At kl99, your privacy is not merely a legal obligation — it is a responsibility we take to heart. This document transparently explains how we collect, use, store, and protect your personal information at all times.
Six core pillars underpinning kl99's approach to ensuring the privacy and information security of every member.
All data transmitted between your device and kl99's servers is protected by 256-bit SSL encryption — the same security standard used by leading banking institutions in Malaysia. No third party can intercept or read your information during transmission.
Your personal information is stored on servers protected by multi-layered access controls, next-generation firewalls, and real-time threat monitoring. Internal access is granted only to staff who genuinely require it for service purposes.
Kl99 does not sell, rent, or share members' personal information to any third party for marketing purposes without your explicit consent. Your data belongs to you — it is not our business commodity.
As a kl99 member, you have the right to access, correct, and request deletion of your personal data. All such requests are processed by our dedicated privacy team within the timeframes prescribed by law.
All of kl99's data protection practices fully comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia. We conduct periodic privacy audits to ensure ongoing compliance with all applicable legal requirements.
In the event of any data breach affecting your information, kl99 is committed to notifying affected members within the prescribed timeframe and taking immediate remedial steps to minimise any harm.
Any privacy-related enquiries can be submitted to our team via live chat within your account.
To provide a safe, fair, and personalised service to every member, kl99 collects several categories of information during the registration process and platform usage. We only collect information that is genuinely necessary for the stated purposes — nothing more.
When you register a kl99 account, we will ask for your full name as shown on your official identification document, an active mobile number registered in Malaysia, a valid and active email address, your date of birth for age verification, and a password of your own creation (stored in hashed form that is unreadable by anyone, including kl99 staff).
To facilitate deposit and withdrawal transactions, we collect information relating to the payment methods you use. This includes your bank account number or the registered account holder name of your e-wallet. It is important to note that kl99 never stores credit card or debit card information directly in our systems — all card processing is handled entirely by licensed third-party payment gateways that comply with PCI-DSS standards.
Automatically, the kl99 system logs certain technical information when you use our platform, including your IP address, web browser type and version, device type and operating system, pages you visit within the platform, login session time and duration, and geolocation information at the state or city level (not precise location) for security and access verification purposes.
| Data Categories | Example Information | Primary Purpose |
|---|---|---|
| Personal Identity | Name, date of birth, phone number | Registration, KYC, age verification |
| Financial Data | Bank account number, e-wallet | Processing deposits & withdrawals |
| Technical Data | IP address, browser type, device | Security, fraud detection |
| Usage Data | Pages visited, session duration | User experience improvement |
| Communication Data | Support chat logs, email | Customer service records |
Every piece of information collected by kl99 is used for specific, lawful, and transparent purposes. We do not use your data for any purpose unrelated to the services you use. The following are the primary ways we use your information:
Your data is used to create and maintain your account, process financial transactions accurately and securely, verify your identity during login or the KYC process, and send important account notifications such as deposit confirmations, withdrawals, and security changes.
Technical information and account usage patterns are continuously analysed by kl99's monitoring systems to detect and prevent suspicious activity, including unauthorised login attempts, identity fraud, multi-account usage, and bonus system exploitation. This is to protect your interests and the overall integrity of the platform.
We use your email address and phone number to send important service-related communications, respond to customer support inquiries, notify you of changes to our terms or policies, and share promotional offers and bonuses (subject to your marketing preferences).
Marketing Note: You may opt out of marketing communications at any time by updating your notification settings in your account or contacting our support team. However, important service communications such as transaction confirmations and security alerts will continue to be sent.
Kl99 takes an extremely cautious approach when it comes to sharing members' personal information. Our core principle is simple: we do not share your data unless there is a legitimate need, necessity, or legal obligation to do so.
In operating the platform, kl99 works with a number of trusted third-party service providers, including licensed payment gateway providers, cloud hosting providers that meet high security standards, licensed gaming software providers, and data analytics companies that help us understand platform usage patterns. All third parties are required to sign a non-disclosure agreement (NDA) and comply with privacy standards equivalent to those of kl99.
Kl99 will disclose members' personal information when required by Malaysian law or a valid court order, including requests from competent authorities in investigations involving financial crime, money laundering, or other illegal activities. In all such cases, kl99 will notify the affected member (where legally permitted) before any disclosure is made.
We Do Not Sell Your Data: kl99 has never and will never sell, rent, or trade members' personal information to any marketing companies, data brokers, or commercial third parties for advertising or marketing purposes without your explicit consent. This is our absolute commitment.
