Privacy Policy iwin casino —
Protection Personal Data Malaysian Players

1. Introduction

iwin casino ("us", "our platform") operates under the domain iwincasino.pro and is committed to protecting the privacy of every individual who uses our services. This Privacy Policy explains our practices regarding the collection, use, disclosure and protection of your personal information.

By registering an account or using any of the services iwin casino, you agree to the terms of this Privacy Policy. If you do not agree, please stop using the platform immediately.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection regulations in force from time to time.

2. Personal Data We Collect

2.1 Information You Provide Directly

When you register or use the platform iwin casino, you voluntarily provide us with the following information:

• Full name as stated in your official identification document
• Identity Card number (MyKad) or passport number
• A valid and active email address
• Registered Malaysian phone number
• Date of birth for age verification
• Current residential address
• Bank account or e-wallet details for financial transaction purposes

2.2 Automatically Collected Information

While you use the platform, our systems automatically record the following technical information:

2.3 Identity Verification Information (KYC)

For identity verification purposes, we collect copies of official documents including MyKad, passport or driving licence, as well as supporting documents such as bank statements or utility bills for address verification.

3. How We Use Your Data

iwin casino uses your personal data only for legitimate and reasonable purposes. The following are the primary purposes for which data is used:

3.1 Account Management and Services

• Create and manage your player account
• Process deposits and withdrawals in MYR securely
• Provide access to all platform games and services
• Send important notifications related to your account

3.2 Security and Compliance

• Verify player identity through the KYC process
• Detect and prevent fraud, money laundering, and unlawful activities
• Comply with applicable legal and regulatory requirements
• Investigate any disputes or complaints received

3.3 Platform Improvements

Aggregated data (without personally identifiable information) is used to understand usage patterns, identify technical bugs and develop new features that are more useful for Malaysian players.

4. Data Sharing & Disclosure

iwin casino does not sell, rent or trade your personal data to any third party for marketing purposes. Data disclosure only occurs in the following circumstances:

4.1 Technical Service Providers

We share necessary data with technical service providers that help operate the platform, including payment service providers, KYC processing systems, and cloud infrastructure providers. All third parties are bound by strict confidentiality agreements and may only use data for specified purposes.

4.2 Legal Requirements

We may be required to disclose your data to the relevant authorities when mandated by Malaysian law, court orders, or official investigations relating to financial crime, money laundering, or other unlawful activities.

5. Data Security

We implement a range of technical and organisational measures to protect your personal data from unauthorised access, loss, alteration, or disclosure:

• Encryption in transit: All communication between your device and our servers is secured with TLS 1.3 protocol and 256-bit SSL encryption.
• Encryption at rest: Sensitive data such as financial information and KYC documents is encrypted when stored in our database.
• Role-based access control: Only staff who require access to specific data are granted permission, and every access instance is recorded.
• Continuous monitoring: Our security system monitors for suspicious activity 24 hours a day, 7 days a week.
• Regular backups: Data is backed up regularly to a separate secure location to ensure recovery in the event of a disruption.

While we take all reasonable precautions, no security system is completely immune. In the event of a security incident involving your data, we will notify you within the timeframe required by law.

6. Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the platform iwin casino. Cookies help us identify your session, store your preferences and ensure a smoother gaming experience.

6.2 Types of Cookies We Use

• Session Cookies: Automatically deleted when you close your browser. Used to maintain your login session.
• Preference Cookies: Save your language preference and display settings for future visits.
• Analytics Cookies: Collect non-personally identifiable usage data to help us understand how players use the platform.
• Security Cookies: Used to detect suspicious activity and protect your account.

7. Data Retention Period

We only retain your personal data for as long as it is needed for the purposes stated in this policy, or as required by law:

• Active account data: Retained for as long as your account is active and for a specified period after account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial legal requirements.
• KYC Documents: Retained for 5 years after account closure or as required by the relevant authorities.
• Support communication log: Retained for 3 years for reference and dispute resolution purposes.

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to your identity.

8. Your Rights as a Data Subject

As a player iwin casino registered in Malaysia, you have the following rights regarding your personal data:

9. Child Protection

iwin casino does not provide services to any individual under the age of 18. We do not knowingly collect any personal data from minors.

If you believe that your child or someone under the age of 18 has registered on our platform, please contact our support team immediately. We will investigate the matter and close the account, deleting all associated data.

10. Privacy Policy Amendments

iwin casino reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements or new technologies we adopt.

Any material changes to this policy will be communicated to you via a prominent notice displayed on the platform or by email to the address registered in your account. The "Last Updated" date at the top of this page will always be updated to reflect the date of the latest revision.

11. How to Contact Us

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, please contact our privacy team via:

• Live Chat: Available 24/7 within the platform iwin casino — the fastest way to get a response.
• Email: [email protected] (displayed as plain text only, not a link).
• Response Time: We aim to respond to all enquiries within 1–3 business days.

For formal complaints relating to data protection, you may also contact the Department of Personal Data Protection (JPDP) Malaysia, the relevant regulatory body under the Personal Data Protection Act 2010.