Privacy Policy
AsianWin Platform

AsianWin ("AsianWin", "we", "us", "our") is the operator of the online gaming platform accessible at https://asianwin.cam (the "Platform"). We are committed to protecting the privacy and personal data of all players, visitors, and users ("you", "your") who interact with our Platform.

This Privacy Policy describes how AsianWin collects, processes, stores, shares, and protects personal data in connection with your use of the Platform, in accordance with the privacy obligations under our international licensing framework and general internationally recognised data protection standards.

By registering an Account, accessing the Platform, or submitting personal data to us in any form, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue your use of the Platform immediately.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

AsianWin collects personal data that is necessary, relevant, and proportionate to the purposes for which it is used. We do not collect special category sensitive data (such as racial or ethnic origin, religious beliefs, or health information) except where strictly required for responsible gambling enforcement (e.g., self-exclusion records).

The categories of personal data we may collect include:

Personal data is collected through the following channels:

• Direct Submission: Information you provide when you register an Account, complete KYC verification, deposit funds, contact support, or otherwise interact with Platform forms and interfaces.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device fingerprint, browser metadata, cookies, and session activity logs.
• Payment Providers: Transaction confirmation and payment method verification data received from our integrated Malaysian payment processors, including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency processing services.
• Identity Verification Services: Data returned by third-party KYC and document verification platforms used to validate the authenticity of identity documents submitted by Players.
• Fraud Prevention Services: Risk scoring and device reputation data from third-party fraud detection providers used to protect Platform integrity.

AsianWin processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to perform the contract between you and AsianWin, including account management, payment processing, and game result recording.
• Consent: Where you have provided explicit, freely given, informed consent, such as for the receipt of promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, KYC obligations under our licensing framework, and mandated data retention periods.
• Legitimate Interests: Processing carried out for AsianWin's legitimate business interests where these interests are not overridden by your rights and freedoms, including fraud prevention, Platform security monitoring, and service improvement analytics.

AsianWin uses the personal data collected for the following specific purposes:

• Creating, managing, and maintaining your Account on the Platform.
• Processing deposits and withdrawals through your chosen Malaysian payment methods (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, BTC, USDT).
• Conducting mandatory KYC identity and age verification prior to withdrawal processing.
• Enforcing the 21+ minimum age requirement and responsible gambling obligations, including monitoring for problematic gambling patterns and administering self-exclusion requests.
• Detecting, investigating, and preventing fraudulent transactions, money laundering, collusion, and other prohibited conduct.
• Administering VIP tier classification and loyalty programme rewards, including birthday bonuses and referral programme tracking.
• Communicating with you regarding your Account, transaction confirmations, security alerts, and support responses.
• Sending promotional communications, where you have expressly opted in to receive such communications.
• Complying with requests from regulatory authorities, law enforcement agencies, or licensing bodies as required by applicable law.
• Analysing aggregated, anonymised usage data to improve Platform performance, game selection, and user experience.

AsianWin does not sell, rent, or commercially transfer your personal data to third parties. We may share personal data with the following categories of recipients strictly on a need-to-know basis and subject to binding confidentiality obligations:

• Payment Processors: Malaysian and international payment gateway operators (including DuitNow/PayNet, eWallet providers, and banking institutions) require transaction data to process deposits and withdrawals. Data shared is limited to what is operationally necessary for each transaction.
• KYC & Identity Verification Partners: Third-party services engaged to verify the authenticity of identity documents submitted during KYC processes. These partners are contractually prohibited from using your data for any purpose beyond verification.
• Fraud Prevention & Security Providers: Services that analyse technical signals (IP address, device fingerprint, behavioural patterns) to detect and prevent fraud and account compromise.
• Regulatory Authorities & Law Enforcement: AsianWin is required under its licensing obligations to report suspicious transactions and cooperate with investigations by competent authorities. Such disclosures are made strictly as required by law.
• Legal & Professional Advisers: Lawyers, auditors, and compliance consultants who require access to data to provide professional services to AsianWin, subject to professional confidentiality obligations.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. Affected Players will be notified in advance where practicable.

AsianWin uses cookies and similar tracking technologies (collectively, "Cookies") to operate the Platform effectively, maintain security, remember your preferences, and understand how the Platform is used. Cookies do not contain executable code and cannot be used to access data stored on your device beyond what was placed by the cookie itself.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair the functionality of the Platform and may prevent you from accessing your Account. AsianWin does not use cookies for cross-site advertising tracking or retargeting purposes.

