Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by MyWin ("we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://mywin.cam ("the Platform"). MyWin is committed to protecting and respecting the privacy of all users ("you", "your", "the User") who access, register on, or otherwise interact with our Platform.

This Policy sets out the basis on which personal data we collect from you, or that you provide to us, will be processed. It applies to all personal data collected through your use of the Platform, including data collected when you register an account, make a deposit or withdrawal, participate in promotions, use our live chat or email support, or simply browse the Platform as a visitor.

By using the MyWin Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform and request account closure through our support team at [email protected]. The current version of this Policy is always available at https://mywin.cam/privacy-policy.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

Data Controller Information

MyWin operates as the Data Controller with respect to all Personal Data collected through the Platform. As Data Controller, MyWin is responsible for determining how and why your Personal Data is processed, and for ensuring that such processing is conducted lawfully, fairly, and transparently in accordance with applicable data protection principles.

For all data protection enquiries, access requests, or complaints, you may contact the MyWin data protection team using the contact details set out in Section 15 of this Policy. We aim to respond to all data-related requests within a reasonable timeframe and no later than 30 calendar days of receipt of a verified request.

Personal Data We Collect

MyWin collects Personal Data through several channels, including directly from you during account registration and usage, and indirectly through automated technologies. The categories of Personal Data we may collect include the following:

• Full legal name as it appears on your identity document.
• Date of birth (for age verification — players must be 21 years of age or older).
• Email address and mobile phone number.
• Preferred username and encrypted password credentials.
• Residential address (city, postcode, state — e.g., Kuala Lumpur, Petaling Jaya, Penang, Shah Alam, Johor Bahru).
• Nationality and country of residence.

• Copies of government-issued identity documents (Malaysian MyKad front and back, or international passport).
• Proof of residential address (utility bill, bank statement, or official correspondence dated within 90 days).
• Payment method ownership documentation where required by our compliance team.

• Deposit and withdrawal transaction records, including amounts in MYR, timestamps, and transaction reference numbers.
• Payment method details such as e-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account information (Maybank, CIMB, Public Bank, Hong Leong, RHB), DuitNow and FPX transaction data, and cryptocurrency wallet addresses where applicable.
• Transaction status logs and dispute or chargeback records.

• Betting history, wager amounts, game selections, win/loss records, and session durations.
• Bonus and promotional activity, including bonuses claimed, wagering progress, and promotion eligibility status.
• Responsible gambling tool settings, including deposit limits, session limits, and self-exclusion requests.

• IP address, browser type and version, operating system, device type (mobile/desktop), and screen resolution.
• Pages visited on the Platform, time and duration of visits, click stream data, and referral URLs.
• Session tokens, login timestamps, and geographic location data derived from IP address.
• Cookie data and similar tracking technologies as described in Section 7 of this Policy.

• Content of live chat support conversations, emails, and any written correspondence submitted to our support team.
• Feedback, survey responses, and complaint records.

Legal Basis for Data Processing

MyWin processes your Personal Data on the following legal bases, depending on the specific purpose of the processing activity:

How We Use Your Personal Data

MyWin uses the Personal Data we collect for the following specific purposes, consistent with the legal bases identified in Section 5:

1. Account Management: Creating, maintaining, and managing your registered account, including verifying your identity and processing login credentials.
2. Payment Processing: Facilitating deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and other supported channels, and processing withdrawal requests to your nominated payment method.
3. KYC and Compliance: Verifying your identity and age (21+ requirement), meeting anti-money laundering obligations, and complying with applicable regulations.
4. Gaming Services: Delivering the sports betting, live casino, slot gaming, and other interactive entertainment services you access on the Platform.
5. Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and providing assistance via live chat and email.
6. Responsible Gambling: Monitoring gaming behaviour to identify potential problem gambling patterns, applying self-exclusion requests, enforcing deposit limits, and providing responsible gambling tools.
7. Fraud Detection and Security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, money laundering, collusion, and other abuse of the Platform.
8. Platform Improvement: Analysing usage patterns and technical performance data to improve the Platform's features, usability, and reliability.
9. Marketing Communications: Sending promotional offers, bonus notifications, and updates about MyWin services, where you have provided consent or where we have a legitimate interest to do so. You may opt out at any time.
10. Legal Compliance: Retaining transaction records and communications as required by applicable law, and disclosing data to competent authorities when legally required to do so.

Cookies & Tracking Technologies

MyWin uses cookies and similar tracking technologies to operate the Platform effectively, personalise your experience, and gather analytics data. A cookie is a small text file stored on your device when you visit the Platform. Cookies do not contain viruses or malware and cannot access other data on your device.

You may adjust your cookie preferences through your browser settings. However, disabling Strictly Necessary cookies will affect your ability to log in and use the Platform. MyWin does not use cookies to serve third-party advertising.

