1.Introduction
kilat289 ("the Platform", "we", "us", "our") is committed to protecting the privacy of every member who registers, deposits, plays or otherwise interacts with the kilat289 website accessible at https://kilat289.cam. This Privacy Policy ("Policy") describes the personal data we collect, the purposes for which it is used, how it is stored and protected, the circumstances under which it may be shared, and the rights available to members in respect of their data.
This Policy applies to all personal data processed in connection with the kilat289 Platform and its services, including casino games, sports betting markets, payment transactions, member account management and customer support communications. It should be read in conjunction with the kilat289 Terms and Conditions and Responsible Gambling Policy.
By creating a kilat289 account and using any service offered on the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein to the extent that consent is the applicable legal basis for processing.
This Policy is published in English, which is the controlling language for interpretation purposes. kilat289 serves Malaysian members and handles transactions denominated in Malaysian Ringgit (MYR). References to payment methods throughout this Policy include Malaysian-specific options such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank online and Hong Leong Connect.
2.Definitions
- "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, either alone or in combination with other data.
- "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, alteration and deletion.
- "Data Controller" — kilat289, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
- "Data Processor" — a third party that processes Personal Data on behalf of kilat289 under a contractual arrangement, such as a payment gateway provider or cloud hosting service.
- "Member" — any individual who has registered an account on the kilat289 Platform.
- "KYC Data" — identity, age, address and payment-ownership documentation submitted by a Member during the Know Your Customer verification process.
- "Cookies" — small data files placed on a user's device by a website to store session, preference and analytical information.
- "Sensitive Personal Data" — categories of data requiring heightened protection, including identity document numbers, financial account details and, where applicable, health-related information relevant to responsible gambling assessments.
3.Data We Collect
kilat289 may collect the following categories of personal data, depending on the nature of your interaction with the Platform:
| Category |
Examples |
Collection Point |
| Identity Data |
Full legal name, date of birth, MyKad or passport number |
Registration, KYC verification |
| Contact Data |
Email address, mobile number, residential address |
Registration, account management |
| Financial Data |
Payment method type, partial account reference, transaction history in MYR |
Deposit and withdrawal transactions |
| KYC Documents |
Scanned government ID, proof-of-address documents, bank statement excerpts |
KYC verification process |
| Technical Data |
IP address, device type, browser type, operating system, session timestamps |
Automatic collection during Platform use |
| Usage Data |
Pages visited, games accessed, session duration, betting history |
Automatic collection during Platform use |
| Communication Data |
Support ticket content, chat logs, email correspondence |
Member support interactions |
| Marketing Preferences |
Opt-in status for promotional communications, bonus participation history |
Account settings, promotion participation |
4.How We Collect Data
kilat289 collects Personal Data through the following primary channels:
- Direct submission: Information you provide voluntarily when registering an account, completing the KYC verification process, submitting deposit or withdrawal requests, or contacting the support team.
- Automated technical collection: Data gathered automatically when you access the Platform, including IP address, device identifiers, browser configuration and session activity logs collected through server logs and cookies.
- Payment provider data: Transaction reference data received from payment processors handling MYR deposits and withdrawals via channels including DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost and GrabPay.
- Third-party verification services: Identity or age verification data returned from authorised KYC service providers where used to supplement Member-submitted documentation.
- Communications: Content included in support tickets, live chat sessions, emails and other correspondence with kilat289 personnel.
5.Legal Basis for Processing
kilat289 processes Personal Data on one or more of the following legal grounds:
- Contract performance: Processing necessary to register your account, manage your MYR balance, process deposits and withdrawals and deliver the gaming and sports services you have requested.
- Legal obligation: Processing required to comply with applicable anti-money laundering obligations, age verification requirements, identity verification duties and data retention mandates imposed by relevant regulatory frameworks.
- Legitimate interests: Processing for fraud prevention, platform security monitoring, responsible gambling detection, service improvement analytics and internal reporting, where such interests are not overridden by your fundamental privacy rights.
- Consent: Processing for direct marketing communications and non-essential cookie placement where consent has been explicitly provided and remains capable of being withdrawn at any time.
6.How We Use Your Data
Personal Data collected by kilat289 is used for the following defined purposes:
- Creating, verifying and maintaining your kilat289 account;
- Processing MYR deposits and withdrawals and maintaining accurate transaction records;
- Conducting KYC identity and age verification to confirm eligibility for members aged 21 and above;
- Detecting and preventing fraud, money laundering, account abuse and other prohibited activity;
- Administering bonus offers, VIP tier progression, birthday rewards and referral programme tracking;
- Providing customer support and resolving account, payment and game-related queries;
- Monitoring responsible gambling indicators and, where appropriate, making available relevant tools or support referrals;
- Sending transactional communications such as payment confirmations, account alerts and security notifications;
- Sending promotional communications to members who have opted in to marketing, which may reference relevant bonus offers, sports events or platform updates;
- Conducting aggregated, anonymised analytics to improve Platform functionality, navigation and service quality.
kilat289 does not use automated profiling that produces significant legal or similarly significant effects on Members without human oversight and without the Member's knowledge.
7.Payment Data
kilat289 handles MYR payment transactions through third-party payment processors and the relevant payment network infrastructure. When you make a deposit or request a withdrawal using methods such as Maybank2u, CIMB Clicks, Public Bank online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX or supported cryptocurrency networks, your payment credentials are handled directly by the respective provider.
kilat289 retains transaction reference data, amounts, timestamps and MYR values within your account history for audit, compliance and dispute resolution purposes. We do not store complete card numbers, full banking credentials or e-wallet access tokens on kilat289 systems.
