Rujukan Laman

Privacy Policy – How We Protect Your Information at gwins88

We collect and store the data you give us when you open an account, make a deposit via Touch 'n Go, GrabPay, Boost dan FPX, or contact support.

Account data protectedPayment details securedContact records retainedYour rights respectedAccess requests answered
gwins88 Privacy Policy – How We Protect Your Information at gwins88
PRIVACY QUESTIONS

Where to Go If You Have Questions About This Policy

Our support team can answer questions about what data we hold, correct any errors in your records, or explain how we use your information. Reach us by email any time or open the live-chat widget when you're logged in.

Team online

Email support

Send your privacy question or data-access request to our support email. We aim to respond within 24 hours on weekdays and will confirm your identity before releasing any account details. Include your registered email address so we can locate your record quickly.

Live chat

Tap the chat bubble in the bottom corner of any page when you're signed in. Our agents can look up your account in real time and answer most privacy questions immediately, though formal data-subject-access requests still go through email for security and audit purposes.

FAQ section

Visit our FAQ page for quick answers about cookies, session tracking, and how long we retain inactive accounts. Many common privacy questions are covered there, and each answer links to the relevant section of this policy if you need more detail.

HOW WE HANDLE IT

Data Handling, Cookies, Security, Retention, and Your Rights

We use session cookies to keep you logged in and functional cookies to remember your language preference and lobby layout. No third-party advertising cookies track you across other sites.

Cookies we set

Session cookies expire when you close your browser; preference cookies last 12 months and store your language choice and layout settings. We do not use tracking pixels or third-party analytics that follow you to other websites, and you can clear cookies from your browser at any time.

Account security

Your password is hashed using bcrypt before it enters our database, so even our staff cannot see the plain text. Enable two-factor authentication in account settings to add a time-based code from your phone, and we recommend changing your password every six months.

Data retention

We keep transaction logs for seven years to comply with financial regulations, and support-ticket history for three years in case a dispute resurfaces. Marketing preferences and session logs are deleted 90 days after your last login unless you reactivate your account, and you can request earlier deletion by emailing us.

Access requests

Email us to request a copy of all personal data we hold about you. We verify your identity by asking for your registered email and date of birth, then send a JSON or PDF export within 30 days. The file includes your registration details, deposit and withdrawal history, support messages, and cookie preferences.

Correction rights

If any detail in your profile is wrong, log in and update it yourself in account settings, or contact support if the field is locked. We correct errors within 48 hours and notify you by email once the change is live, and you can request a new data export to confirm the update.

Deletion requests

You can close your account and request full deletion of non-essential data at any time. Transaction records stay in our archive for the legally required period, but marketing preferences, session logs, and support notes are purged within 30 days. We send a confirmation email once deletion is complete.

Privacy Policy FAQ – Your Data Questions Answered

Below are the most common questions we receive about data collection, storage, and your rights. If your question is not covered here, email our support team or check the detailed sections above.

We ask for your name, email, phone number, and date of birth during registration so we can verify your identity and keep your account secure. We also log your IP address and device type when you sign in to detect unusual login patterns and prevent unauthorised access.

We record the transaction amount, timestamp, and payment-rail identifier each time you deposit or withdraw through Touch 'n Go, GrabPay, Boost or FPX. This data reconciles your wallet balance and meets our financial record-keeping obligations. We never store your full card number or bank credentials; those stay with the payment processor.

We never sell your personal data. We share it only with our payment processors to complete transactions and with our support team when they need it to resolve your issue. No marketing companies or ad networks receive your information from us, and we do not use third-party tracking pixels.

Transaction logs are retained for seven years to comply with financial regulations, and support-ticket history is kept for three years in case a dispute resurfaces. Marketing preferences and session logs are deleted 90 days after your last login unless you reactivate your account, and you can request earlier deletion by contacting us.

Yes. Email us with your registered email and date of birth, and we will verify your identity and send a JSON or PDF export within 30 days. The file includes registration details, deposit and withdrawal records, support messages, and cookie preferences, so you can see exactly what we store.

Log in and go to account settings to update your email, phone number, or language preference yourself. If a field is locked or you need help, contact support and we will correct the error within 48 hours, then send you an email confirmation once the change is live.

Transaction records stay in our archive for the legally required retention period, but we delete marketing preferences, session logs, and support notes within 30 days of your closure request. We send a confirmation email once the purge is complete, and you can request a final data export before closure if you want a personal copy.