1. Home
  2. Privacy Policy
Official Documents

Kstar99 Privacy Policy – Malaysia Personal Data Protection

Your privacy is our priority at kstar99. This document transparently explains how we collect, use, store and protect your personal data as a kstar99 platform user in Malaysia.

Last Updated: 1 January 2026
Our Privacy Commitment

Kstar99's Six Data Protection Principles

Here is how kstar99 ensures your personal data remains secure and is used responsibly at all times.

256-Bit SSL Encryption

All data transmitted between your device and kstar99's servers is encrypted with 256-bit SSL technology — the same level of security used by leading Malaysian banking institutions such as Maybank and CIMB.

No Sale of Data to Third Parties

Kstar99 does not sell, rent, or trade your personal data to any third party for marketing purposes without your written consent. Your data is not a commodity we deal in.

Minimum Data Collection

Kstar99 only collects data that is strictly necessary for platform operations, identity verification, payment processing and legal compliance. We do not collect data unrelated to these purposes.

Your Data, Your Control

You have the right to access, correct, download and request the deletion of your personal data held by kstar99. Such requests are processed within 14 business days.

Defined Retention Periods

Your personal data is not retained beyond what is necessary. After an account is closed, data is kept only for the period required by law before being securely deleted from all kstar99 systems.

Data Breach Notification

In the event of any security incident affecting your data, kstar99 is committed to notifying affected users within 72 hours of detecting the incident, in line with industry best practices.

Important Note: By registering for and using the kstar99 platform, you agree to the collection and use of your personal information as described in this Privacy Policy. Please read this document carefully. Any enquiries may be directed to support@kstar99.best.

SECTION 1

Introduction – kstar99's Privacy Commitment

Kstar99 ("we", "the platform" or "kstar99") is an online casino platform operator running under the domain https://kstar99.best, serving users exclusively in Malaysia. We take the privacy and protection of our users' personal data very seriously — not merely because it is required by law, but because it is the foundation of trust that underpins the long-term relationship between kstar99 and our player community.

This Privacy Policy ("Policy") sets out transparently how kstar99 collects, uses, stores, protects, and in certain circumstances shares your personal data when you use the kstar99 platform — including the website, mobile application (where applicable), and all related services we offer to users in Malaysia.

This policy applies to all categories of kstar99 users — from visitors who browse the site without registering, to active members who play daily, including members of our VIP Rewards programme. By using the kstar99 platform in any capacity, you confirm that you have read and understood this Privacy Policy and agree to the way we handle your personal data as described herein.

Kstar99 operates on a privacy by design principle — meaning privacy considerations are built directly into how we design our products, processes and systems, rather than added as an afterthought. This is how we ensure data protection is not just a document on paper, but a daily practice you can experience as a user.

Quick summary: Your data is used to operate your account, process payments, prevent fraud and meet legal requirements. We do not sell your data. You may request a copy or deletion of your data at any time.

SECTION 2

Personal Data Collected by kstar99

Kstar99 collects several categories of personal data depending on your level of interaction with the platform. We follow a data minimisation principle — only data that is genuinely required for a legitimate purpose is collected, and nothing beyond that.

Data Category Type of Information Primary Purpose
Identity Data Full name, MyKad number, date of birth, gender Identity verification (KYC), age verification
Contact Data Malaysian phone number, email address, state of residence Account communications, security notifications
Financial Data Payment methods (TnG, GrabPay, DuitNow, FPX), transaction history Deposit & withdrawal processing, fraud prevention
Activity Data Game history, total wagers, win/loss records, session duration Account operations, VIP programme, responsible gaming
Technical Data IP address, device type, operating system, web browser, access logs Platform security, fraud detection, bug fixes
Cookie Data Session cookies, preference cookies, anonymised analytics cookies User experience, platform usage statistics

The most sensitive data — such as MyKad copies and detailed financial information — is only collected when required for a mandatory KYC or payment verification process. These documents are stored in an encrypted environment and access is restricted to authorised personnel only.

