Privacy Policy — datowin365

This Privacy Policy (hereinafter "the Policy") is published by datowin365, the operator of the online casino and sports betting platform accessible at datowin365.cam and any associated subdomains or mobile-optimised interfaces (collectively, "the Platform").

This Policy describes how datowin365 ("we", "us", "our") collects, receives, stores, uses, discloses, and otherwise processes personal data relating to individuals ("you", "the User", "the Player") who access the Platform, create an account, make deposits or withdrawals, participate in games, contact our support team, or otherwise interact with our services.

We are committed to handling your personal data with transparency, integrity, and respect. This Policy is intended to comply with applicable international data protection standards, including general principles drawn from the General Data Protection Regulation (GDPR), as applied in the context of our international licensing jurisdiction.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which form the primary legal agreement governing your use of the datowin365 Platform. By registering an account or using our services, you acknowledge that you have read and understood this Policy and that you consent to the data processing activities described herein.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

datowin365 collects personal data across the following defined categories. We collect only what is necessary for the stated purposes, in accordance with the principle of data minimisation:

3.1 Identity Data

Full legal name, date of birth, nationality, and government-issued identification numbers as provided during account registration and KYC verification (e.g., Malaysian National Identity Card — MyKad — number, passport number).

3.2 Contact Data

Email address, mobile phone number, and any correspondence you send to datowin365 via live chat, email, or other communication channels.

3.3 Financial Data

Details of payment methods used to deposit and withdraw funds, including e-wallet account identifiers (e.g., Touch 'n Go eWallet phone number), bank account numbers (e.g., Maybank, CIMB, Public Bank), FPX/DuitNow registered account details, and cryptocurrency wallet addresses. We do not store full card numbers or CVV/security codes.

3.4 Transactional Data

Records of all deposits, withdrawals, bonus claims, game sessions, bets placed, game results, and all financial transactions conducted through your datowin365 Account. This data is essential for account management, dispute resolution, and regulatory compliance.

3.5 Technical Data

IP address, device type, operating system, browser type and version, screen resolution, session timestamps, login timestamps, and other technical identifiers collected automatically when you access the Platform.

3.6 Behavioural Data

Interaction patterns with the Platform including games accessed, time spent per session, navigation paths, bonus offers viewed or claimed, and customer support interactions. This data is used to personalise your experience and to identify potential responsible gambling concerns.

3.7 KYC Documentation

Scanned or photographic copies of identity documents (MyKad, passport, or equivalent), proof of address documents, and payment method verification screenshots submitted during the mandatory KYC verification process.

datowin365 collects personal data through the following mechanisms:

• Direct submission: Information you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in promotions
• Automated collection: Technical and behavioural data collected automatically via server logs, cookies, pixel tags, and similar tracking technologies when you access the Platform
• Payment processing: Transaction confirmation data received from payment processors and banking partners when you deposit or withdraw using local methods (DuitNow, FPX, Maybank, CIMB, Touch 'n Go eWallet) or cryptocurrency networks
• Third-party verification: Identity confirmation data returned by KYC/AML verification service providers engaged by datowin365 to process the identity documents you submit
• Public sources: In limited circumstances, datowin365 may verify information against publicly available databases for fraud prevention or sanctions screening purposes

datowin365 processes your personal data for the following defined purposes. Where the legal basis for processing changes by purpose, it is specified in Section 6:

Where international data protection frameworks require a lawful basis for the processing of personal data, datowin365 relies on the following bases, corresponding to the purposes outlined in Section 5:

• Contractual necessity: Processing required to perform the contract between datowin365 and you — i.e., to provide the Platform services you have registered to use, including account management, payment processing, and game delivery
• Legal obligation: Processing required to comply with applicable legal or regulatory requirements, including KYC/AML obligations, sanctions screening, and record-keeping mandated by our licensing jurisdiction
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gambling monitoring, and general service improvement where these interests are not overridden by your fundamental rights
• Consent: Processing for optional marketing communications, non-essential cookies, and profiling for personalised promotions, where you have provided explicit opt-in consent and retain the right to withdraw consent at any time

datowin365 does not sell your personal data to any third party. We do not share your data with third parties for their own independent commercial purposes. Personal data is disclosed only in the following circumstances and to the categories of recipients listed below:

• Payment processors and banking partners: Malaysian payment service providers (including those facilitating Touch 'n Go eWallet, DuitNow, FPX, and major bank transfers) and cryptocurrency exchange/processing services receive the minimum data required to execute your deposit or withdrawal transaction
• KYC and identity verification providers: Third-party KYC service providers contracted by datowin365 to process identity documents and verify age and identity in compliance with our licensing obligations. These providers operate under strict data processing agreements
• Fraud prevention and AML screening services: Data may be shared with specialist fraud prevention and anti-money laundering screening services to detect and prevent financial crime
• Technology and infrastructure providers: Cloud hosting, CDN, and platform technology vendors who provide the underlying infrastructure for the Platform. These vendors process data only as directed by datowin365 under data processor agreements
• Legal and regulatory authorities: datowin365 will disclose personal data to licensing regulators, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory directive
• Professional advisors: Legal counsel, auditors, and compliance consultants acting in their professional capacity may access data where necessary to provide their services to datowin365, subject to professional confidentiality obligations

As an international online gaming platform, datowin365 may transfer personal data to, and store personal data in, countries outside of Malaysia. This includes transfers to our licensing jurisdiction, technology infrastructure providers, and contracted service providers operating in other territories.

