Privacy Policy

1 Introduction

Klaim99 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at klaim99.cam and any associated mobile or sub-domain properties. We respect the privacy of every individual who accesses our Platform and are committed to handling personal data responsibly, transparently, and securely.

This Privacy Policy ("Policy") sets out the basis on which we collect, process, store, and share personal data obtained from players and visitors to klaim99.cam. It applies to all users of the Platform, including registered players based in Malaysia and elsewhere in Southeast Asia.

By registering an account with Klaim99 or by continuing to use the Platform after this Policy has been brought to your attention, you acknowledge that you have read and understood how we process your personal data as described herein. Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Scope of This Policy

This Policy applies to personal data collected directly by Klaim99 through the Platform. It does not govern the privacy practices of third-party payment providers such as Maybank, CIMB, Touch 'n Go eWallet, DuitNow, or FPX. Please consult those providers' own privacy notices for information on how they handle your data during payment processing.

2 Definitions

In this Policy, the following terms carry the meanings set out below:

"Personal Data"

Any information that identifies or could reasonably be used to identify a living individual, either directly (e.g., full name, NRIC number) or indirectly in combination with other data.

"Processing"

Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.

"Data Subject"

The identified or identifiable natural person whose personal data is processed — in this context, you as a registered Player or visitor to the Platform.

"Controller"

The entity that determines the purposes and means of processing personal data — in this case, Klaim99 and its operating entity.

"Processor"

A third party that processes personal data on behalf of the Controller under a written data processing agreement — for example, KYC verification providers or fraud-detection services.

"Consent"

A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for a stated purpose.

3 Data We Collect

Klaim99 collects the following categories of personal data from players and visitors:

Data Category	Examples	Collected At
Identity Data	Full name, date of birth, nationality, MyKad / Passport / Driver's License number	Registration & KYC
Contact Data	Email address, phone number, residential address (for KYC)	Registration & KYC
Financial Data	Bank account name, partial account number, e-wallet ID (Touch 'n Go, Boost, GrabPay), DuitNow reference, FPX transaction records	Deposit / Withdrawal
Account Data	Username, hashed password, account balance, transaction history, bonus history	Ongoing platform use
Gaming Activity Data	Games played, bets placed, win/loss records, session duration, game preferences	Ongoing platform use
Technical Data	IP address, device type, operating system, browser type, screen resolution, session cookies	All platform visits
Communication Data	Live chat transcripts, email correspondence, support ticket content	Support interactions
Document Images	Scans or photos of identity documents, selfies with ID, proof of address documents	KYC verification

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly necessary for identity verification purposes.

4 How We Collect Data

Klaim99 collects personal data through the following means:

Direct submission: Data you provide when registering an account, completing KYC verification, submitting support requests, or communicating with our team.
Automated technical collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser type, and session data via server logs and cookies.
Payment processing: Limited transaction data shared by payment providers (Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX) necessary to confirm successful deposits and facilitate withdrawals.
Third-party identity verification: Data received from KYC and fraud screening service providers who assist in verifying the identity of players prior to withdrawal processing.
Platform activity: Data generated by your use of the Platform, including game history, betting patterns, and VIP tier progression.

5 Purposes of Processing

Klaim99 processes your personal data for the following specific purposes:

Account management: Creating, maintaining, and administering your player account, including processing deposits and withdrawals in MYR.
Identity verification (KYC): Verifying your identity and age (21+) in compliance with our international licensing obligations and anti-money laundering requirements.
Service delivery: Providing access to the full suite of Klaim99 gaming services, including live dealer games, sports betting, slots, and VIP programme management.
Fraud prevention and security: Monitoring accounts and transactions to detect and prevent fraud, money laundering, collusion, and other prohibited activities.
Regulatory compliance: Meeting the obligations imposed by our international gaming licence, including record-keeping, reporting, and cooperation with lawful information requests.
Customer support: Responding to and resolving your queries, complaints, and account-related requests via live chat and email.
Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, stability, and user experience of the Platform.
Responsible gambling: Using gaming activity data to identify patterns that may indicate problem gambling behaviour and to proactively apply responsible gaming interventions where appropriate.
Marketing communications: Sending you promotional offers, bonus notifications, and platform updates, where you have provided consent or where we have a legitimate interest in doing so. You may opt out at any time.

