Privacy Team

If you have any questions, concerns or wish to exercise your rights regarding personal data, the 19klwin privacy team is ready to assist you.

For general enquiries, you may also refer to the FAQ us. For issues related to terms of use, please read the Terms and Conditions us.