Privacy Policy last updated – June 2026 Your data is protected with 256-bit SSL at any time 500,000+ members trust W2Win's data protection Your personal data not sold to third parties BM customer support available 24 hours × 7 days Independent security audits conducted annually Privacy Policy last updated – June 2026 Your data is protected with 256-bit SSL at any time 500,000+ members trust W2Win's data protection Your personal data not sold to third parties BM customer support available 24 hours × 7 days Independent security audits conducted annually

W2Win Privacy Policy – Malaysia Personal Data Protection

W2Win takes the privacy of every member seriously. This document transparently explains how we collect, use, store, and protect your personal data while you use our platform.

Last updated: June 2026
Language: Bahasa Melayu (ms-MY)

W2Win's Privacy Commitment to You

Six core principles that guide how w2win handles the personal data of all Malaysian members.

Full 256-bit SSL Encryption

Every exchange of data between your device and w2win's servers — including login credentials, payment details and gameplay activity — is encrypted to the same 256-bit SSL standard used by leading banking institutions.

Data Not Sold to Third Parties

W2Win never sells, rents, or shares your personal data with third parties for marketing purposes. Your information is used solely to operate the platform's services and to comply with legal requirements.

Data Control in Your Hands

As a w2win member, you have the right to access, correct, download or request the deletion of your personal data at any time. This process can be initiated by contacting our support team directly.

Secure Data Storage

All w2win member data is stored in data centres protected by strict physical and digital access controls. Access to members' personal data is granted only to staff who genuinely require it to carry out their duties.

Data Breach Notification

In the event of any security incident involving your data, w2win is committed to notifying affected members within the timeframe stipulated by applicable data protection laws in Malaysia.

Annual Independent Security Audit

W2Win's data protection practices and system security are independently reviewed by a third-party audit body on an annual basis. This ensures our data protection standards remain current and meet all applicable requirements.

1. Introduction

This Privacy Policy explains how W2Win ("we", "the platform" or "w2win") collects, uses, discloses and protects your personal information when you use our online sports betting and casino platform at https://w2win.click and all related sub-domains.

Your privacy is our priority. W2Win operates on the principle that your personal data belongs to you — we use it only for legitimate purposes that you understand and have agreed to, and nothing beyond that. We build our systems and processes with privacy by design, not as an afterthought.

Important Note: By registering for or using the w2win platform, you confirm that you have read and understood this Privacy Policy. This Policy should be read together with Terms & Conditions w2win, all of which together form the complete agreement between you and our platform.

If you have any questions about how we handle your data, please contact our Privacy Officer at support@w2win.click before using the platform.

2. Personal Data We Collect

W2Win collects various types of personal data depending on how you interact with our platform. Below is a summary of the data we collect and the reasons for doing so:

2.1 Data You Provide Directly

  • Registration Information: Full name, active Malaysian phone number, chosen password.
  • Identity Verification Information: Malaysian Identity Card number (MyKad), selfie photo, or a copy of your identity document when required for verification.
  • Payment Information: Malaysian local bank account details, phone numbers linked to Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or DuitNow. W2Win does not directly store debit or credit card numbers — all transactions are processed through payment gateways that comply with PCI DSS standards.
  • Communications: Messages you send to our support team via live chat, WhatsApp, or email.

2.2 Automatically Collected Data

  • Usage Data: Gaming activity logs, betting history, deposit and withdrawal amounts, games played, and session duration.
  • Technical Data: IP address, browser type and version, device operating system, screen resolution, device language and time zone.
  • Location Data: Approximate location based on your IP address. We do not collect GPS data or the precise location of your device.
  • Cookie & Tracking Data: Information collected through cookies, pixels, and similar tracking technologies — detailed in Section 6.
Data Type Example Primary Purpose
Identity Name, IC number Account verification, anti-fraud
Relationship Phone number 2FA verification, support
Financial Bank account, e-wallet Deposit/withdrawal processing
Usage Game history, betting logs Responsible gaming, support
Technical IP address, browser, device Security, fraud detection

3. How We Use Your Data

W2Win uses your personal data only for legitimate and necessary purposes. We do not use your data in ways you would not expect. Below is the complete list of purposes:

