Gowin login Privacy Policy –
We Safeguard Your Data as a Trust

Gowin login ("we", "Platform" or "GoWin") is committed to protecting the privacy of every individual who uses our platform. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information when you use the gowin login website, mobile app, or any other services we offer.

This document is drafted in accordance with the provisions of the Personal Data Protection Act 2010 (PDPA) Malaysia and best practices of the online gambling industry. By using the gowin login platform, you agree to the terms of this Privacy Policy in its entirety.

If you have any questions regarding this Privacy Policy, you may contact our team through the support channels provided. We always strive to respond to every enquiry within 2 business days.

We collect various types of information depending on how you interact with the gowin login platform. Generally, the data collected falls into three main categories:

A. Information You Provide Directly

• Full name as per official identification document.
• Date of birth and gender.
• Email address and mobile phone number.
• Residential address in Malaysia.
• Bank account or digital wallet details for transaction processing.
• Copies of identity verification documents (MyKad, passport) for the KYC process.

B. Information Collected Automatically

• IP address and general location data.
• Device type, operating system, and web browser used.
• Platform usage data — pages visited, session duration, and gaming activity.
• Transaction logs including deposits, withdrawals, and wagering history.
• Cookies and similar tracking technologies.

C. Information From Third Parties

• Identity verification data from certified third-party KYC service providers.
• Fraud and risk information from anti-fraud service providers.
• Transaction data from payment processors partnered with gowin login.

Gowin login collects and processes your personal data only for legitimate and necessary purposes. We do not process data beyond what is required to operate our services. The following are the primary purposes for which your data is used:

• Account Management — Registers, verifies and manages your gaming account on the gowin login platform.
• Identity Verification (KYC) — Ensures you meet the minimum age requirement (21 years and above) and verifies your identity to comply with anti-money laundering (AML) legal requirements.
• Transaction Processing — Processes deposits, withdrawals and all financial transactions securely and accurately.
• Platform Security — Detects and prevents fraud, multi-account usage, system abuse and suspicious activity.
• Customer Support — Provides effective assistance when you contact the gowin login support team.
• Responsible Gaming — Monitors gameplay patterns to identify signs of problem gambling and provide appropriate assistance.
• Service Communications — Sends important notifications relating to your account, transactions, policy updates and security information.
• Marketing (with consent) — Sends promotional offers, bonuses and marketing campaigns — only to members who have given their consent.
• Legal Compliance — Fulfils legal obligations under PDPA, AML regulations and directives from the relevant authorities.

Gowin login implements a range of technical and operational security measures to ensure your personal data is stored securely and protected against unauthorised access, loss, misuse, or accidental disclosure.

Technical Security Measures:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
• Encryption at rest for all sensitive information.
• Role-based access control (RBAC) — only authorised staff may access specific data.
• Two-Factor Authentication (2FA) is mandatory for all internal system access.
• Vulnerability scanning and penetration testing are conducted on a regular basis.
• Intrusion detection system (IDS) operating 24/7.

Data Retention Period:

• Active account data is retained for the duration the account remains active, plus 5 years after account closure.
• Financial transaction records are kept for a minimum of 7 years to comply with legal requirements.
• Customer support communication logs are retained for 2 years.
• Cookie data expires according to cookie type — please refer to Section 6.

While we take all reasonable steps to protect your data, no security system is entirely perfect. In the event of any data breach involving your personal information, gowin login will notify you and the relevant authorities within the timeframe stipulated by law.

Gowin login does not sell, rent, or trade your personal information. However, there are certain situations in which your data may be shared with trusted parties:

• Service Providers — Payment processing partners (FPX, Touch 'n Go, GrabPay, Boost), KYC service providers, cloud infrastructure providers and IT service providers that help us operate the platform.
• Game Business Partners — Gaming software providers such as live casino providers and slot developers that require certain session data to run games properly.
• Authorities & Law Enforcement — When required by Malaysian law, a court, or the relevant regulatory authority.
• Fraud Prevention — With integrated fraud prevention agencies and industry databases to detect and prevent fraudulent activity.
• Business Transfer — In the event of a company merger, acquisition or asset sale, user data may be transferred as part of that transaction, subject to notice being given to users.

Gowin login does not transfer your personal data outside Malaysia unless the recipient is located in a country or territory that provides a level of data protection equivalent to or higher than Malaysia's PDPA.

Gowin login uses cookies and similar tracking technologies to enhance your experience on our platform, maintain session security, and help us understand how users interact with our website.

Types of Cookies We Use:

• Essential Cookies (Required) — Required for core platform functions such as login, session management and security. Cannot be disabled.
• Functional Cookies — Remembers your preferences such as language, display theme and other settings to provide a more personalised experience.
• Analytics Cookies — Helps us understand how users navigate the platform — most visited pages, time spent, and more. This data is collected in aggregate and without personal identification.
• Marketing Cookies — Used to display promotions and advertisements relevant to your interests. These cookies are only activated with your consent.

You can manage cookie settings through your web browser preferences. Please note that disabling essential cookies may affect the functionality and security of your gowin login account.

Under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have certain rights regarding your personal data held by gowin login. We respect and will fulfil these rights within a reasonable timeframe.

• Right of Access — You have the right to request a copy of the personal information we hold about you. This request will be processed within 21 business days.
• Right to Rectification — If any information we hold is inaccurate or outdated, you have the right to request a correction.
• Right to Erasure — You may request the deletion of your personal data under certain circumstances, subject to our legal obligations to retain specific records.
• Right to Restrict Processing — You may request that we restrict how we use your data in certain situations.
• Right to Object to Marketing — You may object to the use of your data for direct marketing purposes at any time.
• Right to Data Portability — You may request your data in a machine-readable format for transfer to another service.

If you believe that gowin login has failed to uphold your privacy rights, you have the right to file a complaint with Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital.

Gowin login is a platform exclusively for adults. We do not accept registrations from individuals under the age of 21 and do not knowingly collect personal data from children.

All users are required to verify their age during the registration and KYC process. Should gowin login discover that personal data of a minor has been collected inadvertently, we will take immediate steps to delete the relevant data and close the account involved.

Gowin login reserves the right to amend or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. All amendments take effect immediately upon publication on this page.

For amendments considered significant — such as changes to how we use your data or the types of data collected — gowin login will endeavour to provide advance notice via email or in-platform notification at least 14 days before the changes take effect.

The "Updated" date at the top of this page always reflects the latest version of the Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data by gowin login, please contact us through the following channels:

• Live Chat — Available 24/7 via the chat icon at the bottom right corner of the platform.
• Email — [email protected] (response within 2 business days).
• Help Centre — Visit the page FAQ for answers to frequently asked questions.

For official requests regarding data rights under the PDPA, please include "PDPA Privacy Request" in your email subject line or chat message so we can prioritise your request accordingly.