1 Introduction
This Privacy Policy ("Policy") is issued by gwin9 ("gwin9", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at gwin9.cam and any associated interfaces or mobile access points. This Policy describes how gwin9 collects, processes, stores, discloses, and protects the personal data of individuals ("you", "User", "Player") who access or use the gwin9 Platform.
gwin9 is committed to handling your personal data with transparency, integrity, and in accordance with applicable data protection legislation. We collect only the data that is necessary to deliver our services, maintain account security, comply with our legal and regulatory obligations, and improve your experience on the Platform.
By creating an account on gwin9, using any part of the Platform, or submitting any personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions.
Quick Summary: gwin9 collects personal data to operate your account, process transactions, verify identity, and comply with applicable laws. We do not sell your data to third parties. You have rights over your data and may contact us at any time to exercise them.
2 Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:
"Personal Data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or one or more factors specific to that person's physical, physiological, or economic identity.
"Data Controller" means the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, gwin9 is the Data Controller in respect of personal data collected through the Platform.
"Data Processor" means any natural or legal person, public authority, agency, or body which processes personal data on behalf of gwin9 as Data Controller.
"Processing" means any operation or set of operations performed on personal data, whether by automated means or otherwise, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, or deletion.
"KYC Data" means identity and age verification documentation submitted by Players in fulfilment of gwin9's Know Your Customer verification requirements, including government-issued identification documents.
"Platform" means the gwin9 website, all associated web pages, mobile interfaces, and any related digital services operated under the gwin9 brand.
3 Personal Data We Collect
gwin9 collects personal data in the categories set out below. We collect only data that is necessary and proportionate to the purposes for which it is collected.
| Category |
Data Types |
Purpose |
| Registration Data |
Full name, date of birth, email address, mobile number, chosen username |
Account creation and identity management |
| KYC / Identity Data |
Malaysian NRIC (front & back), passport copy, selfie verification image |
Age verification, identity verification, AML compliance |
| Financial Data |
E-wallet account identifiers (Touch 'n Go, Boost, GrabPay), FPX bank account details (Maybank, CIMB, Public Bank, Hong Leong), cryptocurrency wallet addresses (BTC/USDT) |
Payment processing, withdrawal verification, fraud prevention |
| Transaction Data |
Deposit amounts, withdrawal amounts, transaction timestamps, payment method used, transaction reference numbers |
Account record-keeping, dispute resolution, AML monitoring |
| Gaming Activity Data |
Game types played, bet amounts, win/loss history, session durations, bonus usage records |
Service delivery, responsible gambling monitoring, platform improvement |
| Technical Data |
IP address, device type, operating system, browser type, session cookies, access timestamps |
Platform security, fraud detection, technical troubleshooting |
| Communications Data |
Live chat transcripts, email correspondence, support ticket content |
Customer support, dispute records, quality assurance |
| Responsible Gambling Data |
Deposit limit settings, loss limit settings, self-exclusion requests, session time limits |
Fulfilment of responsible gambling obligations and player welfare |
Note on Sensitive Data: KYC documents (NRIC, passport copies) are treated as sensitive personal data and are subject to enhanced security controls, restricted access protocols, and defined retention limits.
4 How We Collect Personal Data
gwin9 collects personal data through the following means:
- Direct submission: Information you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, or contacting our support team via live chat, WhatsApp, or email;
- Automated collection: Technical data (IP address, device identifiers, session data) collected automatically when you access and interact with the Platform;
- Cookies and tracking technologies: Session and functional cookies placed on your device when you visit the Platform (see Section 10 for full cookie details);
- Third-party payment processors: Confirmation and transaction reference data returned by payment gateway partners (e.g., DuitNow, FPX, Touch 'n Go eWallet operators) when processing deposits and withdrawals;
- Identity verification services: Where applicable, data returned by third-party KYC verification service providers used to confirm the authenticity of submitted identity documents.
5 Purposes of Data Processing
gwin9 processes your personal data for the following specific purposes:
5.1 Account Management & Service Delivery
To create, maintain, and administer your gwin9 Account; to authenticate your identity upon login; to process deposits and withdrawals; to deliver the gaming and betting services you access through the Platform; and to communicate account-related notifications (e.g., deposit confirmations, withdrawal status updates).
5.2 Identity Verification & KYC Compliance
To verify your identity and confirm that you meet the minimum age requirement of 21 years. KYC verification is a mandatory compliance requirement and is conducted prior to the processing of any withdrawal. gwin9 complies with applicable anti-money laundering (AML) obligations in connection with this processing.
5.3 Financial Transaction Processing
To process, record, and reconcile all deposit and withdrawal transactions on your Account; to match payment method ownership to the verified Account holder identity; and to maintain accurate financial records as required by applicable law.
5.4 Fraud Prevention & Platform Security
To detect, investigate, and prevent fraudulent activity, account abuse, money laundering, collusion, and other prohibited conduct. This includes analysis of IP addresses, device fingerprints, betting patterns, and transaction histories for anomalies indicative of fraudulent behaviour.
