1
Introduction
betwinner ("Company", "we", "us", "our") operates the website at https://betwinner.casa and all associated subdomains and digital interfaces (the "Platform"). We are committed to protecting the personal information of all users ("User", "you", "your") who access the Platform.
This Privacy Policy has been prepared to help you understand what personal data we collect, why we collect it, how it is processed and stored, with whom it may be shared, how long it is retained, and what rights you hold in relation to your information. This Policy forms part of the overall agreement between you and betwinner, and should be read together with our Terms & Conditions.
By creating an account, depositing funds or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.
Malaysian users: betwinner is an English-language platform serving Malaysian users. Personal data you provide is handled in accordance with the principles set out in this Policy. You are entitled to request access to, correction of, or deletion of your data subject to the conditions described in Section 10 of this Policy.
2
Definitions
The following terms carry the meanings assigned below wherever they appear in this Privacy Policy:
| Term | Meaning |
|---|
| "Personal Data" |
Any information that identifies or can reasonably be used to identify a natural person, directly or indirectly. |
| "Processing" |
Any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction. |
| "Data Controller" |
betwinner, which determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" |
A third party that processes personal data on behalf of betwinner under a written agreement and in accordance with betwinner's instructions. |
| "Cookies" |
Small text files placed on a User's device by the Platform's server to enable functionality, preference retention and analytics. |
| "KYC Data" |
Identity and address verification documents collected as part of the Know Your Customer compliance process, including government-issued identification, proof of address and, where required, selfie verification. |
| "Sensitive Data" |
A subset of personal data that warrants heightened protection, including financial account details, identity document numbers and data relating to health or responsible gambling self-assessments. |
3
Data We Collect
betwinner collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third-party verification and payment service providers. The categories of data collected include the following:
| Category | Examples | Collection Method |
|---|
| Identity Data |
Full legal name, date of birth, nationality, gender, government-issued ID number |
Registration form; KYC verification |
| Contact Data |
Email address, mobile number, residential address, city (e.g. Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru) |
Registration form; account settings |
| Financial Data |
Deposit and withdrawal transaction records, payment method identifiers (e.g. Touch 'n Go eWallet account reference, DuitNow ID, Maybank or CIMB account details), MYR balance history |
Payment processing; account ledger |
| KYC Documents |
Scanned copies of Malaysian identity card (MyKad), passport, utility bills, bank statements used as proof of address |
KYC verification portal |
| Technical Data |
IP address, device type, browser type and version, operating system, screen resolution, time zone |
Automatic collection via server logs and cookies |
| Usage Data |
Pages visited, features used, session duration, bet history, game play records, search queries within the Platform |
Automatic collection via analytics tools |
| Communication Data |
Records of live chat transcripts, support email correspondence, feedback submissions |
Customer support interactions |
| Responsible Gambling Data |
Self-exclusion requests, deposit limit settings, session limit preferences, problem gambling self-assessment responses |
Account settings; support interactions |
We do not collect: full payment card numbers, card CV codes or online banking passwords. Payment transactions are processed through certified third-party payment gateways. betwinner receives only tokenised references and transaction status confirmations.
5
How We Use Your Data
Personal data collected through the Platform is used for the following purposes:
- Account management: Creating, maintaining and administering your betwinner account, including processing deposits and withdrawals in MYR via supported Malaysian payment channels.
- Identity verification: Conducting KYC checks to confirm that you meet the minimum age requirement of 21 years and to verify your identity in accordance with applicable compliance obligations.
- Transaction processing: Facilitating and recording financial transactions through payment providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong.
- Fraud and security: Detecting, investigating and preventing fraudulent activity, abuse of promotional offers, money laundering and other prohibited conduct as defined in the Terms & Conditions.
- Customer support: Responding to your queries, resolving disputes, processing complaints and managing account assistance requests through live chat and email channels.
- Responsible gambling: Monitoring account activity to identify indicators of problem gambling behaviour, enforcing self-exclusion periods and deposit limits, and communicating responsible gambling resources where appropriate.