All payment accounts used for deposits or withdrawals must be held in your own legal name as recorded on your kilat289 account. This requirement supports both compliance obligations and the protection of Members from third-party payment fraud.
8.Cookies & Tracking Technologies
kilat289 uses cookies and similar tracking technologies to support Platform functionality, maintain session continuity, gather usage analytics and, where consent has been provided, deliver relevant promotional content. The following categories of cookie may be placed on your device:
- Strictly necessary cookies: Required for core Platform functions including login sessions, account access, cashier operation and security controls. These cannot be disabled without impairing Platform functionality.
- Analytical cookies: Used to measure page visits, session duration, feature usage and navigation paths in aggregated, anonymised form to support Platform improvement.
- Functional cookies: Store your Platform preferences such as language settings, display configurations and previously visited sections.
- Marketing cookies: Placed with your consent to help deliver promotions relevant to your Platform activity. You may withdraw consent for marketing cookies at any time through your account settings or by contacting support.
Your browser settings may allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent normal Platform operation.
9.Third-Party Disclosure
kilat289 does not sell, rent or otherwise trade Personal Data to unrelated third parties for commercial purposes. Data may be shared with the following categories of recipient only where necessary and under appropriate data-processing agreements or legal authority:
- Payment processors: Transaction data shared with payment gateway providers and banking networks (including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank and Hong Leong) to process MYR deposits and withdrawals;
- KYC and identity verification providers: Identity documents and verification data processed by authorised third-party verification services;
- Technology service providers: Cloud hosting, content delivery, analytics and customer support platform providers engaged under contractual data-processing terms;
- Game content providers: Session identifiers and game-relevant data passed to licensed international studio partners to enable game delivery and technical support;
- Regulatory and law enforcement authorities: Personal Data disclosed where required by applicable law, a valid court order or regulatory investigation.
Where Personal Data is shared with third-party processors, kilat289 requires that such processors implement appropriate security measures and use the data solely for the described purpose.
10.Data Retention
kilat289 retains Personal Data for as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable legal or regulatory obligations. The following general schedules apply:
- Active account data is retained for the duration of your account's existence on the kilat289 Platform;
- Transaction records, KYC documents and account history are retained for a minimum period following account closure as required by applicable anti-money laundering and financial compliance obligations;
- Support and communications records are retained for a period sufficient to address disputes, regulatory reviews or audit requirements;
- Marketing preference records are retained until you withdraw consent, after which they are updated to reflect opted-out status;
- Anonymised analytical data may be retained indefinitely as it no longer constitutes Personal Data.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with kilat289's internal data disposal procedures.
11.User Rights
Subject to applicable data protection law, kilat289 Members hold the following rights in respect of their Personal Data:
📂
Right of Access
Request a copy of the Personal Data kilat289 holds about you.
✏️
Right of Rectification
Request correction of inaccurate or incomplete Personal Data.
🗑️
Right of Erasure
Request deletion of Personal Data where no overriding legal retention obligation applies.
⏸️
Right to Restrict Processing
Request that processing be limited while a rectification or objection request is assessed.
📤
Right to Portability
Request your data in a structured, machine-readable format where technically feasible.
🚫
Right to Object
Object to processing based on legitimate interests, including marketing communications.
To exercise any of the above rights, please contact the kilat289 support team with your full account name and a clear description of your request. We will respond within a reasonable time frame in accordance with applicable requirements. Note that certain rights may be limited where compliance with legal obligations or the prevention of financial crime requires continued data retention.
12.Data Security
kilat289 implements a combination of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:
- Encrypted web connections between Members' browsers and kilat289 Platform servers;
- Access controls and authentication requirements limiting internal access to Personal Data to authorised personnel with legitimate operational need;
- Regular internal reviews of data handling processes and security configurations;
- Contractual data security requirements imposed on third-party processors;
- Incident response procedures for investigating and addressing potential data security events.
Notwithstanding these measures, no internet-based platform can guarantee absolute data security. Members are encouraged to use strong, unique passwords for their kilat289 accounts and to report any suspected unauthorised access to support immediately.
In the event of a material data security incident affecting Member Personal Data, kilat289 will take appropriate steps to contain the incident and, where required by applicable law, notify affected Members and relevant authorities within the prescribed timeframe.
13.Children & Minors
kilat289 services are strictly for adults aged 21 years and above. The Platform does not knowingly collect Personal Data from individuals under the age of 21. Account registration incorporates age verification steps, and the KYC process includes confirmation of date of birth through government-issued identification.
If kilat289 becomes aware that Personal Data has been collected from a person under 21 years of age, the account will be suspended, any balance returned to the verified deposit source where applicable, and the data deleted in accordance with our retention procedures.
Parents or guardians who have reason to believe that a minor has registered a kilat289 account should contact support immediately using the contact details in Section 15.
14.Policy Amendments
kilat289 reserves the right to update this Privacy Policy at any time. Material changes will be reflected by updating the "Last reviewed" date displayed at the top of this page. Where changes are significant, kilat289 may additionally notify registered Members through the Platform or by email.
Continued use of the kilat289 Platform following the publication of an updated Policy constitutes acknowledgement of the revised terms. Members who do not agree with an amended Policy should cease using the Platform and contact support to discuss account closure options.
15.Contact Us
For any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data by kilat289, please contact the support team using the details below. Our team is available 24 hours a day.
Website: https://kilat289.cam
Email: [email protected]
For responsible gambling enquiries and data related to self-exclusion or deposit limit requests, please also refer to the dedicated guidance page at /responsible-gambling.