Kl99 uses cookies and similar tracking technologies to ensure a smooth, secure, and personalised user experience. Understanding how cookies work helps you make more informed decisions about your privacy.
Essential Cookies: These cookies are required for core platform functions such as login sessions, security, and language preferences. Without them, the platform cannot operate properly and you will not be able to access your account.
Performance Cookies: Used to collect information about how you use the platform — which pages are visited most often, how long you spend in each section, and any technical errors that may occur. This data is used in aggregate and does not identify you individually.
Functional Cookies: Enables the platform to remember your preferences such as language, display settings, and other personal preferences to ensure a more comfortable experience each time you log in.
You may manage or delete cookies through your web browser settings at any time. However, please note that disabling essential cookies may affect your ability to log in or fully use certain platform features.
Protecting your personal information from unauthorised access, loss, misuse, or disclosure is kl99's highest priority. We continuously invest in the latest security infrastructure to ensure your data is always protected.
The technical security measures we implement include data encryption in transit using TLS 1.3, data encryption at rest using AES-256, two-factor authentication (2FA) for member account access and internal staff access, real-time security threat monitoring 24 hours a day, penetration testing conducted periodically by independent security experts, and strict data backup procedures to ensure continuity of service.
Shared Responsibility: While kl99 provides robust security infrastructure, the safety of your account also depends on your own actions. Always use a strong, unique password, enable 2FA, and never share your login credentials with anyone — including anyone claiming to be kl99 staff.
As a data subject under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have several important rights regarding your personal information held by kl99. We are committed to facilitating the exercise of these rights.
You have the right to request a copy of all personal information we hold about you. This request will be processed within 21 working days.
If any personal information we hold about you is inaccurate or out of date, you have the right to request immediate correction.
You may request the deletion of your personal data under certain circumstances, subject to applicable legal record-keeping obligations.
You have the right to object to the processing of your personal data for direct marketing purposes at any time, without having to provide any reason.
You may request your personal data in a structured, machine-readable format for transfer to another service provider.
Under certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved.
How to Exercise Your Rights: To exercise any of the above rights, please contact the kl99 Data Protection Officer (DPO) team via live chat within your account or by email at [email protected]. Please include proof of identity to allow us to process your request securely.
Kl99 does not retain your personal information for longer than necessary for the stated purposes, or beyond the period required by applicable Malaysian law.
Generally, active account data is retained for the duration of your membership. Following account closure, financial transaction records are kept for a minimum of 7 years in accordance with Malaysia's financial and tax legislation. Technical log data that does not contain personally identifiable information is retained for 12 months. Customer support communication records are retained for 3 years for reference and dispute resolution purposes.
Inactive Account: Accounts showing no activity for 24 consecutive months will be considered inactive. kl99 will send an email notification before taking any action regarding the data of such inactive accounts.
Kl99 strictly prohibits the registration and use of the platform by individuals under 18 years of age. Our platform is not designed for, and does not intentionally collect personal information from, minors.
Should we discover that personal information of an individual under the age of 18 has been collected without valid parental or guardian consent, we will take immediate steps to delete that information from our systems and terminate the account in question. If you have information that a child has registered on our platform, please contact us immediately.
The kl99 platform may contain links to third-party websites or services, particularly licensed game providers we partner with. This Privacy Policy applies solely to the kl99 platform and does not cover the privacy practices of those third parties.
Kl99 is not responsible for the privacy practices or content of any third-party websites you may access through links on our platform. We encourage you to read the privacy policy of each website you visit separately.
Kl99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or improvements based on member feedback. The latest version of this Privacy Policy is always available on this page, with the most recent update date clearly stated.
For material and significant changes, kl99 will send a notification to members via their registered email at least 14 days before the changes take effect. Your continued use of the kl99 platform after the effective date of such changes will be deemed as your acceptance of the updated Privacy Policy.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, please contact the kl99 Data Protection Officer (DPO) through the following channels:
Our team will endeavour to respond to all privacy-related enquiries within 3–5 business days. For more complex cases requiring in-depth investigation, the full response period may take up to 21 business days in accordance with PDPA requirements.
kl99's commitment: We value the trust you place in us by sharing your personal information. Protecting your privacy is not merely a legal obligation — it is central to the core values of kl99 as a responsible entertainment platform trusted by over 500,000 members across Malaysia.
With bank-grade data protection and a full commitment to your privacy, kl99 is an online entertainment platform you can trust completely. Register today and enjoy a safe, fair, and enjoyable experience.