Data Sharing & Disclosure

MyWin does not sell or rent your Personal Data to third parties. We may share your data only in the following limited and controlled circumstances:

• Payment Service Providers: Transaction data is shared with payment processors and financial institutions (including DuitNow operators, FPX banking partners such as Maybank, CIMB, Public Bank, and Hong Leong, and e-wallet providers including Touch 'n Go, Boost, and GrabPay) solely to facilitate payment processing.
• Identity Verification Providers: KYC documentation may be processed by our contracted identity verification service providers under binding data processing agreements. These providers act as Data Processors and are prohibited from using your data for any purpose other than verification.
• Game Technology Partners: Anonymised gameplay data may be shared with licensed game studio technology partners for game performance and RTP audit purposes. No personally identifiable information is shared with game studios.
• Legal and Regulatory Authorities: MyWin will disclose Personal Data to competent governmental authorities, law enforcement agencies, or regulators when required to do so by applicable law, court order, or regulatory direction. We will inform affected Users where legally permitted to do so.
• Anti-Fraud and AML Services: Transaction and account data may be shared with licensed anti-money laundering screening services and fraud detection platforms operating under contractual data protection obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of MyWin's business, User data may be transferred to the acquiring entity as part of the business assets, subject to this Policy continuing to apply to transferred data.

Data Retention

MyWin retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with our internal data destruction procedures. Users may request early deletion of their data subject to the conditions described in Section 11 of this Policy.

Data Security

MyWin implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our key security practices include:

• Encryption in Transit: All data transmitted between your device and the MyWin Platform is encrypted using TLS 1.2 or higher (HTTPS). This applies to all platform pages, API calls, and payment processing flows.
• Encryption at Rest: Sensitive Personal Data stored in our databases, including KYC documents and financial records, is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data within MyWin's internal systems is restricted on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: MyWin supports two-factor authentication (2FA) for player accounts, adding an additional layer of protection to your login process.
• Intrusion Detection: Our infrastructure is monitored 24/7 by automated intrusion detection and anomaly monitoring systems to identify and respond to security threats in real time.
• Penetration Testing: The Platform undergoes periodic security assessments and vulnerability testing to identify and remediate potential weaknesses in our systems.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, MyWin will notify affected Users without undue delay and take all necessary steps to contain and mitigate the incident.

Your Data Rights

As a registered User, you hold the following rights with respect to your Personal Data held by MyWin. These rights may be exercised by contacting us at [email protected]. We will verify your identity before processing any data rights request and will respond within 30 calendar days of receipt.

Please note that certain rights are subject to limitations. For example, the right to erasure does not apply where retention is required by law (such as AML and financial record-keeping obligations). Where a limitation applies, we will explain the reason clearly in our response to your request.

Children's Privacy

MyWin's Platform is strictly for individuals aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Age verification is conducted as part of our KYC process, and accounts found to belong to individuals under 21 will be immediately closed in accordance with our Terms & Conditions.

If you are a parent or guardian and have reason to believe that a minor has registered on the Platform or submitted personal information to us, please contact us immediately at [email protected]. We will investigate and take all necessary action to delete the data and close the account without delay.

MyWin supports initiatives to prevent underage gambling and cooperates with responsible gambling organisations in Malaysia and internationally to uphold the highest standards of age-based access control.

Third-Party Links & Integrations

The MyWin Platform does not include links to third-party websites for general browsing purposes. However, where payment processing integrations direct you to third-party payment service provider interfaces (such as your bank's online authentication page during an FPX transaction, or your Touch 'n Go eWallet application), you should be aware that those interfaces are operated by independent providers and governed by their own privacy policies.

MyWin accepts no responsibility for the privacy practices of third-party payment service providers. We recommend that you review the privacy policy of any third-party service you interact with in connection with your use of MyWin. Our data sharing with payment providers is strictly limited to the transaction data necessary to process your payment, as described in Section 8 of this Policy.

Amendments to This Policy

MyWin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. Material changes to this Policy will be communicated to registered Users via the email address on their Account and/or by a prominent notice on the Platform at least 7 days before the changes take effect.

The date of the most recent update to this Policy is always displayed at the top of this page. Your continued use of the Platform following the publication of an amended Policy constitutes acceptance of the updated terms. If you do not agree to any changes, you should cease using the Platform and request account closure before the effective date of the amendment.

We encourage you to review this Policy periodically to stay informed about how MyWin protects your data and what rights you hold.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way MyWin handles your Personal Data, please contact us through the following channels. All data protection enquiries are handled by our dedicated support and compliance team:

• Email: [email protected] — mark the subject line as "Privacy Enquiry" or "Data Rights Request" for priority routing.
• Live Chat: Available 24 hours a day, 7 days a week via the platform chat widget. For complex data rights requests, email is preferred to ensure a complete written record.
• Operating Hours: All correspondence is handled on Malaysia Time (MYT, UTC+8). We acknowledge data rights requests within 5 business days and provide a full substantive response within 30 calendar days.

For formal legal notices relating to this Privacy Policy, please mark your email clearly as "Legal Notice — Privacy" and direct it to [email protected]. MyWin takes all data-related concerns seriously and is committed to resolving them promptly and transparently.