Privacy Policy Datowin — Personal Data Protection for Malaysian Players

Datowin collects your personal data directly when you interact with our platform. All data collection is carried out on the basis of legitimate operational needs and with your consent.

Data You Provide Directly

• Full name as stated on your MyKad.
• MyKad number or valid identification document.
• Date of birth for age verification — players must be 18 and above.
• Active email address and mobile phone number.
• Current residential address for KYC verification purposes.
• Bank account or e-wallet details for processing deposits and withdrawals.
• Photo or copy of identity document for the KYC process.

Automatically Collected Data

When you use the datowin platform, our systems automatically record certain technical information required for safe and smooth platform operations.

The personal data we collect is used exclusively for purposes related to the operation of the Datowin platform and your experience as a player. We do not use your data for any purpose unrelated to the services you signed up for.

Primary Purpose of Data Use

• Processing account registration and verifying your identity through the KYC process.
• Processing deposits, withdrawals and all financial transactions on the platform.
• Ensuring your account's security and detecting any suspicious access or activity.
• Complying with legal requirements including anti-money laundering (AML) regulations and reporting obligations.
• Sending important notifications related to your account, transactions and platform updates.
• Providing effective customer support whenever you need assistance.
• Improving the datowin platform based on overall usage patterns (in aggregated form that does not identify individuals).

Marketing Communications

With your consent, Datowin may send you information about promotions, bonuses, and new offers that may interest you. You can unsubscribe from marketing communications at any time via your account settings without affecting other services.

Datowin does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Disclosure to third parties only occurs in specific, limited, and lawful circumstances.

Third Parties That May Receive Your Data

• Payment Service Providers: Licensed payment gateways that process your deposits and withdrawals. They receive only the data necessary to complete the transaction.
• KYC and Identity Verification Providers: Third-party services that help us verify player identities securely and comply with regulations.
• Law Enforcement: Competent authorities when required by law or a valid court order.
• Technical Services: Cloud and security infrastructure providers that help us operate the platform safely. All providers are bound by strict confidentiality agreements.

International Data Transfers

Where data needs to be transferred outside Malaysia, Datowin ensures that protection equal to or higher than local standards is maintained through appropriate data processing agreements with all parties involved.

Datowin takes a multi-layered approach to protecting your personal data. Our security infrastructure is designed to defend against modern cyber threats while ensuring that legitimate access remains smooth and uninterrupted.

Technical Safeguards

• 256-bit SSL/TLS data encryption for all communications between your device and datowin's servers.
• Encryption of sensitive data in databases using industry-standard encryption algorithms.
• Two-factor authentication (2FA) is available and encouraged for all accounts.
• Real-time security monitoring with automated threat detection systems.
• Regular penetration testing by independent security experts.

Data Retention Period

Your personal data is retained for as long as your account is active or as required for legitimate operational purposes. To comply with legal requirements, particularly those relating to AML and financial records, certain data may be retained for up to 7 years after account closure.

Data that is no longer required will be deleted or anonymised in a way that ensures it cannot be re-linked to the individual concerned.

As a datowin player, you have several important rights regarding your personal data, all of which we fully respect. Below are the rights you may exercise at any time.

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: If any of your data is inaccurate or outdated, you may request that we update it.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data, subject to our legal obligations.
• Right to Block Processing: You may ask us to restrict how we process your data under certain circumstances.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another service if needed.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, contact the datowin support team via live chat on the platform. We will process your request within 30 business days from the date of receipt.

The datowin platform uses cookies and similar tracking technologies to ensure the best user experience and optimal account security. Below are the types of cookies we use.

You can manage cookie preferences through your web browser settings. Disabling certain cookies may affect platform functionality. Essential cookies cannot be disabled as they are required for security and core operations.

Datowin is a platform restricted to individuals aged 18 and above. We do not knowingly collect or process personal data from children under the age of 18. Our KYC verification process is specifically designed to prevent registration by underage individuals.

If we find that we have inadvertently collected data from a minor, we will delete that data immediately and close the account in question. Parents or guardians who believe their child may have registered on this platform are encouraged to contact us via customer support right away.

Datowin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform operations. The effective date will be updated at the top of this document whenever any amendment is made.

For material amendments that affect how we process your personal data, datowin will notify you via an in-platform notification or email to your registered address. You will be given a reasonable period to review the changes before they take effect.

Continued use of the datowin platform after an amendment's effective date means you accept the updated version of the Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your data as outlined under the rights stated in Section 5.

If you have any questions, concerns or complaints about how datowin handles your personal data, we encourage you to reach out to us directly. Our team is ready to assist you.

You can reach the Datowin privacy team via the in-platform 24/7 live chat. Please mention that your enquiry is privacy-related so it can be routed to the right team promptly. We aim to respond to all privacy enquiries within 5 business days.

For more formal complaints, or if you are unsatisfied with our response, you have the right to refer the matter to the relevant data protection authority in your jurisdiction.