OFFICIAL DATA PROTECTION DOCUMENT

Privacy Policy Interwin – Personal Data Protection for Malaysian Players

Your privacy is our highest priority. This document transparently explains how interwin collects, uses, stores, and protects your personal information as a Malaysian player.

Last updated: 1 January 2026
256-bit SSL
Data Encryption
No Data Selling
To Third Parties
User Controls
Right to Access & Delete Data
PDPA Compliant
MY Data Protection Act

This Privacy Policy outlines interwin's data protection practices and is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). By using the interwin platform, you consent to the collection and use of your information as described in this document. If you do not agree, please refrain from using our platform.

1

Introduction & Interwin's Privacy Commitment

Interwin understands that your trust in us begins with confidence that we handle your personal information with full responsibility and respect. To us, privacy is not merely a legal obligation – it is a core value that shapes how we operate every day.

This Privacy Policy applies to all personal information you provide to interwin through our website, mobile app, customer service, or any other communication channel we operate. It also applies to information we collect automatically when you use the interwin platform.

Interwin acts as the responsible data controller for all personal information you provide to us. This means we determine the purposes and methods of processing your data, and we are accountable for ensuring it is handled securely and in accordance with applicable laws in Malaysia.

Our core commitments to you: Interwin will not sell, rent, or trade your personal information to third parties for their own marketing purposes without your explicit consent. This is a firm line we will never cross.

2

Types of Personal Data We Collect

Interwin collects various types of personal information depending on how you interact with our platform. Below is a detailed breakdown of the data categories we collect:

Data You Provide Directly

Data Type Example Information Required?
IdentityFull name, date of birth, MyKad/passport numberYes – for verification
RelationshipPhone number, email addressYes – for communications
FinancialBank account details, e-wallet accounts (TNG, GrabPay, etc.)Yes – for transactions
SecurityPassword (hashed), security questionsYes – for protection
ProfileUsername, language preference, personal settingsOptional

Automatically Collected Data

  • Technical log data – IP address, device type, operating system, browser version
  • Usage data – pages visited, time spent, and actions taken within the platform
  • Location data – general location based on IP address (not precise GPS location)
  • Game Data – betting history, games played, wins and losses
  • Communication data – records of live chat sessions, emails, and other communications with our support team

Interwin no collecting precise GPS or location data from your device. The location data we process is limited to your general country/region, derived from your IP address only.

3

How We Use Your Personal Data

Interwin uses your personal data only for legitimate, clearly stated purposes. Below is a complete list of how your data is used on the interwin platform:

  • Identity & age verification – Verifies your eligibility to use the platform (18 years and above) and confirms your true identity in compliance with legal requirements.
  • Account management – Processing registrations, maintaining your account, and managing your personal settings.
  • Financial transaction processing – Handling deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and processing your winnings withdrawals.
  • Provision of gaming services – Operating and managing your gaming experience across slots, Sports Betting, Live Casino, e-sports, and all other interwin game categories.
  • Customer support – Addressing enquiries, resolving issues, and providing technical assistance via live chat, email, and WhatsApp.
  • Fraud prevention & security – Detects and prevents fraudulent activity, money laundering, and multi-account usage.
  • Marketing communications – Sending you information about interwin promotions, bonuses, and new offers – only where you have given your consent to receive such communications.
  • Regulatory compliance – Fulfils obligations under applicable Malaysian law, including financial reporting requirements.
  • Platform improvements – Analysing usage data to improve the overall functionality, design, and user experience of the interwin platform.
4

Legal Basis for Data Processing

Interwin processes your personal data on legally recognised grounds under Malaysia's Personal Data Protection Act 2010 (PDPA). Each of our data processing activities has a clear legal basis:

