Official Documents

Privacy Policy ewin — Our Commitment to Protecting Your Personal Data

At ewin, your privacy is not merely a legal obligation — it is a core value we uphold in every decision we make. Find out how we manage your information with full accountability.

Last Updated: 1 January 2026
Commitment ewin Privacy in Six Points

The core principles that guide how we handle your personal data

Highest-Level Data Encryption

All data transmitted between your device and ewin's servers is protected by 256-bit SSL encryption — the same security technology used by major Malaysian banking institutions.

Your Data Is Not Sold

Ewin has never and will never sell, rent, or trade your personal data to any third party for marketing or commercial purposes without your explicit consent.

Full Transparency in Data Collection

We always keep you informed about what data is collected, what it is used for, and how long it is retained. There is no hidden or undisclosed data collection.

Control Is in Your Hands

You have the right to access, correct, download, or request deletion of your personal data at any time via account settings or by contacting our team.

Malaysia PDPA Compliance

The ewin Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your data is handled in accordance with local legal standards.

Immediate Notification in the Event of a Breach

In the event of any data security incident involving your information, ewin is committed to providing notice within a reasonable timeframe in accordance with regulatory requirements.

Important Note

By registering or using the ewin platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read together with Terms and Conditions which constitutes the entire agreement between you and ewin.

1

Introduction and Scope of This Policy

This Privacy Policy describes the data collection, use, retention, and protection practices of ewin ("we", "Platform") with respect to all users ("you", "Member") who access or use our services via ewin.fun, our mobile app, or any related platform.

This Policy applies to all your interactions with ewin — from the moment you first visit our website, through the registration process, during active use of the platform, and even after you may have closed your account. We regard your trust as our most valuable asset, and this Privacy Policy is our written commitment to upholding it.

Ewin complies with Malaysia's Personal Data Protection Act 2010 (PDPA) in every aspect of data handling. If anything is unclear, we encourage you to reach out to our team for further clarification before using the platform.

2

Personal Data We Collect

Ewin only collects data that is strictly necessary to provide our services safely and efficiently. Below are the categories of data we collect and their purposes:

Data Categories Examples of Information Primary Purpose
Identity Data Full name, MyKad number, date of birth, selfie photo KYCVerification
Contact Data Email address, phone number, residential address CommunicationSupport
Financial Data Bank account number, e-wallet details, transaction records PaymentWithdrawal
Technical Data IP address, device type, web browser, operating system SecurityPerformance
Usage Data Game history, wagering habits, active session time, in-app actions PersonalizationCompliance
Communication Data Support chat records, emails, user feedback SupportQuality Improvement

Data We Do Not Collect

Ewin does not collect information that is irrelevant to our services. This includes biometric data (unless required for enhanced KYC), health data, or other sensitive information with no direct relevance to platform use.

3

How Your Personal Data Is Used

The personal data we collect is used solely for the following legitimate and stated purposes:

  • Identity Verification: Ensuring you meet the age and eligibility requirements to use the ewin platform in accordance with KYC requirements.
  • Transaction Processing: Processing deposits, withdrawals, and any financial transactions related to your account.
  • Account Security: Detecting and preventing fraud, money laundering, and unauthorized access to your account.
  • Customer Support: Providing effective technical support and customer service when you need assistance.
  • Legal Compliance: Meeting legal obligations including anti-money laundering (AML) and PDPA requirements.
  • Platform Communication: Sending important notices related to your account, changes to terms, and security information.
  • Experience Personalization: Tailoring content, game recommendations, and promotional offers based on your preferences — with your consent.
  • Platform Improvement: Analyzing aggregate usage patterns to improve the performance and user experience of the ewin platform.
Marketing Notice

Marketing communications such as promotional offers and bonuses will only be sent to you with your consent. You may withdraw this consent at any time through your account settings without affecting core services.

4

Data Sharing with Third Parties

Ewin does not sell or rent your personal data to any party. Data sharing only occurs in the following limited situations, and all third parties involved are bound by strict confidentiality agreements:

  • Payment Processing Providers: Financial information required to process deposits and withdrawals is shared with the payment gateways used — such as DuitNow and FPX — solely for transaction processing purposes.
  • Technical Service Providers: Cloud infrastructure, hosting, and technology providers that help us operate the platform — all subject to strict data processing agreements.
  • Game Providers: Minimum information required to verify player eligibility is shared with third-party game providers within the ewin platform.
  • Legal Authorities: Where required by court order, law enforcement request, or regulatory obligation, ewin will comply with the applicable disclosure requirements.
  • Auditing and Compliance: Independent auditors conducting compliance and security reviews may access certain data within a controlled and restricted environment.

