Privacy Policy kle009 — Personal Data Protection for Malaysian Members

Kle009 is an online sports betting and casino platform operating in Malaysia via kle009.best. In delivering our services — which include betting on the Malaysia Super League, EPL, badminton, cricket, roulette, online slots, Live Casino, and lottery — we collect certain personal data from registered members.

We understand that personal data is a sensitive matter. Your name, your phone number, your financial information — these are not merely data points to us; they are details about your real life that you have entrusted to kle009. That trust is something we do not take lightly.

This Privacy Policy is written to provide a clear and honest picture of what we do with your data, why we need it, who may have access to it and what rights you hold as its owner. Everything is subject to and governed by the Malaysian Personal Data Protection Act 2010 (PDPA) — the primary legislation governing personal data protection in this country.

This policy is to be read together with kle009 Terms & Conditions and other related policies published on our platform. In the event of any conflict between these documents regarding data privacy, this Privacy Policy shall take precedence.

Kle009 only collects data that is necessary for clear and legitimate purposes. We do not collect excessive or irrelevant data beyond what is required to deliver our services. Below are the categories of data we collect and how they are sourced:

For identity verification (KYC) purposes, kle009 may request additional documents such as a copy of your Malaysian identity card (MyKad) or a recent bank statement. These documents are processed and stored with the highest security safeguards and accessed only by authorised personnel.

Kle009 collects and processes your personal data solely for the following lawful purposes under Malaysia's PDPA 2010. We will not use your data for any other purpose without first obtaining your fresh consent:

• Service Provision: To set up and manage your kle009 account, process deposits and withdrawals via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX (Maybank2u, CIMB Clicks), process bets and calculate winnings accurately.
• Identity Verification (KYC): To verify that all members meet the minimum age requirement of 18 years and to comply with Anti-Money Laundering (AML) requirements mandated under Malaysian law.
• Account Security: To detect and prevent fraudulent activity, unauthorised account use, bonus abuse and conduct that violates kle009's Terms & Conditions.
• Service Communications: To send important notifications related to your account — such as deposit confirmations, withdrawal processing alerts, security notices and service-related updates.
• Customer Support: To enable the kle009 support team to resolve your enquiries and complaints effectively, with access to relevant account information.
• Analytics & Improvement: To understand how members use the kle009 platform for the purposes of improving user experience, platform performance and the development of useful new features.
• Legal Compliance: To fulfil applicable legal and regulatory obligations, including reporting requirements to Malaysian authorities where required by law.
• Marketing (with consent): To send information about kle009 promotions, welcome bonuses and special offers to members who have given consent to receive marketing communications. You may withdraw this consent at any time.

Kle009 does not make any automated decisions that have a significant impact on you based solely on data processing, without human involvement. All material decisions — such as account closure or withdrawal rejections — involve review by responsible kle009 staff.

Kle009 does not sell, rent or disclose your personal data to third parties for their own marketing purposes — this is our absolute commitment. However, in the course of service operations, certain categories of third parties may have limited access to your data for specific purposes:

• Payment Processor Providers: When you make a deposit or withdrawal using DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost or ShopeePay, the required transaction information will be shared with the respective payment provider to process the transaction. These providers maintain their own privacy policies.
• Technical Service Provider: Companies that provide technical infrastructure to kle009 — such as cloud computing services, fraud detection systems and customer support software — may have access to your data as part of their services, subject to strict confidentiality agreements.
• Game Providers: Companies that provide Live Casino, slots, and lottery games to kle009 may receive the minimum technical data required to operate those games properly.
• Malaysian Authorities: kle009 will disclose data to the relevant authorities if required by Malaysian law or a valid court order — for example, in financial crime or AML investigations.

All third parties with access to kle009 member data are bound by data protection agreements requiring them to handle your data to the same or higher standards that we uphold. kle009 does not transfer member personal data outside Malaysia without adequate safeguards in place.

