Privacy Policy ClubWin – Personal Data Protection for Malaysian Players

Introduction and Scope of This Policy

This Privacy Policy describes how ClubWin ("we", "Platform", "company") collects, processes, stores, and protects your personal data when you use our website and applications. This applies to all users who register, browse, or interact with the ClubWin platform in any capacity.

We are committed to ensuring your privacy is fully protected. This policy has been formulated in accordance with the requirements of Malaysia Personal Data Protection Act 2010 (PDPA) and international industry best practices in personal data management.

By using the ClubWin platform, you agree to the collection and use of information as described in this policy. If you disagree with any part of this policy, please discontinue use of the platform and contact us to close your account.

Personal Data We Collect

ClubWin only collects data that is strictly necessary to provide you with a safe and efficient service. We do not collect excessive or irrelevant data beyond what is required for platform operations.

Data You Provide Directly

Automatically Collected Data

When you use the ClubWin platform, our systems automatically record certain technical information including your device's IP address, browser type, operating system, pages visited, time of visit, and actions performed on the platform. This data is used solely for security, fraud detection, and improving user experience.

How We Use Your Data

The data we collect is used for specific and lawful purposes. ClubWin does not use your data for any purpose outside the scope stated below without first obtaining your consent.

• Account management: Creating, verifying, and securely managing your account on the clubwin platform
• Transaction processing: Processing deposits, withdrawals, and all financial transactions accurately and securely
• Legal compliance: Meeting KYC requirements, anti-money laundering (AML) compliance, and reporting obligations to the relevant authorities
• Platform security: Detecting and preventing fraud, unauthorized access, and suspicious activity
• Customer support: Providing effective assistance when you contact our support team
• Service improvement: Analyzing usage patterns to improve platform performance and user experience
• Important communications: Sending notifications related to your account, security, and changes to terms that you need to be aware of

Data Sharing and Disclosure

ClubWin does not share, sell, or disclose your personal data to third parties except in the following circumstances permitted by law:

Third-Party Service Providers

We work with trusted service providers to help operate the platform, including payment processors, security-certified cloud hosting providers, and identity verification service providers. All such providers are bound by strict data confidentiality agreements and are only permitted to use your data for the purposes we specify.

Legal Obligations

ClubWin may need to disclose certain data to competent authorities when required by Malaysian law, court order, or relevant regulatory bodies. We will notify you of any such disclosure unless prohibited from doing so by law.

Business Transfer

If clubwin is involved in a merger, acquisition, or asset sale, user data may be transferred as part of those assets. In such cases, you will be notified in advance and the new privacy policy will be presented to you for review.

Data Security and Protection

The security of your personal data is clubwin's highest priority. We continually invest in the latest security infrastructure to ensure your data is always protected against cyber threats.

Security measures we employ include:

• 256-bit SSL Encryption for all data transmitted between your device and ClubWin servers
• Data encryption at rest – all sensitive information is stored in encrypted format on our servers
• Two-factor authentication (2FA) available for all accounts as an extra layer of security
• 24/7 security monitoring by our cybersecurity team to detect and address threats
• Regular security audits by independent third parties to verify the platform's security standards
• Strict Access Controls – only authorised personnel may access users' personal data, and every access is logged for audit purposes

Cookies, Analytics and Tracking Technologies

ClubWin uses cookies and similar technologies to enhance user experience and ensure the platform functions smoothly. Cookies are small text files stored on your device when you visit our platform.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how users interact with the platform to help us identify areas for improvement.
• Preference Cookies: Saving your preferences such as language and display settings so you do not have to reconfigure them each time.

You can manage or delete cookies through your web browser settings. However, disabling certain cookies may affect your experience on the ClubWin platform.

Your Rights Over Personal Data

Under the Malaysia PDPA and ClubWin's privacy policy, you have the following rights regarding your personal data. You may submit requests related to these rights to our support team via live chat or email.

• Right of AccessYou have the right to obtain a copy of the personal data we hold about you. Requests will be processed within 14 business days.
• Right to RectificationIf any data we hold is inaccurate or outdated, you have the right to request a correction. We will update our records within 7 business days.
• Right to ErasureYou may request the deletion of your personal data in certain circumstances, subject to our legal obligations to retain specific records.
• Right to Object to ProcessingYou have the right to object to the processing of your personal data for direct marketing purposes at any time, without needing to provide a reason.
• Right to Data PortabilityYou may request your personal data in a machine-readable format for transfer to another service provider should you choose to do so.
• Right to Restrict ProcessingIn certain situations, you may request that we restrict the processing of your data while a dispute or request is being resolved.

Data Retention Period

ClubWin retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal requirements. The following are our general data retention guidelines:

• Active account data: Retained for the duration your account is active, plus 5 years after account closure for audit and legal compliance purposes
• Financial transaction records: Retained for 7 years in line with Malaysian legal requirements for financial records
• KYC documents: Retained for 5 years after the business relationship ends
• Security and access logs: Retained for 12 months for threat detection and security incident investigation purposes
• Support communication data: Retained for 3 years for service reference and improvement

Once the relevant retention period ends, your data will be securely deleted using procedures that ensure it cannot be recovered.

Child Protection

ClubWin is a platform exclusively for individuals aged 18 years and above only. We do not intentionally collect personal data from children below this age limit.

If we discover that personal data of a child has been collected without our knowledge, we will immediately take steps to delete that data and close the associated account. Parents or guardians who suspect their child has registered on our platform are encouraged to contact our support team right away.

Contact Us About Privacy

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, the clubwin privacy team is here to help.

You can reach us via:

• Live chat: Available on the platform 24/7 for instant responses
• Email: [email protected] (response within 2 business days)
• FAQ Page: Visit FAQ page for answers to frequently asked questions

All privacy rights requests will be responded to within the timeframe set by Malaysia's PDPA. We are committed to handling every inquiry thoroughly, professionally, and with respect for your needs.