Personal Data Protection

Privacy Policy iwinapp – Your Information Is Safe With Us

Iwinapp takes member privacy seriously. This document transparently explains how we collect, use, store, and protect your personal data as a user of our platform in Malaysia.

Last updated: 1 January 2026
Encryption: SSL 256-bit active
Compliance: Malaysia PDPA

Six Principles iwinapp Data Protection

Every data-related decision we make is guided by the following principles to ensure your privacy rights are always protected.

Minimum Collection

Iwinapp only collects data that is strictly necessary to provide its services. No excess data is collected without a clear and legitimate purpose.

Minimal Data

End-to-End Encryption

All data transmitted between your device and iwinapp servers is protected with 256-bit SSL encryption. Stored data is also encrypted at the database level.

SSL 256-bit

Your Controls

You have the right to access, correct, or request deletion of your personal data. The iwinapp privacy team processes requests within 14 business days.

Your Full Rights

No Data Sales

Iwinapp never sells, rents, or trades member personal data to third parties for marketing or commercial purposes.

0 Data Sales

PDPA Compliance

The iwinapp privacy policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data privacy.

PDPA 2010

Breach Notification

In the event of any security incident involving your data, iwinapp will notify you within 72 hours via email or account notification.

72-Hour Notification

Personal Data We Collect

The table below outlines the types of data collected, their purpose of use, and their status within the iwinapp system.

Data Type Purpose of Use Retention Period Status
Full name & date of birth KYC identity verification, age eligibility Duration of active account + 5 years Mandatory
Phone number & email Account verification, communications, security notifications Duration of active account + 2 years Mandatory
Bank account number / wallet Deposit and withdrawal processing Duration of active account + 7 years Mandatory
KYC Documents (MyKad/Passport) Identity verification for first withdrawal Duration of active account + 7 years Mandatory
Transaction history Financial records, fraud control, auditing 7 years after last transaction Automatic
IP address & location data Account security, fraud detection, geoblock 90 rolling days Automatic
Device & browser data User experience optimisation, technical diagnostics 30 rolling days Automatic
Preferences & account settings Personalizing your platform experience Until deleted by user Options

Section 1

Privacy Policy Introduction & Scope

This Privacy Policy is published by iwinapp ("we", "Platform") and applies to all users who access or use the iwinapp platform via the website at iwinapp.vin or through the official iwinapp mobile app.

We understand that your trust is the foundation of our relationship. That is why we are committed to managing your personal data responsibly, transparently, and securely. Every practice described in this document reflects how we actually handle your information – not just empty promises.

By using the iwinapp platform, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us for further enquiries.

Section 2

Types of Personal Data We Collect

Iwinapp collects data across three main categories:

A. Data You Provide Directly

  • Registration information: full name, date of birth, phone number, and email address.
  • Identity verification documents for the KYC process, such as a valid MyKad or passport.
  • Financial information including bank account numbers or digital wallet details for deposit and withdrawal purposes.
  • Any communications you send to the iwinapp support team.

B. Data Collected Automatically

  • IP address, device type, operating system, and web browser version used.
  • Platform activity logs including login times, games played, and transactions.
  • App performance data for diagnostic and technical improvement purposes.

C. Data from Third Parties

  • Verification information from payment providers such as DuitNow or FPX to confirm transactions.
  • Identity verification data from third-party KYC services used by iwinapp.
Section 3

Data Usage Purpose and Method

Personal data collected by iwinapp is used for the following purposes:

  • Account management: Creating, verifying, and maintaining your member account on the platform.
  • Payment processing: Processing deposits and withdrawals securely via your chosen payment method.
  • Fraud prevention: Identifying and preventing fraudulent activity, money laundering, and unauthorised access.
  • Legal compliance: Fulfilling legal obligations under Malaysia's PDPA and applicable financial regulations.
  • Service communications: Sending important notifications related to your account, security, and transactions.
  • Platform improvements: Analysing usage patterns to improve user experience and technical performance.
  • Customer support: Providing accurate and effective assistance when you contact the iwinapp support team.

Iwinapp never use your data for third-party commercial profiling, targeted advertising on other platforms, or any purpose unrelated to delivering iwinapp's services to you.