SECTION 3

How kstar99 Collects Your Personal Data

Kstar99 collects personal data through several different channels as you interact with our platform:

  • Account registration: When you register a new account at kstar99, you provide basic information such as your name, Malaysian phone number and email address directly.
  • KYC Process: When kstar99 requires further identity verification, you may be asked to upload a copy of your MyKad or other supporting documents via the platform's secure upload system.
  • Financial transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, transaction details are passed to us by the respective payment provider for verification and record-keeping purposes.
  • Platform usage: Gaming activity, platform navigation and interactions with kstar99 features are automatically recorded by the system for operational and security purposes.
  • Support communications: When you contact the kstar99 support team via live chat or email, the content of those communications is retained for issue resolution reference and service improvement purposes.
  • Cookie technology: The kstar99 platform uses cookies and similar tracking technologies to enhance the user experience and collect anonymous analytics data on platform usage.

kstar99 does not purchase or receive personal data from third-party sources for marketing purposes. All data we hold is either provided directly by you or generated through your own use of the platform.

SECTION 4

How kstar99 Uses Your Personal Data

Kstar99 uses the personal data collected for the following legitimate and necessary purposes in the operation of the platform:

  • Account management: Creating, maintaining, and managing your kstar99 user account, including login, account settings, and activity records.
  • Identity verification: Conducting the KYC process required to verify users' identity, age, and eligibility in accordance with compliance requirements.
  • Payment processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and managing withdrawals to registered payment methods.
  • Fraud prevention & security: Detecting, investigating and preventing fraudulent activity, money laundering and security breaches that could affect the platform or other users.
  • VIP Rewards Programme: Calculating XP points, managing VIP level upgrades, crediting cashback and rebates, and administering other membership benefits within the kstar99 VIP Rewards programme.
  • Responsible gaming: Monitoring gaming patterns to identify early signs of problem gambling and providing appropriate intervention when necessary.
  • Service communications: Sending important notifications relating to your account, security, transactions and policy changes that affect you.
  • Platform improvements: Analysing anonymised usage data to understand how users interact with kstar99 and to drive continuous improvements to the platform.
  • Legal compliance: Fulfilling the reporting and legal compliance obligations applicable to the operation of the kstar99 platform.

Kstar99 will not use your personal data for any purpose beyond those stated above without first obtaining your written consent. Any proposed new use will be communicated to you via email or an in-platform notification before it is implemented.

SECTION 5

Sharing Data with Third Parties

Kstar99 understands the importance of your privacy and only shares your personal data in limited and necessary circumstances. Below are the parties who may receive your personal data and the reasons why:

  • Malaysia payment providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX banks receive the transaction information necessary to process your payment. Each of these providers operates under its own privacy policy governing how that data is used.
  • Game providers: Third-party gaming platforms integrated with kstar99 may receive the session data required to run the games. This data is kept to a minimum and limited strictly to what is needed for gameplay functionality.
  • Technical service providers: Companies providing IT infrastructure, cybersecurity and analytics services to kstar99 have limited access to the data required to deliver those services, subject to strict data protection agreements.
  • Legal authorities: kstar99 may be required to disclose personal data to Malaysian law enforcement authorities or regulatory bodies when compelled to do so by law, court order or other lawful directive.

In all cases of data sharing described above, kstar99 ensures that recipients are bound by data protection obligations equivalent to or stricter than our own. kstar99 does not share your personal data with third-party advertisers or marketers without your consent.

Our commitment: Your personal data has never been, and will never be, sold to any party for kstar99's commercial gain. This is an absolute, non-negotiable principle in how kstar99 operates.

SECTION 6

Data Security – kstar99's Protection Measures

Kstar99 consistently invests in security infrastructure to protect your personal data from unauthorized access, disclosure, alteration, or destruction. The following are the key security measures we have in place:

  • 256-bit SSL encryption: All data communications between your device and the kstar99 platform are encrypted using the latest TLS/SSL protocols. This means data in transit — including login credentials, payment details, and personal data — cannot be read by any party attempting to intercept the communication.
  • Data-at-rest encryption: Sensitive data stored in kstar99's databases — including passwords, identification numbers, and financial information — is encrypted at rest using industry-recognized encryption algorithms.
  • Access controls: Access to users' personal data within kstar99's internal systems is restricted to staff with a legitimate business need, with mandatory two-factor authentication required for all system access. Every access is logged and monitored.
  • Continuous monitoring: The kstar99 security team conducts 24-hour system monitoring to detect any suspicious activity, intrusion attempts or anomalies that may indicate a security incident.
  • Regular security audits: kstar99 conducts regular penetration testing and independent security audits by qualified third parties to identify and address vulnerabilities before they can be exploited.
  • Environment separation: Production and test data are stored in fully separate environments to prevent exposure of real data during development or testing activities.

While kstar99 takes all reasonable steps to protect your data, no system can guarantee absolute 100% security against every threat. In the event of a security incident affecting your data, kstar99 will notify you within 72 hours of confirming the incident and take all necessary remediation action.

