Official Documents

Privacy Policy w2win

Your privacy is more than a legal obligation to us — it is a responsibility we take seriously every day. Find out exactly how we collect, use, and protect your personal information.

Last Updated: 1 January 2026

Six Core Principles Data Protection w2win

We have built a robust privacy system so you can play with peace of mind, free from concerns about the security of your personal information.

🔐
256-bit SSL Encryption

All data transmitted between your device and w2win's servers is encrypted using 256-bit SSL protocol — the same standard used by leading banking institutions worldwide.

🚫
No Data Sales

W2win has never sold, rented, or transferred your personal data to third parties for marketing or commercial purposes, and never will, without your explicit consent.

🏦
Malaysia PDPA Compliance

Our privacy policy is fully drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights as a user are protected under local legislation.

👤
Full User Control

You have the right to access, correct, or request the deletion of your personal data at any time. Your request will be processed within 14 business days.

🔍
Transparent & Clear

We clearly specify the types of data collected, the purpose of collection, and the retention period. There are no hidden terms or confusing legal language in this document.

🛡️
24/7 Monitoring

The w2win cybersecurity team monitors our systems around the clock to detect and prevent any unauthorised access attempts or data breaches before they occur.

Your Data Journey On Our Platform

From the moment you register to every transaction you make, here is how your data is handled securely at every stage.

Independent Verification: w2win's data security systems have been audited by an independent third-party security firm to ensure full compliance with international standards.

1
Minimum Data Collection

We only collect data strictly necessary for platform operations — name, email, phone number, and payment information. No excess data is collected.

2
Encryption in Transit

Every bit of data moving between your device and our servers is automatically encrypted using 256-bit SSL. No one can intercept or read your data in transit.

3
Secure Server Storage

Stored data is protected by multi-layered firewalls, role-based access controls, and database-level encryption. Only authorised personnel may access user data.

4
Purpose-Specific Processing

Your data is only used for the purposes stated in this policy. Any new use requires your prior consent before it is carried out.

5
Scheduled Deletion

Data that is no longer required is securely deleted according to a defined retention schedule, unless the law requires longer retention.

Data Protection Rights w2win Users

Under Malaysia's PDPA and our privacy policy, you have the following rights, which you may exercise at any time.

User Rights Description Processing Time Status
Right of Access You may request a copy of all personal data we hold about you at any time. 7–14 business days Available
Right to Rectification If any of your data is inaccurate or out of date, you have the right to request an immediate correction. 3–5 business days Available
Right to Erasure You may request the deletion of your personal data under certain circumstances, such as account closure. 14–30 business days Available
Right to Object You may object to the processing of your data for direct marketing purposes at any time. Immediately Available
Right to Data Portability You may request your data in a machine-readable format for transfer to another platform. 14 business days Available
Right to Withdraw Consent Your consent for data processing may be withdrawn at any time without penalty. Immediately Available

Important Note: This Privacy Policy applies to all users of the w2win platform at https://w2win.fun, including the website and mobile app. By using our platform, you agree to the terms set out in this document.

1. Data We Collect

W2win adopts a data minimisation approach — we only collect information that is genuinely necessary to provide you with a safe, fair, and responsible service. The data we collect falls into several main categories:

Data You Provide Directly

  • Registration information: Full name, email address, mobile phone number, date of birth, and password chosen when registering your account.
  • Identity verification documents (KYC): A copy of your MyKad or passport, proof of address, and proof of ownership of the payment method submitted during the verification process.
  • Financial information: Bank account or e-wallet details used for deposits and withdrawals. We do not store full credit or debit card numbers.
  • Support communications: Records of live chat conversations, emails, or any other correspondence between you and our team.

Automatically Collected Data

  • Technical data: IP address, browser type, operating system, screen resolution, and device information used to access the platform.
  • Activity data: Pages visited, games played, session duration, and navigation patterns within the platform.
  • Transaction data: Deposit, withdrawal, wagering, and wins history automatically generated by the system.
  • Location data: General location information based on IP address for regional compliance purposes. We do not collect your precise GPS location.

2. Data Collection & Processing Purposes

Every piece of data we collect has a clear and legitimate purpose. We process your personal data for the following purposes:

  • Account management: Creating, verifying, and maintaining your account so you can use all platform features smoothly.
  • Transaction processing: Processing deposits and withdrawals securely and accurately according to your chosen payment method.
  • KYC and AML compliance: Fulfilling Know Your Customer and Anti-Money Laundering requirements as mandated by law.
  • Platform security: Detecting and preventing fraud, unauthorised access, and suspicious activity on your account.
  • Personalised experience: Personalising game recommendations and promotions based on your preferences and gameplay patterns.
  • Service communications: Sending important account notifications, the latest promotions, and platform updates.
  • Platform improvements: Analysing aggregate usage data to improve platform performance, design, and functionality.
  • Legal compliance: Maintaining records required by Malaysian law for the stipulated duration.