5.5 Responsible Gambling Monitoring
To monitor gaming activity against responsible gambling risk indicators; to enforce player-set deposit limits, loss limits, and session time limits; to process self-exclusion requests; and to fulfil our duty of care obligations to Players whose gaming patterns suggest potential harm.
5.6 Customer Support
To respond to enquiries, resolve disputes, process formal complaints, and maintain records of communications with Players for quality assurance and accountability purposes.
5.7 Platform Analytics & Improvement
To analyse aggregate, anonymised platform usage data for the purpose of improving Platform performance, user experience, and game library curation. This processing does not involve identifying individual Players.
5.8 Marketing Communications (where consented)
To send promotional offers, bonus notifications, and event communications where you have provided explicit consent to receive such communications. You may withdraw your marketing consent at any time by contacting support.
6 Legal Basis for Processing
gwin9 processes your personal data on the following legal bases, as applicable to each processing purpose:
- Contractual necessity: Processing required to perform the contract between you and gwin9 — specifically to operate your Account, process transactions, and deliver platform services;
- Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC/AML obligations and record-keeping duties;
- Legitimate interests: Processing undertaken in the legitimate interests of gwin9 and its Players, including fraud prevention, platform security, and responsible gambling monitoring, where those interests are not overridden by your data protection rights;
- Consent: Processing based on your explicit consent, specifically for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
7 Data Sharing & Disclosure
gwin9 does not sell, rent, or trade your personal data to third parties for commercial purposes. We disclose personal data only in the following circumstances and only to the extent necessary:
- Payment service providers: Transaction data shared with approved payment gateway operators (including DuitNow, FPX network banks, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency networks) solely for the purpose of processing deposits and withdrawals;
- KYC and identity verification partners: Identity document data shared with trusted third-party KYC verification service providers operating under strict data processing agreements with gwin9;
- IT and infrastructure service providers: Technical data accessible to contracted data processors who provide hosting, data storage, and platform infrastructure services, subject to confidentiality obligations;
- Regulatory and law enforcement authorities: Personal data disclosed where required by applicable law, court order, or lawful regulatory demand. gwin9 will notify affected Players of such disclosures where legally permitted to do so;
- Fraud prevention networks: Data shared with industry fraud prevention bodies where required to detect or prevent serious financial crime;
- Professional advisers: Personal data accessible to legal counsel, auditors, and compliance advisers under strict professional confidentiality obligations.
No Data Sales — Ever. gwin9 does not and will never sell your personal data to third-party advertisers, data brokers, or any other commercial entity. Your data is used only to operate your Account and comply with our legal obligations.
8 Data Retention
gwin9 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal and regulatory retention requirements. The following general retention periods apply:
- Account and registration data: Retained for the duration of the active Account relationship and for a minimum period of five (5) years following Account closure, in compliance with applicable AML record-keeping requirements;
- KYC documentation: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable law;
- Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction;
- Gaming activity logs: Retained for a period sufficient to meet our responsible gambling monitoring obligations and dispute resolution requirements — typically up to three (3) years from the date of each session;
- Customer support correspondence: Retained for a period of up to three (3) years from the date of the final communication in each support interaction;
- Marketing consent records: Retained until consent is withdrawn, plus a further period sufficient to demonstrate consent was validly obtained.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with gwin9's data disposal procedures.
9 Data Security
gwin9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
- Encryption in transit: All data transmitted between your device and the gwin9 Platform is encrypted using 256-bit SSL/TLS technology;
- Encryption at rest: Sensitive personal data, including KYC documents and financial data, is stored in encrypted form within access-controlled data environments;
- Access controls: Access to personal data is restricted to authorised gwin9 personnel and contracted processors on a strict need-to-know basis, enforced through role-based access control systems;
- Two-factor authentication: All internal administrative systems accessing personal data are protected by multi-factor authentication;
- Regular security audits: The Platform undergoes periodic independent security assessments and penetration testing to identify and remediate vulnerabilities;
- Incident response procedures: gwin9 maintains documented data breach response procedures. In the event of a data breach that is likely to result in risk to affected individuals, gwin9 will notify relevant parties as required by applicable law.
While gwin9 takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account login credentials and for notifying us immediately if you suspect unauthorised access to your Account.
10 Cookies & Tracking Technologies
The gwin9 Platform uses cookies and similar tracking technologies to enable essential platform functionality, maintain your session state, and gather aggregate analytics data. The following categories of cookies are used:
Strictly Necessary Cookies
Essential for the Platform to function correctly. These cookies maintain your login session, enforce security settings, and remember your account preferences. They cannot be disabled without rendering the Platform non-functional. No consent is required for strictly necessary cookies.
Functional Cookies
Used to remember your preferences — such as language settings and deposit method preferences — to provide a more personalised platform experience. These cookies do not track your activity across external websites.
Analytics Cookies
Used to collect aggregate, anonymised data about how Players navigate and interact with the Platform — including which pages are visited most frequently and where technical errors occur. This data is used solely to improve Platform performance and does not identify individual users.
