Kwin8 Privacy Policy – Data Protection Malaysian Players Come First

1Introduction & Scope of This Policy

Kwin8 takes player privacy seriously. This Privacy Policy applies to all information collected through the kwin8 platform — whether via the kwin8.click website, mobile app, email communications, live chat, or any other kwin8 service channel.

This policy is written in plain language to ensure every player genuinely understands their rights and how we handle their personal information — not just a legal form nobody reads. kwin8 believes that transparency about data practices is part of our commitment to Malaysian players.

2Personal Data We Collect

Kwin8 collects only the data necessary to provide players with a safe, efficient, and responsible service. The following are the categories of data we collect:

2.1 Account Registration Data

• Full name as shown on your identity document
• An active Malaysian phone number (for OTP verification)
• Email address (if provided)
• Username and password (stored in encrypted hash form)
• Date of birth (for age verification)

2.2 Identity Verification Data

• Copy of identity card (MyKad) or passport — required for certain account verifications or large withdrawals
• Identity card number (stored in encrypted format)
• Documents required for AML (Anti-Money Laundering) compliance

2.3 Financial Transaction Data

• Records of all deposits and withdrawals (amount, time, payment method)
• EWallet or bank account details used for transactions (TnG phone number, GrabPay ID, bank account number)
• Bonus and promotion claim history

2.4 Game Activity Data

• Gaming history — game types, bets placed, wins and losses
• Time and duration of each gaming session
• Deposit limits or account breaks set by the player

2.5 Technical & Device Data

• IP address, browser type, device operating system
• Cookie and session data (see Section 6)
• Access logs and technical error records for troubleshooting purposes

3How We Use Your Personal Data

Data collected is used solely for purposes related to operating the kwin8 platform and enhancing the player experience. The specific purposes are as follows:

• Account Management: Creating and maintaining player accounts, processing secure logins, identity verification, and password management.
• Payment Processing: Verifying and processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks, and other supported payment methods. Withdrawals of winnings are securely processed to your account.
• Legal Compliance: Meeting the Anti-Money Laundering (AML) and Know Your Customer (KYC) compliance requirements mandated under Malaysian law.
• Fraud Prevention: Detect and prevent fraudulent activity, multi-account usage, money laundering and other security violations.
• Customer Support: To provide effective assistance when you reach out to the kwin8 support team via live chat or email.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need support for problem gambling, and reaching out to them proactively.
• Service Communications: Sending important account notifications such as deposit confirmations, successful withdrawals, and terms updates.
• Platform Improvement: Analysing aggregated usage data (without identifying individuals) to improve the performance and user experience of the kwin8 platform.

4Data Sharing with Third Parties

Kwin8 does not sell, rent, or trade players' personal data to any third party for commercial purposes. However, in limited circumstances, kwin8 may share data with the following parties:

• Payment Service Providers: Payment gateways such as TnG, GrabPay, DuitNow, and FPX processing systems require minimal transaction information to process your payment. These providers maintain their own privacy and security policies.
• Game Software Providers: Third-party game providers (such as Pragmatic Play, Microgaming, and Playtech) may receive the minimum technical data required to deliver games — typically only a player ID with no real name attached.
• Legal Authorities: kwin8 will disclose personal data to Malaysian authorities (police, the Malaysian Anti-Corruption Commission, the Royal Malaysian Customs Department, etc.) when required by a court order or applicable law.
• Cloud Services & Infrastructure: Technical infrastructure providers used by kwin8 may process data in a technical capacity — all such agreements include strict data protection clauses.

