Privacy Policy vwin21 —
Our Commitment to Protecting Your Data

1. Introduction

Vwin21 treats member privacy as a responsibility we take seriously. This Privacy Policy ("Policy") describes our practices regarding the collection, use, disclosure, and protection of your personal information when you use the vwin21 platform, including the website, mobile app, and all related services.

This policy applies to all users of the vwin21 platform — whether you are browsing our website as a guest, in the process of registering a new account, or already an active member. By continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy.

Vwin21 operates in accordance with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised information security standards, including ISO/IEC 27001. This goes beyond mere legal compliance — it reflects our core belief that every member has the right to know what happens to their personal information.

2. Information We Collect

We collect the information necessary to allow you to use the vwin21 platform safely and fully. The information we collect can be divided into three main categories:

A. Information You Provide Directly

• Full name as shown on official identification documents;
• Date of birth and MyKad or passport number;
• An active email address and mobile phone number;
• Current residential address and postcode;
• Bank account details, debit card numbers, or digital wallet information for transaction purposes;
• KYC supporting documents such as a copy of your MyKad, utility bill, or recent bank statement.

B. Information Collected Automatically

• Your IP address, browser type, and device operating system;
• Login session data including time, duration, and approximate location;
• Betting history, games accessed, and transaction records on the platform;
• Cookie data and device identifiers that help recognise your session;
• Technical error logs and application performance information for system maintenance purposes.

C. Information from Third-Party Sources

• Identity verification from our appointed KYC service providers;
• Credit check or financial risk assessment information conducted by payment providers;
• Security data from fraud prevention services integrated with our platform.

3. How We Use Your Information

Every piece of information we collect has a clear and specific purpose. vwin21 does not use your data for anything unrelated to platform operations. The following are the primary purposes for which your data is used:

For marketing communications such as promotional emails and offer notifications, you may opt out at any time by contacting our support team. This choice will not affect your account's core services.

4. Sharing Information with Third Parties

Vwin21 does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. However, there are limited situations where we need to share your information with others to keep the platform running properly:

• Payment service providers — to process your deposits and withdrawals via DuitNow, FPX, TnG, Boost, and GrabPay;
• KYC service providers — to verify your identity as part of the compliance process;
• Gaming service providers — third-party Slot Games and Live Casino providers that require minimum session information for game operations;
• Statutory authorities — when required by law, court order, or a legitimate regulatory authority;
• Fraud prevention services — a security system that helps identify suspicious activity to protect your account.

All third-party service providers we engage are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes. They are not authorised to process your data for any other reason.

5. Data Security Measures

Protecting your data from unauthorized access, leaks, or misuse is vwin21's top technical priority. We continuously invest in security infrastructure to ensure your information remains protected at all times. Our security measures include:

• 256-bit SSL/TLS Encryption for all data transmitted between your browser and our servers;
• Data encryption at the database level — sensitive information such as card numbers and KYC documents is stored in encrypted form;
• Two-factor authentication (2FA) available to all member accounts as an additional layer of security;
• 24/7 security monitoring by our internal cybersecurity team and automated threat detection systems;
• Network segregation — payment processing servers and personal data are physically and logically separated;
• Regular security audits by an independent certified third-party firm;
• Internal access control programme ensuring that only authorised personnel can access sensitive data, with every access logged and audited.

6. Cookies and Tracking Technologies

Vwin21 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise your browser and remember your preferences.

The types of cookies we use are as follows:

• Essential Cookies — required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform usability;
• Performance Cookies — collects analytical data on how members use the platform to help us improve functionality and performance;
• Functional Cookies — stores your preferences such as language, region, and display settings for a more convenient future experience;
• Analytics Cookies — used by analytics tools such as Google Analytics to understand traffic patterns and user behaviour in aggregate, anonymous form.

You can manage or delete cookies through your browser settings at any time. Disabling certain cookies may affect platform functionality, particularly features that rely on session tracking.

7. Data Retention Period

Vwin21 retains your personal information only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal requirements. The following are our data retention guidelines:

• Active account data — retained for the duration your account is active and up to 7 years after account closure to comply with financial record-keeping and AML requirements;
• KYC Documents — retained for a minimum of 5 years after the business relationship ends, in line with anti-money laundering legal requirements;
• Transaction records — retained for 7 years for tax compliance and financial audit purposes;
• Security and access logs — retained for 90 days on a rolling basis for security incident investigation purposes;
• Support communication data — retained for 2 years for reference and service improvement purposes.

Once the retention period expires, your data will be securely deleted or anonymised using established procedures to ensure it cannot be recovered. You may also request early deletion by contacting our team, subject to legal compliance requirements that may necessitate retaining certain data.

8. Your Rights as a Data Subject

As a vwin21 member, you are entitled to rights protected under Malaysia's PDPA regarding your personal data. vwin21 fully respects these rights and provides straightforward mechanisms for you to exercise them: