Data Protection

Katakwin Privacy Policy – Your Personal Data Protection

Your privacy is our priority. This document transparently explains how katakwin collects, uses, stores, and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

256-bit
SSL Encryption
PDPA
Full Compliance
0
Data Sales to Third Parties
24/7
Security Monitoring

Katakwin's Six Data Protection Principles

Every data-related decision is made with player security and privacy as the top priority. This is not just a written commitment — it is how we operate every day.

End-to-End Encryption

All data transmitted between your device and katakwin servers is protected with 256-bit SSL encryption. Sensitive information such as account details and transactions cannot be intercepted by any third party.

Malaysia PDPA Compliance

KatakWin fully complies with Malaysia's Personal Data Protection Act 2010. All data collection and processing activities are carried out in accordance with the legal framework established by Malaysian authorities.

No Data Selling

Your personal data is never sold, rented, or shared with third-party advertisers. Your information is used solely for the operational and security purposes of the katakwin platform.

Strict Access Control

Only authorised staff may access players' personal data, and every access is logged and monitored. A role-based access control (RBAC) system ensures no unnecessary data access occurs.

Immediate Breach Notification

In the event of any security incident involving your data, katakwin will notify you in a timely manner and take immediate remedial action.

Right to Data Deletion

You have the right to request deletion of your personal data at any time. Requests will be processed within 30 business days, subject to record-keeping requirements prescribed by law.

Last updated: 1 January 2026

1. Information We Collect

KatakWin collects your personal data for legitimate purposes in the context of providing platform services. The data we collect falls into two main categories: information you provide directly and information collected automatically when you use the platform.

Data Type Examples of Information Collection Method
Identity Data Full name, date of birth, identity card number Registration form / KYC
Contact Data Email address, phone number Account registration
Financial Data Bank account number, bank name, transaction records Deposit & withdrawal processing
Technical Data IP address, device type, web browser, operating system Collected automatically during use
Activity Data Game history, betting records, login activity, clicks Collected automatically during play sessions
Document Data Passport copies, identity card, utility bills KYC Verification Process

We only collect data that is genuinely necessary to provide our services. Principle data minimization fully upheld — no data is collected beyond what is necessary for legitimate operational purposes.

2. How We Use Your Data

Every use of your personal data on the katakwin platform has a clear and lawful purpose. We do not use your data for any purpose unrelated to service delivery or legal compliance.

  • Account Management: Creating, verifying, and managing your player account, including the login process and account security.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions accurately and securely.
  • Identity Verification (KYC): Ensuring compliance with anti-money laundering regulations and age verification requirements.
  • Service Communications: Sending account-related notifications, transaction confirmations, and important policy updates.
  • Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, or platform abuse.
  • Platform Improvements: Analyzing aggregated usage patterns to improve the player experience.
  • Legal Compliance: Fulfilling legal obligations and complying with directives from relevant authorities.
  • Customer Support: Providing technical support and resolving any issues reported by players.

For marketing and promotional communications, we will only contact you if you have given explicit consent. You may withdraw this consent at any time through your account settings.

3. Data Sharing with Third Parties

KatakWin does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes without your consent. However, there are limited situations where data sharing is necessary and legally permitted.

  • Payment Providers: Required transaction information is shared with partner banks and digital wallet providers such as TNG eWallet and DuitNow to process deposits and withdrawals.
  • Game Providers: Minimal technical data is shared with licensed game software providers to ensure smooth game functionality.
  • KYC Services: Identity verification documents are shared with trusted, licensed third-party identity verification service providers.
  • Legal Authority: Data may be disclosed to government authorities or law enforcement if required by court order or applicable legal provisions.
  • Internal Analytics: Aggregated data that cannot identify individuals is used for internal analytics to improve our services.

All third parties receiving your data are bound by strict data protection agreements and are required to meet security standards equal to or exceeding those of katakwin.

4. Data Security and Protection

KatakWin continuously invests in cybersecurity infrastructure to ensure your data is always protected. We employ a comprehensive combination of technical and organizational measures.

  • 256-bit SSL/TLS Encryption: All data transmitted through the platform is protected with the latest industry-standard encryption protocols.
  • Data-at-Rest Encryption: Sensitive data stored in our databases is encrypted using the AES-256 algorithm.
  • Two-Factor Authentication (2FA): Players can enable 2FA for an additional layer of security on their accounts.
  • 24/7 Monitoring: Security monitoring systems operate around the clock to detect and respond to threats in real time.
  • Penetration Testing: Security audits and penetration testing are conducted periodically by independent security experts.
  • Environment Segregation: Production, testing, and development environments are fully segregated to prevent unintended data exposure.