Protecting member personal data is a core technical and operational priority at kle009. We continually invest in the latest security infrastructure to ensure your data remains safe from unauthorised access, theft, or breaches. Key security measures we have in place:

• SSL/TLS Encryption: All communications between your web browser and kle009's servers are protected by 256-bit SSL/TLS encryption. You can verify this by checking for the padlock icon in your browser's address bar when using kle009.
• Data-at-Rest Encryption: Personal and financial data stored in kle009's databases is encrypted using AES-256 — the same encryption standard used by leading banking institutions in Malaysia.
• Access Controls: Access to member personal data among kle009 staff operates on a need-to-know basis — only staff who require access to carry out their specific duties are permitted, and all access is logged for audit purposes.
• Regular Security Audits: kle009 conducts regular penetration testing and security audits by independent third-party experts to identify and address any security vulnerabilities.
• Two-Factor Authentication: kle009 supports and encourages the use of two-factor authentication (2FA) on member accounts for an added layer of protection.
• 24/7 Monitoring: kle009's systems are continuously monitored to detect any unusual activity or unauthorised access attempts in real time.

Despite all these security measures, no system can be guaranteed 100% secure against every threat. In the unlikely event of a data breach affecting your information, kle009 is committed to notifying you within 72 hours and taking all necessary remedial action.

Kle009 retains your personal data only for as long as necessary for the stated purposes and to meet applicable legal obligations. Our general retention policy is as follows:

• Active Account Data: For as long as your account remains active with kle009, we will retain all data associated with your account for service operational purposes.
• After Account Closure: Closed account data is retained for 7 years from the date of closure for legal compliance purposes under Malaysian law, including financial record-keeping and potential investigation requirements.
• Financial Transaction Data: Records of all financial transactions — deposits via DuitNow, FPX, e-wallets and withdrawals — are retained for a minimum of 7 years in accordance with Malaysian accounting and AML legal requirements.
• Activity Log: Technical logs and activity records are retained for 2 years for security and dispute resolution purposes.
• Marketing Data: If you withdraw your marketing consent, your marketing information will be deleted within 30 days, though other operational data may still be retained in accordance with the policies above.

Once your data is no longer needed, kle009 will permanently delete it using secure erasure methods that prevent any possibility of recovery. For data stored in physical format (where applicable), secure destruction methods will be applied.

As a kle009 member and a Malaysian citizen protected under PDPA 2010, you have the following rights regarding your personal data. kle009 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, please contact kle009's Data Protection Officer by email at privacy@kle009.best or via our platform's live chat. Please include your full name and kle009 account number in your request to help us process it faster. kle009 will handle all data rights requests within 14 business days of receipt.

Kle009 uses cookies — small text files stored in your web browser — to enhance the user experience, maintain session security, and help us understand how our platform is used. The following are the types of cookies we use:

You can control and manage cookie settings through your web browser settings. Please note, however, that disabling essential cookies will affect the functionality of the kle009 platform — you may be unable to log in or use certain features properly. Optional cookies can be disabled without affecting the platform's core functionality.

Kle009's services are exclusively for individuals aged 18 and above. kle009 does not knowingly collect personal data from individuals under the age of 18. Registration by minors is strictly prohibited under kle009's Terms & Conditions.

If we discover or become aware that we have collected data from a minor, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe that a child under their care has registered an account at kle009 without permission are encouraged to contact us immediately at privacy@kle009.best so that immediate action can be taken.

Kle009 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes in how we handle data. Each new version will display an updated "Last Updated" date at the top of this document.

For significant amendments — such as changes to how we use your data or new disclosures to third parties — kle009 will endeavour to notify members via their registered email or in-platform notification at least 14 days before the changes take effect.

Continued use of the kle009 platform following such notification or after the stated effective date will be deemed acceptance of the updated privacy terms. If you do not agree with the amendments, you have the right to close your kle009 account and request deletion of your data in accordance with the procedure set out in Section 7 above.

Kle009 has appointed a Data Protection Officer (DPO) responsible for ensuring our platform's compliance with Malaysia's PDPA 2010 and this Privacy Policy. If you have any questions, concerns or complaints regarding privacy and data protection, please contact us through the following channels:

• Dedicated Privacy Email: privacy@kle009.best — for all privacy enquiries, data rights requests, and complaints. This is a dedicated monitored channel for privacy matters with a target response time of 5 business days.
• General Support Email: support@kle009.best — for general privacy enquiries in the context of platform use.
• Live Chat: Available 24/7 on the kle009 platform — for urgent privacy enquiries that require a prompt response.

Kle009 is committed to addressing all privacy complaints seriously and in a timely manner. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Personal Data Protection Commissioner under PDPA 2010.