Data Protection

Privacy Policy iwinapp – Our Commitment to Protecting Your Data

Your privacy is not merely a legal obligation for us — it is a responsibility we have taken seriously since the day iwinapp was founded. This document transparently explains how we collect, use and safeguard your personal data.

6 Ways iwinapp Protecting Your Personal Data

Each of these protection layers is specifically designed to keep your information safe under iwinapp's care.

256-bit SSL Encryption

All data transmitted between your device and iwinapp servers is protected with 256-bit SSL encryption — the same standard used by leading banking institutions worldwide.

Secure & Segmented Servers

Your personal data is stored in a segmented server environment protected by multi-layered firewalls. Internal access is restricted to authorised personnel only.

Two-Factor Authentication

Iwinapp's two-factor authentication (2FA) system adds an extra layer of security to your account — ensuring only you can access it even if your password is compromised.

Continuous Monitoring

The iwinapp security team monitors platform activity in real time around the clock to detect and respond to any security threats or irregular activity.

No Data Sales

Iwinapp has never and will never sell users' personal data to third parties for marketing or commercial purposes. Your data belongs to you, not to be treated as a commodity.

Full User Control

You have full control over your data — including the right to access, correct, request deletion, and withdraw consent at any time.

Last updated: 1 January 2026

Important note: This Privacy Policy describes iwinapp's data collection and usage practices. It should be read together with Terms and Conditions us. By using the iwinapp platform, you agree to the policies stated here.

1

Introduction

Iwinapp takes user privacy very seriously. As an online entertainment platform serving hundreds of thousands of users in Malaysia, we understand that your trust depends not only on the quality of our services, but also on how we handle the personal information you entrust to us.

This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We are committed to managing your data in a responsible, transparent, and secure manner.

This policy applies to all information collected through the iwinapp website, mobile app, customer support services, and all other official communication channels.

2

Data Collected

Iwinapp collects various types of information depending on how you interact with our platform. Below are the main categories of data collected:

Data Category Examples of Information How It Is Collected
Personal Identity Full name, date of birth, identification card number Account Registration & KYC
Contact Information Email address, phone number Account registration
Financial Data Payment method details, transaction history Deposit & Withdrawal
Technical Data IP address, device type, web browser, operating system Automatically during use
Gaming Data Betting history, wins, play time Gaming activity on the platform
Communications Data Support chat logs, emails, feedback Interactions with our team

We only collect data that is genuinely necessary for legitimate purposes. iwinapp does not collect irrelevant or excessive information.

3

How We Use Your Data

Collected data is used solely for the following purposes:

  • Account management: Creating and managing your account, including registration processing, login and identity verification.
  • Transaction processing: Processing deposits, withdrawals and all financial transactions securely and efficiently.
  • Service delivery: Enabling you to access and use all games and features on the iwinapp platform.
  • Customer support: Helping you resolve any issues, enquiries or complaints effectively.
  • Legal compliance: Fulfilling legal obligations including anti-money laundering (AML) and Know Your Customer (KYC) requirements.
  • Platform security: Detecting and preventing fraud, suspicious activity and other security threats.
  • Product improvement: Analysing usage patterns to improve the overall user experience.
  • Marketing communications: Sending information about promotions and offers — only where you have given consent to receive them.

Iwinapp does not use user data for any purpose not stated above without obtaining your consent first.

4

Legal Basis for Data Processing

Iwinapp processes your personal data on the following valid legal bases:

  • Contract performance: Data processing required to deliver the services you request — including account management and financial transactions.
  • Legal obligation: Processing required to meet applicable legal obligations such as PDPA 2010, AML requirements and relevant financial regulations.
  • Legitimate interest: Processing for platform security, fraud prevention and product improvement purposes — where these interests do not override your privacy rights.
  • Consent: For optional marketing communications and analytics, we rely on your explicit consent, which can be withdrawn at any time.
5

Data Sharing with Third Parties

Iwinapp does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, in certain situations, we may need to share data with specific parties:

  • Payment service providers: To process your deposit and withdrawal transactions, we share the necessary information with trusted e-wallet providers and banking services.
  • Game providers: Game session data is shared with licensed game providers to ensure a seamless gaming experience.
  • Statutory authorities: iwinapp will disclose data if required by law, court order, or direction from a legitimate enforcement agency.
  • Technology services: Technical infrastructure providers such as cloud services and security systems bound by strict confidentiality agreements.

All third parties who receive your data are required to protect it to the same or higher security standards that we apply.

Iwinapp never shares user data with advertising companies, social media platforms, or any third party for profiling or marketing purposes without your explicit consent.

6

Data Storage & Security

Iwinapp stores your data on servers protected to the highest industry security standards. Below are the key security measures we implement:

  • Data encryption in transit using TLS 1.3 protocol and at rest using AES-256 encryption.
  • Strict role-based access control — only authorised staff can access sensitive user data.
  • Regular security audits by independent third parties to identify and address any vulnerabilities.
  • A tested incident response procedure to ensure any security breach is promptly identified and addressed.

Data retention period: iwinapp retains your personal data for as long as your account is active or as long as needed to fulfil the purposes stated in this policy. After account closure, data is kept for the minimum period required by Malaysian law — typically five to seven years for financial records — after which it is securely deleted or anonymised.

7

Cookies & Tracking Technologies

Iwinapp uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

  • Essential cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
  • Performance cookies: Helping us understand how users interact with the platform for improvement purposes — such as most-visited pages and load times.
  • Functional cookies: Storing your preferences such as language, display settings and saved login details for your convenience.
  • Analytics cookies: Used to analyse usage patterns in aggregate and anonymised form for product improvement purposes.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the iwinapp platform.

8

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data held by iwinapp:

Right of Access

You may request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request that we correct any inaccurate or incomplete data.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data from our systems.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Withdraw Consent

You may withdraw consent for consent-based data processing at any time.

To submit any request related to the above rights, please contact our privacy team via email at [email protected]. We will process your request within 30 working days.

9

Children's Data

The iwinapp platform is strictly for users aged 18 and above. We do not knowingly collect, process or store personal data from individuals under the age of 18.

All registration applications go through an age verification process as part of our KYC procedure. If iwinapp finds that data from underage users has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.

If you believe that someone under the age of 18 has successfully registered an account with iwinapp, please notify us immediately through our customer support channels.

10

Privacy Policy Amendments

Iwinapp reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. All amendments take effect as soon as the new version is published on this website.

For significant amendments, iwinapp will provide users with appropriate notice through:

  • In-account notifications displayed when logged in to the platform.
  • Email sent to the address registered to your account.
  • Relevant announcements on the iwinapp home page.

The "Last Updated" date at the top of this document indicates when the most recent revision was made. We encourage you to review this policy periodically to stay informed about how we protect your privacy.

11

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how iwinapp handles your personal data, we are here to help:

Our data protection team will respond to all privacy-related enquiries within 14 business days. For more complex requests such as data deletion, processing may take up to 30 business days.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Malaysia Department of Personal Data Protection or the relevant data protection authority in your country.

For more information about your rights and responsibilities when using the platform, please refer to iwinapp Terms and Conditions. For questions about responsible gaming, visit the Responsible Gaming us.

Your Data Is Safe. Your Experience Starts Here.

Now you know how iwinapp protects your privacy. Register a free account and enjoy online entertainment with peace of mind — knowing your data is in responsible hands.

Bahasa Melayu