Betwin Privacy Policy – Personal Data Protection for Malaysian Players

Betwin believes that privacy is more than a legal obligation — it is the foundation of trust between a platform and its users. When you share personal information with betwin during registration, deposits, withdrawals or while using any of our services, you are entrusting us with something of value. We take that trust seriously.

Betwin fully complies with the provisions of the Personal Data Protection Act 2010 (PDPA) Malaysia across all aspects of collecting, processing and storing members' personal data. All betwin staff with access to user data are bound by strict confidentiality agreements and undergo regular privacy compliance training.

In this document, we explain in plain, straightforward language – not lengthy, confusing legal jargon – what we do with your data, why we need it, and what rights you have over it. If anything is unclear, the betwin support team is always on hand to help.

Betwin only collects data that is genuinely necessary to provide a secure, legally compliant and fully functional service. Below are the categories of data we collect and the reasons we collect them:

Information you provide when registering a betwin account:

For withdrawals or when required by legal compliance obligations:

Information on deposits and withdrawals via local Malaysian payment methods:

Technical data collected automatically while you use betwin:

Betwin does not collect sensitive data such as your health information, religious beliefs, or political affiliations. Financial data collected is limited to what is necessary to process transactions and does not include PINs, e-wallet passwords, or full credit card details.

Betwin uses collected data solely for legitimate purposes directly relevant to delivering platform services. The following are the primary ways your data is used:

• Account Management – to create, verify, and manage your betwin account, including the secure login process and identity verification.
• Transaction Processing – to accurately and securely process deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX.
• Legal Compliance – to meet legal obligations under Malaysia's PDPA, anti-money laundering (AML) requirements, and applicable gambling regulations.
• Platform Security – to detect and prevent fraud, unauthorised access, multiple account ownership, and other forms of platform abuse.
• Responsible Gaming – to monitor gameplay patterns and provide early warnings to members who may be showing signs of unhealthy betting habits, in line with betwin's commitment to responsible gaming.
• Customer Support – to identify you when you contact the betwin support team and to provide assistance that is accurate and relevant to your account situation.
• Service Communications – to send transaction notifications, account security updates, and important information regarding changes to betwin's terms or services.
• Platform Improvements – to analyse usage data in aggregate and anonymised form to understand how players use betwin and make better-informed product improvement decisions.

Betwin does not use your personal data for third-party advertising purposes, nor does it sell your data to any external company. Any marketing communications from betwin relate exclusively to betwin's own services, and you may unsubscribe at any time.

Betwin does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Data sharing only occurs in the following limited circumstances:

• Payment Service Providers – the financial data required is shared with e-wallet providers and banking institutions (Touch 'n Go, GrabPay, Maybank, CIMB and others) solely to process the transactions you have requested. These providers are bound by strict data protection agreements with betwin.
• Gaming Software Providers – the minimum gaming data required is shared with gaming software providers to enable slots, jackpot, blackjack and other games to function correctly. No financial data or full identifying information is shared for this purpose.
• Regulatory Body & Law Enforcement – betwin will disclose data when required by a valid court order, a request from Malaysian authorities with legal jurisdiction, or applicable licence compliance obligations. betwin will notify you of any such disclosure where permitted by law to do so.
• Business Transfer – in the event that betwin is involved in a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. You will be notified in advance, and the receiving entity will maintain a Privacy Policy of equal or greater strictness.

In all of the data-sharing situations described above, betwin ensures that the receiving party is bound by confidentiality and data protection obligations equivalent to or greater than betwin's own standards. No data sharing takes place without a valid legal basis or legitimate operational requirement.

Betwin continuously invests in security infrastructure to ensure your personal and financial data remains protected at all times. The key security measures betwin has implemented include:

• 256-bit SSL Encryption – all data transmitted between your device and betwin's servers is encrypted using TLS 1.3 protocol with 256-bit keys. This means that even if data is intercepted, it cannot be read by any party without the correct decryption key.
• Hashed Password Storage – your betwin account password is never stored in plain text. It is processed through a one-way hashing algorithm before being saved, meaning no one – including betwin staff – can read your actual password.
• Two-Factor Authentication (2FA) – betwin offers two-factor authentication via OTP codes sent to your registered mobile number as an added layer of security during login and high-value transactions.
• Suspicious Activity Monitoring – betwin's system monitors login patterns and transactions in real time to detect unusual activity. Accounts showing signs of unauthorised access will receive an immediate notification and automatic protective measures will be triggered.
• Staff Access Controls – betwin staff only have access to the user data required for their specific role. Access to sensitive data is logged and regularly audited by betwin's internal security team.
• Secure Servers & Backups – user data is stored on servers that meet international physical and digital security standards, with regular backups to ensure service continuity under any emergency.

