kwin8 Official Privacy Policy

Privacy Policy kwin8 – Your Data is Protected, Your Privacy is Respected

Kwin8 understands that your personal information is a trust you place in us. This document clearly explains how we collect, use, protect, and respect your data in accordance with applicable Malaysian law.

Last updated: 1 January 2026
kwin8's Privacy Commitment
Full compliance with Malaysia's PDPA 2010
256-bit SSL encryption for all data
Data is not sold to third parties
Right to access, correct & delete data
You may withdraw consent at any time
256-bit SSL Data Encryption
PDPA Full Compliance 2010
0 Data Sold to Advertisers
24/7 Privacy Request Support

Kwin8's Six Data Protection Principles

The kwin8 Privacy Policy is built on six core principles that govern how we handle every piece of information you entrust to us.

Limited & Purposeful Collection

Kwin8 only collects information that is genuinely necessary to operate our services. We do not collect excessive data or information unrelated to account operations, identity verification or payment processing for Malaysian players.

Bank-Grade Technical Protection

All data stored and transmitted through the kwin8 platform is protected by the same 256-bit SSL encryption used by Malaysian financial institutions such as Maybank and CIMB. Our servers are secured by multi-layered firewalls and a 24/7 intrusion detection system.

Player Rights Come First

As a kwin8 member, you have the full right to access, correct, transfer, or request deletion of your personal data at any time. kwin8 will process every request within 14 business days in accordance with Malaysia's PDPA 2010.

Strict Controls over Third Parties

Kwin8 does not sell, distribute, or disclose your data to any third party for marketing purposes. Partner companies that require access to your data (such as payment providers Touch 'n Go and DuitNow) are required to adhere to the same security standards as kwin8.

Malaysia Legal Compliance

Kwin8's Privacy Policy is drafted and updated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We also comply with Anti-Money Laundering (AML) requirements and Know Your Customer (KYC) requirements set by the relevant regulatory bodies.

Full Transparency in Everything We Do

Kwin8 is committed to keeping you fully informed about how your data is used, in clear language that any Malaysian player can understand — not confusing legal jargon. If anything is unclear, our team is ready to explain.

1. Introduction

This Privacy Policy explains how kwin8 ("we", "Platform" or "kwin8") collects, uses, stores, discloses, and protects your personal information when you use the website, application, or any services provided by kwin8.

This document has been drafted in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and applies to all users of the kwin8 platform who are located in Malaysia or accessing the platform from Malaysia.

By registering or using kwin8's services, you are considered to have read and agreed to this Privacy Policy. If you do not agree, please discontinue using the platform immediately.

Kwin8 is the data controller responsible for your personal information. Any enquiries regarding this policy may be directed to our privacy team at support@kwin8.best.


2. Personal Data We Collect

Kwin8 collects the following categories of information from members and users of our platform:

Information You Provide Directly:

  • Full name as stated on your MyKad or Malaysian passport.
  • Date of birth for age verification purposes (18 years and above).
  • The active email address you registered with.
  • A valid Malaysian phone number.
  • Residential address in Malaysia.
  • Copies of identity verification documents (MyKad, passport) submitted during the KYC process.
  • Payment account information (DuitNow account number, Touch 'n Go eWallet ID, GrabPay, Boost, ShopeePay, or FPX account details such as Maybank2u or CIMB Clicks).

Automatically Collected Information:

  • The IP address of your device when accessing the kwin8 platform.
  • Device type, operating system, and web browser version in use.
  • Access log data including timestamps, pages visited, and actions taken.
  • General geolocation data based on IP address (state within Malaysia).
  • Gameplay usage data including betting history, winnings, and transactions.
  • Cookie information and device identifiers.
kwin8 does not directly collect credit card numbers or sensitive payment information. All financial transactions are processed through licensed, secure payment gateways.