SECTION 7

Cookies & Tracking Technologies on the kstar99 Platform

The kstar99 platform uses cookies and similar technologies to enhance user experience, maintain session security and collect anonymous analytics data on how users interact with our platform.

Types of cookies used by kstar99:

  • Essential Cookies: Required for core platform functions such as login authentication, session security and basic preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance cookies: Collects anonymous information about how pages are visited and any error messages encountered. This data helps kstar99 understand platform performance and make improvements.
  • Functional cookies: Saves your preferences such as language, display settings and game preferences so you do not have to reconfigure them each time you log in.
  • Analytics cookies: Helps kstar99 understand platform traffic and usage patterns on an aggregated, anonymous basis. This information is used to make better-informed decisions on platform improvements.

You can manage your cookie preferences through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the kstar99 platform. For guidance on managing cookies in popular browsers such as Chrome, Safari or Firefox, please refer to the relevant browser's help documentation.

SECTION 8

Data Retention & Deletion

Kstar99 adheres to the principle of data minimisation — your personal data is not retained longer than necessary for the purpose it was collected. The following are our retention period guidelines by data category:

  • Active account data: Retained for the duration your kstar99 account remains active and for the required period following account closure.
  • Financial transaction records: Retained for seven (7) years from the transaction date in accordance with applicable financial and accounting legal requirements.
  • Security and authentication logs: Retained for two (2) years for the purposes of security incident investigation and fraud prevention.
  • Support communication records: Retained for two (2) years from the last interaction for issue resolution reference and service improvement purposes.
  • Analytics cookie data: Anonymous data is collected and deleted after 13 months in line with web analytics best practices.
  • KYC documents: Retained for five (5) years following account closure in accordance with anti-money laundering compliance requirements.

Once the designated retention period expires, your personal data will be securely deleted from all kstar99 systems using methods that ensure the data cannot be recovered. In cases where immediate deletion is not feasible (for example, data within backup systems), the data will be securely protected and isolated until it can be permanently deleted.

SECTION 9

Your Rights Regarding Personal Data

As a kstar99 user, you have the following rights regarding your personal data held by us. All rights requests can be submitted to support@kstar99.best and will be processed within 14 business days:

Right of Access

Request a copy of all personal data kstar99 holds about you in a readily readable format.

Right of Rectification

Request the correction of any inaccurate or incomplete data we hold about you.

Right to Erasure

Request the deletion of your personal data under certain circumstances, subject to kstar99's legal obligations.

Right to Restrict Processing

Request kstar99 to temporarily restrict the processing of your data in certain permitted situations.

Right to Data Portability

Request your personal data in a structured, machine-readable format for transfer to another service.

Right to Object

Object to the processing of your data for direct marketing purposes or on the basis of kstar99's legitimate interests.

To submit any request relating to your data rights, please contact us at support@kstar99.best, stating the type of request, your kstar99 account number, and any relevant details. kstar99 reserves the right to request identity verification before processing a request in order to safeguard your data security.

SECTION 10

Protection of Children's Data

The kstar99 platform is a service restricted to users aged 18 years and above only. kstar99 does not knowingly collect or process any personal data from individuals under the age of 18.

All new account registrations require age verification via a valid Malaysian phone number and, in certain cases, through a KYC process requiring identity documents. kstar99 has technical mechanisms and procedures in place to detect and prevent registration by underage individuals.

Should kstar99 discover that personal data belonging to an individual under 18 years of age has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account. If you believe we may have collected personal data belonging to a child, please contact us immediately at support@kstar99.best.

Parents and guardians who suspect that a minor in their care is using the kstar99 platform are advised to contact kstar99 immediately. We will cooperate fully to address the situation.

SECTION 11

Amendments to the kstar99 Privacy Policy

Kstar99 reviews and updates this Privacy Policy periodically to reflect changes in our practices, new legal requirements, or improvements in how we protect user data. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

When we make material changes to this Policy — particularly changes that could significantly affect your privacy rights — kstar99 will notify you via:

  • Email to your registered address at least 14 days before the changes take effect
  • A clear in-platform notification on kstar99 when you log in
  • A notice displayed on the main page of this Privacy Policy

For minor changes that do not materially affect your privacy rights — such as spelling corrections or clarifications in wording — kstar99 may update this Policy without specific notice, though the last-updated date will always be revised. Your continued use of the kstar99 platform following any notified amendment constitutes acceptance of the revised Policy.

