Kstar99 Privacy Policy – Personal Data Protection Malaysian Members

Kstar99 takes the protection of every Malaysian member's personal data seriously. This document transparently explains how we collect, use, store, and safeguard your information in accordance with Malaysia's Personal Data Protection Act (PDPA).

256-bit SSL
PDPA Compliance
No Data Sales
Encrypted Data
Full Access Rights
24×7 Support

Kstar99's Privacy Commitment

Six core principles that guide how kstar99 manages the personal data of members in Malaysia

Bank-Grade Data Encryption

All personal data and financial transactions of kstar99 members are protected with 256-bit SSL encryption technology — the same security standard used by Malaysia's leading banking institutions such as Maybank and CIMB. This means your information is transmitted in a form that cannot be read by any unauthorised party, including during deposit processing via Touch 'n Go, GrabPay, or DuitNow.

Full Malaysia PDPA Compliance

Kstar99 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We collect only the data strictly necessary for platform operations, obtain explicit consent before processing sensitive information, and give members full rights to access, correct, or delete their data in accordance with the PDPA.

No Data Sales to Third Parties

Kstar99 never sells, rents, or discloses members' personal data to any third party for marketing purposes without the member's explicit consent. Your data belongs to you — it is not a business commodity. Disclosure to external parties only occurs where required by law or where directly necessary for the operation of your services.

Full Member Control

Every kstar99 member has the full right to access the personal data we hold about them, request corrections to any inaccurate information, and request account deletion along with associated data, in accordance with PDPA requirements. Such requests can be submitted at any time through the kstar99 support team at support@kstar99.xyz.

Secure Data Storage

Kstar99 members' personal data is stored on servers protected by layered firewalls, strict access controls, and continuous security monitoring. Access to the member database is restricted to staff who genuinely need it to carry out their duties, and every access is automatically logged for audit purposes.

Data Breach Notification

In the event of any security incident involving members' personal data, kstar99 is committed to notifying affected members within the timeframe stipulated by the PDPA. We will also report such incidents to the Personal Data Protection Commissioner of Malaysia in accordance with applicable legal requirements.

Last updated: 1 January 2026 · Effective immediately

This Privacy Policy details how kstar99 ("Platform", "We", "Company") collects, stores, uses, and protects your personal data ("Member", "You") when you use the kstar99 platform at kstar99.xyz. By registering for or using kstar99's services, you consent to the processing of your personal data as described in this Privacy Policy. Please read this document carefully, as it forms part of the agreement between you and kstar99, together with Terms & Conditions us.

Section 1 Introduction & Scope

Kstar99 is an online casino and Sports Betting platform operating to serve players in Malaysia. In the course of our operations, we collect and process certain personal data to allow you to register an account, make deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, play games such as baccarat, roulette, blackjack, slots, and Sports Betting, and receive effective customer support.

This Privacy Policy applies to all information collected by kstar99 through:

  • The kstar99.xyz website and all its subdomains
  • Registration form and account verification
  • Financial transactions including deposits and withdrawals
  • Gaming and betting activity on the platform
  • Communications with the kstar99 customer support team
  • Use of website features such as live chat and enquiry forms

This Privacy Policy is to be read together with kstar99 Terms & Conditions. In the event of any conflict between the two privacy-related documents, this Privacy Policy shall take precedence.

Section 2 Personal Data We Collect

Kstar99 collects various categories of personal data depending on how you interact with our platform. Below is a detailed table of the types of data collected and the reasons for collection:

Data Category Example Information Reason for Collection
Identity Data Full name, date of birth, MyKad or Passport number Age verification (18+), KYC process, AML compliance
Contact Details Malaysia phone number, email address Account verification, communications, security notifications
Financial Data Payment methods (Touch 'n Go, GrabPay, DuitNow, etc.), transaction history Processing of deposits and withdrawals in MYR
Technical Data IP address, device type, web browser, operating system Account security, fraud prevention, platform improvement
Game Data Betting history, games played, baccarat/roulette/slots/sports Dispute resolution, regulatory compliance, service improvements
Usage Data Pages visited, session duration, settings preferences Platform analytics, user experience improvements

Kstar99 does not collect sensitive personal data such as health information, religious beliefs, or political affiliations unless you voluntarily provide it for responsible gambling purposes. Data collected is limited to what is necessary to deliver kstar99's services safely and effectively.