3. How We Use Your Data

Kwin8 uses your personal information solely for legitimate and necessary purposes, including:

  • Account Management: Creating, verifying, and managing your kwin8 account, including the mandatory KYC process.
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay or FPX, as well as processing your winnings withdrawals.
  • Legal Compliance: To fulfil AML (Anti-Money Laundering), CFT (Counter-Financing of Terrorism), and other applicable legal compliance requirements in Malaysia.
  • Platform Security: Detecting and preventing fraud, unauthorized access, account misuse, and other illicit activities on the kwin8 platform.
  • Customer Support: Processing enquiries, complaints, and support requests you submit to the kwin8 team.
  • Service Communications: Sending important notifications related to your account, transactions, terms updates, or policy changes that affect you.
  • Product Improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve the player experience on the kwin8 platform.
  • Marketing (with Consent): Sending promotional offers, bonuses and kwin8 product updates if you have given consent to receive marketing communications.
kwin8 does not use your data to build profiles that could be used against you, does not engage in data selling, and does not use your information for any purpose beyond the scope stated above.

4. Disclosure of Data to Third Parties

Kwin8 does not sell or rent your personal data to any third party for commercial or marketing purposes. Your data may only be disclosed in the following limited circumstances:

  • Payment Providers: Required transaction information is shared with approved payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX-participating banks to process your deposits and withdrawals.
  • Game Provider: Required gameplay session information is shared with game software providers to operate casino games, slots, and Sports Betting on the kwin8 platform.
  • KYC Verification Services: Your identity document may be reviewed through an authorised third-party identity verification service provider to fulfil KYC requirements.
  • Malaysian Authorities: kwin8 will disclose required information to Malaysian authorities (including the PDRM, Bank Negara Malaysia, or the Companies Commission of Malaysia) when mandated by law, court order, or official investigation.
  • Analytics Services: Anonymised usage data may be shared with authorised third-party analytics providers to understand overall kwin8 platform usage patterns for product improvement purposes.

All third parties that receive your data are required to uphold security standards equivalent to or higher than those of kwin8, and to use that data solely for the purposes authorised.


5. Data Security Measures

Kwin8 implements multiple layers of technical and organizational security measures to protect your personal data against unauthorized access, loss, misuse, disclosure, or alteration:

  • 256-bit SSL Encryption: All data transmitted between your device and kwin8 servers is encrypted using the latest TLS/SSL protocols.
  • Data-at-Rest Encryption: Sensitive data stored in kwin8 databases is encrypted using industry-standard encryption algorithms.
  • Internal Access Controls: Access to players' personal data is granted only to kwin8 staff who require it to perform their duties, governed by role-based access controls (RBAC).
  • Two-Factor Authentication: kwin8 internal systems that store sensitive data are protected by multi-factor authentication.
  • Firewall & IDS: kwin8's server infrastructure is protected by multi-layered firewalls and an intrusion detection system (IDS) operating 24/7.
  • Regular Security Audits: kwin8 conducts regular security audits and penetration testing carried out by independent internationally certified parties.
  • Incident Response Plan: kwin8 has a comprehensive security incident response plan to ensure that any data breach is handled swiftly and that you are notified within the timeframe required by law.
While kwin8 takes all reasonable steps to protect your data, no security system is 100% impenetrable. You are also responsible for keeping your kwin8 account password and login credentials secure.

6. Cookies & Tracking Technologies

The kwin8 platform uses cookies and similar tracking technologies to deliver a better experience for users. The following are the types of cookies we use:

  • Essential Cookies: Required for the core functionality of the kwin8 platform, including login session authentication, security, and transaction integrity. These cookies cannot be disabled.
  • Performance Cookies: Collecting information about how you use the kwin8 platform (pages visited, time spent on each page) to help us improve the user experience. All data is collected in aggregate form and does not identify individuals.
  • Functional Cookies: Saving your preferences such as language selection, display settings, and session information to ensure a consistent experience every time you log in to kwin8.
  • Analytics Cookies: Used by authorised third-party analytics tools to understand overall kwin8 platform usage patterns for product improvement purposes.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the kwin8 platform, including your ability to log in and carry out transactions.