Section 4

Data Sharing with Third Parties

Iwinapp does not sell, rent, or trade your personal data. However, in certain circumstances, data may be shared with selected third parties:

  • Payment providers: Required transaction information is shared with DuitNow, FPX, Touch 'n Go, and other payment providers solely to process your payments.
  • KYC services: Identity documents are shared with audited third-party identity verification providers to meet compliance requirements.
  • Technical infrastructure: Cloud service providers that store and process our data are bound by strict confidentiality agreements.
  • Legal obligations: iwinapp will disclose data if required by law, court order, or a competent authority.

All third parties working with iwinapp are bound by strict data protection agreements. They are only permitted to use your data for the specific purposes defined.

Section 5

Data Security Measures

Iwinapp implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, loss, or misuse:

  • Data encryption in transit: All communications between your device and iwinapp servers are secured with TLS 1.3 and 256-bit SSL certificates.
  • Static data encryption: Sensitive data stored in the iwinapp database is encrypted using AES-256 standards.
  • Internal access controls: Only iwinapp staff with legitimate business needs are permitted to access member personal data.
  • Two-factor authentication: iwinapp's internal administration system is protected with multi-factor authentication to prevent unauthorized access.
  • Periodic audits: iwinapp conducts regular security audits and penetration testing to identify and address vulnerabilities.
  • Continuous monitoring: A 24/7 threat monitoring system tracks any suspicious activity on the platform.
Section 6

Cookie & Tracking Technology Policy

Iwinapp uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly.

Types of cookies used:

  • Essential cookies: Required for core platform functionality such as login sessions and security. These cookies cannot be disabled.
  • Performance cookies: Collecting anonymised information on how users interact with the platform for improvement purposes.
  • Preference cookies: Saving your personal settings such as language, odds format, and display preferences.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the iwinapp platform.

Section 7

Your Rights Regarding Personal Data

As an iwinapp member, you have the following rights under Malaysia's PDPA regarding your personal data:

Right of Access

Request a copy of the personal data we hold about you at any time.

Right to Rectification

Request correction of inaccurate or incomplete data in your account.

Right to Erasure

Request deletion of your data when there is no longer a legal requirement to retain it.

Right to Object

Object to the processing of your data for specific purposes, including marketing communications.

Right to Portability

Request your data in a machine-readable format for portability.

Right to Restrict Processing

Request restriction of your data processing while a dispute investigation is ongoing.

To exercise any of the above rights, contact the iwinapp privacy team via in-platform customer support. Requests will be processed within 14 business days.

Section 8

Children's Data Protection

Iwinapp is a platform exclusively for users aged 18 and above. We do not intentionally collect or process personal data of underage children.

If we determine that a child's data has been collected without proper age verification, we will take immediate action to delete that data and close the associated account. Parents or guardians who become aware that their child has registered an iwinapp account are encouraged to contact our support team immediately.

Section 9

Cross-Border Data Transfer

In the course of its operations, iwinapp may process or store data on servers located outside Malaysia. All cross-border data transfers are conducted with adequate safeguards in place, including:

  • Data transfer agreements compliant with Malaysia's PDPA standards.
  • Use of registered cloud infrastructure providers that comply with international security standards.
  • Data is encrypted both in transit and at rest across all server locations.

Your data will not be transferred to countries without an equivalent level of data protection without appropriate consent.

Section 10

Amendments to Privacy Policy

Iwinapp reserves the right to update or amend this Privacy Policy at any time. Any material changes will be communicated to members via:

  • In-platform iwinapp notification at least 14 days before changes take effect.
  • An email will be sent to the address registered in your account for any changes that directly affect your privacy rights.

Continued use of the iwinapp platform after the effective date of any changes constitutes acceptance of the amended Privacy Policy. The date of the last update is always displayed at the top of this page.

Section 11

How to Contact the iwinapp Privacy Team

For any inquiries, complaints, or requests regarding your privacy and personal data, please contact the iwinapp privacy team through the following channels:

  • In-platform live chat: The fastest method – responses are typically within 5 minutes during peak hours.
  • Email: Contact us at [email protected] with the subject line "Privacy Inquiry" for a response within 2 business days.

For issues related to platform terms of use, please refer to Terms and Conditions us. For information on responsible gaming, visit the Responsible Gaming.

Iwinapp is committed to providing clear and helpful responses to every privacy inquiry. All complaints will be thoroughly investigated and you will be notified within the stipulated timeframe.


Bet with Confidence at iwinapp

Your privacy and data security are our top priority. Register today and enjoy a transparent, secure platform trusted by players across Malaysia.

SSL 256-bit PDPA Compliant No Data Sales
Bahasa Melayu