Section 3 How We Use Your Personal Data

Kstar99 uses the personal data collected for the following legitimate and necessary purposes:

  • Account Management: Creating, maintaining, and managing your kstar99 account, including identity verification during registration and any KYC process required by law.
  • Financial Transaction Processing: Processing your deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, as well as your winnings withdrawals in Malaysian Ringgit (MYR) — quickly and securely.
  • Gaming Services Provision: Gives you access to all kstar99 games, including live casino baccarat, roulette, blackjack, slots, Sports Betting on the Malaysia Super League and EPL, badminton, e-sports, and more.
  • Security & Fraud Prevention: Identifying, investigating, and preventing fraudulent activity, money laundering, multi-account usage, and any violations of kstar99's Terms & Conditions.
  • Customer Support: Providing effective, personalised support whenever you contact the kstar99 support team via live chat, WhatsApp, or email.
  • Legal Compliance: Fulfilling legal obligations, including AML requirements, reporting to relevant authorities, and compliance with Malaysia's PDPA.
  • Marketing Communications: Sending promotional information, bonus offers, and the latest kstar99 updates — only to members who have consented to receive such communications.
  • Platform Improvements: Analysing aggregated (non-individual) usage data to improve the performance, design, and overall experience of the kstar99 platform.

Kstar99 will not use your personal data for purposes other than those stated above without first obtaining your renewed consent.

Section 4 Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), kstar99 processes your personal data on the following legal bases:

  • Consent: You provide explicit consent when registering a kstar99 account and agreeing to this Privacy Policy. A separate consent is requested for marketing communications.
  • Contract Performance: Processing is necessary to fulfil the agreement between you and kstar99, including processing deposits, withdrawals, and providing access to games.
  • Legal Obligations: kstar99 is legally required to process certain data for AML and KYC compliance purposes, as well as for reporting to the relevant authorities in Malaysia.
  • Legitimate Interests: kstar99 has a legitimate interest in processing data for platform security, fraud prevention, and service improvement purposes, provided that such interests do not override your rights and freedoms.

Section 5 Sharing Data with Third Parties

Kstar99 does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes under any circumstances. However, data may be shared in the following limited situations:

  • Payment Service Providers: Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX providers receive the data necessary to process your financial transactions. This data is governed by each provider's respective privacy policy.
  • Game Providers: Evolution Gaming, Playtech, Pragmatic Play, and other providers receive only the minimum data required to run your gaming session, excluding full financial information.
  • Legal Authorities: kstar99 will disclose data when required by court order, police directive, or applicable Malaysian legal requirements, including AML obligations.
  • IT Service Providers: Companies that provide technical infrastructure, analytics, and security services to kstar99 may have limited access to data within the scope of strict confidentiality agreements.
  • Business Transfers: In the event of a merger, acquisition, or sale of kstar99's assets, members' personal data may be transferred as part of that transaction. Members will be notified in advance and their rights under the PDPA will remain fully protected.

kstar99 ensures that all third parties who receive members' personal data are bound by confidentiality and data protection agreements that are equivalent to or stricter than kstar99's own policies.

Section 6 Cookies & Tracking Technologies

The kstar99 platform uses cookies and similar tracking technologies to enhance the user experience and ensure account security. Cookies are small text files stored on your device when you visit kstar99.xyz.

Types of cookies used by kstar99:

  • Essential Cookies: Required for core platform functionality, including secure login, session management, and account security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting information on how members use the kstar99 platform to help us identify areas for improvement. This data is aggregated and does not identify individuals.
  • Functionality Cookies: Remembering your preferences and settings — such as your preferred language, configured betting limits, and favourite games — to deliver a more personalised experience.
  • Analytics Cookies: Used to understand overall platform usage patterns for the purpose of continuous improvement of kstar99 services.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the kstar99 platform, including the ability to log in securely. kstar99 does not use cross-site tracking cookies for third-party marketing purposes.

