Privacy Policy

Gwin9 Privacy Policy — Our Commitment to Protecting Your Personal Data

Gwin9 takes the privacy of Malaysian members seriously. This document sets out in detail how we collect, store, use, and protect your personal data — in compliance with the Personal Data Protection Act (PDPA) Malaysia 2010.

You have the right to know what happens to your data. And we are fully committed to being transparent about it.

Updated: 1 January 2026 Compliance with Malaysia PDPA 2010
Your data is protected by 256-bit SSL encryption — the same level of security used by Malaysia's leading banks.
SSL 256-bit Encryption

Gwin9's Privacy Commitment to Malaysian Members

Six core principles that guide how we handle your data

Bank-Grade Encryption

All data transmitted between your device and gwin9 servers is encrypted using 256-bit SSL — the same security technology used by Maybank, CIMB, and other major Malaysian banks. Your information cannot be intercepted by third parties.

Malaysia PDPA Compliance

Gwin9 operates in full compliance with the Personal Data Protection Act (PDPA) Malaysia 2010. This means our data collection is limited, purposeful, and subject to your consent. You have the right to access, correct, and request deletion of your data.

Data Not Sold to Third Parties

Gwin9 has never and will never sell, rent, or share members' personal information with advertisers, data brokers, or any commercial third party without your explicit consent. Your data is used solely for gwin9 services.

Restricted & Controlled Data Access

Only gwin9 staff who require access strictly for service purposes are permitted to view your data. All access is logged and monitored. Our staff undergo regular privacy training and are bound by strict confidentiality agreements.

Right to Data Erasure

You have the right to request deletion of your personal data from gwin9 systems at any time. Such requests will be processed within 30 business days, subject to mandatory statutory record retention requirements.

Immediate Breach Notification

In the event of any security breach that may affect your data, gwin9 is committed to notifying affected members within 72 hours — well ahead of what is legally required.

1. Introduction & Scope of Privacy Policy

Gwin9 ("we", "platform") is an online betting and casino platform operating through the website gwin9.click. We are fully committed to protecting the privacy and personal information of all our members, especially users from Malaysia.

This Privacy Policy explains:

  • The types of personal information we collect from you.
  • How that information is collected, stored, and used.
  • Who that information may be shared with and under what circumstances.
  • Your rights regarding your personal data and how to exercise them.

This Privacy Policy applies to all users who visit, register with, or use any gwin9 service, including the website, account portal, and all platform features. By using our services, you agree to the terms set out in this Privacy Policy.

Legal Compliance: This Privacy Policy is prepared in accordance with the Personal Data Protection Act (PDPA) Malaysia 2010 and its prevailing amendments. We also adhere to relevant international information security standards.

2. Types of Personal Data We Collect

Gwin9 only collects data that is genuinely necessary to provide you with an effective and secure service. The data collected is organised into the following categories:

Data Category Example Information Requirement
Identity Data Full name, MyKad number, date of birth, profile photo Mandatory (KYC)
Contact Data Malaysian phone number, email address, residential address Mandatory
Financial Data E-wallet owner name, registered bank account number (encrypted), MYR transaction history Mandatory
Gaming Activity Data Betting history, winnings, game types played, session duration Mandatory
Technical Data IP address, device type, web browser, operating system, error logs Automatic
Optional Data Language preference, promotional preferences, satisfaction feedback Optional

Gwin9 do not collect sensitive data such as medical information, political views, or religious beliefs unless you voluntarily disclose them to our support team.

3. How We Collect Your Data

Your personal data is collected through several channels:

3.1 Information You Provide Directly

  • Gwin9 account registration form.
  • The identity verification (KYC) process when submitting identification documents.
  • Payment form during deposit or withdrawal via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks).
  • Communications with the gwin9 customer support team via live chat, email, or phone.
  • Participation in surveys, lucky draws, or promotional programmes.

3.2 Automatically Collected Data

  • Server logs recording IP addresses, access times, and pages visited.
  • Cookies and similar tracking technologies to maintain your login session and personal preferences.
  • Platform usage analytics data to understand navigation patterns (in anonymised, aggregated form).
  • Device information including phone model, operating system version, and browser version.

3.3 Data from Legitimate Third Parties

  • Identity verification information from recognised KYC services.
  • Payment verification information from Malaysian e-wallet providers and partner banks.
  • Fraud protection information from financial fraud prevention services.

4. Purposes for Using Your Personal Data

Gwin9 uses your personal data solely for legitimate and necessary purposes. Below is a full list of how your data is used:

5. Legal Basis for Data Processing

Gwin9 processes your personal data on the following legal bases under Malaysia's PDPA 2010:

  • Contractual Fulfilment: Processing necessary to provide gwin9 services to you as a registered member.
  • Legitimate Interests: Fraud prevention, platform security, and service improvements that benefit all members.
  • Legal Obligation: Compliance with financial record-keeping requirements, anti-money laundering (AML) reporting, and other applicable Malaysian legal obligations.
  • Consent: For marketing communications and the use of non-essential cookies, we require your consent, which may be withdrawn at any time.

Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing that took place prior to the withdrawal.

