Uwin Privacy Policy — Data Protection
Malaysian Member Privacy

This Privacy Policy is published by uwin ("we", "Platform", or "company") and applies to all users who access or use the uwin platform via the website uwin.ml or our official mobile app. It covers all activities involving the collection, processing, storage, and transfer of members' personal data.

As an online casino platform serving users in Malaysia, uwin takes seriously the trust placed in us by every member when they share their personal information with us. We believe transparency is the foundation of a healthy relationship between a platform and its members.

This policy should be read together with Terms and Conditions and Responsible Gaming Policy us. Together, these three documents form a comprehensive protection framework for every uwin member.

Uwin only collects data that is genuinely necessary to provide members with a secure, compliant, and quality service. The following are the categories of data we collect along with their purposes:

We do not collect sensitive information such as biometric data, medical records or information related to religious beliefs unless specifically required by applicable law and with your explicit consent.

Every piece of data we collect is used for a clear and legitimate purpose. uwin will not use your information for any other purpose without notifying you in advance. The following are the primary purposes for data use:

• Account Management: Creating, verifying and securely managing your member account.
• Transaction Processing: Ensuring deposits and withdrawals are processed accurately and promptly to the correct account.
• Legal Compliance: Meeting mandatory Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements.
• Platform Security: Detecting and preventing fraudulent activity, unauthorized access and cybersecurity threats.
• Customer Support: Enabling our support team to assist you effectively when you contact us.
• Responsible Gaming: Monitoring gaming patterns to identify early signs of problem gambling and offer assistance.
• Service Communications: Sending important notifications related to your account, security and promotions you have agreed to receive.
• Platform Improvements: Analyzing usage data in aggregate (without identifying individuals) to improve the user experience.

Uwin does not sell, rent, or trade members' personal data to any third party for their own commercial purposes. However, in certain limited situations, we may need to share information with specific parties to ensure the platform operates properly and remains legally compliant:

• Payment Service Providers: Transaction information that must be shared with payment gateways and banking institutions to process your deposits and withdrawals.
• Technology Providers: Technical partners who help us operate the platform infrastructure, all bound by strict confidentiality agreements.
• Authority: When required by law, court order, or directive from a legitimate regulatory authority.
• KYC Verification Providers: Third-party identity verification services used to securely process your KYC documents.

All third parties we work with are required to uphold data protection standards equivalent to our own policy and are prohibited from using your data for any purpose other than those specified in our cooperation agreements.

Protecting your data from unauthorized access, breaches or misuse is our top technical priority. uwin continuously invests in the latest security infrastructure to ensure your information remains safeguarded at all times.

• 256-bit SSL Encryption: All data transmitted between your device and uwin servers is protected with bank-grade encryption using TLS 1.3 protocol.
• Encrypted Data Storage: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using AES-256.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of security to their account.
• 24/7 Monitoring: Our security system monitors for suspicious activity around the clock and will take automatic action upon detecting a threat.
• Regular Security Audits: Our infrastructure undergoes regular penetration testing and security audits by independent cybersecurity experts.
• Internal Access Controls: Access to members' personal data within our organisation is restricted on a need-to-know basis only.

While we take all reasonable precautions, no online system can guarantee 100% absolute security. We encourage members to play their part by maintaining strong passwords and not sharing their login credentials with anyone.

The uwin platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse platform usage patterns in aggregate.

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how members use the platform to help us improve performance and usability.
• Functional Cookies: Storing your personal preferences such as language, display settings and game preferences.
• Analytics Cookies: Used to understand overall website traffic — all data is in aggregate form with no individual identification.

You can manage cookie settings through your web browser settings. However, disabling certain cookies may affect platform functionality. For more information on managing cookies, please refer to the documentation of your web browser.

Under the Malaysia Personal Data Protection Act 2010 and the data protection principles we adhere to, you have the following rights regarding your personal data that we hold:

To exercise any of the above rights, please contact our support team via the in-platform live chat or email. We will process your request within 30 business days. Please note that some deletion requests may be limited by legal compliance requirements that obligate us to retain certain records for a specified period.

Uwin retains members' personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required by applicable laws and regulations.

• Active Account Data: Retained throughout the period your account is active and up to 5 years after account closure for compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with legal requirements relating to financial records and AML.
• KYC Documents: Retained for the duration of the active account and 5 years after account closure.
• Security Logs: Retained for 12 months for security investigation and fraud prevention purposes.
• Support Communication Data: Retained for 2 years to ensure continuity of customer support.

Upon expiry of the retention period, data will be securely deleted or anonymised using procedures that ensure the data cannot be recovered or re-linked to the individual concerned.

Uwin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. Whenever a significant amendment occurs, we will:

• Sending notifications to all active members via email or in-platform notifications.
• Updating the "Last Updated" date at the top of this document.
• Clearly presenting a summary of key changes to help members understand updates easily.

Your continued use of the uwin platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request data deletion in accordance with the procedure outlined in Section 7.

If you have any questions, concerns or complaints regarding how uwin handles your personal data, we encourage you to contact us directly. Our privacy team is ready to assist you.

For complaints that cannot be resolved internally, you may refer to Malaysia's Department of Personal Data Protection or the relevant regulatory body in your country. uwin is committed to cooperating fully with the relevant authorities in addressing any valid complaints.