  • Performance of contract – Processing required to fulfil our contractual obligations to you as an interwin platform user (account management, deposit and withdrawal processing, provision of gaming services).
  • Legal obligation – Processing required to comply with applicable Malaysian laws, including KYC (Know Your Customer) and anti-money laundering requirements.
  • Legitimate interests – Processing for the purposes of platform security, fraud prevention, and service improvement that does not unduly affect your fundamental rights.
  • Consent – For marketing communications and optional cookies, we rely on your explicit consent, which may be withdrawn at any time.
5

Data Sharing & Disclosure to Third Parties

Interwin does not sell or rent your personal data to any third party. However, there are limited circumstances where we may need to share your data with trusted parties in order to deliver our services to you:

Data Recipient Categories

  • Payment providers – Malaysian e-wallet and banking processors such as Touch 'n Go, GrabPay, Boost, ShopeePay, and DuitNow infrastructure providers, for the purpose of processing your financial transactions.
  • Game providers – Game development companies such as Pragmatic Play, PG Soft, and others that supply games on the interwin platform, for the purposes of game verification and security.
  • Technical support service providers – Companies that provide interwin with technical infrastructure, hosting, cybersecurity, and analytics services – all of whom are bound by strict data protection agreements.
  • Legal authorities – Where required by Malaysian law, a court order, or a legitimate law enforcement authority.

All third parties that receive your data from interwin are bound by data protection agreements requiring them to handle your information to a security standard equal to or higher than that of interwin itself.

6

Interwin's Data Security Measures

Interwin continually invests in security infrastructure to protect your personal data from unauthorised access, loss, alteration, or inadvertent disclosure.

Technical Safeguards

  • 256-bit SSL/TLS Encryption for all data transmitted between your device and interwin's servers.
  • Encryption of data at rest for all sensitive information stored in our database.
  • Hashed password using modern hashing algorithms – interwin does not store your password in plain text, and even our own staff cannot view your password.
  • Two-factor authentication (2FA) available on all accounts as an added layer of security.
  • 24/7 security monitoring with an automated intrusion detection system.
  • Regular penetration testing (penetration testing) by independent security experts.

Organisational Access Controls

  • Access to users' personal data is strictly limited to staff who require it to perform their job responsibilities only.
  • All interwin staff who handle user data are subject to data protection training comprehensive.
  • Complete audit logs are maintained for all access to sensitive user data.

While interwin takes all reasonable steps to protect your data, no security system is 100% impenetrable. In the event of a data breach affecting your information, we will notify you in a timely manner as required by law.

7

Data Retention Periods

Interwin retains your personal data only for as long as necessary for the purposes stated in this privacy policy, or as required under applicable Malaysian law.

Data Type Retention Period Reason
Active account dataFor the duration of the active accountService Provision
Financial transaction data7 years after transactionLegal requirements
KYC / identity verification data5 years after account closureAML/PDPA compliance
Gaming history3 yearsBusiness records
Support communication logs2 yearsQuality control
Marketing data (if consented)Until consent is withdrawnConsent-based

Once the retention period expires, interwin will securely delete or destroy your data using methods that ensure it cannot be recovered.

8

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you hold several important rights regarding the personal data interwin holds about you. We are committed to making it straightforward for you to exercise those rights:

Right of Access

You have the right to request a copy of all personal data that interwin holds about you.

Right to Rectification

You may request the correction of any inaccurate or incomplete data we hold about you.

Right to Erasure

Under certain circumstances, you may request that your data be deleted, subject to applicable legal requirements.

Right to Object

You may object to the processing of your data for marketing purposes at any time.

Right to Portability

You may request your data in a structured, portable format.

Withdraw Consent

Consent given for consent-based processing may be withdrawn at any time.

To exercise any of the above rights, contact interwin's Data Protection Officer by email at privacy@interwin.ws or via our platform's live chat. We will respond to your request within 30 working days.

9

Cookies, Trackers & Related Technologies

The interwin platform uses cookies and similar tracking technologies to enhance functionality and user experience. Cookies are small text files stored on your device when you visit a website.