6. Data Sharing with Third Parties

Gwin9 does not sell your personal data to any third party for commercial purposes. However, we may share limited information with the following categories of third parties for legitimate purposes only:

6.1 Technical Service Providers

Companies that provide technical infrastructure for gwin9, including cloud service providers, cybersecurity providers, and payment processing systems. They may only use your data for the purpose of delivering their services to gwin9 and are bound by strict confidentiality agreements.

6.2 Identity Verification Providers

Recognised KYC services we use to verify member identities — limited strictly to information required for verification only.

6.3 Legal Authorities

Gwin9 may be legally required to disclose information to authorised Malaysian authorities such as the PDRM, SPRM, or Bank Negara Malaysia upon receipt of a valid official directive.

Cross-Border Data Transfer: Where your data needs to be processed outside Malaysia (e.g. by international cloud service providers), gwin9 ensures equivalent protection through data processing agreements that comply with PDPA standards.

7. Data Retention & Security

7.1 Retention Period

Gwin9 retains your personal data only for as long as necessary for the stated purposes or as required by Malaysian law:

  • Active account data: For the duration your account remains active.
  • Financial transaction data: Minimum 7 years in accordance with Malaysia's accounting and tax record-keeping requirements.
  • Game activity data: 2 years from the date of activity for dispute resolution purposes.
  • Support communication logs: 3 years for reference and service improvement purposes.
  • Marketing data (with consent): Until you withdraw your consent or close your account.

7.2 Security Measures

Gwin9 implements a range of technical and organisational measures to protect your data:

  • Data encryption in transit (SSL/TLS 256-bit) and at rest (AES-256).
  • Role-based access controls — only staff who require access to perform their specific duties are permitted to view certain data.
  • Round-the-clock security monitoring by a dedicated SOC (Security Operations Centre) team.
  • Regular penetration testing conducted by independent security experts.
  • Regular encrypted data backups to separate, off-site locations.
  • Mandatory cybersecurity awareness training for all gwin9 staff.

Shared Responsibility: While gwin9 takes all reasonable steps to protect your data, the security of your account password is your responsibility. Do not share your password with anyone, and use a strong, unique password for your gwin9 account.

8. Your Rights as a Data Subject

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by gwin9:

01
👁️
Right to Access

Request a copy of the personal data we hold about you. Requests are processed within 21 working days.

02
✏️
Right to Rectification

Request corrections to inaccurate or incomplete data. This can be done directly through your account portal.

03
🗑️
Right to Erasure

Request deletion of data that is no longer required, subject to statutory retention requirements.

04
🚫
Right to Object

Object to the processing of your data for direct marketing purposes at any time, free of charge.

05
📦
Data Portability

Request a copy of your data in a machine-readable format (JSON/CSV) for portability.

06
⏸️
Right to Restriction of Processing

Request that processing of your data be temporarily restricted under certain circumstances while an investigation is ongoing.

How to Exercise Your Rights: Submit a written request to support@gwin9.click with the subject line "PDPA Data Rights Request" along with your full name and account number. gwin9 will respond within 21 business days.

9. Cookies & Tracking Technologies

Gwin9 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

9.1 Types of Cookies We Use

  • Essential Cookies (Required): Required for core platform functions such as login, session security, and language preferences. Cannot be disabled.
  • Performance Cookies (Optional): Collecting anonymised statistical information about how you use gwin9 to help us improve the platform.
  • Functional Cookies (Optional): Remembering your preferences such as layout size, last betting limits, and your favourite sports.

9.2 Managing Cookies

You can manage cookies through your web browser settings. Please note that disabling essential cookies may affect your login functionality and session security on gwin9. For mobile devices, cookie settings can be managed through your browser's settings menu (Chrome, Safari, or Firefox).

10. Data of Minors Under 18

Gwin9 is a betting platform intended solely for individuals aged 18 and above. We does not intentionally collecting personal data from individuals under the age of 18.

If we discover or become aware that we have collected data from a minor, we will take immediate steps to:

  • Closing the account in question immediately.
  • Delete all related personal data from our systems.
  • Voiding all associated transactions and winnings.

If you become aware that an individual under the age of 18 has registered a gwin9 account, please contact us immediately at support@gwin9.click.

11. Changes to This Privacy Policy

Gwin9 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. In the event of material changes, we will notify you via:

  • A prominent notice on the gwin9 homepage for a minimum of 30 days.
  • Email to the address registered on your account.
  • Notification in the account portal upon your next login.

Continued use of gwin9 services after a change notice has been issued will be considered acceptance of the updated Privacy Policy. The "Updated" date at the top of this document will always reflect the latest version.

We encourage you to review this page periodically to stay informed about how we protect your information.

12. How to Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how gwin9 handles your personal data, please contact our Data Protection Officer (DPO):

Email
support@gwin9.click
Live Chat
Available 24/7 within the platform
Response Time
Within 21 business days (PDPA)
References
Include your gwin9 account number

You may also refer to Terms & Conditions and the page Responsible Gaming us for more information regarding gwin9 user protection.

Your Data Is Safe at gwin9

Join gwin9 with Complete Confidence — Your Privacy Is Protected

Over 500,000 Malaysian members have trusted gwin9 with their personal data. With 256-bit SSL encryption, full PDPA compliance, and our commitment to never selling your data, you can play with complete peace of mind. Register for free today.

Bahasa Melayu