7. Your Rights Under PDPA 2010

As a data subject under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have the following rights regarding your personal data held by kwin8:

  • Right of Access: Request a copy of the personal information we hold about you.
  • Right to Rectification: Request the correction of any inaccurate or incomplete personal information we hold about you.
  • Right to Erasure: Request the deletion of your personal data in certain circumstances (for example, where the data is no longer needed for the purpose for which it was originally collected).
  • Right to Withdraw Consent: Withdrawing consent you have previously given for data processing for specific purposes such as marketing communications, without affecting the validity of any processing carried out prior to the withdrawal.
  • Right to Object: Objecting to the processing of your data for direct marketing purposes.
  • Right to Data Portability: Requesting your personal data in a structured, machine-readable format for transfer to another party.

To exercise any of the rights above, please contact the kwin8 privacy team at support@kwin8.best stating your request clearly. We will process your request within 14 business days from the date the request is received.

There are certain situations where kwin8 may need to retain your data even after a deletion request — for example, to comply with legal obligations, resolve disputes, or enforce agreements. In such cases, we will inform you of the reason for the retention.

8. Data Retention & Deletion

Kwin8 retains your personal data for as long as it is needed for the purpose it was collected, or for as long as your kwin8 account remains active. The following are our data retention guidelines:

  • Active Account Data: Retained for as long as your account is active and for 7 years after account closure for legal compliance and audit purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and AML legal requirements.
  • KYC Documents: Retained for 5 years from the date of last verification or 7 years after account closure, whichever is longer, in compliance with Malaysian legal requirements.
  • Security Logs: Retained for 12 months for security investigation and fraud detection purposes.
  • Customer Support Communications: Retained for 3 years for reference and service improvement purposes.
  • Cookie Data: Session cookies expire when you close your browser. Persistent cookies expire after a set period, typically between 30 days and 2 years depending on the cookie type.

Once the retention period has lapsed, your data will be securely deleted or anonymised so that it can no longer be used to identify you.


9. International Data Transfers

In operating kwin8's global platform, there is a possibility that your personal data may be transferred to or processed in countries outside Malaysia. This may occur in the following contexts:

  • Use of cloud servers located across multiple locations to ensure the availability and performance of the kwin8 platform.
  • Use of third-party game provider services or technologies that operate across multiple countries.
  • Technical support or operations carried out by the kwin8 team from different locations.

In all cases of international data transfers, kwin8 ensures that your data receives a level of protection equivalent to that provided in Malaysia, whether through appropriate contractual agreements or other recognised safeguard mechanisms.

Any transfer of data outside the country is carried out with safeguards in place to ensure a level of security and privacy equivalent to Malaysian standards.

10. Child Protection

The kwin8 platform is strictly for users aged 18 years and above. kwin8 does not knowingly collect, store, or process any personal information from individuals under the age of 18.

If we find that we have inadvertently collected information from underage minors, we will take immediate steps to:

  • Closing the relevant account immediately.
  • Promptly deleting all associated personal data.
  • Notifying the relevant parties where required.

Parents or guardians who believe a minor under their care may have registered on kwin8 using a false identity are urged to contact our team immediately at support@kwin8.best.


11. Changes to the Privacy Policy

Kwin8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or the services we offer.

When material changes are made to this Privacy Policy, kwin8 will:

  • Updating the "Last Updated" date at the top of this document.
  • Displaying a prominent change notice on the kwin8 platform homepage.
  • Sending notifications via your registered email address for changes that materially affect your privacy rights.

We encourage you to review this Privacy Policy periodically. Your continued use of the kwin8 platform after any changes are published will be considered acceptance of the updated terms.


12. How to Contact Us

For any enquiries, requests, or complaints regarding the kwin8 Privacy Policy or the processing of your personal data, please contact us via:

  • Privacy Email: support@kwin8.best (please include "Privacy Enquiry" in the email subject line)
  • Live Chat: Available 24/7 on the kwin8 platform — select the "Privacy & Data" category
  • Response Time: Within 2 hours for live chat; within 14 business days for formal data rights requests

If you are not satisfied with our response to your privacy complaint, you have the right to submit a complaint to Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital Malaysia.

