kastil89's Privacy Commitment

Kastil89 Privacy Policy – How We Protect the Personal Data of Malaysian Players

Your privacy is our priority at kastil89. This Privacy Policy clearly explains how we collect, use, store and protect your personal information every time you use our platform. We have written it in plain language — free of confusing legal jargon — because we believe every Malaysian player has the right to know exactly what happens with their data.

kastil89 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. We never sell your personal information to any third party for commercial purposes. Your data belongs to you — we only use it to provide you with a better service.

Updated: 1 January 2026 Malay Language Version SSL 256-bit

Kastil89's Data Protection Commitment

Six core principles that govern how Kastil89 handles the personal information of Malaysian players

256-bit SSL Encryption
All data transmitted between your device and Kastil89's servers is protected with 256-bit SSL encryption — the same standard used by Malaysia's major banks such as Maybank and CIMB. Your data cannot be intercepted while in transit.
No Sale of Data to Third Parties
Kastil89 has never sold and will never sell your personal information to any third party for marketing or commercial purposes. Your data is used solely to provide and improve Kastil89's services to you.
Malaysia PDPA Compliance
The kastil89 Privacy Policy is built in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We adhere to all data processing principles set out under Malaysian law to safeguard your privacy rights.
Your Data, Your Control
As a kastil89 member, you have the right to access, correct, delete or transfer your personal data. You may also withdraw your marketing consent at any time without affecting the functionality of your account.
Secure Data Storage
All Kastil89 member personal data is stored on servers protected by strict access controls, 24/7 monitoring and encrypted backup systems. Access to member personal data is granted only to staff with a legitimate business need.
Minimum Data Collection
kastil89 only collects data that is strictly necessary to provide our services and meet our legal obligations. We do not collect data that is unrelated to the purposes stated in this Privacy Policy.
Important Note Before Reading

This Privacy Policy applies to all users of the kastil89.best website and all services offered by Kastil89. By registering an account or continuing to use our platform, you agree to the terms set out here. Kastil89 is also committed to proactively notifying you of any material changes to how we handle your data.

Why Privacy Matters to Kastil89

When you register an account at kastil89, you are entrusting us with highly personal information — your name, phone number, banking details and financial transaction records. We understand the weight of that trust, and we do not take it lightly.

In today's Malaysian landscape, where digital fraud and data breaches are increasingly common, players deserve to know exactly who holds their data and what is being done with it. That is why kastil89 writing this Privacy Policy in plain Bahasa Malaysia — not in legal language that only lawyers can understand.

We also want you to know that privacy is not just a document to us. It is part of how we operate every day — from how we train our staff and select our technology partners, to how we design our payment systems. Every technical and business decision we make takes into account its impact on player privacy. kastil89.

1Information We Collect

Kastil89 collects your personal information through several different means depending on how you interact with our platform. Below are the categories of data we collect:

A) Information You Provide Directly

Full name Date of birth Email address Phone number Residential address Payment details Identity card number

This is the information you provide when registering a Kastil89 account, during the identity verification process, or when applying for specific services.

B) Automatically Collected Information

  • The IP address of your device when accessing the Kastil89 platform.
  • The type and version of the web browser you are using.
  • Your device's operating system (Android, iOS, Windows, etc.).
  • Pages you visit within the Kastil89 platform and how long you spend on each page.
  • The time and date of every login session to your kastil89 account.
  • Country- or region-level geolocation data based on your IP address.

C) Transaction & Betting Information

  • Records of all deposits and withdrawals made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
  • Sports betting history — bet types, amounts, odds and results.
  • Casino game history — game types, bet amounts, and outcomes.
  • Account balance and bonus credit records received.

Security Reminder: kastil89 never stores full credit or debit card numbers. All sensitive payment information is handled directly by certified payment providers and is not stored in our systems. This serves as an additional layer of protection for your financial security.

2How We Use Your Data

Kastil89 uses the personal information collected for the following purposes. All use is based on service necessity, legal obligation, or consent you have provided:

Purpose of Use Data Type Legal Basis
Account Management & Identity Verification Full name, IC number, date of birth, email Contractual requirement
Deposit & withdrawal processing Payment details, transaction records Contractual requirement
Customer support & dispute resolution Email, phone number, account history Legitimate interests
Fraud Detection & Security IP address, login records, transaction history Legal Obligation
Anti-money laundering compliance Identity, financial records Legal Obligation
Promotional & offer communications Email, phone number Your consent
Platform improvement & analytics Usage data, cookies, IP Legitimate interests
Responsible Gaming Betting history, deposit records Legal Obligation

For marketing communications — such as kastil89 promotional offers, new bonuses and sports event updates — we will only contact you if you have given your consent during registration or at any time thereafter. You may withdraw this marketing consent at any time by updating your notification settings in your kastil89 account or by contacting our support team.

3Sharing Information with Third Parties

kastil89 does not sell, rent or disclose your personal information to third parties for their own marketing purposes. However, there are certain circumstances where we need to share your data with specific parties in order to deliver our services to you:

  • Payment providers — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX partner banks are required to receive the necessary transaction details to process your deposits and withdrawals. All these providers are bound by strict data security agreements.
  • Casino game providers — Pragmatic Play, Evolution Gaming, Playtech, Microgaming, PG Soft and other certified providers may receive the game session data necessary to deliver casino games within the kastil89 platform. They do not receive your personally identifiable information.
  • Technology service providers — companies that assist us in managing platform infrastructure, analytics and cybersecurity. All such parties are bound by data confidentiality agreements stipulating that they may only use the data for purposes designated by kastil89.
  • Authorities and law enforcement bodies — kastil89 will disclose personal information when required by a court order, writ, warrant or directive from a competent authority under Malaysian law. We will not voluntarily disclose such information without due legal process.

All third parties we work with are subject to data security assessments and bound by contractual agreements that prohibit them from using your data for any purpose other than those specified by Kastil89.

4Data Security

Kastil89 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction:

  • Encryption in transit — all communications between your device and Kastil89 servers are protected with TLS 1.3 protocol and 256-bit SSL encryption.
  • Encryption of stored data — sensitive data such as passwords, identification numbers, and financial details are stored in encrypted format — even Kastil89 staff cannot view your actual password.
  • Role-based access control — only Kastil89 staff with a legitimate business need are granted access to member personal data, and all access is logged and monitored.
  • Two-factor authentication — Kastil89 offers 2FA for all member accounts as an additional layer of protection against unauthorised access.
  • 24/7 Security Monitoring — our systems are continuously monitored to detect any suspicious activity or unauthorised access attempts.
  • Regular security audits — Kastil89 conducts regular penetration testing and independent security audits to identify and address any system vulnerabilities.

While we take all reasonable steps to protect your data, no system is 100% secure. You also play an important role in keeping your account safe — keep your password confidential, avoid logging in from public devices without taking precautions, and contact Kastil89 support immediately if you suspect any suspicious activity.

5Cookies & Tracking Technologies

The Kastil89 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

Types of cookies Kastil89 uses:

  • Essential cookies — required for core platform functions such as maintaining your login session and processing transactions. These cookies cannot be disabled without affecting the basic functionality of the kastil89 platform.
  • Preference Cookies — stores your preferences such as language selection and display settings to ensure a more comfortable experience each time you return to kastil89.
  • Analytics cookies — helping Kastil89 understand how players use our platform, which pages are visited most frequently, and where players may be experiencing difficulties. This data is used in aggregate form and does not identify any specific individual.
  • Security cookies — helping Kastil89 detect and prevent fraud, including identifying suspicious login attempts from unfamiliar locations or devices.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality or your experience on the Kastil89 platform. For more information on managing cookies, refer to your web browser's help guide.

6Your Privacy Rights

As a registered Kastil89 member, you have the following rights regarding your personal data, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

Right of Access

You have the right to request a copy of the personal data Kastil89 holds about you. Access requests can be submitted by email to support@kastil89.best.

Right to Rectification

If any personal information held about you in kastil89's systems is inaccurate or outdated, you have the right to request a correction through your account settings or via customer support.

Right to Erasure

You may request the deletion of your personal data, subject to the legal record-keeping obligations binding kastil89 (typically 7 years for financial records).

Right to Object

You have the right to object to the processing of your data for direct marketing purposes. You may opt out of all kastil89 marketing communications at any time.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider if you so choose.

Right to Restrict Processing

In certain circumstances, you have the right to request that Kastil89 restrict how we process your data while a dispute or complaint is being resolved.

To exercise any of the above rights, contact the Kastil89 privacy team by email at support@kastil89.best by clearly stating your request. We will respond within 14 working days. In some cases, we may need to verify your identity before processing the request.

