Privacy Policy kw99 — Malaysia Personal Data Protection

Kw99 collects your personal information through several methods depending on how you interact with our platform. We only collect information that is genuinely necessary to provide a secure service, comply with legal requirements, and improve your overall experience.

Below are the categories of information we collect along with the purpose of collection:

We may also collect information from trusted third-party sources, such as identity verification service providers and fraud prevention agencies, solely for the purpose of verifying the accuracy of the information you provide to us.

Every piece of information we collect is used on a lawful basis and limited to the stated purposes. kw99 adheres to the principle of minimum necessary use — meaning we do not process your data beyond what is required for the identified purposes.

We use your personal information for the following purposes:

• Account Management: Creating, maintaining, and securing your kw99 account, including a secure login process and two-factor authentication.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions accurately and efficiently through approved payment channels.
• Legal Compliance: Fulfilling our obligations under Malaysia's PDPA, AML/CTF (Anti-Money Laundering/Counter-Terrorism Financing) requirements, and directives from relevant authorities.
• KYC Verification: Verifying your identity and minimum age of 18 before granting full access to the platform, particularly the withdrawal function.
• Platform Security: Detecting and preventing fraud, hacking, unauthorised access attempts, and activities that violate our Terms and Conditions.
• Customer Support: Providing technical support and resolving any enquiries or disputes you report to our team.
• Service Communications: Sending important notifications relating to your account, transactions, policy changes, and platform updates that directly affect you.
• Targeted Marketing: Sending promotional offers and bonuses tailored to your interests — only if you have given explicit consent to receive marketing communications.
• Analytics & Improvement: Analysing usage patterns on an aggregate and anonymised basis to improve platform design, introduce new features, and enhance the overall user experience.

Kw99 does not sell, rent, or disclose your personal information to third parties for their own commercial purposes. However, in operating the platform, we may need to share certain information with carefully selected business partners solely to enable us to provide services to you.

Categories of third parties that may receive your personal information on a limited basis include:

• Payment Providers: Licensed banking institutions, digital wallet operators, and approved payment processors required to process your deposits and fund withdrawals.
• KYC & Identity Verification Providers: Companies that assist us in verifying member identities and meeting relevant legal compliance requirements.
• Technology Service Providers: Cloud computing companies, cybersecurity providers, and software vendors that help us operate the platform securely and efficiently.
• Legal Authorities: Malaysian government authorities or other regulatory bodies when we are required to do so by law, court order, or official investigation.
• Game Providers: Third-party game developers providing game content on our platform may receive limited, anonymised session data for technical purposes.

All third parties we engage with are required to sign legally binding data protection agreements, ensuring they handle your information to a standard at least equivalent to kw99's own security standards.

Kw99 continuously invests in robust cybersecurity infrastructure to protect every member's personal data. We employ a multi-layered defence approach combining technology, procedures, and staff training to ensure the highest level of protection.

Technical and organisational security measures we implement:

As a kw99 member and an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have clear and enforceable rights over your personal data. kw99 is fully committed to respecting and facilitating the exercise of these rights.

• Right of Access: You have the right to obtain a copy of the personal information we hold about you, including details on how it is used and with whom it has been shared.
• Right to Rectification: If any information we hold is inaccurate, outdated, or incomplete, you have the right to request a correction or update to that information at no charge.
• Right to Restriction of Processing: In certain situations, you may request that we restrict how we process your data — for example, while you are disputing the accuracy of that information.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time, and we are required to cease such processing immediately.
• Right to Erasure: Under certain circumstances provided by law, you may request the deletion of your personal data from our systems. Please note that such requests may not be fully fulfilled if we have a legal obligation to retain that data.

To exercise any of these rights, you may contact kw99's Data Protection Officer (DPO) via 24/7 live chat or our official email. We will process each request within 14 working days and may require identity verification first for security purposes.

Kw99 uses cookies and similar tracking technologies to enhance user experience, maintain the security of your login session, and analyse platform usage patterns on an aggregate basis.

Types of cookies used on the kw99 platform:

You can manage cookie settings through your web browser. Please note that disabling essential cookies may affect platform functionality. For non-essential cookies, you may decline or withdraw consent at any time without any impact on your account.

Kw99 retains your personal information only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required by applicable laws and regulations in Malaysia.

• Active Account Data: Retained for the duration your account remains active, plus any mandatory retention period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax regulatory requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure or the end of the business relationship, as required under AML/CTF obligations.
• Support Communication Logs: Retained for 2 years for quality control purposes and resolution of any disputes that may arise.
• Session & Game Data: Technical logs are retained for 12 months for system security and audit purposes.

Once the designated retention period expires, your personal data will be securely deleted or anonymised in a manner that ensures it can no longer be associated with you as an individual.

Kw99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or developments in the services we offer.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date displayed at the top of this document.
• Publishing a clear notice on the kw99 platform homepage for a period of at least 14 days.
• Sending notifications via email or in-platform messages to all active members affected by such changes.

Continued use of the kw99 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request data deletion by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by kw99, you may contact our Data Protection Officer (DPO) through the following channels:

We are committed to responding to all privacy-related enquiries within 5 working days. For formal data rights requests, the processing period is up to 14 working days from the date your identity verification is received.