SECTION 12

Contact kstar99 Regarding Your Data Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the way kstar99 handles your personal data, we encourage you to reach out to us directly. The kstar99 privacy team is committed to responding to all enquiries thoroughly and within a reasonable timeframe.

Contact channels for privacy-related matters:

  • Privacy email: support@kstar99.best — please include "Privacy Enquiry" in the subject line of your email
  • Live chat: Available on the kstar99 platform, 24 hours a day, 7 days a week
  • Personal account manager: For Platinum VIP members and above, you may reach your dedicated account manager directly via WhatsApp

Kstar99 is committed to responding to all privacy enquiries within 5 business days. For more complex data rights requests, we will inform you if additional time is required and keep you updated on the progress of your request.

We also welcome feedback on how we can improve our privacy practices. Your input is valuable in helping kstar99 become a more transparent and trustworthy platform for the Malaysian player community.

kstar99's commitment: Privacy is more than a statement in this document — it is a core value that shapes how we operate every day. Your trust is the foundation of everything we build at kstar99.

FAQ

Frequently Asked Questions About Data Privacy at kstar99

Answers to the most frequently asked questions about how kstar99 handles your personal data.

kstar99 retains the information you provide during registration (name, phone number, email), identity verification data from the KYC process (a copy of your MyKad if requested), full financial transaction records for all deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow or FPX, your in-platform gaming activity history, and technical logs for security purposes. All data is stored on servers protected by encryption and strict access controls. You may request a full copy of the data we hold on you by contacting support@kstar99.best.

Yes, you may request the deletion of your personal data after closing your kstar99 account by submitting a request to support@kstar99.best. Please note, however, that certain data must be retained for a specified period in accordance with legal requirements — for example, financial transaction records must be kept for seven years to meet financial reporting obligations, and KYC documents must be retained for five years for anti-money laundering compliance. Any data falling outside these legal retention requirements will be deleted within 30 days of receiving your valid request. We will inform you of which data has been deleted and which must be retained, along with the reasons why.

kstar99 may use your account information to send service-related communications — such as promotional notifications, new bonus updates or platform announcements — via email or in-platform notifications. These are service communications directly tied to your kstar99 account. You may opt out of marketing communications at any time through the notification settings in your account. kstar99 does not share your data with third-party advertisers and does not use your data for targeted advertising on other platforms. Essential service communications such as account security notifications cannot be disabled, as they are in place for your protection.

KYC documents such as MyKad copies uploaded to kstar99 are transmitted via encrypted SSL connections and stored in an environment that is kept separate from regular account data, with additional encryption applied. Access to KYC documents is strictly limited — only kstar99 compliance and security team members who have passed rigorous background checks and privacy training are permitted access, and every instance of access is logged and monitored. These documents are never shared with any third party except where specifically required by a court order or directive from a lawful authority. Once the retention period ends, documents are deleted using secure erasure methods that render them unrecoverable.

If kstar99 detects or suspects a security incident involving users' personal data, we have a clear and detailed incident response procedure in place. The first step is the immediate isolation of affected systems to contain the incident. kstar99's security team will then conduct a thorough investigation to determine the scope and impact. Users whose data may have been affected will be notified by email within 72 hours of confirmed discovery, with full details of the data involved, potential risks, and the steps you should take to protect yourself. kstar99 will also carry out all necessary remediation measures and strengthen our systems to prevent similar incidents in the future. We are fully transparent when it comes to security incidents — you have the right to know if your data has been compromised.
View all frequently asked questions on the FAQ page
kstar99 Terms & Conditions Related to Privacy

This Privacy Policy forms part of the overall agreement between you and kstar99. Your use of the kstar99 platform is subject to this Privacy Policy and Terms & Conditions . By using the platform, you agree to both documents. For any further enquiries, please write to support@kstar99.best.

Join kstar99 with Complete Confidence

Your Data Is Safe at kstar99 — Start Playing Today

Your privacy and security are our priority. Register a kstar99 account for free in under 3 minutes, deposit from RM 10 via Touch 'n Go or DuitNow, and enjoy over 500 games with full confidence that your data is protected.

Register Free Now Existing Account Login

256-bit SSL. Your data is never sold. Players must be 18 years of age or older.

kstar99 Is Committed to Responsible Gaming

Enjoy everything kstar99 has to offer within your means. Set a playing budget that works for you and stick to it. Self-control tools are available in your account settings — deposit limits, loss limits, and account suspension can be activated at any time. Players must be 18 years of age or older.

Learn More
Bahasa Melayu