kstar99 Privacy Policy

1. Introduction

kstar99 ("kstar99", "we", "us", "our") operates the online gaming platform accessible at kstar99.club ("Platform"). This Privacy Policy ("Policy") describes how kstar99 collects, uses, stores, discloses, and protects personal information relating to individuals who register as Members, visit the Platform, or otherwise interact with kstar99's services ("you", "your").

By creating a kstar99 account or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not use the kstar99 Platform.

This Policy applies to all personal data processed by kstar99 in connection with the Platform, regardless of the medium through which you access it (desktop browser, mobile browser, or any future dedicated application). This Policy should be read alongside the kstar99 Terms & Conditions, which govern the overall relationship between kstar99 and its Members.

2. Personal Data We Collect

kstar99 collects the following categories of personal data from Members and Platform visitors:

kstar99 does not collect special category data (such as health, biometric, or political data) unless explicitly required by a specific legal obligation and with your prior informed consent.

3. How We Collect Your Data

kstar99 collects personal data through the following means:

• Direct collection: Information you provide when creating a kstar99 account, completing KYC verification, making a deposit or withdrawal request, or contacting kstar99 support.
• Automated collection: Technical and usage data collected automatically as you interact with the Platform, including through cookies, server logs, and session tracking technologies.
• Third-party collection: Identity and financial data received from payment processors (such as Touch 'n Go, Boost, or bank FPX gateways) as part of transaction verification, and from identity verification service providers during the KYC process.
• Inferred data: Analytical profiles developed from your usage patterns on the Platform solely for the purpose of personalising your gaming experience and for responsible gaming monitoring.

4. Purpose of Data Processing

kstar99 processes personal data for the following specific purposes:

• To create, maintain, and administer your kstar99 Member account.
• To verify your identity and age (21+) in compliance with applicable gaming regulations and anti-money-laundering obligations.
• To process deposits, withdrawals, and bonus allocations accurately and securely.
• To provide customer support and respond to account-related enquiries.
• To detect, investigate, and prevent fraud, bonus abuse, money laundering, and other prohibited conduct described in the kstar99 Terms & Conditions.
• To enforce kstar99's responsible gaming policies, including monitoring for problem gambling indicators and applying Member-requested deposit limits or self-exclusions.
• To send transactional communications relating to your account (deposit confirmations, withdrawal updates, security alerts). kstar99 does not send unsolicited marketing emails to Members who have not opted in.
• To improve the Platform through aggregate, anonymised analytics of user behaviour and technical performance.
• To comply with legal and regulatory obligations applicable to kstar99's licensed operations.

5. Legal Basis for Processing

kstar99 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil kstar99's obligations to you as a Member under the Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable law, including anti-money-laundering regulations, age verification requirements, and record-keeping obligations imposed by kstar99's licensing authority.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytical improvement of the Platform, where such processing does not override your fundamental rights and freedoms.
• Consent: Processing for optional communications (such as promotional newsletters) where you have provided explicit, informed consent. You may withdraw this consent at any time by updating your communication preferences in the kstar99 account dashboard.

6. Data Sharing & Disclosure

kstar99 does not sell, rent, or trade your personal data to any third party for commercial purposes. kstar99 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: Touch 'n Go eWallet, Boost, and banking partners (Maybank, CIMB, Public Bank, RHB) solely for the purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC and age verification service providers engaged by kstar99 to fulfil regulatory obligations.
• Game providers: Certified game studios and live casino platform providers who supply game content to kstar99 may receive anonymised session data for technical integration and RNG certification purposes.
• Legal authorities: kstar99 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by law, court order, or in response to a lawful investigation.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by kstar99, subject to strict confidentiality obligations.

All third-party data processors engaged by kstar99 are required to implement data protection standards no less stringent than those applied by kstar99 itself.

7. Cookies & Tracking Technologies

The kstar99 Platform uses cookies and similar tracking technologies to ensure proper functionality, maintain session security, and gather anonymised analytical data. The following cookie categories are used:

• Strictly necessary cookies: Required for the Platform to function, including session authentication tokens and security cookies. These cannot be disabled.
• Functional cookies: Store your language preferences and interface settings to personalise your Platform experience across sessions.
• Analytical cookies: Collect anonymised data about how Members navigate the Platform to help kstar99 improve usability and performance. No personally identifiable data is included in analytical cookie data.

kstar99 does not use advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality and may prevent you from logging in to your kstar99 account.