Section 7 Data Retention & Deletion Period

Kstar99 retains members' personal data for as long as the account is active and for additional periods as required by legal and business operational obligations:

  • Active Account Data: Retained for as long as your kstar99 account remains active and you continue to use the platform.
  • Financial Transaction Data: Retained for a minimum of seven (7) years after each transaction, in accordance with Malaysia's tax and AML legal requirements.
  • Gaming Records: Retained for five (5) years for dispute resolution and compliance audit purposes.
  • Communication Logs: Customer support communication records are retained for three (3) years.
  • Data After Account Closure: Following account closure, kstar99 retains the minimum data required by law for the prescribed period, after which it will be permanently deleted or anonymised.

Members who wish to request account and data deletion may submit their request to support@kstar99.xyz. Deletion will be carried out within the timeframe permitted under the Malaysian PDPA, taking into account any applicable legal retention obligations.

Section 8 Data Security Measures

Kstar99 implements multiple layers of technical and organisational security measures to protect members' personal data from unauthorised access, disclosure, alteration, or destruction:

  • 256-bit SSL Encryption: All communications between your web browser and kstar99's servers are encrypted using 256-bit TLS/SSL, ensuring that data in transit cannot be intercepted.
  • Data Encryption at Rest: Sensitive data stored in kstar99's databases is encrypted using robust encryption algorithms.
  • Role-Based Access Controls: Access to member data is restricted to staff who require it to perform their duties. Every access is logged and monitored.
  • Firewall & Continuous Monitoring: kstar99's infrastructure is protected by multi-layered firewalls and an intrusion detection system (IDS) operating around the clock.
  • Regular Security Audits: kstar99 conducts regular penetration testing and security audits by independent third parties to identify and address potential vulnerabilities.
  • Staff Training: All kstar99 staff who handle member data receive ongoing training on data protection best practices and awareness of cybersecurity threats.

While kstar99 takes all reasonable steps to protect your data, no security system can be guaranteed to be 100% secure. We encourage members to also take their own precautions, such as using a strong and unique password for their kstar99 account.

Section 9 Your Rights as a kstar99 Member

Under Malaysia's PDPA, you have the following rights with respect to your personal data held by kstar99:

Right to Access

You have the right to request and receive a copy of the personal data we hold about you. Requests will be processed within 21 business days.

Right to Rectification

If your data is inaccurate or out of date, you have the right to request a correction. Please contact kstar99 support with the details that need to be updated.

Right to Erasure

You may request the deletion of your personal data when it is no longer necessary, subject to any applicable legal retention obligations.

Right to Withdraw Consent

You may withdraw your consent for marketing communications at any time through your account settings or by contacting support@kstar99.xyz.

Right to Object

You may object to the processing of your data for specific purposes, including direct marketing, and kstar99 will cease processing that data accordingly.

Right to Lodge a Complaint

If you are dissatisfied with how kstar99 handles your data, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, submit a written request to support@kstar99.xyz stating the right you wish to exercise and your account details. kstar99 will verify your identity before processing the request to safeguard your account security.

Section 10 Children's Data Protection

The kstar99 platform is strictly for individuals aged 18 and above. kstar99 does not knowingly collect or process personal data from individuals under the age of 18.

Should kstar99 discover that personal data of an underage individual has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child may have registered a kstar99 account are advised to contact us promptly at support@kstar99.xyz.

Protecting minors from online gambling is an absolute priority for kstar99. Any registration attempt by individuals under the age of 18 will be reported to the relevant authorities.

Section 11 Links to Third-Party Websites

The kstar99 platform may contain links or references to third-party websites, such as payment provider sites or sports governing body websites. These links are provided for your convenience only.

Kstar99 is not responsible for the privacy practices or content of such third-party websites. We encourage you to read the privacy policy of every website you visit, especially before providing any personal information. kstar99's Privacy Policy applies only to information collected through the kstar99 platform itself.

Section 12 Cross-Border Data Transfers

In certain operational circumstances, the personal data of kstar99 members may be processed or stored on servers located outside Malaysia, particularly in connection with international game service providers such as Evolution Gaming or Pragmatic Play.

