Kl28 takes the privacy of every Malaysian player as its most serious responsibility. This document clearly explains the types of data we collect, how it is used, and the full rights you hold over your personal information.
How kl28 manages Malaysian players' personal data – transparently, securely, and in line with the highest industry standards.
Kl28 only collects data that is genuinely necessary to provide our services – name, phone number, email and transaction details. We do not collect irrelevant or excessive data that does not contribute to the player experience.
All data stored and transmitted through the kl28 platform is protected by 256-bit SSL encryption – the same security standard used by major Malaysian banking institutions such as Maybank and CIMB. Our servers are monitored 24 hours a day.
Kl28 has never and will never sell, rent or share players' personal data with any third party for marketing or commercial purposes. Your data belongs to you – it is not a business asset for us to sell to advertisers or data brokers.
Every kl28 player has the right to access, amend, transfer, or request the deletion of their personal data at any time. Such requests will be processed within 48 hours by kl28's privacy team, at no charge and without unnecessary questioning.
Kl28 retains players' personal data only for as long as necessary for the stated purposes. Data from closed accounts is kept for seven years to meet Malaysian legal compliance requirements, after which it is permanently and securely deleted from all kl28 systems.
Kl28's Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant data protection legislation. kl28 conducts regular compliance reviews to ensure our data management practices remain aligned with the latest standards.
This Privacy Policy ("Policy") describes how kl28 — accessible at kl28.best — collects, uses, stores and protects your personal information as a player or user of our platform. This Policy forms part of the overall agreement between you and kl28, and should be read together with kl28 Terms and Conditions.
Kl28 operates as an online entertainment platform offering live casino, Sports Betting, lottery, jackpot and other games to players in Malaysia. To run these services safely, fairly and in compliance with applicable legal requirements, we need to collect certain personal data.
This Policy applies to all information collected through the kl28.best website, whether via account registration, use of our services, communication with our support team, or general browsing activity on our platform. We are committed to managing your data responsibly in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Kl28 collects your personal data through several means – directly from you during registration or platform use, automatically via tracking technologies, and occasionally from legitimate third parties such as payment service providers. The types of data collected are as follows:
Registration & Identity Data:
Financial & Transaction Data:
Gaming Activity Data:
Technical & Device Data:
Kl28 uses collected personal data solely for legitimate and transparent purposes. Each use of data has a clear legal basis — whether your consent, performance of a contract, a legal obligation, or kl28's legitimate interests that do not prejudice your rights. The purposes for which data is used are as follows:
Kl28 does not sell, rent, or trade players' personal data to any third party under any circumstances. However, there are limited situations where we may need to share data with specific parties in order to deliver our services or meet legal obligations:
Payment Service Providers: Information required to process your deposits and withdrawals is shared with the relevant payment service providers — for example, Touch 'n Go, GrabPay or banking institutions for FPX transactions. These providers are bound by their own privacy policies and security standards and receive only the data strictly necessary to process the relevant transaction.
Game Software Provider: Licensed game providers that supply live casino, slots and other games to kl28 may receive the session data necessary to operate those games. All such providers are subject to strict data protection agreements with kl28.
Lawful Authorities: kl28 will disclose personal data to government authorities, law enforcement bodies or courts when required to do so under Malaysian law, or when we have reasonable grounds to believe that such disclosure is necessary to prevent crime, protect public safety or comply with valid legal process.
In the event that kl28 is involved in a merger, acquisition, or sale of business assets, players' personal data may be transferred as part of that transaction. In such cases, kl28 will notify affected players before their data becomes subject to a different privacy policy.
Kl28 implements multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These protective measures include:
While kl28 implements all reasonable security measures, no system can guarantee absolute security. You also play an important role in protecting your data – make sure your kl28 password is strong and unique, never share it with anyone, and log out of your account when you are done using the platform, especially on shared devices.
The kl28 platform uses cookies and similar tracking technologies to enhance your experience and ensure certain features work correctly. Below are the types of cookies used by kl28:
Essential Cookies (Required): These cookies are required for the core functionality of the kl28 platform — including maintaining your login session, securing form submissions, and managing your gaming preferences. Without them, the kl28 platform will not function properly. Essential cookies cannot be disabled.
Performance & Analytics Cookies: kl28 uses analytics cookies to understand how players use the platform — which pages are visited most, time spent in each section, and navigation patterns. This data is collected in aggregate form and cannot be used to identify any individual. The information helps us improve the design and performance of the kl28 platform.
Functional Cookies: These cookies allow kl28 to remember your preferences — such as your preferred language, the betting limits you have set, or the last game variant you played — so you do not have to reconfigure them each time you log in.
Kl28 also uses web beacon technology (tracking pixels) in promotional email communications to understand whether emails have been opened and which links have been clicked. This information is used solely to measure the effectiveness of our communications and to improve them over time.