  • Account Management: Creating and maintaining your w2win account, processing registration and ensuring login security.
  • Transaction Processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, and withdrawals to your Malaysian local bank account.
  • Identity Verification: Complies with anti-money laundering (AML) legal requirements and verifies member identity for high-value transactions.
  • Support Services: Responding to your enquiries, resolving complaints, and providing the technical assistance you need.
  • Platform Security: Detect and prevent fraud, bonus abuse, money laundering, and activities that violate our Terms & Conditions.
  • Product Improvement: Analysing usage patterns in aggregate (not individually) to improve platform features, performance and user experience.
  • Responsible Gaming: Monitoring gaming patterns to identify members who may need support with their gambling habits and surfacing relevant support resources.
  • Service Communications: Sending important notifications relating to your account, transactions, changes to terms, and security information.
  • Legal Compliance: Comply with all applicable legal and regulatory requirements in Malaysia.

W2Win does not use your data to build psychological profiles, set differential pricing based on your profile, or make automated decisions that materially affect your rights without human review.

4. Sharing Data with Third Parties

W2Win does not sell, rent or share your personal data with third parties for marketing or commercial purposes. We only share data in the following limited and controlled situations:

4.1 Trusted Service Providers

We work with selected third-party service providers who help us operate the platform, including:

  • Payment Processors: Payment gateways that process Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX transactions. These providers receive only the data necessary to process your transaction and are bound by strict confidentiality agreements.
  • Game Providers: Pragmatic Play, PG Soft, Evolution Gaming, and other providers receive only the minimum session data required to technically operate the games.
  • Auditing Services: Independent audit bodies that verify RNG fairness and platform security — they have no access to identifiable member personal data.
  • Cloud Infrastructure: The server service providers hosting our data are bound by comprehensive data security agreements.

4.2 Legal Requirements

W2Win may disclose your personal data to the relevant authorities if required by applicable law, court order, or in the context of a legitimate criminal investigation. In such cases, we will endeavour to notify you in advance unless prohibited from doing so by law.

4.3 Business Transfers

In the event of a merger, acquisition or asset sale involving w2win, member data may be transferred as part of the business assets. In such cases, members will be notified via email or in-platform notification at least 30 days before the transfer takes place, and will have the option to close their account if they do not agree.

5. Data Security

W2Win implements multiple layers of technical and organisational security controls to protect your personal data from unauthorised access, disclosure, alteration or destruction:

  • Data Encryption in Transit: All communications between your browser/app and w2win servers are encrypted using TLS 1.3 protocol and 256-bit SSL certificates.
  • Data Encryption at Rest: Sensitive data including passwords (stored as one-way hashes) and financial details are encrypted at the database level.
  • Internal Access Controls: w2win staff have access only to the data required for their specific role (least privilege principle). All access to member data is recorded in audit logs.
  • Two-Factor Authentication: Two-factor authentication (2FA) is available for member accounts and mandatory for all internal admin accounts.
  • Threat Monitoring: Intrusion detection systems and anomaly monitoring operate 24 hours a day to identify and respond to security threats.
  • Security Audits: Penetration testing and independent security audits are conducted regularly by qualified third parties.

While we take all reasonable steps to protect your data, no system can guarantee 100% security. You also play an important role by keeping your password confidential and not sharing your login credentials with anyone.

6. Use of Cookies and Tracking Technologies

W2Win uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser.

6.1 Types of Cookies We Use

  • Essential Cookies: These cookies are required for core platform functions such as login session management, security and platform stability. They cannot be disabled.
  • Performance Cookies: Collecting information on how you use the platform, such as frequently visited pages and error messages. This data is used in aggregate form to improve platform performance.
  • Functional Cookies: Saving your preferences such as language, display settings, and gaming preferences to ensure a personalised experience on future visits.
  • Analytics Cookies: Helps us understand how users interact with the platform as a whole. W2Win uses privacy-respecting analytics tools that do not share individual data.

6.2 Cookie Controls

You can manage your cookie settings through your web browser at any time. Most browsers allow you to view, manage, delete or block cookies. Please note, however, that disabling certain cookies may affect the functionality of the w2win platform and your gaming experience.

7. Data Retention Period

W2Win retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy and to comply with our legal obligations. The following is a general guide to our retention periods:

  • Active Account Data: Retained for the duration your account remains active and for 7 years after account closure for legal compliance and dispute resolution purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian accounting and anti-money laundering legal requirements.
  • Support Communication Logs: Retained for 2 years from the date of the last interaction for quality control and dispute resolution purposes.
  • Aggregate Analytics Data: De-anonymised usage data may be retained indefinitely as it no longer contains any information that can identify an individual.
  • Security Log Data: Retained for 1 year for the purposes of investigating any security incidents that may arise.

