Privacy Policy 19klwin – How We Protect Your Personal Data

1 Introduction

19klwin ("we", "Platform") is committed to protecting the privacy and personal data of all users on our platform. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

We understand that entrusting personal information to any online platform requires a high level of confidence. That is why we are committed to being transparent about what data we collect, why we collect it, and how we use it — in plain language, not confusing legal jargon.

If you have any questions after reading this policy, our privacy team is ready to help. Contact details can be found at the end of this document.

2 Personal Data We Collect

19klwin collects personal data from various sources when you interact with our platform. Below is an overview of the types of data collected:

3 How We Use Your Data

The personal data collected is used for the following purposes:

• Account Management: Creating and managing your member account, including identity verification (KYC) and financial transaction processing.
• Service Provision: Enables you to access all features of the 19klwin platform including games, deposits, and withdrawals.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and security breaches.
• Legal Compliance: Fulfilling the legal and regulatory obligations applicable to the 19klwin platform.
• Customer Support: Providing effective and personalized technical support and customer service.
• Platform Communications: Sending you important information about your account, transactions, and policy updates.
• Responsible Gaming: Monitoring usage patterns for responsible gaming program purposes and protection of vulnerable members.
• Platform Improvement: Analyzing usage patterns in aggregate (not individual data) to improve platform performance and features.

4 Legal Basis for Data Processing

Every processing of personal data we carry out is grounded in at least one valid legal basis under PDPA 2010:

• Consent: You have given explicit consent for data processing for specific purposes, such as receiving marketing communications.
• Contract Performance: Processing is necessary to perform the contract between you and 19klwin — that is, to provide the platform services you registered for.
• Legal Obligation: Processing is necessary to comply with legal obligations applicable to 19klwin, including KYC and AML (Anti-Money Laundering) requirements.
• Legitimate Interest: Processing is necessary for the purposes of our legitimate interests or those of a third party, such as fraud prevention and platform security, provided those interests do not override your rights and interests.

5 Data Sharing with Third Parties

19klwin does not sell your personal data. We only share data with third parties under the following limited circumstances:

• Service Providers: Technical partners who help us operate the platform, such as payment service providers (FPX gateway, DuitNow), gaming software suppliers, and cloud service providers. They process data only on our instructions and are bound by strict confidentiality agreements.
• Regulatory Authority: When required by law or by direction of a competent authority such as Bank Negara Malaysia or a relevant law enforcement agency.
• Platform Security: Limited sharing with third-party fraud detection systems to protect platform integrity and all members.

6 Data Security

We implement comprehensive technical and organizational security measures to protect your personal data from unauthorized access, disclosure, modification, or destruction:

• 256-bit SSL encryption for all data in transit between your device and our servers.
• Encryption of data at rest for sensitive information stored in our databases.
• Role-based access control – only authorized staff may access member data, and only to the extent necessary to carry out their duties.
• Regular security audits by independent cybersecurity firms to identify and address vulnerabilities.
• 24/7 threat monitoring by our automated security systems to detect suspicious activity.
• Data privacy training mandatory for all staff who handle members' personal data.

While we take all reasonable measures, no digital security system is perfect. We encourage you to take security precautions on your end as well – such as using a strong password and not sharing your login credentials.

7 Data Retention Period

We retain your personal data only for as long as it is needed for the purpose it was collected, or as required by law. Below are general data retention period guidelines:

• Active Account Data: Retained for as long as your account remains active on the 19klwin platform.
• Data After Account Closure: Certain data, particularly financial records and KYC logs, may be retained for up to 7 years after account closure in accordance with Malaysia's PDPA and financial regulatory requirements.
• Support Communication Logs: Retained for 2 years for reference and service improvement purposes.
• Technical Data (Logs): System logs are typically retained for 12 months for security monitoring purposes.

Once the retention period expires, data will be securely deleted or permanently anonymized.

8 Your Rights as a Data Subject

Under the PDPA 2010 and our policy, you have the following rights regarding your personal data:

9 Cookies & Tracking Technologies

19klwin uses cookies and similar technologies to enhance your experience on the platform. Cookies are small data files stored on your device. We use three categories of cookies:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use the platform to help us improve the user experience. Data is collected in aggregate and without individual identification.
• Functional Cookies: Remembering your preferences and settings such as language and display options for a more personalized experience.

You can manage cookies through your web browser settings. Please note that disabling essential cookies may affect your ability to use certain features of our platform.

10 Children's Privacy

The 19klwin platform is intended exclusively for individuals aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21.

If we discover that personal data belonging to a child or an individual under 21 years of age has been collected without our knowledge, we will promptly take steps to delete that data and close the relevant account.

11 Amendments to Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in our practices, legal requirements, or platform improvements. The "Updated" date at the top of this document will be revised whenever amendments are made.

For significant amendments, we will provide clearer notice – whether through in-platform notifications, email to registered members, or a prominent notice on our homepage. Continued use of the 19klwin platform after amendments take effect will be considered acceptance of the updated policy.

12 Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding how we manage your personal data, you may reach us through the following channels:

We are committed to handling every privacy inquiry with seriousness and professionalism. If you are not satisfied with our response, you have the right to file a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or any relevant regulatory authority.