Personal Data Protection

Privacy Policy gwin9 – Our Commitment to Protecting Your Information

Your privacy is gwin9's priority. Find out exactly how we collect, use, and protect your personal data in line with Malaysia's Personal Data Protection Act 2010.

Updated: January 2026
PDPA 2010 Compliance
256-bit SSL encryption
Full Data Control
Contents
PDPA 2010

The gwin9 Privacy Policy is fully compliant with Malaysia's Personal Data Protection Act 2010.

Last Updated: 1 January 2026  |  Version 3.2

1 Introduction

Welcome to the gwin9 Privacy Policy page. This document explains in detail how gwin9 (“we”, “platform”) collects, processes, stores, and protects your personal information (“member”, “you”) when you use our website and services at gwin9.vin.

As an online betting platform serving Malaysian users, gwin9 is fully committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA). We regard your privacy not merely as a legal obligation, but as the foundation of trust that defines our relationship with every member.

By registering or continuing to use the gwin9 platform, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, you are advised to stop using the platform and contact our support team for further clarification before making a decision.

This Privacy Policy applies to all users of the gwin9 platform, including website visitors, registered members, and VIP members. It should be read together with Terms and Conditions gwin9.

2 Personal Data We Collect

Gwin9 only collects personal data that is strictly necessary to provide our services, ensure platform security, and comply with legal requirements. Below are the categories of data we collect, based on source and purpose:

Data Category Information Type Requirements
Identity Full name, date of birth, MyKad/passport number Required
Contact Phone number, email address Required
Finance Bank account number, bank name, transaction records Required
Technical IP address, device type, browser, activity logs Automatic
Games Betting history, wins, losses, bonuses Automatic
KYC Identity document copies, verification selfie When required
Communication Live chat records, support emails, feedback When required

Sensitive personal data such as biometric information, health records, or religious information is never collected by gwin9 under any circumstances. We also do not collect data from users under 18 years of age — if we discover an account registered by a minor, that account will be closed immediately.

Please ensure all information you provide is accurate and up to date. Inaccurate data may affect your KYC verification process and withdrawal processing.

3 How We Use Your Personal Data

Every piece of data collected by gwin9 has a clear and lawful purpose. We do not use your data for anything unrelated to delivering our services to you. The following are the primary purposes for which member personal data is used:

  • Identity verification and KYC — to verify that you are who you claim to be and meet the minimum age requirement of 18 years
  • Deposit and withdrawal processing — to ensure financial transactions are securely processed to the correct bank account or e-wallet
  • Fraud prevention and AML — to detect and prevent fraudulent activity, money laundering, and unauthorised access
  • Service delivery — to operate your account, process bets, and accurately credit wins
  • Service communications — to send transaction notifications, security alerts, and important updates related to your account
  • Personalise your experience — to deliver relevant promotions, bonuses, and game recommendations based on your activity on the platform
  • Legal compliance — to fulfil our obligations under PDPA 2010, AML/CFT regulations, and relevant regulatory authority requirements
  • Platform improvements — to analyse aggregated usage patterns in order to improve the quality and performance of the gwin9 platform

gwin9 does not use your personal data for third-party advertising, credit assessment, or profiling unrelated to the platform's services.

4 Data Sharing with Third Parties

Gwin9 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in the course of operating our services, there are limited situations where your data may need to be shared with certain parties:

  • Payment processors — DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay providers receive the transaction data necessary to process your deposits and withdrawals
  • Game software providers — third-party game developers receive the minimum game data necessary for secure game operation
  • KYC and identity verification services — authorised third-party identity verification providers receive the data required for the KYC process
  • Legal authorities — gwin9 will fully comply with any lawful requests from law enforcement agencies or regulatory bodies with jurisdiction
  • Auditors and professional advisors — in the context of internal or external audits subject to strict confidentiality agreements

All third parties that receive personal data of gwin9 members are bound by strict data processing agreements and are required to meet data protection standards equal to or higher than those of gwin9 itself.

Your data may be processed outside Malaysia by certain service providers. In such cases, gwin9 ensures protection equivalent to Malaysia's PDPA 2010 through binding contractual agreements.

5 Security & Data Protection

Gwin9 continuously invests in the latest security infrastructure to ensure your personal data is always protected. The technical and organisational security measures we implement comprise multiple layers of protection designed to prevent unauthorised access, data loss, or accidental disclosure.

  • 256-bit SSL/TLS encryption — all communications between your device and gwin9 servers are encrypted using industry-standard 256-bit SSL/TLS protocol
  • Hashed password storage — member passwords are never stored in plain text; we use the robust bcrypt hashing algorithm
  • Two-factor authentication (2FA) — an additional security layer available to all members to protect account access
  • 24/7 Monitoring — automated intrusion detection systems continuously monitor for suspicious activity around the clock
  • Internal access controls — only specifically authorised personnel can access member personal data, and all such access is fully logged
  • Regular security audits — gwin9 conducts regular penetration testing and security audits by independent security experts
  • Multi-location data backup — data is securely backed up across multiple physically protected server locations

While gwin9 takes all reasonable steps to protect your data, no system is 100% guaranteed. You also share responsibility for keeping your account login information secure.