Once the applicable retention period has ended, your personal data will be securely deleted or anonymised in a way that does not permit recovery.

8. Your Personal Data Rights

As a w2win member and as an individual whose personal data we hold, you have the following rights, which you may exercise at any time:

Right of Access

You have the right to request a copy of all personal data we hold about you. We will provide this in a readable format within 30 days of your request.

Right to Rectification

If any personal data we hold about you is inaccurate or out of date, you have the right to request that we correct it promptly.

Right to Erasure

Under certain circumstances, you have the right to request that we delete your personal data. This right is subject to our legal obligations to retain certain data.

Right to Restriction of Processing

You may request that we restrict how we use your data in certain situations, such as when you are disputing the accuracy of your data or evaluating a deletion request.

Data Portability Rights

You have the right to receive your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider should you choose to do so.

Right to Object

You have the right to object to the processing of your personal data for certain purposes, such as direct marketing. W2Win will stop using your data for that purpose once you raise an objection.

To exercise any of the rights above, contact us at support@w2win.click with the subject line "Data Privacy Request". We will respond within 30 days. In complex cases, this period may be extended to up to 60 days, with notification to you.

9. Children's Data Protection

The w2win platform is exclusively for users aged 18 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

If you are a parent or guardian who believes your underage child has registered an account with w2win or submitted personal data to us without consent, please contact us immediately at support@w2win.click. We will act promptly to investigate, close the account in question and delete all associated data.

W2Win employs multiple mechanisms to prevent registration by underage individuals, including a verified Malaysian phone number requirement and an identity verification process for financial transactions.

10. Links to Third-Party Platforms

The w2win platform uses third-party services such as game providers (Pragmatic Play, PG Soft, Evolution Gaming and others) and payment gateways (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX). When you use these services, you may interact with their systems, which are subject to their own privacy policies.

W2Win is not responsible for the privacy practices of these third-party platforms or services. We encourage you to read their privacy policies separately if you wish to understand how they handle your data. We only work with third-party providers we trust to uphold high data security standards equivalent to our own.

11. Amendments to This Privacy Policy

W2Win reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or updates to the services we offer. The date of the most recent update is always displayed at the top of this document.

For material amendments — that is, changes that significantly affect how we use your data — w2win will notify you at least 14 days before the changes take effect via:

  • An in-platform notification upon your next login
  • Message to the phone number registered to your account
  • Email to your registered address (if you have provided one)

Continued use of the w2win platform after the effective date of any amendment constitutes your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account and request deletion of your personal data in accordance with the rights set out in Section 8.

12. Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

  • Privacy Email: support@w2win.click (use the subject line "Data Privacy Enquiry")
  • Live Chat: Available 24/7 via the chat icon on the platform
  • WhatsApp: Number available after logging in to your account

We are committed to taking all privacy-related enquiries seriously and will respond within 3 working days for general enquiries. Formal requests relating to data rights (access, deletion, portability) will be processed within 30 days as stipulated in Section 8.

This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Guide w2win for a full overview of your rights and responsibilities as a member of our platform.

Why Data Privacy Matters to W2Win and to You

When you register with w2win and start using our platform to bet on Malaysia Super League football matches, play slots or try your luck at the live baccarat table, you are entrusting us with deeply personal information. Your phone number, your Malaysian bank account, your playing habits — these are all sensitive data, and we understand how valuable that trust is.

W2Win has never taken this responsibility lightly. From day one, user data protection was built into the core architecture of this platform — not bolted on later as a compliance checkbox, but woven directly into how the platform functions, from the code level through to operations.

What Happens to Your Data When You Make a Deposit

When you make a deposit using Touch 'n Go eWallet or DuitNow into your w2win account, your transaction details are sent directly to our payment gateway through fully encrypted channels. W2Win itself does not store your card number, PIN, or digital wallet password. We only receive confirmation that the transaction was successful and the amount to be credited to your account. This architecture is specifically designed to ensure that even if the w2win system were exposed to a threat, your sensitive financial data could not be stolen.

Transaction records — including amounts, dates, times, and payment methods — are stored in a database separate from your regular account profile data, with additional layers of access control. Only authorised support staff may view your transaction records, and every instance of such access is logged in an audit trail that is reviewed on a regular basis.