8. Data Retention

kstar99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any overriding legal obligation requiring longer retention. The following general retention guidelines apply:

• Account data: Retained for the duration of active membership plus a minimum of 5 years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 7 years from the transaction date in accordance with financial record-keeping regulations.
• KYC and identity documents: Retained for the period required by applicable regulatory obligations, typically 5 years from account closure.
• Support communications: Retained for 2 years from the date of the communication, unless required longer for ongoing dispute or legal proceedings.
• Marketing consent records: Retained until consent is withdrawn and for 1 year thereafter as evidence of the consent history.

Upon expiry of the applicable retention period, kstar99 will securely delete or anonymise the relevant personal data.

9. Data Security

kstar99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all connections between your device and the kstar99 Platform.
• Passwords stored using industry-standard cryptographic hashing — plain-text passwords are never retained.
• Two-factor authentication (OTP via registered mobile) available to all Members and strongly recommended.
• Role-based access controls restricting internal staff access to personal data on a strict need-to-know basis.
• Regular security audits and penetration testing by qualified third-party security professionals.
• Encrypted storage for all KYC documents and financial records.

Despite these measures, no data transmission over the internet is guaranteed to be 100% secure. In the event of a data security incident that poses a risk to your rights and freedoms, kstar99 will notify affected Members without undue delay in accordance with applicable breach notification requirements.

10. Your Data Rights

As a data subject, you have the following rights in relation to your personal data held by kstar99. To exercise any of these rights, contact kstar99 support with a written request:

• Right of access: Request a copy of the personal data kstar99 holds about you.
• Right to rectification: Request correction of any inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to kstar99's legal retention obligations (see Section 8).
• Right to restriction: Request that kstar99 restrict the processing of your personal data in certain circumstances.
• Right to data portability: Request a structured, machine-readable copy of personal data you have provided to kstar99, where technically feasible.
• Right to object: Object to processing based on legitimate interests, including profiling for responsible gaming monitoring.
• Right to withdraw consent: Withdraw any consent previously given for optional processing (such as promotional communications) at any time without affecting the lawfulness of prior processing.

kstar99 will respond to all valid data rights requests within 30 calendar days. kstar99 reserves the right to verify your identity before processing any data rights request. In some cases, legal obligations may prevent kstar99 from fulfilling a deletion or portability request in full.

11. Children's Privacy

The kstar99 Platform is strictly for individuals aged 21 and above. kstar99 does not knowingly collect personal data from anyone under the age of 21. If kstar99 discovers or is notified that it has collected personal data from a person who does not meet the minimum age requirement, kstar99 will immediately suspend the relevant account, void all associated balances, and permanently delete the collected data.

If you believe that a minor has registered a kstar99 account, please notify support immediately at the email address listed in Section 14 of this Policy. kstar99 takes underage gambling extremely seriously and will act promptly on all such reports.

12. International Data Transfers

kstar99's primary platform infrastructure is operated in data centres subject to kstar99's licensing jurisdiction. However, in the course of providing its services, kstar99 may transfer personal data to third-party processors located outside Malaysia, including game providers and identity verification partners whose servers may be located in other jurisdictions.

All international transfers of personal data are subject to appropriate safeguards, including contractual data processing agreements that impose data protection obligations equivalent to those required under applicable law. kstar99 does not transfer personal data to jurisdictions that do not offer an adequate level of data protection without first putting in place appropriate protective measures.

13. Changes to This Policy

kstar99 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or kstar99's data processing practices. Where changes are material, kstar99 will notify registered Members via email or in-platform notification at least 7 days before the revised Policy takes effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of the kstar99 Platform after the effective date of any revision constitutes acceptance of the updated Policy. We encourage Members to review this Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data kstar99 holds about you, please contact our Data Protection team through the live chat support function on the Platform, or in writing via email.

Data protection enquiries: [email protected] (plain text — not a clickable link). Please mark your email with the subject line "Privacy Enquiry" so that it is directed to the appropriate team. kstar99 aims to respond to all data protection enquiries within 5 business days.

For formal complaints that cannot be resolved by kstar99 directly, you may refer the matter to the relevant data protection authority or the dispute resolution body under kstar99's applicable gaming licence.