Privacy Policy Datowin – Your Data Is Safe With Us

Datowin is an online gaming platform operating in Malaysia, offering fish shooting games, slots, table games, and various other games to eligible players. In our daily operations, we collect and process certain personal information from players to enable us to deliver quality, secure, and responsible services.

This Privacy Policy applies to all information collected through datowin.app, the Datowin mobile app (Android and iOS), and any official communication channels including Live Chat, support email, and social media platforms managed by Datowin.

This Policy should be read together with our Terms and Conditions and Responsible Gaming Policy. These three documents collectively form the comprehensive agreement between you as a player and Datowin as the platform operator.

Datowin collects various types of personal information depending on your interactions with our platform. Below is a comprehensive overview of the data types we collect and the purposes for collection:

We only collect data that is strictly necessary for the stated purposes. This data minimisation principle ensures we do not gather excessive or irrelevant information in the operation of the datowin platform.

The personal information we collect is used solely for lawful purposes directly related to the operation of the datowin platform. We do not use your data for any other purpose without first obtaining your additional consent.

The primary purposes for which your personal data is used are as follows:

• Account Management: Creating, verifying, and maintaining your gaming account, including the KYC process to comply with regulatory requirements.
• Transaction Processing: Processing deposits and withdrawals accurately and securely through payment methods supported by datowin.
• Customer Support: Handling your inquiries, complaints, and support requests across all available support channels.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access, and other suspicious activity.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of addiction and providing appropriate assistance.
• Legal Compliance: Fulfilling reporting obligations to the relevant authorities in accordance with applicable Malaysia legislation.
• Service Improvement: Analysing platform usage patterns to enhance the gaming experience and develop new features.
• Marketing Communications: Sending promotional information and exclusive offers to players who have consented to receive such communications.

Datowin does not sell or rent your personal data to any third party for commercial purposes. However, in the course of operating the platform, we may share certain information with carefully selected service partners, solely to enable them to provide related services to Datowin.

The parties who may receive your personal data are as follows:

• Payment Processors: Payment service providers such as banks, e-wallet operators, and payment gateways that process your financial transactions — only the information necessary to complete the transaction is shared.
• Game Software Providers: Game developers supplying game content on the datowin platform — data shared is limited to the technical information required to run the games.
• Technology Service Providers: Companies that provide cloud infrastructure, data hosting, and cybersecurity services supporting our platform's operations.
• Relevant Authorities: Government agencies, regulatory bodies, or law enforcement authorities requiring information pursuant to a court order or valid legal obligation.
• Audit & Compliance Companies: Independent audit firms and compliance bodies that verify the integrity of our gaming systems and financial processes in accordance with industry standards.

All third parties receiving datowin players' personal data are bound by strict confidentiality agreements and are required to comply with data protection standards equivalent to datowin's own practices. We conduct regular reviews of all our service partners to ensure ongoing compliance.

Protecting your personal data from unauthorised access, loss, misuse, or disclosure is datowin's highest priority. We continuously invest in the latest cybersecurity infrastructure to ensure our platform remains resilient against ever-evolving digital threats.

The key security measures we implement include:

• End-to-end data encryption using TLS 1.3 protocol for all communications between clients and servers.
• Static data encryption using AES-256 for all personal and financial information stored in our database.
• Two-factor authentication (2FA) is available for all player accounts as an additional layer of security.
• Real-time security threat monitoring 24 hours a day, 7 days a week by our cybersecurity team.
• Regular security audits by internationally accredited independent firms to identify and address system vulnerabilities.
• Strict role-based access controls ensure that only authorised staff can access the player data required for their specific duties.
• A mandatory information security training program attended by all datowin staff on a regular basis.

While we take all reasonable steps to protect your data, no system can guarantee absolute 100% security. We therefore encourage players to also take personal protective measures such as using strong passwords, not sharing login credentials, and ensuring that devices used to access datowin are always updated with the latest security patches.

Datowin uses cookies and similar tracking technologies to enhance user experience, analyze usage patterns, and ensure the security of your login session. Cookies are small text files stored on your device when you visit our platform.

The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login authentication, gaming session management, and transaction security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymous information about how players use our platform, including the most frequently visited pages and reported errors, to help us improve our services.
• Functional Cookies: Remembering your personal preferences and settings such as language, display theme, and last in-game location to provide a more personalised experience.
• Analytics Cookies: Helping us understand aggregate user behaviour through trusted third-party analytics tools, enabling us to make data-driven decisions to improve the platform.

You can manage your cookie preferences through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and performance of the Datowin platform on your device.

As a datowin player, you have the following rights regarding your personal data, in accordance with the provisions of Malaysia's Personal Data Protection Act 2010:

To exercise any of the above rights, please contact our customer support team via Live Chat or email at [email protected]. We will process your request within 30 calendar days. For complex requests, this period may be extended by up to 60 days with notice to you.

Datowin retains players' personal data only for as long as necessary to fulfil the original purpose of collection or to meet legal obligations, whichever is longer. Once data is no longer required, we will securely delete or anonymise it.

Our data retention period guidelines are as follows:

• Active Account Data: Retained for the duration your account is active and for 7 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's Anti-Money Laundering Act 2001.
• KYC Documents: Retained for the lifetime of the account and 5 years after account closure in accordance with regulatory requirements.
• Communication Logs: Customer support records are retained for 2 years for quality control and dispute resolution purposes.
• Analytics Data: De-identified and aggregated usage data may be retained indefinitely for business analytics purposes.

The datowin platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. If we discover that we have collected personal data from someone below the specified age limit, we will take the following steps immediately:

• Suspending the account immediately for further investigation.
• Deleting all personal data associated with the account.
• Returning any remaining account balance according to the appropriate procedure.
• Reporting the case to the relevant authorities where necessary.

Parents or guardians who suspect their child under the age of 18 has registered and used the Datowin platform are advised to contact our support team immediately via Live Chat or email at [email protected] for prompt action.

Datowin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data management practices, new legal requirements, or service improvements. All material amendments will be communicated to players through the following channels:

• In-account notifications on your datowin platform that require acknowledgement of receipt.
• Email to your registered account address at least 14 days before the amendment takes effect.
• A statement prominently displayed on the datowin platform's homepage.

The "Updated" date shown at the top of this page will always reflect the latest version of this Privacy Policy. Your continued use of the datowin platform after the effective date of any amendment constitutes your acceptance of the latest version of this Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we manage your personal data, please contact datowin's Data Protection Officer (DPO) through the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the datowin platform
• Response Time: Within 3 business days for general enquiries; 30 days for formal data rights requests

We are committed to handling every inquiry thoroughly and professionally. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Personal Data Protection Department or the relevant regulatory body.