K20a Privacy Policy — How We Protect Your Data
K20a values the privacy of every user in Malaysia. This policy explains transparently how we collect, use, store, and protect your personal information when you use our platform. Please read this document before registering or using k20a's services.
Effective date: 1 January 2026. The latest version is always displayed on this page.
Information We Collect
When you register or use the k20a platform, we may collect various types of personal information to enable our services to operate securely and efficiently. The types of information collected include:
Account Information
During registration, we collect your full name, email address, phone number, date of birth, and encrypted password. This information is required to verify your identity and manage your k20a account securely.
Payment & Transaction Information
To process deposits and withdrawals in MYR, we collect information related to your chosen payment method, such as bank account numbers or e-wallet details. Payment data is handled in accordance with industry security standards and is not stored in a directly readable format.
Device & Browser Information
We automatically collect technical information when you access the platform, including your IP address, device type, operating system, browser type, and access time. This information is used to detect suspicious activity and keep your account secure.
Usage Data & Cookies
K20a uses cookies and similar tracking technologies to record platform usage patterns, language preferences, and login sessions. Session cookies are automatically deleted when you close your browser, while preference cookies may be stored for longer periods to improve your experience.
- Name, email, phone number
- MYR payment information
- IP address and device type
- Cookies and session data
- Transaction History
- KYC verification data
How We Use Your Personal Information
K20a uses collected information only for legitimate purposes directly related to platform operations. We will not use your data for any other purpose without your consent.
Account information is used to verify user identity, prevent unauthorised access, and carry out mandatory KYC processes to ensure platform security.
Payment data is used solely to process MYR deposits and withdrawals, verify transactions, and maintain accurate financial records for users.
We use your contact information to provide customer support, resolve complaints, and send important notices related to your account.
Usage data and cookies help us understand usage patterns, identify technical issues, and continuously improve the user experience on the k20a platform.
Device information and IP addresses are used to detect and prevent fraudulent activity, money laundering, and any unauthorised use of the platform.
We use your email to send important account notices, policy updates, and service information. You can opt out of promotional communications at any time.
Data Storage & Security
K20a implements robust technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.
SSL Encryption & Data at Rest
All data transmitted between your device and k20a's servers is protected using SSL/TLS encryption protocols. Sensitive data such as passwords and payment information is also encrypted at rest using industry-recognised encryption algorithms.
Data Retention Period
K20a retains your personal data for as long as your account is active or as needed to provide our services. Once an account is closed, we will retain certain records for the period required under Malaysian law before securely deleting the data.
Internal Access Controls
Access to users' personal data is restricted to k20a staff who require it to perform their duties. All staff are bound by strict confidentiality agreements and undergo regular data protection training.
- SSL/TLS encryption for all data transmissions
- Passwords are stored as irreversible hashes
- 24-hour suspicious activity monitoring
- Role-based access control
- Regular independent security audits
Sharing Information with Third Parties
K20a does not sell, rent, or disclose your personal information to third parties for marketing purposes without your explicit consent. However, there are limited situations where we may share your data:
- Payment Service Providers: We share the necessary transaction details with recognised payment processing providers to facilitate secure MYR deposits and withdrawals. All such providers are bound by strict confidentiality policies.
- Legal Requirements: k20a may disclose personal information where required by Malaysian law, court order, or a lawful request from a relevant authority such as Bank Negara Malaysia or a law enforcement agency.
- Fraud Prevention: In cases involving suspected fraud or money laundering, we reserve the right to share relevant information with the appropriate authorities for investigation purposes.
- Business Transfers: In the event of a merger, acquisition, or sale of company assets, user data may be transferred as part of that transaction, subject to the continuing privacy policy.
- Selling user data to advertisers
- Sharing information without legitimate grounds
- Disclosing your password to any party
- Using data for marketing without consent
- Transferring data outside Malaysia without adequate protection
User Rights & How to Contact Us
You have the right to request a copy of the personal information we hold about you. k20a will provide this within a reasonable timeframe upon receipt of a valid request and identity verification.
If the personal information we hold about you is inaccurate or out of date, you have the right to request a correction. You can update certain details directly through your k20a account profile page.
You may request deletion of your personal data when closing your k20a account. Please note that we may need to retain certain records as required under Malaysian law before full deletion is carried out.
To submit any privacy rights requests, enquire about data we hold, or report data security concerns, please reach us at our official email:
We will respond within 5 business days. Please include your full name and account number in all privacy-related enquiries.
Changes to This Policy
K20a reserves the right to update this privacy policy at any time. Any material changes will be communicated via a notice on the platform or by email to registered users. Continued use of the platform after changes are published constitutes acceptance of the latest version of this policy.
Your Data, Your Rights
K20a is committed to protecting the privacy of every Malaysian user. If you have questions about our privacy policy or want to learn more about how we protect your data, visit our FAQ page or register an account to get started safely with us.