- Marketing communications: Sending promotional emails, bonus notifications and platform updates where you have consented to receive such communications. You may withdraw marketing consent at any time.
- Platform improvement: Analysing aggregated usage data to improve the performance, design and functionality of the Platform for all Malaysian users.
- Legal compliance: Meeting record-keeping, reporting and disclosure obligations under applicable laws and responding to lawful requests from regulatory or law enforcement authorities.
6
Data Sharing and Disclosure
betwinner does not sell, rent or trade your personal data to third parties for their independent marketing purposes. Your data may be shared with third parties only in the following circumstances:
- Payment service providers: Financial data necessary to process deposits and withdrawals is shared with certified payment processors and banking partners, including those supporting DuitNow, FPX and e-wallet channels.
- KYC and identity verification providers: Identity documents and verification data are shared with accredited KYC service providers solely for the purpose of confirming your identity and age.
- Fraud prevention and security partners: Technical data and account behaviour information may be shared with fraud detection service providers to protect the integrity of the Platform.
- IT and infrastructure providers: Service providers who host, maintain and operate the technical infrastructure of the Platform under strict data processing agreements.
- Legal and regulatory authorities: Personal data may be disclosed to regulators, law enforcement agencies, courts or other government bodies where betwinner is legally required to do so, or where disclosure is necessary to protect the rights, property or safety of betwinner, its Users or the public.
- Business transfers: In the event of a merger, acquisition, restructuring or sale of all or part of betwinner's business, personal data held at the time of transfer may form part of the transferred assets, subject to the same privacy protections described in this Policy.
Data processing agreements: All third-party service providers who process personal data on behalf of betwinner are required to enter into written data processing agreements confirming that they will handle your data solely in accordance with betwinner's instructions and applicable data protection standards.
7
Cookies and Tracking
betwinner uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files placed on your device when you visit the Platform. They do not grant access to your device or to other data stored on it.
The types of cookies used on the Platform are as follows:
| Cookie Type | Purpose | Duration |
|---|
| Strictly Necessary |
Essential for Platform functionality including session management, authentication and security. Cannot be disabled without disrupting Platform use. |
Session / up to 30 days |
| Functional |
Remember your preferences such as language settings, display options and last-used payment method to improve your experience across sessions. |
Up to 12 months |
| Analytics |
Collect aggregated, anonymised data about how Users navigate the Platform to help betwinner identify performance issues and improve the user experience. |
Up to 24 months |
| Security |
Support fraud detection and account protection by identifying unusual login patterns or suspicious device behaviour. |
Session / up to 90 days |
Most web browsers allow you to control cookie settings through browser preferences. Disabling strictly necessary cookies will affect Platform functionality. Disabling analytics or functional cookies will not prevent you from using the Platform but may reduce the quality of your experience.
8
Data Retention
betwinner retains personal data for no longer than is necessary for the purposes for which it was collected, subject to legal, regulatory and operational requirements. The following general retention guidelines apply:
- Account data: Retained for the duration of your active account relationship with betwinner, plus a minimum of five years following account closure to meet applicable record-keeping obligations.
- KYC and identity documents: Retained for a minimum of five years from the date of collection or the date of the last transaction, whichever is later in accordance with anti-money laundering record-keeping requirements.
- Transaction records: Retained for a minimum of five years from the date of each transaction.
- Support communications: Retained for a minimum of two years from the date of the last communication in each support thread.
- Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of consent having been obtained.
- Responsible gambling records: Self-exclusion requests and limitsetting records are retained for the duration of the exclusion period plus five years to prevent re-registration in breach of exclusion terms.
At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.
9
Data Security
betwinner implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or alteration. These measures include:
- Encryption of data in transit using industry-standard TLS protocols across all Platform connections.
- Encryption of sensitive data at rest within betwinner's database infrastructure.
- Access controls limiting data access to authorised personnel on a strict need-to-know basis, with audit logging of all access events.
- Two-factor authentication requirements for internal administrative access to systems holding personal data.
- Regular vulnerability assessments and penetration testing conducted by independent security specialists.