As kl28 involves financial transactions in Malaysian Ringgit (RM), we are subject to stricter compliance obligations regarding transaction data management. This section explains specifically how we handle your financial data:
All deposit and withdrawal records – whether via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX – are stored in kl28's secure, encrypted systems. These records are required for compliance, dispute resolution, auditing and reporting to relevant authorities in accordance with Malaysian law.
Identity Verification Process (KYC): To fulfil our anti-money laundering and counter-terrorism financing obligations, kl28 may require players to undergo identity verification (Know Your Customer – KYC) in certain situations, particularly for withdrawals exceeding set limits. Documents that may be requested include:
KYC documents received by kl28 are securely processed, stored in encrypted format and accessed only by authorised personnel. These documents will not be used for any purpose other than identity verification and legal compliance.
As a kl28 player and data subject, you have certain rights regarding the personal data collected and processed by kl28. These rights are fully recognised and respected by kl28:
You have the right to request a copy of the personal data kl28 holds about you at any time. kl28 will provide this information in a readable format within 48 hours of your request.
If the personal data kl28 holds about you is inaccurate or incomplete, you have the right to request a correction. You can update basic information directly in your kl28 account settings.
You may request the deletion of your personal data when it is no longer needed for the original purpose of collection, or when you withdraw your consent. Such requests are subject to any applicable legal record-keeping obligations.
You have the right to object to the processing of your data for direct marketing purposes at any time. Once your objection is received, kl28 will immediately stop using your data for that purpose.
You may request your personal data in a structured, machine-readable format (such as CSV or JSON) for transfer to another service provider should you choose to do so.
In certain circumstances, you have the right to request that kl28 restrict how we process your data – for example, while we are verifying its accuracy or considering an objection you have raised.
To exercise any of the above rights, contact the kl28 privacy team by email at support@kl28.best, stating the type of request and your account details. We will respond within 48 hours and fulfil the request within a reasonable timeframe at no charge.
Kl28 retains your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required under applicable Malaysian law. The following are general retention guidelines for different categories of data:
Once the relevant retention period has expired, kl28 will securely delete or anonymise your data using methods that ensure it cannot be recovered. For data subject to mandatory legal retention requirements, kl28 will take steps to limit its active use during that mandatory retention period.
The kl28 platform is intended solely for adults aged 18 and above. kl28 does not knowingly collect personal data from minors. The kl28 registration process includes age verification, and any account found to have been registered by a person under 18 will be immediately closed and all associated data deleted.
Kl28 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, technology, applicable laws, or business operations. All amendments will be published on kl28.best with a clearly stated effective date.
For material amendments – changes that significantly affect how we collect, use or protect your personal data – kl28 will endeavour to notify you via your registered email or an in-platform notification at least 14 days before the changes take effect. Minor technical or editorial amendments may be implemented without prior notice but will be reflected in the "Updated" date at the top of this document.
We encourage you to review this Privacy Policy periodically. Continued use of the kl28 platform after any amendments take effect will be considered acceptance of the revised Policy.
If you have any questions or concerns, or wish to exercise your privacy rights in relation to kl28's Privacy Policy, please reach out to our privacy team through the following channels:
Please include your account details, the specific type of request, and any information needed for us to process it accurately. We are committed to responding to all privacy-related enquiries within 48 business hours.
The effective date of the current version of this Privacy Policy is: 1 January 2026. This policy is written in Bahasa Melayu, and that version shall prevail in any interpretation or dispute regarding its contents.
Many players wonder what actually happens to their data from the moment they register to the time they withdraw their winnings. This is an honest and transparent account of your data's journey within the kl28 ecosystem – free of confusing technical jargon.
Every stage of this process involves distinct protection measures. Your data does not move freely within kl28's systems – every access is logged, every transfer is encrypted, and every use has a clear basis limited to the stated purpose.
The most important thing to know: your data always belongs to you. kl28 is simply a responsible custodian — not the owner of that data.
The most frequently asked questions from Malaysian players about how kl28 manages their personal data.
One of the ways kl28 protects your financial privacy is by supporting locally trusted, security-tested payment methods. When you deposit via Touch 'n Go eWallet or GrabPay, your sensitive financial information never touches kl28's servers – everything is processed entirely within the payment provider's secure systems.
Kl28 has deliberately chosen not to support lesser-known international payment methods or those operating outside Malaysia — this is not only a matter of user convenience, but a conscious security and privacy decision.
The gameplay data we collect serves more than just operational purposes – it also helps ensure your gaming experience remains safe and in control. kl28 uses gameplay data patterns to identify players who may benefit from support through our responsible gaming programme, and to proactively enable appropriate protections. This platform is for players aged 18 and above only. If you or someone you care about needs help with problem gambling, please contact Befrienders Malaysia: 1800-82-0066 or MIASA: 03-7956 8144. More information on the Responsible Gaming us.