Reference

How klwin12 Handles Your Personal Information

When you open an account with us, we collect certain personal details to verify your identity and process transactions through Touch 'n Go eWallet, Boost, and GrabPay.

Data collected at registrationPayment method privacy — Touch 'n Go eWallet, Boost, GrabPayYour right to access and delete your dataCookie and session tracking explainedHow to contact us about your data
klwin12 How klwin12 Handles Your Personal Information
DATA HANDLING STANDARDS

How We Protect and Manage Your Data

We apply security measures at every layer of your account — from registration through to withdrawal verification. Below are the four areas we focus on most when it comes to handling your personal information responsibly.

Account Security and Verification

Your account is protected with OTP verification at login. Withdrawal requests go through an identity check before funds are released to your registered e-wallet, whether that is Boost, GrabPay or another linked method.

Cookie and Session Tracking

We use session cookies to keep you logged in and functional cookies to remember your language and display preferences.

Data Retention Period

Account data is retained for as long as your account remains active and for a period after closure as required by applicable law in Malaysia. Once the retention period lapses, data is deleted or anonymised from our systems.

Third-Party Data Sharing

We share your data only with payment processors like Touch 'n Go eWallet and Boost, identity verification services, and authorities where Malaysian law requires it. No data is passed to advertisers or data brokers.

DATA CONTACT PATHS

How to Reach Us About Your Privacy

If you want to access, correct or request deletion of your personal data, reach out through any of the channels below. Our team handles data-related requests separately from general account queries, so please state clearly that your message is a data or privacy request. We aim to respond within a reasonable timeframe consistent with applicable law.

Live Chat Start a live chat session from the account page. State your request as a privacy or data matter so it reaches the right team without delay.
Email Support Send your data access or deletion request by email. Include your registered account email and the specific action you are requesting so we can verify and process it.
In-Account Help Log in, go to Account Settings, and select the Help section. You can submit a data-related ticket directly from there — no need to leave the platform.

Common Questions About Your Data at klwin12

These are the questions we hear most often from account holders about how their personal information is handled. If your question is not covered here, reach us via live chat or email and reference your privacy concern directly.

We collect your name, email, contact number and the details needed to verify your identity. Payment references from Touch 'n Go eWallet, Boost or GrabPay are also logged for each transaction you complete.

We share data only with payment processors and verification services that make your account function. We do not sell or pass your data to marketing firms or advertisers under any circumstance.

Submit a data access request via live chat or email, stating clearly it is a privacy request. Include your registered email address so our team can verify your identity before processing the request.

Yes. Submit a deletion request through live chat or the in-account Help section. We will process it in line with applicable Malaysian law, which may require us to retain certain records for a defined period.

We do not store your full wallet credentials. Only the transaction reference from GrabPay or Boost is recorded on our side. Your wallet PIN and login credentials stay within those apps and never pass through our servers.

Data is retained for a period after account closure as required by applicable law in Malaysia. Once that period ends, your personal records are deleted or anonymised from active systems.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.