5kwin8 Data Security Measures

Kwin8 implements multiple layers of technical and procedural safeguards to ensure the security of your personal data:

• 256-bit SSL Encryption: All communications between your device and kwin8 servers are encrypted using TLS 1.3 with 256-bit encryption keys.
• Data-at-Rest Encryption: Sensitive data stored in kwin8's databases — including passwords, identification numbers, and financial details — is encrypted using secure hashing algorithms.
• Two-Factor Authentication: Players can enable two-factor authentication (2FA) via SMS OTP for additional account security.
• Internal Access Controls: kwin8 staff only have access to the data necessary to perform their respective roles — full access to all player data is restricted to authorised personnel only.
• Real-Time Threat Monitoring: kwin8's automated security system monitors all account activity 24 hours a day to detect suspicious activity patterns.
• Regular Security Audits: The kwin8 platform undergoes regular security audits by independent experts to identify and address any vulnerabilities.

6Cookies & Tracking Technologies

Kwin8 uses cookies and similar tracking technologies to enhance the user experience and operate platform functionality. The following types of cookies are used:

• Essential Cookies: Required for core platform functions such as login session management, security, and basic preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how players use the platform — pages visited, time spent, and errors encountered — to help us improve the overall user experience.
• Preference Cookies: Saves your personal preferences such as language, display theme, and other settings so you do not have to reconfigure them each time you log in.

You can manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of the kwin8 platform. Information collected via cookies is never used to directly identify individuals.

7Data Retention & Deletion

Kwin8 does not retain your personal data longer than necessary for the purposes outlined in this policy. The following guidelines apply to our data retention periods:

• Active Account Data: Retained for as long as your account is active, and for a reasonable period after account closure.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of each transaction, in line with Malaysian accounting legislation and AML compliance requirements.
• Game Activity Logs: Retained for 12 months for dispute resolution and Responsible Gaming monitoring purposes.
• Support Communications: Support conversation records are retained for 24 months for quality control and historical reference purposes.
• Identity Verification Data: Retained for the period required under Malaysian law in relation to KYC and AML compliance.

When data is no longer needed and there is no legal obligation to retain it, kwin8 will securely delete or anonymise it.

8Your Rights as a kwin8 Player

Under Malaysia's Personal Data Protection Act (PDPA) and kwin8's privacy principles, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data kwin8 holds about you at any time.
• Right to Rectification: If any data we hold is inaccurate or out of date, you have the right to request a correction.
• Right to Deletion: Under certain circumstances, you may request the deletion of your personal data — subject to legal obligations that require us to retain specific records.
• Right to Object to Processing: You may object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time — this does not affect the validity of any processing that took place prior to withdrawal.

To exercise any of the rights above, please contact the kwin8 support team via live chat or email at support@kwin8.click. We will respond to your request within 14 business days.

9Children's Data Policy

The kwin8 platform is intended for adult players aged 18 and above only. kwin8 does not knowingly collect, store or process personal data of individuals under the age of 18.

Should kwin8 discover that personal data has been collected from an individual under the age of 18, we will take immediate steps to delete that data and close the account in question. If you believe kwin8 may hold data belonging to a minor, please notify us immediately at support@kwin8.click.

10Links to Third-Party Sites

The kwin8 platform may contain links to third-party sites or services — for example, links to game providers for additional information about specific games. kwin8 is not responsible for the privacy practices or content of those third-party sites.

We encourage you to read the privacy policy of every website you visit. This Privacy Policy applies solely to the kwin8 platform and does not cover any third-party sites or services you may access through links within the kwin8 platform.

11Changes to This Privacy Policy

Kwin8 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or new platform features.

When significant changes occur, kwin8 will notify players via in-platform notification or email at least 7 days before the changes take effect. The date of the latest update will always be displayed at the top of this policy.

Continued use of the kwin8 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy. You are advised to review this policy periodically.

12Contact Us for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or kwin8's data practices, please reach out to us through the following channels:

• Live Chat 24/7: Reach the kwin8 support team directly via the live chat icon at the bottom right of the platform — responses within minutes.
• Email: Send your privacy enquiry to support@kwin8.click. We will respond within 2 business days.

Kwin8's Malay-speaking support team is ready to assist with any queries regarding your data privacy. There is no need to worry about language or technical terminology — we will explain everything in plain, easy-to-understand terms.