Your Privacy Rights as a kwin8 Member

Under Malaysia's PDPA 2010, you have six fundamental rights that kwin8 is fully committed to upholding.

1
Right to Know

You have the right to know what data we collect, why it is collected, and how it is used. This Privacy Policy addresses those rights in full.

2
Right to Access

Request a copy of all personal information we hold about you. Submit your request to support@kwin8.best and we will respond within 14 business days.

3
Right to Rectification

If any of your personal information in the kwin8 system is inaccurate or out of date, you may request a correction at any time through your account settings or by contacting the support team.

4
Right to Erasure

Under certain circumstances, you may request the deletion of your personal data. This does not apply where kwin8 is required to retain that data under Malaysian law.

5
Right to Object

You have the right to object to your data being used for direct marketing purposes. You can unsubscribe from kwin8 marketing communications at any time via the link in our emails.

6
Right to Data Portability

Request your personal data in a machine-readable format for transfer to another platform if needed. Contact our team to initiate this process.

Kwin8 Platform Technical Security

Kwin8 takes its technical security infrastructure seriously to ensure your personal and financial data remains protected at all times. The following are some of the key security layers safeguarding the kwin8 platform:

SSL 256-bit TLS Data Transmission Encryption
Multi-Layer Firewall Network Perimeter Protection
24/7 Monitoring Threat Detection System
Internal 2FA Staff Access Verification
Independent Audit Regular Penetration Testing
Stored Data Encryption AES-256 for Sensitive Data

All these security measures are regularly updated in line with the latest cybersecurity threats and international industry standards. kwin8 also maintains a comprehensive incident response plan to ensure any data breach is resolved promptly and members are notified within the timeframe required by law.

Kwin8 Data Usage Summary

Purpose of Use Legal Basis Status
Account Management Contract / PDPA Required
Payment Processing Contract / Compliance Required
KYC / AML Verification Legal Obligations Mandatory
Security & Fraud Prevention Legitimate Interest Required
Customer Support Contract / Legitimate Interest Required
Platform Analytics (Aggregate) Legitimate Interest Limited
Marketing Communications Your Consent Conditional
Sale of Data to Advertisers — Prohibited
Profiling for Third Parties — Prohibited

Why Does Data Privacy Matter on an Online Gambling Platform?

If you have ever registered with any online platform before — whether for shopping, banking or entertainment — you are already familiar with the concept of providing personal data as a condition of using a service. However, for an online gambling platform like kwin8, the sensitivity of personal data is considerably higher, as it involves a combination of identity information, financial details and gaming activity records that are highly private in nature.

At kwin8, we fully understand why this matters to Malaysian players. Many have concerns — "If I register at an online casino, will my information be leaked? Will others know I play here?" Our honest answer is this: we take every aspect of data security seriously, and we invest in infrastructure on par with Malaysian banks to ensure your data remains safe and private at all times.

One thing that is frequently misunderstood is the KYC, or Know Your Customer, requirement. Many new players feel uncomfortable when kwin8 asks for a copy of their MyKad or passport. That concern is completely understandable, and we respect it. KYC is not about "spying" on you — it is an industry-wide requirement for responsible gambling platforms worldwide, including in Malaysia, to prevent identity fraud, money laundering, and underage access. All documents you submit to kwin8 are stored on encrypted servers held to the same standards used to protect banking data.

Regarding payment methods, kwin8 has chosen to partner exclusively with local Malaysian payment providers — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX — partly for security reasons. These platforms already have robust security infrastructure in place and are regulated by Bank Negara Malaysia. When you make a deposit or withdrawal through these channels, processing takes place via established and trusted networks, not through obscure or unregulated channels.

