Privacy Policy UWin Casino – Personal Data Protection for Malaysian Players

This Privacy Policy is published by UWin Casino ("we", "Platform") and applies to all information collected through the uwincasino.app website, associated mobile applications, and all services we offer to Malaysian members.

We understand how sensitive personal information can be — especially in the context of an online financial and entertainment platform. Every time you register an account, make a deposit via Touch 'n Go eWallet or DuitNow, or simply browse our website, you are entrusting UWin Casino with a portion of your personal information. That trust is something we take seriously.

This policy clearly outlines:

• What types of personal data we collect and retain
• How and why we use your data
• Who your data may be shared with and under what circumstances
• The security measures we take to protect your information
• Your rights regarding your personal data and how to exercise them

UWin Casino collects several categories of personal data, depending on how you interact with our platform. The table below provides a comprehensive overview:

We do not collect sensitive data categories such as health information, religious beliefs, or political views unless strictly necessary for a specific purpose and with your explicit consent.

UWin Casino collects your personal data through the following channels:

Directly from You: When you complete the registration form, go through the KYC process, contact our customer support team, fill in a satisfaction survey, or sign up for any promotion at UWin Casino. Information you knowingly provide in these instances is our primary source of data.

Automatically During Use: When you browse the UWin Casino platform, our systems automatically record technical data such as your IP address, device type, access time, pages visited, and interaction patterns. This data is collected using cookie technology, server logs, and analytics tools aimed at improving the user experience.

From Third-Party Payment Providers: When you make a deposit via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks), the payment provider may share the minimum transaction data required for verification and processing. We do not receive your PIN, password, or full payment card details.

From Verification Partners: For KYC and fraud prevention purposes, we may verify your information with accredited third-party identity verification providers. All such partners are bound by strict confidentiality agreements.

UWin Casino uses the personal data it collects solely for legitimate, clearly defined purposes. The following are the primary purposes for which your data is used:

• Account Management: Creating and maintaining your account, verifying your identity, processing logins, and ensuring account security.
• Financial Transaction Processing: Processing deposits via eWallet and Malaysia FPX, paying winnings to your local bank account, and maintaining accurate MYR transaction records.
• KYC Compliance & Fraud Prevention: To verify age (18 and above), prevent duplicate account registrations, detect suspicious activity, and comply with applicable legal requirements.
• Platform Improvements: Analysing usage patterns to continuously improve the design, speed, and features of the UWin Casino platform.
• Service Communications: Sending important notifications about your account, changes to terms, transaction confirmations, and critical security information.
• Customer Support: Enabling our customer support team to assist you effectively when you reach out to us in Bahasa Malaysia.
• Personalising Your Experience: Delivering relevant content, promotions, and odds based on your sporting preferences — such as Malaysia Super League football, badminton, or MLBB esports.
• Responsible Gaming: Monitoring betting patterns to identify early warning signs of problem gambling and provide appropriate support.

We will not use your data for unrelated purposes without obtaining your consent first.

UWin Casino does not sell or rent your personal data to any party for commercial purposes. However, in the course of operating the platform, we may share limited data in the following circumstances:

• Payment Service Providers: Only the minimum data required is shared with Malaysian payment providers such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX-participating banks, solely for the purpose of processing your financial transactions.
• Game Software Providers: Usernames and session data may be shared with licensed Live Casino or slots game providers solely to ensure a seamless gaming experience.
• Technical Service Providers: Companies that provide technical infrastructure to UWin Casino — including cloud computing, analytics, and cybersecurity services — are all bound by strict confidentiality agreements.
• Legal Authorities: We may be required to disclose personal data when ordered to do so by a Malaysian court, law enforcement agency, or regulatory body with lawful jurisdiction.
• Fraud Prevention & Security: Information may be shared with relevant parties in the industry to detect and prevent fraud, money laundering, or other unlawful activities.

UWin Casino makes serious investments in security infrastructure to ensure the personal data of all Malaysian members is protected to the highest standard.

Technical Security Measures:

• 256-bit SSL/TLS encryption for all data communications between your device and our servers
• Encryption of sensitive data in our databases — including financial information and verification documents
• Two-factor authentication (2FA) for member accounts and all our internal systems
• Round-the-clock security monitoring with automated intrusion detection systems
• Regular security assessments (penetration testing) conducted by independent cybersecurity experts
• Regular secure, encrypted data backups

Data Retention Period: We retain your personal data for as long as your account remains active or as long as it is needed to provide services to you. Following account closure, certain data is retained for a minimum of 7 years in accordance with Malaysia's financial and tax regulatory requirements. After this period, data is securely deleted or anonymised.

Storage Location: Malaysian member data is stored on servers located within the Asia Pacific region. Any cross-border data transfers are carried out with adequate safeguards in line with Malaysia's PDPA.

UWin Casino uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

• Essential Cookies (Mandatory): Required for the platform to function properly — including maintaining your login session, remembering language settings, and enabling basic security features. These cookies cannot be disabled.
• Functional Cookies: Allows the platform to remember your preferences, such as favourite sports (EPL football, badminton, or e-sports), preferred odds display format, and other personal settings.
• Analytics Cookies: Helping us understand how members use the platform — which pages are visited most frequently, how long users spend on each page, and where technical issues arise. This data is used to drive overall platform improvements.
• Security Cookies: Used to detect suspicious activity, prevent unauthorised access, and protect your account from security threats.

Managing Cookies: You can manage or disable non-essential cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some features on UWin Casino's platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by UWin Casino:

To exercise any of the above rights, submit a written request to support@uwincasino.app with the subject line "PDPA Data Rights Request". We will respond within 21 working days as required under Malaysia's PDPA.

UWin Casino is a platform that for individuals aged 18 and above only. We do not knowingly collect, store, or process personal data from individuals under the age of 18.

We conduct an age verification process during registration and may request a MyKad document to confirm age. Should we discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

Parents or guardians who believe their underage child may have registered on our platform are urged to contact us immediately at support@uwincasino.app.

UWin Casino reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements to how we protect member data.

When significant amendments are made, we will notify members via:

• In-platform notification when you log in to UWin Casino
• Email to the address registered to your account
• Prominent notice on the website homepage

The "Updated" date at the top of this document reflects the date of the most recent amendment. Your continued use of the UWin Casino platform after any amendment takes effect constitutes acceptance of the updated policy. If you do not agree with any amendment, you have the right to close your account and withdraw your balance.

If you have any questions, concerns, or complaints regarding how UWin Casino handles your personal data, we encourage you to contact us directly. Our team is available to assist in Bahasa Malaysia.

If you are not satisfied with our response to a privacy-related complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP), the regulatory body under PDPA 2010.