Kstar99 ensures that any transfer of data outside Malaysia is made only to recipients that provide a level of data protection equivalent to or stricter than that required under the Malaysian PDPA. This is achieved through:

  • Comprehensive data processing agreements with all international providers
  • Regular security assessments of all third-party vendors
  • Use of internationally recognised data transfer mechanisms

Section 13 Amendments to This Privacy Policy

Kstar99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. Any material amendments will:

  • Published on this page with an updated "Last Updated" date
  • Members will be notified via email or in-platform notification at least 14 days before significant amendments take effect
  • Stored in archived versions of previous records, available upon member request

Your continued use of the kstar99 platform after an amended Privacy Policy is published constitutes your acceptance of the revised policy. If you do not agree with the changes made, you have the right to close your kstar99 account by contacting our support team.

Section 14 Contact Us About Privacy

If you have any questions, concerns, or requests regarding kstar99's Privacy Policy or the processing of your personal data, please reach out to us through the following channels:

  • Email: support@kstar99.xyz – for written privacy enquiries and data access requests
  • Live Chat: Available on the kstar99 platform – 24 hours a day, 7 days a week
  • WhatsApp: Available via kstar99 support number – 24 hours a day

Kstar99 is committed to responding to all privacy-related enquiries within seven (7) business days. For formal data access requests under the PDPA, the response period is up to 21 business days in accordance with statutory requirements.

If you are not satisfied with kstar99's response to your privacy complaint, you have the right to lodge a complaint with Malaysia's Personal Data Protection Commissioner (PDPC) through their official channels.

FAQ – kstar99 Privacy Policy

Answers to the most frequently asked questions by Malaysia members about privacy at kstar99

kstar99 does not sell or share members' personal data with third parties for their own marketing purposes. Your data is only shared when strictly necessary — with payment providers such as Touch 'n Go or DuitNow to process your transactions, with game providers such as Evolution Gaming to run your Live Casino sessions, and with legal authorities where required under Malaysian law. All third parties who receive your data are bound by strict confidentiality agreements.

Yes, you may request the deletion of your personal data by contacting support@kstar99.xyz. Please note, however, that kstar99 is required under Malaysian law to retain financial transaction records for seven years and gaming records for five years for AML compliance and audit purposes. Data beyond these retention periods will be fully deleted or anonymised. The account closure and data deletion process will be carried out within the timeframe stipulated by the PDPA following verification of your identity.

When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, kstar99 retains a transaction record that includes the payment method used, the amount in Malaysian Ringgit (RM), the date and time of the transaction, and the processing status. kstar99 does not store your full account number or e-wallet password — this sensitive information is processed directly by the respective payment providers through their own secure channels. kstar99 only receives confirmation that a payment was successful or unsuccessful.

kstar99 uses multiple layers of security to protect your account. These include 256-bit SSL encryption for all communications, two-factor authentication (2FA) via SMS OTP when logging in from a new device, automatic monitoring for unusual account activity, and instant notifications whenever a suspicious login attempt is detected. We also encourage members to use a strong, unique password for their kstar99 account, never share login credentials with anyone, and contact us immediately if they suspect any unauthorised activity.

Your gaming history on kstar99 — including games you have played such as baccarat, roulette, slots, or Sports Betting — is used for several legitimate purposes. First, to resolve any disputes relating to game outcomes or payouts. Second, to meet audit and licensing compliance requirements. Third, as part of our responsible gaming programme to identify patterns that may warrant support intervention. Fourth, in aggregated, non-identifiable form, to improve the overall kstar99 platform experience. Your gaming data is not sold to third parties.
Privacy & Responsible Gaming at kstar99

Information you share with kstar99 in the context of responsible gambling — such as deposit limits you have set or self-exclusion requests — is handled with the highest level of confidentiality. This data will not be used for marketing purposes and will not be shared with any third party. If you need support related to gambling habits, please visit the Responsible Gaming us. The kstar99 platform is strictly for individuals aged 18 and above.

Your Data Is Safe with kstar99

With 256-bit SSL security, full PDPA compliance, and no sale of data to third parties, you can play at kstar99 with complete confidence that your privacy is always protected. Register today and experience the difference.

Questions about our Privacy Policy? Contact us: support@kstar99.xyz

Bahasa Melayu