Win28 is committed to protecting the personal data of every player who registers and transacts on our platform. This Privacy Policy explains what data we collect, why we collect it, how it is used, and the rights you hold over your own information. Please read this document carefully.
These cards highlight Win28's core privacy commitments to Malaysian players. They are a summary only — the full binding policy is contained in the legal document below.
Win28 collects only the personal data that is strictly necessary for account registration, identity verification (KYC), transaction processing, and regulatory compliance. We do not collect data speculatively or for undisclosed purposes.
Win28 does not sell, rent, or trade your personal data to any third party for commercial purposes. Data shared with third parties is limited to what is required deliver our services — payment processors, KYC providers, and our international licensing authority.
All data transmitted between your device and Win28's servers is protected by 256-bit SSL/TLS encryption. Stored account information — including payment details, identity documents, and transaction histories — is held on secured, access-controlled infrastructure.
You have the right to access, rectify, restrict the processing of, or request erasure of your personal data at any time. Win28 will respond to all data subject requests within 30 days. Contact our support team to exercise any of your privacy rights.
Win28 uses cookies and similar tracking technologies solely to improve platform performance, personalise your experience, and support our fraud prevention systems. You can manage your cookie preferences through your browser settings at any time.
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and our international gaming licence obligations. Upon Account closure, data is held for the legally mandated minimum period before secure deletion.
As a Win28 player, you hold a defined set of rights over your personal data. Win28 is committed to honouring every valid data subject request promptly.
Request a copy of the personal data Win28 holds about you. We will provide this within 30 days of a verified request, in a clear and portable format.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Updates to KYC details may require-verification.
You may request deletion of your personal data. This right is subject to Win28's legal obligations — data required for AML compliance or ongoing dispute resolution cannot be deleted until the relevant retention period expires.
You may request that Win28 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is disputed, or where processing is unlawful but you prefer restriction over erasure.
Where technically feasible, you may request that personal data provided by you be transferred to you or to another controller in a structured, machine-readable format.
You have the right to object to the processing of your personal data where Win28 relies on legitimate interests as its legal basis — including for direct marketing communications.
Where Win28 uses automated processing that produces legal or similarly significant effects on you, you have the right to request human review of that decision and to contest the outcome.
Submit your request to our support team via live chat or email at [email protected]. We will respond within 30 days. Identity verification may be required before we process your request.
This Privacy Policy ("Policy") describes how Win28 ("Win28", "we", "us", "our") collects, uses, stores, and discloses personal data obtained from individuals ("Player", "User", "you") who access or use the Win28 online casino and sports betting platform athttps://win28.cam and all associated services (collectively, the "Platform").
Win28 serves players primarily in Malaysia and values the trust placed in us by every individual who registers an account, makes a deposit, or otherwise engages with our services. We are committed to handling personal data responsibly, transparently, and in accordance with applicable data protection laws, including principles aligned with Malaysia's Personal Data Protection Act 2010 (PDPA) and the standards required under our international gaming licence.
By registering an account with Win28 or by continuing to use our Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to request Account closure.
Important: This Policy should be read together with Win28's Terms & Conditions and Responsible Gambling Policy. In the event of any conflict between this Policy and those documents on privacy-related matters, this Policy shall prevail.
For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or could reasonably identify a living individual, either alone or in combination with other data — including name, identification number, contact details, IP address, and payment information. |
| Processing | Any operation performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction. |
| Data Controller | Win28, which determines the purposes and means of processing your personal data. |
| Data Processor | A third party that processes personal data on behalf of Win28 under a contractual obligation — for example, KYC verification providers, payment gateway operators, and platform hosting services. |
| KYC | Know Your Customer — the identity and age verification process Win28 uses to comply with anti-money laundering (AML) obligations and its international gaming licence requirements. |
| Cookies | Small text files placed on your device by Win28 when you access the Platform, used to maintain session state, personalise content, and support analytics and fraud prevention. |
Win28 collects the following categories of personal data from players:
Win28 collects personal data through the following means:
Win28 processes personal data on the basis of one or more of the following legal grounds:
Personal data collected by Win28 is used for the following purposes:
Win28 does not sell, rent, or otherwise transfer personal data to third parties for their own commercial use. We share personal data only to the extent necessary and only with the following categories of recipients:
All third-party data processors engaged by Win28 are subject to contractual data processing agreements that require them to process personal data only for the specified purpose, to maintain appropriate security standards, and to prohibit further onward transfer without Win28's prior written consent.
