This Privacy Policy describes how w2win collects, uses, stores, and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and adopted international privacy standards.
1. Scope of This Policy
This Privacy Policy ("Policy") applies to all users who access or use w2win services via the website at w2win.onl or our mobile app. This policy covers all personal data you provide directly to us, as well as data we collect automatically when you use the platform.
By registering or using the w2win platform, you agree to the practices described in this Privacy Policy. If you do not agree, please stop using the platform and contact us to request account and related data deletion.
2. Data We Collect
The types of personal data we collect depend on how you interact with the w2win platform. Generally, the data we collect includes:
| Data Categories | Example Information | Collection Method |
|---|---|---|
| Identity Data | Full name, identification number, date of birth, gender | Registration & KYC process |
| Contact Data | Email address, phone number, residential address | Account registration |
| Financial Data | Bank account details, deposit & withdrawal transaction history | Payment processing |
| Technical Data | IP address, device type, browser, operating system | Automatically during use |
| Usage Data | Games played, total wagering amounts, session duration | Automatically during gameplay |
| Communication Data | Live chat conversation records, customer support emails | Interaction with Support |
3. How We Use Your Data
W2win uses your personal data for lawful and transparent purposes. We do not use your data in ways you would not expect. The following are the primary purposes for which data is used:
- Account management: Registering, verifying, and managing your account on the w2win platform.
- Transaction processing: Processing deposits, withdrawals, and all financial transactions in your account.
- KYC/AML compliance: Verifying your identity in line with Know Your Customer and anti-money laundering legal requirements.
- Customer support: Helping resolve any issues, queries, or complaints you report.
- Platform security: Detecting and preventing fraud, unauthorized access, and suspicious activity.
- Platform improvements: Analyzing usage patterns to improve the overall user experience.
- Important communications: Sending notifications related to your account, including security updates and policy changes.
- Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and offer appropriate assistance.
We do not use your data to make automated decisions that materially affect you without human intervention, unless stated otherwise and with your consent.
4. Data Sharing With Third Parties
W2win does not sell or commercialize your personal data. However, in certain limited situations, your data may be shared with the following third parties:
- Payment providers: Data required to process your deposits and withdrawals is shared with approved payment service providers, such as FPX providers and digital wallet operators.
- Game providers: Basic account information is shared with third-party game providers to enable you to play on their platforms via w2win.
- Relevant authorities: Information is shared with regulatory authorities or law enforcement when required by applicable law.
- Technical service providers: Cloud and infrastructure service providers that help us operate the platform, subject to strict confidentiality agreements.
All third parties who receive your data are bound by confidentiality obligations and are only permitted to use that data for the specified purposes. We ensure that every third party we work with maintains data protection standards equal to or higher than our own.
5. Data Security Measures
W2win implements a range of technical and organizational security measures to protect your personal data from unauthorized access, loss, or misuse:
- 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers.
- Encrypted database for storing sensitive user information.
- Role-based access control (RBAC) ensuring only authorized personnel can access specific data.
- Two-factor authentication (2FA) for internal staff accounts with access to data management systems.
- Vulnerability scanning and penetration testing conducted periodically by independent security experts.
- Real-time system activity monitoring to detect and respond to security threats.
While we take all reasonable steps to protect your data, no security system can be guaranteed 100% secure. We encourage you to also take personal security measures, such as using a strong password and not sharing your login details.
6. Data Retention Period
W2win retains your personal data for as long as your account is active or as long as necessary to provide services to you. After an account is closed, certain data may be retained for a longer period based on legal requirements:
- Financial records and transactions: Retained for a minimum of 7 years in compliance with Malaysian legal requirements.
- KYC Documents: Retained for 5 years after account closure.
- Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
- Technical data and system logs: Retained for 90 days before being automatically deleted.
Once the specified retention period ends, your data will be securely deleted or anonymized in accordance with our standard procedures.
7. Your Rights Over Personal Data
As a w2win user in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010:
Right of Access
You have the right to request a copy of the personal data we hold about you.
Right to Rectification
You may request that we correct any inaccurate or outdated data.
Right to Erasure
You may request the deletion of your data in certain circumstances permitted by law.
Right to Object to Processing
You have the right to object to the processing of your data for direct marketing purposes.
Right to Data Portability
You may request your data in a structured, machine-readable format.
Right to Withdraw Consent
You may withdraw consent to processing at any time without affecting prior processing.
To exercise any of the rights above, contact our privacy team at [email protected]. We will process your request within 30 days.
8. Cookie Policy (Cookies)
W2win uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:
- Essential cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
- Functional cookies: Saving your preferences such as language, display theme, and game settings for a more personalized experience.
- Analytics cookies: Helping us understand how users interact with the platform for continuous improvement. Data is collected in aggregate and does not identify individuals.
You can manage cookie settings through your browser. Please note that disabling essential cookies may affect platform functionality.
9. Cross-Border Data Transfers
In some cases, your personal data may be transferred to and processed in countries other than Malaysia, particularly in connection with cloud server infrastructure and international game providers. w2win ensures that all such data transfers are carried out with adequate safeguards, including through data transfer agreements that comply with recognised international standards.
10. Child Protection
The w2win platform is strictly for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we discover that a child's data has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the associated account.
11. Privacy Policy Amendments
W2win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other needs. Any significant amendments will be communicated to you via email or in-platform notification at least 14 days before the changes take effect. Continued use of the platform after the effective date of any amendment constitutes your acceptance of the revised Policy.
12. Contact Our Privacy Officer
If you have any questions, concerns, or wish to exercise your privacy rights, you can reach us via:
- Live Chat: Available 24/7 directly in the w2win app or website
- Email: [email protected] (include "Privacy" in the email subject)
- FAQ: Visit our FAQ page for frequently asked questions about privacy
This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). It is a living document that will be updated as needed. This version is the official version applicable to Malaysian users.