While betwin takes all reasonable steps to protect your data, no digital security system can be guaranteed to be 100% risk-free. You also play an important role in keeping your account secure — always use a strong and unique password, never share your login credentials with anyone, and contact betwin support immediately if you suspect any unauthorised access.

Betwin uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you browse the betwin platform.

Types of cookies betwin uses:

• Essential Cookies – required for core platform functions such as login session verification, account security, and transaction processing. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies – stores your preferences such as language, display format and game configuration so you don't need to reconfigure them each time you log in.
• Analytics Cookies – collects usage data in aggregate and anonymised form to help betwin understand how the platform is being used and make relevant improvements. This data does not contain any information that can directly identify you.
• Security Cookies – helping betwin detect suspicious activity, prevent fraud, and ensure that only you can access your betwin account from the current session.

You can manage or delete cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality of certain areas of the betwin platform. betwin does not use third-party advertising cookies that track your activity outside of the betwin platform.

Betwin retains your personal data only for as long as it is necessary for the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

• Active Account Data – for as long as your betwin account remains active and you continue to use the platform, your account data will be retained to ensure uninterrupted service.
• Financial Transaction Data – deposit and withdrawal transaction records are retained for a minimum of 7 years in compliance with Malaysian financial legal requirements, even after an account has been closed.
• KYC & Identity Verification Data – identity verification documents are retained for a minimum of 5 years after account closure to meet anti-money laundering compliance requirements.
• Usage Data & Game Logs – gaming activity records are retained for 2 years after the last session for dispute resolution and audit purposes.
• Support Communication Data – communication records with the betwin support team are retained for 3 years for reference in any future disputes.

Once the relevant retention period has expired, betwin will securely delete or anonymise your data using industry-standard data disposal procedures. Anonymised data cannot be used to identify you and may be retained for aggregate analytics purposes indefinitely.

As the owner of your personal data, betwin recognises and respects the following rights you hold under Malaysia's PDPA:

• Right to Access – you have the right to request a copy of the personal data betwin holds about you. betwin will provide that copy within a reasonable timeframe, typically within 14 working days of receiving your request.
• Right to Rectification – if any of your personal data is inaccurate or out of date, you have the right to request a correction. For details such as your name, email address, or phone number, you can update these directly in your betwin account settings. For KYC data, please contact betwin support.
• Right to Restriction of Processing – under certain circumstances, you may request that betwin restrict the processing of your data – for example, while the accuracy of data is being verified or when you object to a particular form of processing.
• Right to Withdraw Consent – for data that betwin processes based on your consent, such as marketing communications, you may withdraw that consent at any time via your account notification settings or by contacting betwin support.
• Right to Complain – if you are not satisfied with how betwin handles your personal data, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner or contact the betwin privacy team directly.

To exercise any of the above rights, please contact the betwin privacy team at support@betwin-play.net with the subject line "Data Rights Request", along with your betwin account number. We will verify your identity before processing any request to ensure your data is protected from unauthorised access.

The betwin platform is exclusively for individuals aged 21 and above. betwin does not knowingly collect or process personal data from individuals under the age of 21.

Betwin's registration process requires date of birth verification, and betwin reserves the right to request age verification documents at any time. Should betwin discover that personal data belonging to a minor has been collected without its knowledge, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian who believes that your child or dependent under the age of 21 has registered for or used the betwin platform, please contact the betwin support team immediately so that appropriate action can be taken without delay.

Betwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data protection practices, new Malaysian legal requirements, changes to betwin's services, or feedback from our user community.

When significant changes are made to this Privacy Policy, betwin will notify you via:

• An in-platform betwin notification displayed at next login
• Email to the address registered on your betwin account
• A prominent notice displayed on the betwin platform homepage

The latest version of this Privacy Policy is always available on this page, with the effective date clearly displayed. Continued use of the betwin platform after any amendments take effect will be considered acceptance of the updated privacy terms. If you do not agree with any changes, you may close your betwin account by contacting our support team.

If you have any questions, concerns or complaints regarding betwin's Privacy Policy or how we handle your personal data, please reach us through the following channels:

• Privacy Email – support@betwin-play.net with the subject line "Privacy Enquiry" – responded to within 2–4 hours during business hours
• Live Chat – available within the betwin platform, 24 hours a day, 7 days a week
• WhatsApp – for mobile communications, 24/7

Betwin's Bahasa Malaysia-fluent support team ensures every privacy-related enquiry is treated as a priority and answered clearly and accurately. You won't receive generic or irrelevant responses – each case is handled individually based on the specific circumstances of your account.