Win28 will never disclose your personal data to any third party for advertising, profiling, or direct marketing purposes without your explicit consent.
Win28 uses cookies and similar tracking technologies (collectively "Cookies") on the Platform. Cookies are small data files stored on your device that help us provide a better user experience and support our security and analytics systems.
The following types of Cookies are used on Win28:
You may control non-essential Cookies through your browser settings. Please note that disabling certain Cookies may affect the functionality of the Platform, including the ability to log in or place bets. Win28 does not use third-party advertising Cookies and does not share Cookie data with external advertising networks.
Win28 retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or by the conditions of our international gaming licence. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents re-identification.
Win28 implements a multi-layered security programme to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. The following technical and organisational measures are in place:
While Win28 takes all reasonable precautions, no digital platform can guarantee absolute security. You are responsible for keeping your Account login credentials confidential and for notifying Win28 immediately if you suspect any unauthorised access to your Account.
Win28 is operated under an international gaming licence, and its infrastructure and data processors may be located in jurisdictions outside Malaysia. Where personal data is transferred outside Malaysia to a jurisdiction that does not provide an equivalent level of data protection, Win28 ensures that appropriate safeguards are in place — including contractual data processing agreements that impose data protection obligations on the recipient that are equivalent to those applicable under this Policy.
By using the Win28 Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia for the purposes described in this Policy, subject to the safeguards described above.
Win28 strictly enforces a minimum age of21 years for all registered players. The Platform is not intended for, and Win28 does not knowingly collect personal data from, any individual under the age of 21.
If Win28 becomes aware that personal data has been collected from an individual under 21 years of age, the relevant Account will be suspended immediately, the personal data will be securely deleted or anonymised, and the matter will be reviewed in accordance with our responsible gambling policies. Any deposits made by an underage player will be processed in accordance with applicable law and our Terms & Conditions.
If you have reason to believe that a minor has registered an Account on Win28, please contact our support team immediately at [email protected].
Subject to applicable law and the conditions of Win28's data processing obligations, you hold the following rights with respect to your personal data:
To exercise any of the above rights, submit a written request to our support team via live chat or email. Win28 will respond to all valid data subject requests within 30 calendar days. We may request identity verification before processing a request to protect against fraudulent or unauthorised data access.
Send data rights requests to: [email protected] — please include your full registered name and Account username so we can locate your records promptly.
Win28 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Where a material change is made — one that significantly affects your rights or our data processing activities — we will notify you by email to your registered address and will display prominent notice on the Platform for a minimum of seven (7) days prior to the change taking effect.
Non-material amendments — such as typographical corrections, formatting updates, or minor clarifications — may be made without prior notice. The "Last Updated" date at the top of this page reflects the effective date of the most recent revision.
Your continued use of the Win28 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment, you should cease using the Platform and contact our support team to request Account closure.
If you have any questions, concerns, or complaints about how Win28 handles your personal data, or if you wish to exercise any of your data subject rights, please contact our support team through the following channels:
All privacy-related requests are handled with strict confidentiality by designated members of Win28's compliance team. Players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia can reach us at any time — our support team is available around the clock to assist.
If you are not satisfied with Win28's response to your privacy concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
Our commitment: Your personal data belongs to you. Win28 will always handle it with the care, transparency, and respect it deserves — in accordance with this Policy and the trust you place in us as your online gaming platform of choice in Malaysia.
Our support team is available 24/7 to handle any data-related queries, access requests, or privacy concerns — reach out anytime via live chat or visit our FAQ for quick answers.