Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by klpj161 ("klpj161", "we", "us", "our") and applies to all personal data collected through the klpj161 website at https://klpj161.cam and any associated services, tools or mobile-optimised interfaces (collectively, the "Platform").

klpj161 operates as an English-language casino and sports betting information brand serving adult users primarily in Malaysia. The Platform handles personal data in Malaysian Ringgit (MYR) transaction contexts and processes identity documents consistent with Malaysian-facing regulatory expectations.

By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform.

Definitions

The following terms carry the meanings assigned below throughout this Policy.

Personal Data We Collect

3.1 Registration and Account Data

When you register an account on klpj161, we collect your full legal name, date of birth, residential address, email address, mobile number and chosen login credentials. This information is required to create and maintain your account and to verify that you meet the minimum age requirement of 21 years.

3.2 Identity Verification (KYC) Documents

To comply with anti-money laundering and fraud prevention obligations, klpj161 collects copies of identity and address documents submitted through the secure account verification area. Accepted documents include a valid Malaysian MyKad, driving licence or passport, together with a recent utility bill or bank statement. Selfie images may be requested to confirm document ownership.

3.3 Financial and Transaction Data

We record details of MYR deposits, withdrawals and account balance movements. Payment method identifiers — such as e-wallet account references, bank account numbers linked to Maybank, CIMB, Public Bank or Hong Leong Bank, FPX transaction identifiers, Touch 'n Go eWallet references and cryptocurrency wallet addresses used for USDT TRC20 transactions — are stored to support payment processing and dispute resolution.

3.4 Device and Technical Data

Platform access automatically generates technical data including IP address, device type, operating system, browser version, screen resolution, session duration and referral source. This data supports fraud detection, Platform security and aggregate performance analysis.

3.5 Communications Data

Records of support interactions — including live chat transcripts, email correspondence and any complaint submissions — are retained to manage and improve customer service, and as an evidentiary record where disputes arise.

3.6 Marketing Preferences

Where you have provided explicit consent, klpj161 may record your preferences regarding promotional communications. This consent can be withdrawn at any time by contacting support or adjusting your account notification settings.

Data Processing Purposes and Legal Bases

klpj161 processes personal data only when a lawful basis applies. The table below summarises the primary processing activities and their legal bases.

Data Sharing and Third Parties

klpj161 does not sell, rent or trade personal data to third parties for their own commercial purposes. Personal data may be shared in the following circumstances only:

• Payment processors and e-wallet providers. Transaction data is shared with payment partners — including providers facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX and selected cryptocurrency networks — to the extent necessary to complete or reconcile a MYR transaction.
• KYC and identity verification services. Documents and personal details may be processed by third-party verification providers operating under binding data processing agreements with klpj161.
• Fraud detection and security providers. Device and session data may be shared with security partners for the purpose of identifying account abuse, unusual transaction patterns or unauthorised access.
• Legal and regulatory authorities. Personal data will be disclosed to competent authorities where klpj161 is required to do so by law, court order, regulatory direction or to defend a legal claim.
• Business transfers. In the event of a merger, acquisition or sale of assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

All third-party processors are required to handle personal data in accordance with applicable data protection law and the terms of a written data processing agreement. klpj161 does not authorise any processor to use personal data for their own independent purposes.

Cookies and Similar Technologies

klpj161 uses cookies, web storage and similar tracking technologies to deliver a functional and secure Platform experience. The main categories of cookies used are as follows:

• Strictly necessary cookies — Required for the Platform to function. These include session authentication, security tokens and language preferences. They cannot be disabled without impairing Platform operation.
• Functional cookies — Retain user preferences such as display settings and notification choices between sessions to avoid repetitive configuration.
• Analytics cookies — Collect aggregate, anonymised information about page visits, session duration and navigation paths. This data is used to improve Platform structure and user experience.
• Security and fraud detection cookies — Identify unusual access patterns, bot activity and potential account compromise indicators to protect user accounts and Platform integrity.

