At Gowin, your privacy is more than a legal obligation — it is a moral responsibility we take seriously. This document clearly explains how we collect, use, store and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Six core principles that guide how Gowin handles the personal data of all Malaysian users
All Gowin players' personal data is stored on servers protected with AES-256 encryption and 256-bit SSL encryption during transmission. Database access is restricted to authorised personnel only and is audited on a regular basis.
Gowin only collects data that is strictly necessary to operate our services. We do not collect excessive information. Every piece of data we collect has a clear purpose, disclosed transparently to you during the registration process.
You have the full right to access, correct, or request deletion of your personal data from Gowin's systems at any time. Requests can be made directly through your account settings or by contacting our support team.
Gowin has never sold, rented or traded your personal data to any third party for marketing or commercial purposes, and never will. Your data belongs to you — not to us as a business asset.
Every aspect of data handling at Gowin is designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy is updated regularly to ensure it remains aligned with the latest legal developments in Malaysia.
In the event of a data breach affecting your personal information, Gowin is committed to notifying you within 72 hours via your registered email address, along with the steps we are taking to resolve the situation.
From collection to deletion — the complete lifecycle of Gowin's personal data management
Data is only collected with your explicit consent at registration. You may opt out of marketing communications at any time.
Data is used solely for the stated purposes — account management, RM transaction processing, and fulfilment of legal requirements.
All data is stored on secure servers with AES-256 encryption. Passwords are never stored in plain text — they are encrypted using a strong hashing algorithm.
Only authorised Gowin staff with a legitimate business need may access user data. All access is logged and audited on a regular basis.
Gowin's security team conducts quarterly data security audits to ensure all systems and processes meet the latest security standards.
Upon a request to delete your account, your personal data will be permanently removed within 30 days, except for data that must be retained to meet Malaysian legal obligations.
Gowin (hereinafter referred to as "we", "our platform" or "Gowin") takes the privacy rights of every user on our Malaysia platform seriously. This Privacy Policy has been drafted in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and sets out in detail how we collect, process, store, use and protect your personal data.
This Privacy Policy applies to all users who register, browse or use any service provided by Gowin — covering Sports Betting (Malaysia Super League, EPL, badminton), Live Casino, table games, jackpots, slots, e-sports and all other products available on our platform.
By registering for or using the Gowin platform, you confirm that you have read, understood and accepted the terms set out in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us for assistance.
Gowin collects only the personal data necessary to operate our services effectively and securely. The data we collect includes:
| Data Category | Sample Information | Requirements |
|---|---|---|
| Identity Data | Full name, MyKad/Passport number, date of birth | Mandatory (KYC) |
| Contact Data | Phone number, email address, residential address | Mandatory |
| Financial Data | Account holder name, bank account/eWallet number (TNG, DuitNow) | Mandatory (transactions) |
| Technical Data | IP address, device type, browser, operating system | Automatic |
| Usage Data | Game history, bets placed, login times | Automatic |
| Optional Data | Language preferences, notification settings, playing limits | Preferences |
Gowin does not collect your credit or debit card details directly. All payments are processed through secure third-party payment gateways such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX (Maybank2u, CIMB Clicks).
Gowin uses the personal data collected exclusively for the following purposes:
Gowin will not sell, rent or disclose your personal data to any third party for marketing purposes without your explicit consent. However, there are certain situations where Gowin may need to share your data with the following parties:
All third parties working with Gowin are bound by strict data protection agreements and may only use your data for specified purposes.
Gowin continually invests in high-grade security infrastructure to ensure your personal data is always protected. Key security measures we have implemented include:
Gowin uses cookies and similar tracking technologies to enhance the user experience and operate the platform effectively. The types of cookies we use:
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the Gowin platform.
Gowin strictly prohibits use of the platform by anyone under the age of 18. Our platform is not designed, intended, or permitted for use by children or minors below the legal age established in Malaysia.
We do not knowingly collect personal data from individuals under the age of 18. Should we discover that data belonging to someone under 18 has been collected inadvertently, we will promptly delete that data and close the account in question.
In operating the Gowin platform, your personal data may be processed or stored on servers located outside Malaysia, including in other Southeast Asian countries or internationally certified cloud computing facilities.
Regardless of where your data is processed, Gowin ensures that:
By using the Gowin platform, you consent to the transfer and processing of your personal data as described in this section, provided that adequate protections are maintained at all times.
Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by Gowin:
Request a copy of all personal data Gowin holds about you.
Correct any inaccurate or incomplete data in your account.
Request the deletion of your personal data (subject to legal obligations).
Object to the use of your data for direct marketing purposes at any time.
Get your data in a machine-readable format for easy portability.
Request the restriction of your data processing under certain circumstances.
To exercise any of the rights above, contact us at support@gowin-win.com with the subject line "Data Privacy Rights Request". Gowin will respond to your request within 30 working days.
Gowin retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. General data retention guidelines are as follows:
Once the designated retention period has elapsed, your data will be securely deleted or anonymised so that it can no longer be linked to any specific individual.
Gowin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technologies used, Malaysian legal requirements, or other relevant reasons.
When material amendments are made, Gowin will notify you via:
Amendments will take effect 14 days after notice has been given, unless required by law to take immediate effect. Continued use of the Gowin platform after that date constitutes acceptance of the updated Privacy Policy.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how Gowin handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:
Gowin is committed to resolving all privacy enquiries and complaints fairly, transparently, and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the Malaysian Communications and Multimedia Commission (MCMC).
Your personal data is fully protected by 256-bit SSL encryption. Gowin never sells your data. We comply with Malaysia's PDPA 2010. For more information on how we handle your account and transactions, please read Terms & Conditions and Responsible Gaming Policy us.