Privacy Policy kl99 —
Data Protection & Member Security

Kl99 is an online entertainment and gaming platform committed to protecting every member's privacy at all times. This Privacy Policy outlines our approach to personal data protection — a responsibility we take seriously and never treat lightly.

This document applies to all users accessing the website https://kl99.bz, the kl99 mobile app, and any services or features we offer from time to time. By continuing to use our platform after reading this policy, you provide clear and informed consent to the practices described herein.

We recognise that trust is the foundation of the relationship between kl99 and each of our members. We therefore manage your personal data with full integrity, transparency, and responsibility — not merely to meet legal requirements, but because it is the right thing to do.

Kl99 collects your personal information through various means — directly when you register and use the platform, automatically during gaming sessions, and in some cases through trusted third parties such as payment providers. Below is a summary of the types of data we collect:

Every piece of data collected by kl99 has a clear and legitimate purpose. We do not collect excessive data or data unrelated to the services we offer. The following are the primary purposes for which your personal data is used:

• Account management — creates, verifies, and maintains your member account on the kl99 platform.
• Transaction processing — processes deposits, fund withdrawals, and all financial transactions securely and accurately.
• Identity verification (KYC) — fulfils legal compliance obligations including fraud prevention and anti-money laundering.
• Customer service — provides relevant and accurate assistance to members via Live Chat, email, and other support channels.
• Platform security — detects and prevents suspicious activity, fraud, or account intrusion attempts.
• Service improvement — analyses usage patterns to improve the overall gaming experience and platform performance.
• Marketing communications — sends information about relevant promotions, bonuses, and special offers, subject to your communication preferences.
• Legal compliance — fulfils reporting and verification obligations required by the relevant authorities.

Kl99 will not use your personal data for purposes not stated above without first obtaining your additional consent.

Kl99 understands that your trust is our most valuable asset. We do not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where data sharing is necessary and lawful:

• Payment service providers — transaction information required to process your deposits and withdrawals is shared with certified and trusted payment gateways.
• Game service providers — certain gaming session data is shared with our game software providers solely for technical purposes and to ensure smooth gameplay.
• Identity verification services — KYC data is shared with registered and trusted third-party identity verification service providers for verification purposes only.
• Legal authorities — kl99 will disclose personal data when required by court order, directive from law enforcement authorities, or any applicable legal obligation.
• Business transfers — in the event of a merger, acquisition, or transfer of kl99 assets, member data may be transferred to the new entity, subject to prior notice to members.

All third parties that receive kl99 members' personal data are bound by strict confidentiality agreements and are not permitted to use that data for any purpose other than those specified by kl99.

Protecting your personal data from unauthorized access, loss, or misuse is a core technical priority at kl99. We continually invest in the latest cybersecurity infrastructure to ensure the highest level of protection for every member.

• 256-bit SSL Encryption — all communications between your device and kl99 servers are fully encrypted using the latest TLS protocol.
• Multi-layered firewall protection — the kl99 server infrastructure is protected by a multi-layered firewall system that monitors and filters incoming and outgoing traffic in real time.
• Intrusion detection system (IDS/IPS) — kl99 operates intrusion detection and prevention systems running 24/7 to identify and block cyber threats before they reach member data.
• Two-factor authentication (2FA) — members are encouraged to enable two-factor authentication for an added layer of security on their accounts.
• Regular security audits — kl99 conducts regular penetration testing and security audits by independent security experts to identify and remediate any system vulnerabilities.
• Internal access controls — only kl99 staff with a legitimate operational need are granted access to members' personal data, and all access is logged and monitored.

While kl99 takes all reasonable precautions, no security system is entirely foolproof. Members therefore play an important role in protecting their own accounts by using strong passwords and not sharing their login credentials with anyone.

Kl99 uses cookies and similar tracking technologies to enhance the user experience and ensure smooth platform functionality. Cookies are small text files stored on your device when you visit the kl99 website.

• Essential Cookies — required for basic platform operations such as login session authentication and security. These cookies cannot be disabled as they are core to platform functionality.
• Preference Cookies — saves your preferences such as language, display settings, and game preferences so you do not need to reconfigure them each time.
• Analytics Cookies — helps kl99 understand how members use the platform so we can continuously improve the user experience. This data is collected in aggregate and without personal identification.
• Security Cookies — helps detect and prevent suspicious activity or unauthorised login attempts on your account.

You may manage or disable cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality or user experience of the kl99 platform.

Under Malaysia's PDPA and kl99's internal policies, you have the following rights regarding your personal data:

• Right of Access — you have the right to request a copy of the personal data we hold about you at any time.
• Right to Rectification — if any data we hold is inaccurate or out of date, you have the right to request its prompt correction.
• Right to Erasure — under certain circumstances, you have the right to request the deletion of your personal data, subject to legal record-keeping obligations that may override this request.
• Right to Object to Processing — you have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent — you may withdraw previously given consent for specific data processing, although this does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to Lodge a Complaint — if you are dissatisfied with how kl99 handles your personal data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of the above rights, please contact the kl99 support team via Live Chat 24/7 or submit your request to us. kl99 will respond to privacy-related requests within 14 business days.

Kl99 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. kl99's general data retention policy is as follows:

• Active account data — retained for as long as your account remains active on the kl99 platform.
• KYC and identity verification data — retained for a minimum of five (5) years after account closure or the date of the last transaction, in accordance with anti-money laundering legal requirements.
• Financial transaction records — retained for seven (7) years in accordance with standard financial reporting requirements.
• Customer support communication logs — retained for three (3) years for dispute resolution and service improvement purposes.
• Technical data and system logs — retained for ninety (90) days for security and technical troubleshooting purposes.

Once the specified retention period has lapsed, your personal data will be securely deleted or anonymized in accordance with kl99's internal procedures.

Kl99 maintains a zero-tolerance policy against use of the platform by individuals under 18 years of age. The kl99 platform is intended exclusively for adults aged 18 and above.

Kl99 does not intentionally collect or store personal data from minors. Should we discover or become aware that we have collected personal data from an individual under 18 years of age, we will take immediate action to delete that data and close the relevant account.

Kl99 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or platform operational improvements. Any amendments take effect immediately upon being published on the kl99 platform.

For amendments deemed material or significantly affecting members' privacy rights, kl99 will endeavour to notify members via in-platform notifications or email at least seven (7) days before the amendment takes effect.

Every member is responsible for reviewing this Privacy Policy periodically. The date of the most recent amendment is always displayed at the top of this document. Continued use of the kl99 platform after an amendment is published constitutes acceptance of the updated privacy terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or how kl99 handles your personal data, our team is ready to assist you through the following channels:

• Live Chat 24/7 — the fastest way to receive a response from the kl99 support team.
• Email — send privacy-related enquiries to [email protected] and we will respond within 14 business days.

For issues requiring immediate attention, such as suspected data security breaches, please use Live Chat for a faster response. kl99 takes all privacy-related issues very seriously and is committed to resolving every enquiry thoroughly and in a timely manner.