7Data Retention & Deletion

Kastil89 retains your personal data for as long as is necessary for the purposes stated in this Privacy Policy, or for as long as required under Malaysian law. The following are general guidelines on data retention periods:

  • Financial and transaction records — retained for a minimum of 7 years in accordance with Malaysian legal requirements and anti-money laundering obligations.
  • Active account information — retained for the duration your account is active and for a reasonable period after account closure for dispute resolution purposes.
  • Support communication records — retained for 3 years for quality management and dispute resolution purposes.
  • Analytics data and system logs — typically retained for 12 to 24 months in aggregated, non-personally identifiable form.
  • Marketing data (where you have consented) — retained until you withdraw your consent or close your account.

When data is no longer needed and there is no legal obligation to retain it, Kastil89 will securely delete or anonymise that data using approved disposal procedures.

8Minors & Age Restrictions

The Kastil89 platform is intended for adult players aged 18 and above only. Kastil89 does not knowingly collect or process personal data of individuals under the age of 18.

Child Protection: If Kastil89 discovers that we have inadvertently collected personal data from someone under the age of 18, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child may have registered a Kastil89 account should contact us immediately at support@kastil89.best.

Kastil89 encourages parents and guardians to monitor their children's internet usage and to make use of available parental control tools to prevent access to betting platforms.

9Amendments to This Privacy Policy

Kastil89 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other legitimate business reasons.

When we make material changes to this Privacy Policy, we will notify you via:

  • An in-platform notice on Kastil89 the next time you log in.
  • An email to your registered address (for significant changes).
  • Update the "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically to stay informed about how Kastil89 protects your information. Your continued use of the Kastil89 platform following the publication of any amendments constitutes your acceptance of the updated terms.

10Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how Kastil89 handles your personal data, we encourage you to contact us directly so we can resolve the matter with you:

Privacy Email
support@kastil89.best
We respond within 14 working days for privacy-related requests
Live Chat
Available 24/7 via the Kastil89 platform
For urgent enquiries — we respond within 3 minutes

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant supervisory authority.

FAQ – Kastil89 Privacy Policy

Quick answers to the most frequently asked questions about privacy and data protection at kastil89

Not at all. Kastil89 has never sold, rented, or disclosed your personal data to any third party for their own commercial marketing purposes, and never will. Your data is shared only with specific parties required to deliver our services — such as payment providers Touch 'n Go, GrabPay, or DuitNow to process your transactions — and all such parties are bound by strict data confidentiality agreements. This is a core commitment by Kastil89 to the privacy of Malaysian players.

Kastil89 uses 256-bit SSL encryption for all financial transactions — the same standard adopted by Malaysia's leading banks. More importantly, Kastil89 does not store full credit or debit card numbers in our systems. All sensitive payment information is handled directly by certified payment providers such as Touch 'n Go eWallet, GrabPay and FPX — providers with dedicated financial security infrastructure built specifically for handling such data. This means that even in the unlikely event of an issue with Kastil89's systems, your payment card data will not be exposed.

Yes, you have the right to request the deletion of your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). However, please note that certain limitations apply — financial and transaction records must be retained for a minimum of 7 years under Malaysian law and anti-money laundering requirements. Data subject to these legal obligations cannot be deleted before the minimum retention period has elapsed. For all other data not subject to such obligations, Kastil89 will process your deletion request within 30 days. Please contact us at support@kastil89.best to submit a formal request.

Yes, Kastil89 retains your betting and casino game history. This is required for several legitimate purposes: dispute resolution if questions arise about betting outcomes, compliance with legal and regulatory obligations, Responsible Gaming support to help us identify concerning betting patterns, and to give you access to your own betting history within your Kastil89 account. You can view your betting history at any time through the account section of the Kastil89 platform.

You can withdraw your marketing consent at any time in three ways: click the "unsubscribe" link at the bottom of any Kastil89 promotional email, update your notification and communication preferences in your account settings, or contact Kastil89 support via live chat or email at support@kastil89.best. Withdrawing marketing consent will not affect your account functionality — you will still receive important account-related communications such as deposit confirmations, security notices, and critical policy updates.

When you close your kastil89 account, we will immediately stop using your data for marketing purposes. However, financial and transaction records will continue to be retained for 7 years as required under Malaysian law. This data will not be used for any marketing purpose or to contact you again — it is kept solely to fulfil our legal obligations and to address any disputes that may arise. Once the minimum retention period has lapsed, your data will be securely deleted from kastil89 systems.
Your Privacy Is Protected. Ready to Get Started?
kastil89 builds trust through transparency — including in how we handle your data. Create a free account today and enjoy a safe, fair and exciting betting experience alongside over 850,000 Malaysian players.

By registering, you agree to our Terms & Conditions and Privacy Policy kastil89. Must be 18 years of age or older.

Bahasa Melayu