PRIVACY POLICY

Privacy Policy mywin — User Data Protection

At mywin, your privacy is more than a legal obligation — it is our genuine commitment to every member. This document clearly explains how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last updated: January 2026  |  Version 2.5  |  PDPA 2010 Compliance

This Privacy Policy applies to all mywin platform users, including website visitors, registered members, and mobile app users. By using our platform, you agree to the data collection and processing practices described herein.

01 Scope of This Policy

This Privacy Policy is published by mywin ("we", "Platform", "company") and applies to all information collected through the mywin.biz website, the mywin mobile app (Android and iOS), and any related communications between you and us.

We are committed to protecting the privacy of all users in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We only collect data that is genuinely necessary for legitimate operational purposes, and we do not sell your personal information to any third party for marketing purposes.

This policy covers:

  • The types of personal data we collect and how they are collected.
  • The purpose and legal basis for processing your data.
  • Parties that may receive your information under certain circumstances.
  • The security measures we use to protect your data.
  • Your rights as a data subject under Malaysia's PDPA.
  • How you can contact us regarding your privacy.

02 Data We Collect

Mywin collects various types of information depending on how you interact with our platform. The following are the main categories of data we collect:

Data Category Example Information How It Is Collected
Identity Information Full name, date of birth, identity card number Registration form, KYC process
Contact Information Email address, phone number, residential address Account registration, profile updates
Financial Information Bank account number, transaction records, deposit and withdrawal history Payment processing, financial KYC
Usage Data Wagering history, games played, session duration Automated platform activity
Technical Data IP address, device type, browser, operating system Automated server logs
Location Data Approximate location based on IP Automated detection systems
Communications Live chat records, support emails, complaint tickets Customer support interactions

We do not collect sensitive data such as health information, religious beliefs, or political views. All financial data collected for KYC purposes is stored in an encrypted environment and is only accessible to authorised personnel.

03 How We Use Your Data

The information we collect is used for the following purposes, all grounded on a valid legal basis under PDPA 2010:

  • Account management: Creating, verifying, and managing your account on the mywin platform, including the KYC process required under anti-money laundering regulations.
  • Transaction processing: Processing your deposits, withdrawals, and all financial transactions securely and accurately through the various payment methods we support.
  • Customer support: Providing technical assistance and account support via in-platform live chat, email, and other available communication channels.
  • Legal compliance: Fulfilling legal obligations related to anti-money laundering (AML), counter-terrorism financing, and other applicable regulatory responsibilities.
  • Platform security: Identifying and preventing fraud, account abuse, system manipulation, and any suspicious or unauthorised activity.
  • Responsible gambling: Monitoring wagering patterns to identify signs of problem gambling and providing appropriate assistance to users who need it.
  • Marketing (with consent): Sending information about promotions, bonuses, and the latest offers — only to users who have given explicit consent to receive marketing communications.
  • Platform improvements: Analysing usage data in aggregate to understand how the platform is used and to make meaningful improvements to the user experience.

Mywin never uses your data to make automated decisions that could have a significant adverse effect on you without human review. Any account-related decisions involving important considerations are always reviewed by our team.

04 Information Sharing

Mywin takes a highly cautious approach to sharing user data. We do not sell, rent, or disclose your personal information to external parties for marketing or commercial purposes. However, there are limited circumstances where data sharing is necessary and permitted:

  • Third-party service providers: We share necessary data with payment service providers (such as DuitNow, FPX, Touch 'n Go, GrabPay), game software providers, and technology service providers that help us operate the platform. All such providers are bound by strict confidentiality agreements and may only use your data for the specified purposes.
  • Legal requirements: We will disclose your information to authorities when required by applicable Malaysian law, a valid court order, or an official investigation by a law enforcement agency.
  • Fraud prevention: In cases where there is strong evidence of fraud or criminal activity, we may share relevant information with industry platforms or authorities to protect other users and the integrity of the online betting ecosystem.
  • Business transfers: If mywin is involved in a merger, acquisition, or asset sale, user data may be transferred to the successor entity, subject to the same or stricter privacy protections.

In all data-sharing instances, we ensure that the receiving parties adhere to data protection standards equal to or higher than our own.

05 Data Security

Protecting your personal and financial information is mywin's top priority. We continuously invest in the latest security infrastructure to ensure your data remains safe at all times:

  • 256-bit SSL encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 protocol with 256-bit encryption. This means no outside party can intercept or read your information while in transit.
  • Data-at-rest encryption: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using AES-256 at rest.
  • Strict access controls: Only mywin staff with a legitimate business need are permitted to access user data. All access is logged, monitored, and reviewed on a regular basis.
  • Two-factor authentication (2FA): Our platform fully supports two-factor authentication for all member accounts. We encourage all users to enable 2FA for a significant additional layer of protection.
  • 24/7 monitoring: Our security systems are monitored around the clock to detect and respond to any threats or suspicious activity promptly.
  • Regular security audits: We conduct regular internal and external security audits, including penetration testing, to identify and address any vulnerabilities before they can be exploited.
  • Secure servers: User data is stored in certified data centres that comply with industry standards for physical and digital security.