- Formal data breach response procedures, including internal notification protocols and, where applicable, regulatory notification within required timeframes.
User responsibility: While betwinner applies robust security measures, you are responsible for maintaining the confidentiality of your account credentials. Do not share your password or one-time verification codes with any third party. If you suspect unauthorised access to your account, contact support immediately at [email protected].
10
Your Rights
Subject to applicable law and certain limitations, you hold the following rights in relation to the personal data betwinner holds about you. Requests may be submitted to[email protected] with the subject line "Data Rights Request".
👁
Right of Access
You may request a copy of the personal data betwinner holds about you and information about how it is processed.
✏️
Right of Rectification
You may request correction of inaccurate or incomplete personal data. Some corrections may require supporting documentation.
🗑️
Right of Erasure
You may request deletion of your personal data where it is no longer necessary for its original purpose, subject to legal retention obligations.
⏸️
Right to Restrict Processing
You may request that processing of your data be restricted in certain circumstances, such as while rectification request is being resolved.
📦
Right to Data Portability
Where processing is based on consent or contract, you may request that your data be provided to you in a structured, commonly used machine-readable format.
🚫
Right to Object
You may object to processing based on legitimate interests, including profiling, and to the use of your data for direct marketing purposes at any time.
betwinner will respond to verified data rights requests within a reasonable timeframe and in any case within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further 30 days with prior notification. Requests that are manifestly unfounded or excessive may be refused with written reasons.
11
Minors
The Platform is strictly intended for individuals aged21 years and above. betwinner does not knowingly collect personal data from persons under the age of 21. If you are under 21 years of age, you must not use the Platform or provide any personal information to betwinner.
Where betwinner becomes aware or has reasonable grounds to believe that personal data has been collected from a person under the minimum age, that data will be deleted promptly and the associated account will be closed without delay. Any funds deposited by an underage user will be handled in accordance with applicable legal requirements.
If you are a parent or guardian and believe that a person under 21 in your care has registered an account or provided personal data to betwinner, please contact us immediately at [email protected].
12
Third-party Services
The Platform may reference or integrate with third-party services, including payment processors and KYC verification providers. betwinner does not control the privacy practices of third-party services and is not responsible for the content of their privacy policies.
Where third-party services are used as data processors acting on betwinner's instructions, they are bound by written data processing agreements as described in Section 6. Where third parties operate as independent data controllers — for example, your bank or e-wallet provider processing a DuitNow or FPX transaction — their own privacy policies govern how they handle your data.
betwinner recommends that you review the privacy policies of any payment service providers you use in connection with your betwinner account, including Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay and other relevant providers.
13
International Transfers
In the course of operating the Platform, personal data may be transferred to, stored in, or processed in countries other than Malaysia. Where such transfers occur, betwinner takes reasonable steps to ensure that your personal data receives an equivalent level of protection to that afforded under applicable Malaysian data protection principles.
Protective measures for international transfers may include contractual clauses requiring recipient organisations to apply data protection standards consistent with this Policy, and technical safeguards including encryption of data in transit.
14
Policy Amendments
betwinner reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or operational requirements. Material changes will be communicated to registered Users via email notification or a prominent notice on the Platform prior to or upon the change taking effect.
The date displayed in the "Last updated" badge at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how betwinner protects your personal information.
Your continued use of the Platform after any amendment to this Policy constitutes your acknowledgement of the updated terms. If you do not accept the revised Policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.
15
Contact Us
If you have questions about this Privacy Policy, wish to exercise a data rights request, or need to report a privacy concern, please contact the betwinner privacy team through the following channels:
- Privacy and data enquiries email: [email protected] — include "Privacy Request" in the subject line for prompt routing.
- Live chat support: Available 24 hours a day, 7 days a week through the Platform.
- Response target: Data rights requests acknowledged within 5 business days; resolved within 30 days of receipt where possible.
For responsible gambling-related data queries — including requests relating to self-exclusion records or responsible gambling limit history — please include "Responsible Gambling Data" in your message to ensure it is routed to the appropriate team without delay.