W2Win Privacy Policy – Our Commitment to Protecting Malaysian Players' Personal Data

1. Data We Collect

W2Win only collects data that is strictly necessary to operate the platform and deliver the best experience to our members. We do not collect excessive or purposeless data. The categories of data we collect are as follows:

Registration & Identity Data:

• Full name as stated on MyKad
• An active Malaysian phone number
• A valid email address
• Date of birth (for age verification, minimum 18 years)
• MyKad number (collected during the KYC process if required)

Financial & Transaction Data:

• Payment method information used (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX)
• Deposit and withdrawal history
• Current account balance
• Bonus and promotion history

Platform Activity Data:

• Gaming and betting history
• Game preferences and account settings
• Login and logout timestamps
• Communication records with the support team

Technical Data:

• IP address of the device used
• Web browser type and version
• Device operating system
• Cookie and session data (explained further in Section 5)

2. How Your Data Is Used

Data collected by W2Win used solely for legitimate and transparent purposes, as follows:

We do not use member data for any purpose not stated in this Privacy Policy. Should we need to use your data for a new, unforeseen purpose, we will seek your consent beforehand.

3. Third-Party Data Sharing

W2Win does not sell members' personal data. However, in the course of operating the platform, we may need to share certain data with trusted third parties in limited, strictly controlled circumstances:

• Payment Processors: Payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow operators, and banks supporting FPX receive transaction data solely for the purpose of processing your payments. They are bound by their respective privacy policies and are not permitted to use your data for any other purpose.
• Game Providers: Casino and e-sports game providers partnering with W2Win may receive data necessary to run the games properly. This data is limited to game session information only.
• Security Services: Identity verification (KYC) and fraud prevention service providers receive the data necessary to verify member identities and detect suspicious activity. All such providers are subject to strict data processing agreements.
• Legal Requirements: In cases where W2Win required by law, court order, or a valid directive from Malaysian authorities to disclose data, we will comply and will notify you where permitted to do so.

All third parties that receive data from W2Win bound by strict confidentiality agreements and data protection policies. They are not permitted to use any data received for any purpose beyond the scope defined in their agreement with us.

4. Data Security & Protection

W2Win invest seriously in security infrastructure to ensure your data is always protected. The security measures we have in place include:

• 256-bit SSL Encryption for all data transmissions between your browser and W2Win's servers.
• Secure password storage using strong hashing algorithms – not even W2Win staff can view your password in its original form.
• Two-factor authentication (2FA) which members can activate for an additional layer of security during login.
• 24/7 account activity monitoring to detect suspicious login attempts or unusual transaction patterns.
• Data segregation – member personal data is stored in systems that are segregated from operational data, with access limited to staff who have a legitimate need.
• Regular security audits by independent third parties to identify and address any system vulnerabilities.
• Incident response plan that has been tested to ensure any potential security breach is addressed swiftly and effectively.

5. Cookies & Tracking Technologies

W2Win uses cookies and similar tracking technologies to enhance the user experience and operate the platform effectively. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functionality – login, game sessions, and security. These cookies cannot be disabled without affecting platform performance.
• Preference Cookies: Remembers your preferences such as language, display settings, and game preferences so you do not have to reconfigure them each time.
• Analytics Cookies: Collects usage data in aggregated, anonymised form to help us understand how members use the platform and identify areas for improvement.
• Security Cookies: Helps our security systems identify legitimate sessions and detect suspicious activity, such as login attempts from unfamiliar locations.

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect platform functionality W2Win. For more information on how to manage cookies in popular browsers, please refer to your browser's help documentation.

6. Your Rights as a Member

As a member W2Win and as an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

• Right of Access: You may request a copy of all personal data we hold about you at any time. Such requests will be processed within 14 business days.
• Right to Rectification: If you find that any personal data held by W2Win is inaccurate or outdated, you have the right to request a correction and we will update it within 7 business days.
• Right to Erasure: You may request the deletion of your personal data in certain circumstances — for example, when it is no longer needed for its original purpose. However, some data may need to be retained to fulfil legal obligations.
• Right to Withdraw Consent: You may withdraw your consent for marketing communications at any time through the notification settings in your account or by contacting the W2Win support team.
• Right to Object to Processing: Under certain circumstances, you may object to the processing of your personal data for specific purposes such as analytics or direct marketing.

To submit any request relating to the rights above, please contact our support team W2Win via email at support@w2win.asia, clearly stating the nature of your request. We will acknowledge receipt within 2 business days and resolve it within the stipulated timeframe.

7. Data Retention & Deletion

W2Win only retains members' personal data for as long as necessary for the purpose it was collected, or as required by Malaysian law. Our data retention policy is as follows:

• Active account data: Retained for as long as the account is active and updated regularly to ensure accuracy.
• Financial transaction data: Retained for a minimum of 7 years in accordance with Malaysian legal requirements on financial records and anti-money laundering.
• Support communication records: Retained for 3 years after a support ticket is closed, for reference and service improvement purposes.
• Security log data: Retained for 12 months for security analysis and incident investigation purposes.
• Closed accounts: Personal data of members who close their accounts will be anonymised or deleted within 90 days of closure, except for data that must be retained to comply with legal obligations.

When data is no longer needed and there is no legal obligation to retain it, W2Win will delete it securely using methods that ensure the data cannot be recovered or accessed again.

8. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way W2Win handling your personal data, please contact us through the following channels:

• Email: support@w2win.asia
• Live Chat: Available 24/7 within the W2Win platform
• Service language: Bahasa Melayu and English

We are committed to responding to all privacy-related enquiries within 24 hours on business days. For more complex complaints requiring in-depth investigation, we will provide a status update within 3 business days and aim to resolve the matter within 14 business days.

If you are not satisfied with the response W2Win regarding your privacy complaint, you have the right to lodge a complaint with the Malaysian Personal Data Protection Department under the Ministry of Digital.