6 Legal Basis for Processing

Klaim99 processes personal data only where a lawful basis exists under applicable data protection frameworks. The principal legal bases we rely upon are:

Contractual necessity: Processing required to fulfil our obligations to you as a registered Player — including account creation, KYC, payment processing, and service delivery — is necessary for the performance of the contract between you and Klaim99.
Legal obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering legislation, licensing conditions, and lawful orders from regulatory or law enforcement bodies.
Legitimate interests: Processing carried out for Klaim99's legitimate business interests — including fraud prevention, platform security, analytics, and responsible gaming monitoring — where these interests are not overridden by your rights and freedoms.
Consent: Where processing is based on your consent — particularly for marketing communications — we will seek your explicit agreement and will honour any withdrawal of consent promptly.

7 Data Sharing & Disclosure

Klaim99 does not sell, rent, or trade your personal data. We may share your data with carefully selected third parties only where necessary and under strict data processing agreements. These third-party categories include:

Payment service providers: Malaysian payment networks and processors (including but not limited to the operators of Maybank2u, CIMB Clicks, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay) to process deposits and withdrawals securely.
KYC and identity verification providers: Third-party specialists who assist in verifying player identity and screening against sanctions and fraud databases as required by our licensing obligations.
IT and infrastructure providers: Cloud hosting, server management, and cybersecurity service providers who operate under binding data processing agreements with Klaim99.
Regulatory and law enforcement bodies: Where required by law, court order, or pursuant to the lawful request of a competent regulatory or law enforcement authority, Klaim99 may be obliged to disclose personal data.
Affiliated entities: Where Klaim99 operates as part of a wider group structure, limited data sharing with affiliated entities may occur for group compliance, fraud prevention, or operational purposes, subject to equivalent data protection standards.

No Sale of Personal Data

Klaim99 categorically does not sell, lease, or provide your personal data to any third party for advertising, marketing, or commercial profiling purposes. Any data shared with third parties is strictly for the operational and compliance purposes listed above.

8 International Data Transfers

As an internationally licensed platform, Klaim99 may transfer and store personal data on servers located outside of Malaysia. Where personal data is transferred to countries that may not offer the same level of data protection as Malaysia, Klaim99 implements appropriate safeguards to ensure your data remains protected. These safeguards include:

Standard contractual clauses approved by recognised data protection authorities, incorporated into agreements with data processors in third countries.
Binding corporate rules within affiliated group entities where applicable.
Technical security measures including end-to-end encryption of data in transit and AES-256 encryption of data at rest, regardless of storage location.

By using the Klaim99 Platform, you acknowledge that your personal data may be processed and stored in jurisdictions outside of Malaysia, including in the jurisdiction where Klaim99 holds its gaming licence.

9 Data Retention

Klaim99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable legal obligations. The following retention schedule applies:

Data Category

Retention Period

Reason

Identity & KYC Documents

5 years post account closure

AML compliance, licensing obligation

Financial Transaction Records

5 years post transaction

AML compliance, dispute resolution

Gaming Activity Logs

3 years post last session

Responsible gaming monitoring, dispute resolution

Support Communications

2 years post resolution

Quality assurance, dispute evidence

Marketing Preferences

Until withdrawn or account closed

Consent management

Technical & Server Logs

12 months rolling

Security monitoring, fraud detection

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Anonymised and aggregated data may be retained indefinitely for statistical and analytics purposes.

10 Cookies & Tracking Technologies

Klaim99 uses cookies and similar tracking technologies to operate the Platform effectively and to provide a personalised, consistent gaming experience. Cookies are small text files stored on your device when you visit the Platform.

We use the following categories of cookies:

Klaim99 does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking tools. You may configure your browser to refuse non-essential cookies, though doing so may affect the functionality of certain Platform features. Essential cookies cannot be disabled as they are required for the Platform to operate.

11 Your Rights as a Data Subject

As a data subject, you hold a number of rights in relation to your personal data held by Klaim99. These rights are described below. To exercise any of these rights, please contact us via the support channels described in Section 16.

Right of Access

You have the right to request a copy of the personal data Klaim99 holds about you. We will provide a structured, electronic copy of your data within 30 days of a verified request.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may also update certain account details directly within your account settings.

Right to Erasure ("Right to be Forgotten")

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent. This right is subject to our legal retention obligations — for example, we are required to retain KYC and financial records for a minimum of five years post account closure.

Right to Restriction of Processing

You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or where you object to processing based on legitimate interests.

Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, though Klaim99 may be entitled to continue processing where there are compelling legitimate grounds.

12 Children's Privacy

The Klaim99 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is performed during the account registration process and is reinforced through our KYC verification procedures.

If Klaim99 becomes aware that personal data has been collected from a person under the age of 21 without appropriate age verification having taken place, we will take immediate steps to delete such data and close the associated account. Any funds held in such an account will be forfeited in accordance with our Terms and Conditions.

21+ Strictly Enforced

If you are a parent or guardian and believe your child has created an account on Klaim99, please contact us immediately via live chat. We will investigate promptly and take all necessary action to close the account and delete the associated personal data.

13 Security Measures

Klaim99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. Our key security provisions include:

AES-256 encryption for all personal data stored at rest on our servers.
TLS 1.3 encryption for all data transmitted between your device and the Klaim99 Platform.
Two-factor authentication (2FA) available for all player accounts as an additional layer of login security.
Regular penetration testing and independent security audits conducted by certified cybersecurity professionals.
Role-based access controls that restrict internal employee access to personal data on a strict need-to-know basis.
24/7 security monitoring of platform infrastructure for anomalous activity, intrusion attempts, and DDoS protection.
Incident response procedures that define the steps Klaim99 will take in the event of a suspected or confirmed data breach, including player notification protocols.

Your Responsibility

While Klaim99 takes every reasonable measure to secure its platform, you also play a role in protecting your account. Use a strong, unique password for your Klaim99 account. Enable two-factor authentication. Do not share your login credentials with anyone. Report any suspected unauthorised access to your account immediately via live chat.

14 Marketing Communications

Klaim99 may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, tournaments, and special offers where you have provided consent to receive marketing communications during registration, or where we have a legitimate interest in keeping you informed about the Platform.

You may opt out of marketing communications at any time by:

Clicking the unsubscribe link included in any marketing email.
Adjusting your notification preferences in your account settings.
Contacting our support team via live chat and requesting removal from all marketing lists.

Please note that opting out of marketing communications will not affect the delivery of transactional messages — such as deposit confirmations, withdrawal notifications, and security alerts — which are necessary for the operation of your account and cannot be disabled.

Klaim99 does not send unsolicited marketing communications to individuals who have not registered an account on the Platform. If you receive an unsolicited communication purportedly from Klaim99, please treat it with caution as it may be a phishing attempt and report it to our support team.

15 Amendments to This Policy

Klaim99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing activities, or improvements to our privacy practices. The date of the most recent revision is displayed at the top of this page.

Where a change to this Policy materially affects your rights or the way in which we process your personal data, we will notify registered players via email and/or a prominent notice on the Platform at least seven (7) days before the change takes effect, where reasonably practicable.

Your continued use of the Klaim99 Platform following the effective date of any amendment to this Policy constitutes your acknowledgement of the updated terms. We recommend reviewing this Policy periodically.

16 Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or need to report a privacy concern, please contact Klaim99 through the following channels:

Preferred Method

Live Chat — 24/7

Available around the clock through the Klaim99 platform interface. Fastest response time — typically within minutes during peak hours.

Email (No Reply)

[email protected]

For written data subject requests. Please include "Privacy Request" in your subject line and provide your registered username. Response within 24–48 hours.

Data subject access requests will be processed within 30 days of receiving a verified request. We may need to confirm your identity before processing certain requests.

Privacy at a Glance

Your Data Is Encrypted

We Never Sell Your Data

You Control Your Data

Cookies Used Responsibly

Clear Data Retention Rules

Breach Notification Policy