W2win will not process your data for any purpose other than those stated above without first obtaining your fresh consent.

3. Data Sharing With Third Parties

We understand the importance of your privacy and are extremely careful about who we share your data with. As a general rule, w2win does not sell your personal data to any party. However, in certain situations, we may share your data with selected third parties:

Trusted Service Providers

We work with third-party service providers who assist us in operating the platform, including game software providers, payment processors, and identity verification services. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for specific, defined purposes.

Legal Requirements

W2win will disclose your personal data to the relevant authorities if required by law, court order, or in a financial crime investigation. In such situations, we will notify you if permitted to do so by law.

Business Transfers

In the event of a merger, acquisition, or sale of company assets, user data may be transferred as part of the business assets. You will be notified in advance and given the option to opt out if the transfer involves significant changes to how your data is handled.

Our Commitment: All third parties we work with are required to comply with data protection standards at least equivalent to our own. We conduct regular reviews to ensure ongoing compliance.

4. Data Security

Protecting your data is our top technical and operational priority. We implement multiple layers of security to keep your data safe at all times:

  • 256-bit SSL/TLS Encryption: All communications between your device and our servers are fully encrypted.
  • Data at rest encryption: Data stored in our databases is also encrypted for additional protection even in the event of a physical breach.
  • Role-based access control: Only staff with a legitimate business need may access user data, and all access is logged and monitored.
  • Two-factor authentication (2FA): Our internal systems require two-factor authentication for all admin access to prevent unauthorised entry.
  • Regular penetration testing: We conduct regular security testing by external experts to detect and patch vulnerabilities before they can be exploited.
  • Incident response plan: We have clear procedures in place to handle any data security incidents, including notifying affected users within the stipulated timeframe.

While we take all reasonable precautions, no security system can be guaranteed 100% impenetrable. We encourage you to also take personal security measures, such as using a strong password and not sharing your login credentials.

5. Cookies & Tracking Technologies

W2win uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions properly. There are several types of cookies we use:

  • Essential cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
  • Performance cookies: Collecting information on how you use the platform to help us improve overall performance and user experience.
  • Functional cookies: Saving your preferences such as language, region, and display settings so you do not have to reset them each time you log in.
  • Analytics cookies: Helps us understand aggregate usage patterns without identifying individual users.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some parts of the platform.

6. Data Retention Period

We do not retain your data longer than necessary. Data retention periods depend on the type of data and legal requirements:

  • Active account data: Retained for the duration your account is active, plus 5 years after account closure to meet compliance requirements.
  • Financial transaction records: Retained for 7 years in accordance with Malaysian accounting and tax legislation.
  • KYC documents: Retained for 6 years after account closure in accordance with AML (Anti-Money Laundering) requirements.
  • Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
  • Technical log data: Retained for a maximum of 12 months, then deleted or anonymised.

Upon expiry of the retention period, your data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

7. Cross-Border Data Transfers

As part of our global operations, user data may be stored or processed on servers located outside Malaysia. Any such data transfer is carried out with stringent safeguards:

  • Transfers are only made to countries or entities that provide an adequate level of data protection.
  • Legally binding data processing agreements are signed with all data recipients.
  • We ensure that all data recipients comply with standards at least equivalent to Malaysia's PDPA.

8. Children's Privacy

The w2win platform is strictly for individuals aged 18 years and above. We do not knowingly collect or process personal data from minors. If we discover that a child's data has been collected without our knowledge, we will take immediate action to delete that data and close the account in question.

If you believe your child has registered an account on our platform without authorisation, please contact our support team immediately for remedial action.

9. Privacy Policy Amendments

W2win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Material amendments will be communicated to you via:

  • Email notifications to the address registered on your account.
  • A clear notice on the platform's main page.
  • Update the "Last Updated" date at the top of this document.

Continued use of the platform after an amendment takes effect is considered your acceptance of the updated policy. If you do not agree with any amendment, you may close your account and request data deletion before the amendment comes into effect.

10. How to Contact Us

For any enquiries, requests, or complaints regarding this Privacy Policy or the handling of your personal data, our Data Protection Officer team is ready to assist:

  • Live Chat: The fastest way — available 24/7 directly on the w2win platform.
  • Email: [email protected] — for written requests or those requiring official documentation.
  • FAQ: Visit FAQ page us for quick answers to frequently asked privacy questions.

We are committed to responding to all privacy-related inquiries within the stipulated timeframe 3 business days. For more complex data rights requests such as data access or deletion, the processing period is 14 business days.

Our Commitment to You: Privacy is not just a compliance checkbox for us. It is part of the core values of w2win. We continually strive to be more transparent, more secure, and more accountable in handling the trust you place in us.

🔐 🛡️ ✅

Your Data Is Safe. Your Game Is Secure.

Create your w2win account today and enjoy a safe, fair, and responsible gaming experience alongside over 500,000 Malaysian players who have trusted us.

By registering, you agree to the Terms and Conditions as well as the w2win Privacy Policy.

Bahasa Melayu