In all of the above cases, only the minimum data required for the relevant purpose will be shared. ewin always strives to protect your privacy even in situations where data sharing is necessary.

5

Data Security Measures

Ewin continually invests in security infrastructure to ensure your data remains protected at all times. The technical and organisational measures we employ include:

  • Transmission Encryption: All data in transit is protected by TLS 1.3 protocol with 256-bit SSL encryption.
  • Storage Encryption: Sensitive data stored in our databases is encrypted using AES-256.
  • Layered Access Control: Internal staff access to user data is strictly governed on a "need-to-know" basis.
  • Two-Factor Authentication: ewin's internal systems require 2FA for all administrative access, and 2FA is available to all members for added account protection.
  • Continuous Monitoring: An intrusion detection system (IDS) monitors platform activity 24/7 to detect and respond to security threats.
  • Regular Security Testing: ewin conducts regular penetration testing and security audits by independent third parties to identify and patch vulnerabilities.
In the Event of a Security Incident

Should ewin detect a data breach that may affect your information, we will notify you via your registered email and an in-platform notice within a reasonable timeframe, along with steps you can take to protect yourself.

6

Cookies and Tracking Technologies

Ewin uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. The types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting information about how you use the platform to help us improve overall performance and user experience.
  • Functional Cookies: Remembering your preferences such as language, display settings, and other preferences for a more personalized experience.
  • Analytics Cookies: Helping us understand aggregate usage patterns to make better platform improvement decisions.

You can manage or disable cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality and security of the platform.

7

Data Retention Period

Ewin retains your personal data for as long as necessary to fulfil the purposes stated in this Policy, or as required by law. Below are general data retention period guidelines:

  • Active Account Data: Retained for the duration your account remains active and in use.
  • KYC Records: Retained for at least 7 years after account closure in accordance with AML requirements.
  • Financial Transaction Records: Retained for a minimum of 7 years for audit and legal compliance purposes.
  • Support Communication Logs: Retained for 3 years for reference and service quality improvement.
  • Technical Log Data: Retained for 12 months for security and troubleshooting purposes.

Once the relevant retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

8

Your Rights Under PDPA

As a data subject, you have the following rights, which you may exercise at any time:

Right of Access

You have the right to request a copy of the personal data ewin holds about you. Requests will be processed within 21 business days.

Right to Rectification

If your data is inaccurate or outdated, you have the right to request a correction. Updates to basic information can be made directly in your account settings.

Right to Erasure

You may request the deletion of your personal data, subject to mandatory retention requirements under applicable law. Contact our support team to initiate this process.

Right to Object to Processing

You may object to the processing of your data for specific purposes such as direct marketing. Objections will be enforced immediately for marketing communications.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format (such as CSV or JSON) for transfer to another service provider if needed.

Right to Restrict Processing

Under certain circumstances, you may request that ewin restrict the processing of your data while a claim or objection is being handled.

How to Exercise Your Rights

To exercise any of the rights above, contact the ewin privacy team via in-platform live chat or email at [email protected]. We will acknowledge your request within 3 business days and resolve it within 21 business days.

9

Privacy and Child Protection

The ewin platform is strictly for individuals aged 18 and above only. ewin does not knowingly collect, store, or process any personal data from minors.

If we discover that data has been collected from a person under the age of 18, we will take immediate action to delete that data and close the account in question. Our KYC verification process is one of the primary mechanisms we use to enforce this age restriction.

If you become aware that someone under the age of 18 has registered an account on ewin, please report it to us immediately through our customer support channels.

10

Amendments to the Privacy Policy

Ewin reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or security enhancements we implement.

When significant changes occur, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending notices to your registered email address
  • Displaying clear notices within the ewin platform

For minor amendments that do not materially affect your rights, we may make updates without prior notice. Your continued use of the ewin platform after an amendment takes effect will be considered your acceptance of the updated Policy.

11

Contact Us Regarding Privacy

We welcome any enquiries, concerns, or requests related to your privacy and data protection. The ewin privacy team is committed to providing accurate and helpful responses.

  • Privacy Email: [email protected] — for data-related requests and privacy enquiries
  • General Support: [email protected] — for general platform enquiries
  • Live Chat: Available 24/7 via the ewin app or website — responses within minutes

If you believe that ewin has failed to meet our privacy obligations, you have the right to lodge a complaint with the Malaysia Department of Personal Data Protection or any other relevant authority.

Your Privacy Is Protected — Play with Peace of Mind at ewin

Join over 500,000 Malaysian players who trust ewin for data security and an exceptional gaming experience

Bahasa Melayu