Privacy Policy AsiaWin88 — Your Data Security is Our Priority

AsiaWin88 takes your privacy very seriously. We understand that when you share personal information with us — whether during registration, making a deposit, or contacting support — you are placing significant trust in us. We do not take that trust lightly.

This document is written in plain language, not legalese filled with jargon. We want you to genuinely understand what happens with your data — not just scroll through and click "Accept" without knowing what you are agreeing to.

AsiaWin88 collects your personal information through several channels when you use our platform. The following types of information are collected:

Information you provide directly:

• Full name, email address, and phone number upon registration.
• Date of birth for age verification.
• National ID or passport number during the KYC process.
• Bank account or e-wallet details for processing deposits and withdrawals.
• Residential address for identity verification and anti-fraud compliance.

Information collected automatically:

Your personal information is used for specific and legitimate purposes. We do not use your data for unrelated purposes without your consent:

• Account Management: Creates, maintains, and protects your account, including identity verification and account recovery.
• Transaction Processing: Processes deposits, withdrawals, and all financial transactions securely and accurately.
• Customer Support: Resolves inquiries, complaints, and technical issues you report to our team.
• Platform Security: Detects and prevents fraud, money laundering, and other suspicious activities.
• Legal Compliance: Fulfills reporting obligations to relevant authorities in accordance with applicable laws.
• Service Improvement: Analyzes usage patterns in aggregate (without identifying individuals) to improve the platform experience.
• Service Communications: Sends important notices about changes to your services, security, or policies.

Your personal data is stored on servers protected by multiple layers of physical and digital security. The security measures we employ include:

• Data encryption at rest: All stored data is encrypted using the AES-256 algorithm.
• Data encryption in transit: SSL/TLS 256-bit for all communications between client and server.
• Internal access controls: Only authorized personnel may access members' personal data, and all access is logged and audited.
• 24/7 Monitoring: An active intrusion detection system that monitors for any unusual activity in real time.
• Regular backups: Data is securely backed up to a separate location to prevent data loss.

Retention Period: Active account data is retained for as long as your account remains active. Following account closure, transaction and KYC records are retained for 7 years as required by anti-money laundering legislation. Other data no longer needed for legal purposes will be deleted within 90 days of account closure.

AsiaWin88 does not sell your personal data to any party. However, there are limited situations where we need to share your information with other parties:

• Payment Service Providers: Transaction details required to process deposits and withdrawals are shared with licensed payment providers bound by strict data protection agreements.
• Game Software Providers: Technical data required to run games (not financial or identity information) is shared with licensed providers such as Pragmatic Play and Evolution Gaming.
• Third-Party KYC Services: An approved and licensed identity verification platform is used to securely process KYC documents.
• Authorities and Law Enforcement: Where required by a court order, warrant, or lawful authority request, we will disclose the necessary information.
• Audit and Compliance: Independent auditors and certification bodies involved in verifying our platform's compliance may access limited relevant data within the scope of their duties.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international privacy principles, you have the following rights regarding your personal data:

To exercise any of the above rights, contact our Data Protection Officer (DPO) team via customer support. We will process your request within 30 working days.

The asiawin88 platform uses cookies and similar tracking technologies to enhance your experience. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as staying logged in and session security. These cookies cannot be disabled.
• Performance Cookies: Collects information about how you use the platform to help us improve performance and user experience.
• Preference Cookies: Saves your personal settings such as preferred language and display preferences.
• Security Cookies: Helps identify legitimate sessions and protect your account from unauthorized access.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect platform functionality. The asiawin88 mobile app uses equivalent device identifiers in place of cookies.

The Know Your Customer (KYC) process is a legal requirement we must fulfill to comply with anti-money laundering regulations and protect all our members from identity fraud.

Documents you submit during KYC are handled with the highest level of protection:

• A copy of your ID card or passport is submitted only once and stored in a separate encrypted data vault.
• KYC documents are never transmitted via email or unsecured channels.
• Access to KYC documents is restricted to authorised compliance team personnel only.
• Documents are retained for the legally required period (typically 5–7 years) before being securely destroyed.

The asiawin88 KYC process is completed in under 5 minutes for most cases and only needs to be done once throughout your membership.

AsiaWin88 may contact you via email, SMS, or in-app notifications for two distinct categories of communication:

Service Communications (cannot be turned off):

• Transaction verification — deposits and withdrawals.
• Security alerts — login from a new device or suspicious activity detected.
• Important notices about policy changes, technical disruptions, or matters affecting your account.

Marketing Communications (can be turned off):

• Promotional offers, bonuses, and contests.
• Notifications about new games or the latest platform features.
• Periodic newsletters about asiawin88 events and activities.

In operating a platform at an international level, some of your data may be processed outside Malaysia — specifically for game provider services and cloud infrastructure.

Every cross-border data transfer we carry out complies with the following conditions:

• The destination country or region must have a level of data protection equivalent to or higher than Malaysia.
• Legally binding data processing agreements with all recipients that mandate appropriate security standards.
• A risk assessment is conducted before engaging any new vendor that requires data transfer.

Sensitive financial data such as banking information and KYC documents are always processed within infrastructure that meets local compliance requirements.

AsiaWin88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we handle data.

• Any significant amendments will be communicated via your registered email at least 14 days before taking effect.
• The last updated date and version number are displayed at the top of this document.
• Previous versions of the Privacy Policy are kept in an archive and can be requested if needed.
• Continued use of the platform after the effective date constitutes acceptance of the updated policy.

If you have any questions, concerns, or wish to exercise your rights regarding personal data, please contact us through the following channels:

• Live Chat — available 24 hours a day, 7 days a week via the chat icon at the bottom right of the platform.
• Support email: [email protected] — response within 24 business hours.
• For issues specifically related to privacy and data protection, include "Privacy Policy Inquiry" in your message subject to be routed directly to our DPO team.

We are committed to responding to all privacy-related inquiries within 3–5 working days and resolve more complex issues within 30 business days.