While we take all reasonable steps to protect your data, no digital system can be guaranteed 100% secure. You also play an important role — use a strong, unique password, enable 2FA, and never share your password with anyone, including mywin staff.

06 Cookies & Tracking Technologies

Mywin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

  • Essential cookies: Required for core platform functions such as login session authentication, security, and navigation. These cookies cannot be disabled without affecting platform functionality.
  • Performance cookies: Collecting information about how you use the platform — pages visited, time spent, errors encountered — to help us improve website performance.
  • Functionality cookies: Remembering your preferences such as language, display settings, and login details to enable a more personalised and comfortable experience.
  • Analytics cookies: Used to understand aggregated, anonymised usage patterns for platform improvement purposes.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of some parts of the mywin platform.

07 Data Storage & Retention

Mywin retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable Malaysian law:

  • Active account data: While your account is active, we retain all data necessary for account operations and regulatory compliance.
  • After account closure: Financial and transaction data is retained for a minimum of 7 years after account closure, in line with anti-money laundering laws and tax obligations.
  • Communication records: Customer support records and communications are retained for 3 years for reference and dispute resolution purposes.
  • KYC Data: Identity verification documents are retained for a minimum of 5 years after the business relationship ends, in line with PDPA requirements and anti-money laundering regulations.
  • Technical logs: Access and security logs are retained for 12 months for security monitoring and audit purposes.

When the retention period expires and there is no legal or operational requirement to retain the data, we will securely delete or anonymise your data using methods that ensure it cannot be recovered.

08 Your Rights

As a data subject under Malaysia's PDPA and international privacy standards, you have the following rights regarding your personal information at mywin:

Right to Access

You have the right to request a copy of the personal information we hold about you at any time.

Right to Rectification

You have the right to correct any inaccurate or incomplete information in your account.

Right to Erasure

You may request the deletion of your data, subject to applicable legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another service.

Right to Restriction

You may request that we restrict the processing of your data under certain circumstances provided by law.

To exercise any of the above rights, contact our Data Privacy Officer at [email protected]. We will respond within 14 business days from the date the request is received. Complex requests may take up to 30 days, and we will notify you if this is the case.

09 Children's Data

Mywin is an online betting platform that for individuals aged 18 and above only. We do not intentionally collect, process, or store any personal information from children or minors.

If we find that someone under the age of 18 has registered an account by providing false information about their age, we will:

  • Closing the account immediately.
  • Deleting all related personal data as promptly as possible.
  • Reporting the case to the relevant authorities where necessary.
  • Holding any related funds pending investigation and the appropriate recovery process.

Parents or guardians who believe their child may have accessed our platform are encouraged to contact us immediately at [email protected] so that appropriate action can be taken without delay.

10 Policy Amendments

Mywin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology used, legal requirements, or other relevant operational reasons.

When we make significant changes to this policy, we will notify you via:

  • A clear notice on the home page or Login page of the platform.
  • Email to your registered address, at least 7 days before the changes take effect.
  • In-app notifications on the mywin mobile app, if you use our app.

Your continued use of the mywin platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy. It is your responsibility to review this page periodically. The "last updated" date at the top of this page will always reflect the latest version of our policy.

11 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the mywin Data Privacy Officer through the following channels:

We are committed to addressing all privacy-related inquiries seriously and providing clear responses within the stipulated timeframe. If you are unsatisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the provisions of PDPA 2010.

Our standard response time: general inquiries are resolved within 24–48 hours; data rights requests resolved within 14 business days; official complaints acknowledged within 3 business days.

OUR COMMITMENT

Your Privacy, Our Priorities

Six core pillars that make mywin the most trusted platform for personal data protection among Malaysian users.

Highest-Level Encryption

Your data is protected with 256-bit SSL/TLS encryption in transit and AES-256 encryption at rest — the same standard used by leading financial institutions worldwide.

No Sale of Data to Third Parties

Mywin has never and will never sell, rent, or disclose your personal information to advertisers or third parties for commercial purposes. Your data belongs entirely to you.

Malaysia PDPA Compliance

All our data management practices are designed and audited to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) — the country's primary data privacy law.

Dedicated Privacy Officer

Mywin has a dedicated Data Privacy Officer (DPO) to ensure all data processing activities comply with the law and to handle your privacy requests and complaints.

Strict Access Controls

Access to user data among our staff is restricted on a "need-to-know" basis. All access is logged and monitored, with periodic audits to ensure compliance.

Proactive Breach Notification

In the event of any security incident affecting your data, we will notify you promptly as required by law — we will not conceal information that matters.

READY TO GET STARTED?

Join mywin — Malaysia's Trusted Platform

Enjoy a safe, fair, and exciting online betting experience. Your data is protected, your identity is secure — focus on the fun of playing.

Bahasa Melayu