Types of Cookies We Use

  • Essential cookies (required) – Required for core platform functions, such as maintaining your login session and remembering your language preference. These cookies cannot be disabled.
  • Functional cookies – Adding conveniences such as remembering your personal settings, frequently played game preferences, and display preferences.
  • Analytical cookies (with consent) – Helps us understand how users interact with the platform for improvement purposes, using aggregated and anonymised data.
  • Security cookies – Helps detect fraudulent activity and protect your account.

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect the functionality of the interwin platform.

10

International Data Transfers

In the course of its operations, interwin may need to transfer or process your personal data outside Malaysia — particularly when using international technology infrastructure providers or cloud services.

Any such data transfers will only be carried out with adequate safeguards in place, including:

  • Transfers data only to countries with equivalent or higher data protection standards
  • Using standard contractual agreements that require data recipients to comply with strict data protection standards
  • Ensuring all data transfers comply with Malaysia's PDPA requirements

Interwin maintains comprehensive records of all international data transfer activities and ensures every transfer has a sound legal justification and robust safeguards.

11

Protection of Minors

The interwin platform is strictly for adults aged 18 and above. interwin does not target or knowingly collect personal data from anyone under 18. This is a policy we enforce rigorously through comprehensive age verification procedures.

Should interwin discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered with interwin should contact us immediately at support@interwin.ws.

12

Contact Us & Privacy Policy Amendments

Interwin is committed to transparency in all aspects of how your data is handled. If you have any questions, concerns, or complaints about the way we manage your personal data, we encourage you to reach out to us directly.

How to Contact Us

  • Data protection email: privacy@interwin.ws
  • General support: support@interwin.ws
  • Live chat: Available 24/7 on the interwin platform

Amendments to This Privacy Policy

Interwin reserves the right to update this privacy policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Whenever this policy is updated, we will revise the "Updated" date at the top of this document.

For material changes, interwin will provide clear advance notice via email or in-platform notification before the changes take effect. Your continued use of the interwin platform after any changes constitutes acceptance of the updated policy.

How Your Data Is Protected at interwin

From the moment you register to every transaction – this is the journey your data protection takes.

📱
Data Input
You are filling out a registration or transaction form
🔐
SSL Encryption
Data is 256-bit encrypted before transmission
🛡️
Security Audit
Automated threat detection system running
💾
Secure Storage
Data is stored in encrypted format on secure servers

Interwin's Data Protection Commitment

Six core principles that guide how interwin handles your personal data.

No Sale of Personal Data

Interwin will never sell, rent, or trade your personal data to any third party for their marketing purposes. This is our absolute promise to every member.

Bank-Grade Encryption

All data you send and store on interwin is protected with 256-bit SSL encryption – the same technology used by Malaysia's leading banking institutions such as Maybank and CIMB.

Full Control in Your Hands

You may access, correct, or request deletion of your data at any time. interwin provides a straightforward and responsive process for all data rights requests.

Malaysia PDPA Compliant

All of interwin's data handling practices are fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). We stay current with developments in Malaysian data law at all times.

24/7 Security Monitoring

Interwin's security systems run around the clock, monitoring for suspicious activity and responding swiftly to protect your data and funds from cyber threats.

Full Transparency

We clearly explain what we collect, why we collect it, and who we share it with – in plain, straightforward language, not confusing legal jargon.

Your Data, Your Rights – interwin Is Committed to Protecting Them

Interwin operates with a transparent and responsible privacy policy. If you have any concerns about how we handle your personal data, reach out to us via 24/7 live chat or email privacy@interwin.ws. We are committed to addressing every enquiry seriously and within the stipulated timeframe.

Learn More About Responsible Gaming

Play with Confidence at Interwin

Your data is secure. Your games are fair. Your winnings are guaranteed. Join over 500,000 Malaysian players who have trusted interwin as their digital entertainment platform of choice.

Minimum deposit RM30 · Bonus up to RM1,000 · 256-bit SSL · PDPA Compliant · 18+

Bahasa Melayu