Another point we want to make absolutely clear is our approach to marketing communications. kwin8 may send emails or notifications about bonus offers, new games, or periodic promotions — but only if you have given your consent at registration or at a later date. A single click on the "unsubscribe" link is all it takes for us to stop all marketing communications to you immediately — no questions asked, no complicated process.

Kwin8 also takes active steps to educate our internal staff on the importance of data privacy. Every staff member with access to player data undergoes comprehensive data protection training and is bound by strict confidentiality agreements. Access to player data is granted on a "need-to-know" basis only — meaning only staff who genuinely require data access to carry out their work are granted that access.

Finally, we want to make clear that kwin8's Privacy Policy is not merely a document written to satisfy legal requirements. It reflects kwin8's core values — that every Malaysian player who entrusts us with their personal information deserves the strongest protection, honest communication, and full control over their own data. If at any time you have concerns or questions about how kwin8 handles your data, please do not hesitate to reach out to our team — we are here to answer openly and transparently.

FAQ – kwin8 Privacy Policy

kwin8 does not sell, rent, or share your personal data with any party for marketing or commercial purposes. Your data is only shared in three limited situations: (1) with payment providers such as Touch 'n Go, DuitNow, GrabPay and others to process your transactions; (2) with accredited KYC verification providers for legal compliance requirements; and (3) with Malaysian authorities when required by law or court order. In all cases, third parties are required to comply with strict security standards.

To request a copy of your personal data, send an email to support@kwin8.best with the subject line "Data Access Request" and include your full name and registered email address. The kwin8 privacy team will first verify your identity before processing the request, and we will deliver the requested data within 14 business days from the date identity verification is completed. Data will be provided in a secure, readable format.

After you close your kwin8 account, your account records and core personal data are retained for 7 years in accordance with Malaysia's financial and AML legal requirements. Financial transaction records are kept for a minimum of 7 years. KYC documents are retained for 5 years from the last verification or 7 years from account closure, whichever is longer. Once the statutory retention period expires, your data will be securely deleted or anonymised.

Yes, you can stop receiving marketing and promotional emails from kwin8 at any time by clicking the "Unsubscribe" link at the bottom of any marketing email you receive from us. You can also update your communication preferences from your kwin8 account settings or by contacting our support team at support@kwin8.best. Withdrawing your marketing consent will not affect essential service communications such as transaction notifications and account updates.

kwin8 maintains a comprehensive security incident response plan. In the event of a data breach affecting your personal information, kwin8 is committed to: (1) identifying and containing the breach promptly; (2) assessing the scope and impact of the breach; (3) notifying the relevant authorities within the timeframe prescribed by law; and (4) informing you personally if the breach is likely to pose a risk to your rights and freedoms. We will provide details on the type of data involved, the likely consequences, and the steps we have taken.

kwin8 does not use your personal data to build profiles for targeted advertising on external platforms or to sell to advertising networks. Your gameplay activity data may be used internally and solely to personalize offers and promotions within the kwin8 platform itself — for example, suggesting games you may enjoy based on your play history. This is carried out exclusively within the kwin8 platform, and your data is never shared with any third-party advertising networks.

Kwin8's Privacy Commitment to Malaysian Players

All personal information you provide to kwin8 is fully protected under Personal Data Protection Act 2010 (PDPA) Malaysia. kwin8 never sells, shares, or discloses your data to any third party for marketing purposes without your explicit consent. You have the full right to access, correct, or request deletion of your data at any time.

For enquiries related to data privacy or to exercise your PDPA rights, contact the kwin8 privacy team at support@kwin8.best. We will respond within 14 business days.

Read kwin8's Full Terms & Conditions
YOUR DATA IS SAFE WITH kwin8

Play at kwin8 with Complete Confidence

Your privacy is protected, your data is secure, and your rights are respected. Register a kwin8 account today and enjoy over 3,200 online casino games in Malaysia with complete peace of mind.

Malaysia PDPA 2010 Compliance 256-bit SSL Encryption Data is not sold to any party For players aged 18 and above
Bahasa Melayu