Gaming Data & Responsible Gaming

One use of your data that you may not expect, but which we feel is important to explain, is the use of gameplay history to support our responsible gambling programme. W2Win monitors member gameplay patterns both in aggregate and individually to identify signs that a member may need support relating to their gambling habits.

This may include a sudden increase in betting frequency or value, changes in playing hours, or patterns indicative of compulsive gaming. When our system identifies such patterns, we may reach out to the member with a support message or offer self-control tools. This is a use of data we believe is in our members' best interest, and we explain it openly here so you understand why it happens.

Your Rights Are Real and Enforceable

W2Win believes that data privacy rights are not merely promises buried in lengthy documents nobody reads. They are real rights you can exercise. If you want to know what data we hold about you, you can request a copy and we will provide it. If you believe any information is inaccurate, we will correct it. If you wish to close your account and delete your data, we will do so — subject to retention periods required under Malaysian law.

Exercising these rights is straightforward — simply email support@w2win.click with a clear subject line describing your request, and our team will guide you through the process. We will not put up unnecessary barriers or ask for excessive documentation for simple requests such as accessing your own data.

Changes in Malaysia's Digital Privacy Landscape

Malaysia is moving towards a more comprehensive data protection framework, and w2win is ensuring our practices remain aligned with these developments. We follow updates to Malaysia's Personal Data Protection Act 2010 (PDPA) and any amendments that may arise, as well as international standards such as the GDPR, which has inspired much of the region's local legislation.

Our commitment goes beyond mere legal compliance — we practise good privacy as a core value, because we believe it is simply the right thing to do for members who trust our platform with their personal data every day.

FAQ – W2Win Privacy Policy

The most frequently asked questions from members about how w2win manages their personal data.

No. W2Win has never and will never sell, rent, or share your personal data with any third party for marketing or advertising purposes. This policy is absolute with no exceptions. Your data is used solely to operate the platform's services, process transactions, and comply with legal requirements. We only share the minimum necessary data with technical service providers such as payment gateways and game providers, and all such providers are bound by strict confidentiality agreements.

To request a copy of your personal data, send an email to support@w2win.click with the subject line "Data Access Request" from the phone number registered to your account. We may require a brief identity verification to confirm the request is from the legitimate account holder. Once verified, we will provide a comprehensive data report within 30 days in a readable format. The report will include your profile information, transaction history, activity logs, and all other data we hold in relation to your account.

When you close your w2win account, we will immediately stop using your data for marketing or platform communication purposes. However, we are required under Malaysian law — specifically anti-money laundering and accounting requirements — to retain your financial and identity records for a minimum of 7 years from the date of closure. This data is retained with highly restricted access and will only be accessed when required for legal compliance purposes. Once the legal retention period expires, all your data will be securely deleted or fully anonymised.

W2Win does not store your passwords, PINs or login credentials for Touch 'n Go eWallet, GrabPay, Boost, ShopeePay or DuitNow. When you make a deposit, you are directed to the secure interface of the relevant payment gateway, where the transaction is completed. W2Win only receives confirmation that the payment was successful and the amount to be credited. The phone number linked to your digital wallet may be stored as a payment method reference for future transaction convenience, but it is kept in encrypted form and cannot be used to access your wallet.

W2Win implements multiple layers of protection against identity theft: 256-bit SSL encryption for all data in transit, encryption of sensitive data in our database, two-factor authentication (2FA) available for all accounts, automated 24-hour suspicious activity monitoring, and an identity verification process for large withdrawals. We will also never ask for your password or login credentials via email, WhatsApp, or phone — if you receive such a request claiming to be from w2win, treat it as a fraudulent attempt and report it to us immediately.
Related Documents – Read Alongside This Privacy Policy

This Privacy Policy should be read together with Terms & Conditions w2win that comprehensively outlines your rights and responsibilities as a member of the platform. To understand the self-control tools and support resources we provide, please also read Responsible Gaming Guide us. For further enquiries, please refer to the Frequently Asked Questions ours.

256-bit SSL
No Data Sales
Independent Audits
Your Data Controls
24×7 Support

Your Data Is Safe. Your Gaming Experience Awaits.

Register for free at w2win with full confidence that your privacy is protected. Deposit easily via Touch 'n Go or DuitNow in under 60 seconds and claim your Welcome Bonus of up to RM 588.

Bahasa Melayu