While no system can guarantee 100% security, katakwin takes every reasonable step to protect your data. If you suspect any suspicious activity on your account, please contact our support team immediately.

5. Data Retention Period

KatakWin retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable Malaysian law.

  • Active Account Data: Retained for the duration that your account remains active and in use.
  • Data After Account Closure: Account and transaction records are retained for a minimum of 7 years after account closure, in compliance with anti-money laundering legal requirements.
  • Technical Logs: System and access logs are retained for 12 months for security and investigation purposes.
  • KYC Documents: Copies of identity verification documents are retained for 5 to 7 years in accordance with compliance requirements.
  • Communication Records: Customer support communication history is retained for 3 years for reference and dispute resolution.

Once the retention period has lapsed and no legal requirement mandates that the data be kept, katakwin will securely delete or anonymise the relevant data.

6. Cookies and Tracking Technologies

The katakwin platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyze platform usage patterns.

  • Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
  • User Preference Cookies: Saving your settings and preferences such as language, theme, and display configuration for ease of use.
  • Analytics Cookies: Collecting aggregated and anonymized usage data to help us understand how players use the platform for improvement purposes.
  • Security Cookies: Used to detect suspicious activity, repeated login attempts, and other security threats.

You can manage your cookie settings through your web browser. Disabling non-essential cookies may affect some platform features but will not prevent you from using the core services of katakwin.

7. Your Rights as a Data Subject

Under Malaysia's PDPA and modern data protection principles, you have the following rights regarding your personal data held by katakwin. We are committed to respecting and facilitating the exercise of these rights.

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.

Right to Rectification

If your data is inaccurate or outdated, you may request a correction through your account settings or by contacting our support team.

Right to Erasure

You may request deletion of your personal data, subject to retention requirements mandated by law.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing any reason.

Right to Data Portability

You may request a copy of your data in a machine-readable format for transfer to another service provider if desired.

To exercise any of the above rights, please contact our data protection team. We will respond within the stipulated timeframe and may request identity verification before processing your request.

8. Cross-Border Data Transfers

In certain circumstances, your personal data may be transferred to or processed in countries other than Malaysia. This occurs primarily in the context of cloud services, international game providers, and global technical infrastructure.

  • Every cross-border data transfer is carried out with adequate safeguards, including data processing agreements and standard contractual clauses.
  • KatakWin ensures that data recipients outside the country adhere to data protection standards equivalent to Malaysia's PDPA.
  • Sensitive financial data and KYC documents are prioritised for storage on servers located within the Southeast Asia region to minimise data transfer risks.

Even when data is transferred outside Malaysia, the level of protection afforded to your data will not be diminished. Your rights as a data subject remain fully intact regardless of the processing location.

9. Children's Privacy and Underage Players

KatakWin takes child protection very seriously. Our platform is exclusively for adult users aged 18 and above, and we do not intentionally collect any personal data from individuals below that age.

  • The registration process is designed to screen underage individuals through date of birth verification and KYC identity verification.
  • If we determine that data belonging to an individual under 18 years of age has been collected, that data will be deleted immediately and the associated account will be closed.
  • Parents or guardians who discover that their child has registered an account with katakwin should contact us immediately for prompt action.

We encourage parents to use appropriate parental control software and monitor their children's online activities. For more information on responsible gambling, please visit the page Responsible Gaming ours.

10. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our data protection team is ready to assist.

  • Email: [email protected]
  • Live Chat: Available 24/7 via the chat icon within the platform
  • Response Time: We aim to respond to all privacy-related enquiries within 3 business days

This Privacy Policy is subject to amendments from time to time. Any material changes will be communicated to you via in-platform notifications or email. The latest update date is always displayed at the top of this document.

You can also read Terms and Conditions ours to understand the overall framework of the agreement between you and katakwin, including the rights and responsibilities of each party.

Your Data Is Safe. Your Game Is Secure.

With 256-bit SSL encryption, full PDPA compliance, and a zero-tolerance commitment to data sales, katakwin is a platform you can trust completely. Register today and enjoy over 500 games with peace of mind.

256-bit SSL PDPA Compliant No Data Selling 24/7 Support
Bahasa Melayu