Security Cookies
Used to detect and prevent fraudulent account access, suspicious login patterns, and other security threats. These cookies are strictly necessary for the Platform's fraud prevention capabilities.
You may manage your cookie preferences through your browser settings. Blocking strictly necessary or security cookies may impair the functionality and security of the Platform. Analytics and functional cookies may be disabled without affecting core Platform operation.
11 Your Data Protection Rights
Subject to applicable law, you have the following rights in respect of your personal data held by gwin9. To exercise any of these rights, please contact our support team as set out in Section 16.
Right of Access
Request a copy of the personal data gwin9 holds about you, including what data is held, for what purpose, and who it has been shared with.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held about you. Certain changes require submission of updated supporting documentation.
Right to Erasure
Request deletion of your personal data where processing is no longer necessary, subject to legal retention obligations that may prevent immediate deletion.
Right to Restriction
Request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
Right to Portability
Request a copy of personal data you have provided to gwin9 in a structured, machine-readable format where processing is based on consent or contract.
Right to Object
Object to the processing of your personal data where processing is based on legitimate interests, including objection to marketing communications at any time.
gwin9 will respond to all valid data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further sixty (60) days, of which you will be notified. We may request proof of identity before processing any data rights request.
Limitations: Certain rights are subject to conditions and exceptions under applicable law. For example, gwin9 is legally required to retain KYC and transaction records for a minimum of five (5) years and cannot delete these records in response to an erasure request during the applicable retention period.
12 Children's Privacy & Underage Access
The gwin9 Platform is strictly intended for individuals aged 21 years and above. gwin9 does not knowingly collect, process, or retain the personal data of any individual below the age of 21.
gwin9 enforces mandatory age verification as part of its KYC procedures to prevent underage access to the Platform. Where gwin9 determines — whether through the KYC process or subsequent investigation — that an Account has been created by or used by a person below the age of 21, the Account will be immediately suspended, all personal data associated with the Account will be reviewed, and any funds held will be dealt with in accordance with our Terms & Conditions.
21+ Only. This Platform is not intended for and must not be accessed by persons under the age of 21. If you are aware of a minor accessing this Platform, please contact us immediately.
13 Third-Party Links & Services
The gwin9 Platform may contain references to third-party payment platforms and services — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX-connected banking institutions — which operate their own independent privacy policies and data processing practices.
gwin9 is not responsible for the privacy practices of any third-party payment service providers or financial institutions. When you initiate a deposit or withdrawal via a third-party payment channel, your interaction with that channel is governed by that provider's own privacy policy and terms of service.
We encourage you to review the privacy policies of all third-party services you use in connection with your gwin9 Account, particularly your chosen payment method providers.
14 International Data Transfers
gwin9 may engage contracted data processors — including hosting providers, KYC verification services, and infrastructure support partners — whose operations are located outside Malaysia. In such cases, your personal data may be transferred to and processed in countries outside Malaysia.
Where personal data is transferred internationally, gwin9 ensures that adequate protections are in place through one or more of the following mechanisms:
- Data processing agreements incorporating appropriate contractual safeguards with all contracted processors;
- Transfer to processors located in jurisdictions that maintain adequate data protection standards;
- Implementation of technical and organisational security measures proportionate to the risks associated with the data being transferred.
15 Amendments to This Privacy Policy
gwin9 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The date of the most recent revision is displayed at the top of this page.
Where amendments are material — for example, where we introduce a new category of data processing or a new category of third-party sharing — we will notify registered Account holders via a prominent notice on the Platform or via email to the registered Account address prior to the amendment taking effect.
Continued use of the Platform following the publication of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with any amendment, you should cease using the Platform and contact support to arrange Account closure.
We recommend reviewing this Policy periodically to remain informed of how gwin9 handles your personal data.
16 Contact Us — Data & Privacy Enquiries
If you have any questions, concerns, or formal requests relating to this Privacy Policy, your personal data, or the exercise of your data protection rights, please contact gwin9 through the following channels:
Live Chat Support:
Available 24 hours a day, 7 days a week directly on the gwin9 Platform. Our support agents are available in English, Bahasa Melayu, and Chinese. Average first response time via live chat: 3–5 minutes. For data rights requests, please indicate clearly that your enquiry concerns personal data or privacy.
Email (plain text — not a link):
[email protected]
For formal data rights requests, privacy complaints, or legal correspondence. Please include your registered Account username and a clear description of your request. Target response time: within 4 hours for general enquiries; within 30 days for formal data rights requests as required by applicable law.
When submitting a data rights request, please include your full registered name, your gwin9 Account username, and a clear description of the right you wish to exercise. gwin9 may request proof of identity before processing any data rights request to protect against unauthorised access to personal data.
Our Commitment: gwin9 takes every privacy enquiry seriously. Formal data rights requests will receive a substantive response within thirty (30) calendar days. Where additional time is required for complex requests, you will be notified within the initial 30-day period.