AsianWin implements a comprehensive multi-layer information security programme to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

• Encryption in Transit: All data transmitted between your device and our servers is protected using TLS 1.3 (Transport Layer Security), the current industry standard for secure communications.
• Encryption at Rest: All personal data stored in our databases is encrypted at rest using AES-256, ensuring that data is unreadable even in the event of unauthorised physical or logical access to storage media.
• Access Controls: Access to personal data systems is strictly role-based, with the principle of least privilege enforced. All access to production data environments is logged, monitored, and subject to regular audit.
• Two-Factor Authentication: Internal system access for AsianWin personnel requires multi-factor authentication. We also strongly recommend that Players enable two-factor authentication on their own Accounts.
• Regular Security Audits: AsianWin engages independent third-party cybersecurity specialists to conduct penetration testing and vulnerability assessments on a regular basis.
• Incident Response: AsianWin maintains a documented data breach response plan. In the event of a personal data breach that is likely to result in a risk to affected individuals, AsianWin will notify impacted Players without undue delay.

While AsianWin takes all reasonable measures to protect your personal data, no online transmission or storage system can be guaranteed to be 100% secure. Players are responsible for maintaining the confidentiality of their own Account credentials and for notifying AsianWin immediately at [email protected] upon becoming aware of any unauthorised access.

AsianWin retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, licensing, or regulatory obligations. The following retention principles apply:

• Active Accounts: Personal data associated with an active Account is retained for the duration of the Account relationship and for a period of five (5) years following Account closure, to satisfy AML regulatory requirements and potential dispute resolution needs.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission, or longer where required by our licensing jurisdiction's AML framework.
• Transaction Records: Financial transaction logs are retained for a minimum of five (5) years to comply with anti-money laundering and audit requirements.
• Support Communications: Customer support records are retained for a period of three (3) years following the close of the relevant interaction, for quality assurance and dispute resolution purposes.
• Self-Exclusion Records: Records of self-exclusion requests are retained for a minimum of seven (7) years to prevent inadvertent re-registration by excluded players.
• Marketing Preferences: Opt-out records are retained indefinitely to ensure compliance with your expressed preferences.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained for longer periods for statistical and analytics purposes, where no individual can be identified from the retained data.

Subject to applicable law and legitimate limitations (such as our legal data retention obligations), you have the following rights with respect to your personal data held by AsianWin:

To exercise any of the rights above, please submit a written request to [email protected], clearly identifying yourself, the right you wish to exercise, and the specific data concerned. Requests will be acknowledged within five (5) business days and resolved within thirty (30) calendar days. Where a request is complex or numerous, this period may be extended by a further sixty (60) days, of which you will be informed.

AsianWin operates under an international licensing framework, and some of our data processors — including KYC verification services, fraud prevention platforms, and cloud infrastructure providers — may process or store personal data in jurisdictions outside Malaysia.

Where such international transfers occur, AsianWin ensures that appropriate safeguards are in place to provide an equivalent level of data protection, including through the use of contractual data processing agreements incorporating standard data protection clauses, and by engaging only with processors that maintain internationally recognised security standards.

Players acknowledge that the privacy laws of the jurisdiction in which AsianWin operates may differ from those of Malaysia. AsianWin does not make representations regarding the adequacy of data protection under Malaysian law for cross-border transfers, and players who have specific concerns regarding international transfers may contact us at the address provided in Section 15.

AsianWin does not knowingly collect personal data from persons under the age of 21 years. The Platform is strictly intended for adults aged 21 and above, in accordance with the minimum age requirement enforced by AsianWin's international licensing authority.

AsianWin employs mandatory age verification procedures at the point of registration and prior to withdrawal processing to enforce this requirement. Any Account found, upon completion of KYC verification, to belong to a person under the age of 21 will be immediately closed, all balances will be forfeited, and all associated personal data will be deleted in accordance with our legal obligations.

AsianWin reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services offered on the Platform. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision.

Material changes — defined as changes that substantially affect how we process your personal data or that diminish your rights — will be communicated to registered Players via Account notification or prominent notice on the Platform at least fourteen (14) days prior to the change taking effect, where practicable.

Your continued use of the Platform following the effective date of a revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you disagree with material changes, you may close your Account and request deletion of your personal data in accordance with Section 11 of this Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by AsianWin, please contact our Data Protection team through the following channels. All privacy-related enquiries are treated with strict confidentiality.

When submitting a data subject rights request, please provide sufficient information to allow us to verify your identity before disclosing or modifying any personal data. This verification step is required to protect against unauthorised requests and is not intended to be a barrier to exercising your rights.