You may disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may limit Platform functionality, including the ability to maintain an authenticated session. klpj161 does not use advertising or cross-site tracking cookies.

Data Retention

Personal data is retained for as long as your account remains active and for such additional period as is required by applicable law or legitimate business need. The following indicative retention periods apply:

• Account and registration data — retained for the duration of the account plus a minimum of five years following closure, to satisfy regulatory record-keeping obligations.
• KYC documents — retained for the duration of account activity plus a minimum of five years, consistent with anti-money laundering requirements.
• Transaction records — retained for a minimum of five years to support audit, dispute resolution and regulatory reporting.
• Support communications — retained for a minimum of two years or until any related dispute is resolved, whichever is later.
• Marketing consent records — retained until consent is withdrawn and for a reasonable period thereafter as evidence of the consent history.

At the end of the applicable retention period, personal data is securely deleted or anonymised. Where deletion is not immediately possible due to technical constraints, the data is isolated from active processing pending secure disposal.

Data Security

klpj161 implements technical and organisational security measures proportionate to the sensitivity of the personal data processed. These measures include:

• HTTPS encryption for all data in transit between your device and the Platform;
• Encryption or pseudonymisation of sensitive data at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Secure, access-controlled document storage for KYC materials;
• Continuous fraud and anomaly detection monitoring;
• Regular security reviews and vulnerability assessments.

Despite these measures, no digital system can guarantee absolute security. Users are strongly advised to use a unique, strong password for their klpj161 account, enable any available multi-factor authentication, and to notify klpj161 immediately if they believe their account credentials have been compromised. klpj161 will never ask for a password, PIN or one-time authentication code through any support channel.

Your Data Rights

Subject to the Personal Data Protection Act 2010 (Malaysia) and any other applicable data protection legislation, you may exercise the following rights in relation to your personal data held by klpj161:

• Right of access. You may request a summary of the personal data klpj161 holds about you and the purposes for which it is processed.
• Right to correction. Where personal data held by klpj161 is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to withdraw consent. Where processing is based on your consent — such as receipt of marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to restrict processing. In certain circumstances you may request that klpj161 restrict the processing of your data, for example where accuracy is contested or processing is unlawful.
• Right to erasure. You may request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to complain. You have the right to lodge a complaint with the relevant data protection authority if you believe klpj161 has not handled your personal data in accordance with applicable law.

To exercise any of the above rights, please submit your request in writing to the klpj161 support address. Requests will be acknowledged promptly and resolved within a reasonable period, taking into account the complexity and volume of pending requests. Identity verification may be required before processing any data rights request.

Protection of Minors

klpj161 does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly intended for adults and all registration processes include an age declaration step. Where klpj161 has reasonable grounds to suspect that a user is below the minimum age, the account will be suspended immediately, personal data will be reviewed and any funds deposited may be returned to the original payment source pending investigation.

If you believe a minor has accessed the Platform, please contact klpj161 support immediately so that the account can be reviewed and closed without delay.

International Data Transfers

klpj161 and certain of its Data Processors may be located or operate infrastructure in jurisdictions outside Malaysia. Where personal data is transferred internationally, klpj161 takes steps to ensure that adequate protections apply, including the use of standard contractual clauses or equivalent safeguards recognised under applicable data protection law.

Users who prefer not to have their data transferred internationally should contact klpj161 support before registering to confirm the current data residency arrangements applicable to their account type.

Amendments to This Policy

klpj161 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated by updating the "Last reviewed" date displayed at the top of this page. Users are encouraged to review the current version of this Policy periodically. Continued use of the Platform following any amendment constitutes acceptance of the revised Privacy Policy.

Contact Us

If you have questions about this Privacy Policy, wish to exercise a data right or need to report a privacy concern, please contact the klpj161 data team through the official support channel:

Email: [email protected]

Please do not attach identity documents, payment details or passwords to any email communication. Use the secure account verification area within the Platform for all document submissions. All privacy queries are handled with strict confidentiality.