kclub99 Privacy Policy

This Privacy Policy ("Policy") describes how kclub99 ("kclub99", "we", "us", "our") collects, uses, discloses, stores, and protects the personal data of individuals who access or use the kclub99 Platform at kclub99.org and any associated services (collectively, the "Platform"). This Policy applies to all registered members, visitors, and other users of the kclub99 Platform.

By using the kclub99 Platform, you confirm that you have read and understood this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform. This Policy should be read together with the kclub99 Terms & Conditions.

1. Introduction and Data Controller

1.1 kclub99 operates the online gaming and sports betting Platform at kclub99.org. For the purposes of this Policy, kclub99 is the data controller responsible for the personal data you provide when registering, playing, or otherwise interacting with the Platform.

1.2 kclub99 takes its data protection obligations seriously and is committed to handling all personal data in accordance with applicable privacy laws and principles, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

1.3 This Policy is effective as of 12 June 2026. The most current version of this Policy will always be available at kclub99.org/privacy-policy.

2. Personal Data We Collect

2.1 kclub99 collects the following categories of personal data from users of the Platform:

2.1.1 Registration and Identity Data

• Full legal name;
• Date of birth (for age verification purposes);
• Malaysian mobile telephone number;
• Username chosen at registration;
• Email address (if provided).

2.1.2 Identity Verification (KYC) Data

• Government-issued identity document (MyKad, passport, or equivalent);
• Proof of payment method ownership (e.g., screenshot of e-wallet account, bank statement excerpt);
• Any additional documentation requested by kclub99 for fraud prevention or regulatory compliance purposes.

2.1.3 Financial and Transaction Data

• Deposit and withdrawal transaction records;
• Payment method identifiers (e-wallet account reference, bank account last digits — never full card or account numbers);
• Account balance history;
• Bonus and promotion redemption records.

2.1.4 Gaming Activity Data

• Game sessions played, bet amounts, game outcomes, and wagering history;
• Sports bets placed, odds accepted, and settlement records;
• Session timestamps and duration;
• Active responsible gaming settings and their history.

2.1.5 Technical and Device Data

• IP address at the time of login and during active sessions;
• Browser type and version;
• Device type and operating system;
• Session identifiers and authentication tokens.

2.1.6 Communications Data

• Records of live chat conversations with kclub99 support;
• Email correspondence with kclub99;
• Records of OTP SMS messages sent to your registered mobile number.

3. How We Collect Your Data

3.1 kclub99 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, use live chat support, or update your account settings;
• Automatically — when you use the Platform, through server logs, session management systems, and cookies or similar technologies that record technical and device data;
• From third parties — from payment processors confirming transaction completion, and from identity verification service providers where KYC checks are conducted.

4. How We Use Your Personal Data

4.1 kclub99 uses personal data for the following purposes:

Purpose	Data Used
Account creation and management	Registration data, identity data
Age verification and eligibility checks	Date of birth, KYC documents
Processing deposits and withdrawals	Financial data, identity data
Fraud detection and prevention	Technical data, transaction data, gaming data
Delivering and improving gaming services	Gaming activity data, technical data
Customer support	All relevant account and communications data
Sending transactional communications (OTP, withdrawal confirmations)	Contact data
Sending marketing communications (where opted in)	Contact data, gaming preferences
Responsible gaming monitoring and intervention	Gaming activity data, account settings
Legal and regulatory compliance	All categories as required

5. Legal Basis for Processing

5.1 kclub99 processes personal data on the following legal bases:

• Contract performance — processing necessary to provide the kclub99 Platform services in accordance with the Terms & Conditions you have accepted;
• Legal obligation — processing necessary to comply with applicable laws, including anti-money laundering obligations and age verification requirements;
• Legitimate interests — processing for fraud prevention, platform security, and service improvement, where those interests do not override your fundamental rights;
• Consent — processing of data for marketing communications, where you have expressly opted in.

6. Sharing Your Personal Data

6.1 kclub99 does not sell, rent, or trade your personal data to third parties for their marketing purposes under any circumstances.

6.2 kclub99 may share your personal data with the following categories of third parties, only to the extent necessary for the stated purpose:

• Payment processors — Touch n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, 7-Eleven, and cryptocurrency payment processors — for the purpose of processing your deposits and withdrawals;
• Identity verification providers — third-party KYC services engaged to verify identity documents and satisfy age verification requirements;
• Game providers — Pragmatic Play, PG Soft, Evolution Gaming, and other licensed game studios — limited technical data necessary to deliver game sessions;
• Fraud prevention services — third-party fraud detection platforms that analyse transactional and behavioural patterns to identify suspicious activity;
• Legal and regulatory authorities — where kclub99 is required by law to disclose data to a regulatory body, law enforcement agency, or court of competent jurisdiction.