6 Cookies & Tracking Technologies

Gwin9 uses cookies and similar tracking technologies to enhance your experience on the platform, analyse usage patterns, and deliver more relevant content. Cookies are small text files stored on your device when you visit our website.

  • Essential cookies — required for core platform operations such as login session authentication and security controls. These cookies cannot be disabled without affecting platform functionality
  • Preference cookies — stores your personal settings such as language, theme, and display preferences so you do not need to reconfigure them each time
  • Analytics cookies — helps us understand how members interact with the platform through aggregated and anonymised usage data
  • Session cookies — temporary cookies that are automatically deleted when you close your browser, used to maintain your login session

You can control and manage cookies through your browser settings at any time. Most modern browsers allow you to view, delete, or block specific cookies. Please note that disabling essential cookies may affect the full functionality of the gwin9 platform.

gwin9 does not use third-party cookies for advertising purposes or to track your activity on websites outside the gwin9.vin domain.

7 Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding your personal data held by gwin9. We are committed to respecting and facilitating the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request correction of inaccurate or incomplete data via your account settings or customer support.

Right to Erasure

You may request deletion of your personal data, subject to applicable legal retention obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another service.

Right to Restrict Processing

You may request that we restrict the processing of your data while a dispute or investigation is ongoing.

To exercise any of the above rights, please contact our Data Protection Officer (DPO) team via email at [email protected] with the subject “PDPA Rights Request”. We will process your request within 21 working days from the date of receipt.

8 Data Retention Period

Gwin9 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable Malaysian law. Our data retention policy is as follows:

  • Active account data is retained for as long as your account remains active, plus a 7-year period after account closure for financial records and AML compliance purposes
  • Financial transaction records are retained for a minimum of 7 years in accordance with Malaysian legal requirements
  • KYC documents are retained for 5 years after the date of last verification or account closure, whichever is later
  • Customer support communication logs are retained for 3 years for reference and dispute resolution purposes
  • Technical data and access logs are retained for 90 days for security and incident analysis purposes
  • Closed account data that has exceeded the mandatory retention period will be securely deleted or anonymised

Even after you close your gwin9 account, certain data may need to be retained for periods required by Malaysian law. Such data will not be used for marketing or active service purposes.

9 Changes to This Privacy Policy

Gwin9 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our operational practices, legal requirements, or relevant technological developments. When material changes are made, we will take reasonable steps to notify you.

  • The “Updated” date at the top of this document will always reflect the date of the latest version
  • For significant changes, we will send a notification to your registered email address at least 14 days before the changes take effect
  • An in-platform notice will be displayed when you log in after any material changes have been made
  • Continued use of the gwin9 platform after the effective date of any changes constitutes your acceptance of the updated policy

We encourage you to review this Privacy Policy periodically, at least every three months, to stay informed about how we handle your personal data.

10 Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how gwin9 handles your personal data, you may contact our Data Protection Officer (DPO) through the following channels:

  • Email: [email protected] (Subject: Privacy Policy Inquiry)
  • Live Chat: Available 24/7 directly within the platform — the fastest way to get a response
  • Response Time: Emails will be replied to within 3 working days; formal PDPA requests within 21 working days

If you are dissatisfied with the response provided, you have the right to file a complaint with Malaysia's Department of Personal Data Protection (JPDP), the regulatory body responsible for enforcing PDPA 2010.

gwin9's support team, fluent in both Malay and English, is ready to help you understand your personal data rights. Don't hesitate to reach out.

Premium-Grade Protection

Gwin9's Six Layers of Privacy Protection

Your personal data is protected by multiple complementary layers of security — not just a promise, but real infrastructure you can trust.

256-bit SSL encryption

All data moving between your device and gwin9's servers is encrypted to the 256-bit SSL standard — the same level of encryption used by world-class financial institutions.

Secure & Controlled KYC

Gwin9's KYC process uses end-to-end encryption and restricted access to ensure your identity documents are only accessed by authorised personnel.

PDPA 2010 Compliance

All data processing operations at gwin9 are built around the principles of Malaysia's Personal Data Protection Act 2010 — not just minimum compliance, but best practice.

24/7 Security Monitoring

An automated threat detection system monitors for any abnormal activity around the clock and responds immediately to protect member data and accounts.

Full Data Control in Your Hands

Gwin9 members have full control — access, correct, or request deletion of your data at any time. Your PDPA rights are respected and supported by our team.

Secure Server Infrastructure

Your data is stored in certified data centres with strict physical access controls, multi-location backups, and regularly tested disaster recovery plans.

Secure & Trusted

Ready to Play with Full Confidence?
Your Data Is Protected at gwin9

Create a gwin9 account today and enjoy a safe, fair, and exciting online wagering experience — backed by data privacy we take seriously at all times.

Personal data encrypted & protected 24/7
Full compliance with Malaysia's PDPA 2010
Full data control is yours
Secure withdrawals via DuitNow & FPX
Bahasa Melayu