6.3 All third parties with whom kclub99 shares personal data are required to handle that data in accordance with applicable privacy laws and are prohibited from using it for any purpose other than the one for which it was shared.

7. Data Retention

7.1 kclub99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and as required by applicable legal and regulatory obligations.

7.2 As a general principle:

• Account and transaction records are retained for a minimum of five (5) years following account closure, in accordance with standard financial record-keeping obligations;
• KYC and identity verification documents are retained for the duration of the account relationship and for a minimum of five (5) years thereafter;
• Gaming activity logs are retained for a minimum of two (2) years following the relevant game session;
• Communications records (live chat logs, email correspondence) are retained for up to two (2) years unless a longer period is required by an ongoing dispute or legal proceeding.

7.3 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with kclub99's data disposal procedures.

8. Cookies and Similar Technologies

8.1 kclub99 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies — Required for the Platform to function. These include session authentication cookies that keep you logged in during your gaming session. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies — Remember your Platform preferences, such as language settings and game lobby filters. These improve your experience but are not essential to Platform operation.
• Analytics cookies — Collect aggregated, anonymised data about how users navigate and interact with the Platform. This data is used to improve Platform design and performance. Individual users are not identifiable from analytics data.

8.2 You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in to your kclub99 account.

8.3 kclub99 does not use third-party advertising cookies or permit third-party advertisers to place cookies on the Platform.

9. Data Security

9.1 kclub99 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and the kclub99 Platform;
• Encrypted storage of sensitive account data at rest;
• Access controls limiting data access to authorised personnel with a legitimate business need;
• Regular security reviews and penetration testing of the Platform infrastructure;
• OTP-based authentication for sensitive account actions including password reset and high-value withdrawals.

9.2 Despite these measures, no online system can guarantee absolute security. In the event of a data breach that is reasonably likely to result in a risk to your rights and interests, kclub99 will notify affected users in accordance with applicable notification obligations.

10. Your Data Rights

10.1 Subject to applicable law, registered kclub99 players have the following rights in respect of their personal data:

• Right of access — You may request a copy of the personal data kclub99 holds about you;
• Right of rectification — You may request correction of inaccurate or incomplete personal data;
• Right to erasure — You may request deletion of your personal data, subject to kclub99's legal retention obligations;
• Right to restriction — You may request that kclub99 restrict processing of your data in certain circumstances;
• Right to data portability — You may request a copy of your data in a structured, commonly used format in certain circumstances;
• Right to withdraw consent — Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10.2 To exercise any of these rights, please contact the kclub99 support team via live chat or email. kclub99 will respond to data rights requests within a reasonable timeframe and in accordance with applicable legal obligations. kclub99 may require identity verification before actioning a data request.

11. Children's Privacy

11.1 The kclub99 Platform is strictly intended for individuals aged 21 years and above. kclub99 does not knowingly collect personal data from persons under the age of 21. If kclub99 becomes aware that personal data has been collected from a person under 21, that data will be deleted and the associated account closed immediately.

11.2 If you are a parent or guardian and believe that a person under 21 has created an account with kclub99, please contact us immediately via live chat or email so that appropriate action can be taken.

12. Third-Party Links

12.1 The kclub99 Platform does not contain links to third-party websites. This Policy applies exclusively to data collected and processed by kclub99 through the Platform at kclub99.org. kclub99 is not responsible for the privacy practices of any third-party service providers whose services are accessed as part of Platform functionality (e.g., payment processors, game studios), and we encourage you to review their respective privacy policies where applicable.

13. Amendments to This Policy

13.1 kclub99 reserves the right to amend this Privacy Policy at any time. The updated Policy will be published on the Platform with a revised effective date. Where changes are material, kclub99 will communicate the changes to registered players via the contact details held on the account.

13.2 Continued use of the kclub99 Platform following publication of an updated Policy constitutes acceptance of the revised terms. If you do not agree with any amendment, you should discontinue use of the Platform and may request account closure.

14. Contact Information

14.1 For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by kclub99, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the kclub99 Platform
• Email: [email protected]

14.2 kclub99 aims to acknowledge all privacy-related written enquiries within two (2) business days and to resolve substantive data rights requests within a reasonable period thereafter, depending on complexity.

Note: This Privacy Policy governs the online entertainment Platform operated under the kclub99 brand at kclub99.org. kclub99 is a platform for players aged 21 and above. By using kclub99, you confirm that you meet the age requirement and that you have read and understood this Privacy Policy.