Where personal data is transferred internationally, datowin365 implements appropriate safeguards to ensure that your data receives a level of protection equivalent to the standards applicable in jurisdictions with recognised data protection frameworks. These safeguards may include:

• Contractual clauses incorporating internationally recognised data protection obligations binding on the recipient party
• Transfers only to service providers operating in jurisdictions with adequacy decisions or equivalent recognised data protection frameworks
• Data processing agreements requiring recipients to maintain appropriate technical and organisational security measures

By using the datowin365 Platform and submitting your personal data, you acknowledge and consent to the transfer, storage, and processing of your data in jurisdictions outside of Malaysia as described in this section.

datowin365 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply to the defined data categories:

Following the expiry of applicable retention periods, personal data is securely and irreversibly deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised or aggregated data may be retained indefinitely for statistical and analytical purposes.

Subject to applicable data protection law and certain exceptions related to our legal obligations, you hold the following rights in relation to your personal data held by datowin365:

To exercise any of these rights, please contact datowin365 via the contact details in Section 15. We will respond to valid requests within 30 calendar days. Note that certain rights are subject to exceptions — for example, we cannot delete data that we are legally required to retain for AML or tax compliance purposes.

The datowin365 Platform uses cookies and similar tracking technologies to ensure the proper functioning of the website, enhance your user experience, analyse Platform performance, and deliver relevant promotions. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to operate. These cannot be disabled without significantly impairing functionality. They include session authentication tokens, security cookies, and load-balancing cookies.
• Functional Cookies: Remember your preferences and settings, such as your preferred language, currency display (MYR vs. crypto), and personalisation choices.
• Analytics Cookies: Collect anonymised or aggregated data on how users interact with the Platform — pages visited, time on site, error occurrences — to help us improve performance and usability.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content based on your activity on the Platform. These are optional and subject to your consent preferences.

You can manage your cookie preferences at any time through the cookie consent settings available on the Platform. Please note that disabling certain cookies may affect the availability of some Platform features. Your browser settings may also provide options to block or delete cookies at a device level.

datowin365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the datowin365 Platform is encrypted using 256-bit SSL/TLS encryption
• Data encryption at rest: Sensitive personal data — including KYC documents and payment information — is encrypted using AES-256 or equivalent standards when stored on our systems
• Access controls: Access to personal data is restricted to authorised datowin365 personnel on a strictly need-to-know basis, governed by role-based access control policies
• Two-Factor Authentication (2FA): Available for all user accounts and enforced for privileged internal access to systems processing personal data
• Intrusion detection and monitoring: Continuous monitoring of platform infrastructure for suspicious activity, with automated alerting and incident response procedures
• Regular security assessments: Periodic vulnerability assessments and penetration testing conducted by qualified third-party security professionals

The datowin365 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data relating to individuals under the age of 21. If you are under 21, you must not register an account or use any datowin365 services.

All account registrations require the submission of a valid date of birth, and identity verification through KYC documentation is mandatory before withdrawals are processed. These measures exist partly to enforce our minimum age requirement and to ensure that our services are not accessed by minors.

If datowin365 becomes aware or has reason to believe that personal data has been collected from an individual under the age of 21, we will take immediate steps to close the relevant account, delete the associated data, and, if applicable, return any funds in accordance with our standard procedures for underage account closure.

If you believe that a minor may have accessed datowin365 or submitted data to the Platform, please contact our support team immediately at [email protected].

datowin365 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform services. The date of the most recent revision is always displayed prominently at the top of this page.

Where material changes are made to this Policy — particularly changes that affect how we use your data or the rights available to you — datowin365 will provide reasonable notice to registered account holders via email or via a prominent notice displayed on the Platform before the changes take effect.

Your continued use of the datowin365 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change to this Policy, you have the right to close your account and request deletion of your data, subject to our mandatory legal retention obligations.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data that datowin365 holds about you, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the datowin365 Platform — the fastest way to reach our support team for general privacy enquiries
• Email: [email protected] — for formal data protection requests, Subject Access Requests (SARs), data deletion requests, or complaint submissions

When submitting a formal data protection request by email, please include:

• Your full name and registered email address on datowin365
• A clear description of your request (e.g., "Subject Access Request", "Request for Data Deletion")
• Sufficient information to verify your identity — this protects your data from being disclosed to or deleted by an unauthorised third party

datowin365 aims to respond to all privacy-related requests within 30 calendar days of receipt. Complex requests may take up to 60 days, in which case we will notify you of the extended timeline within the initial 30-day period.

For responsible gambling matters including self-exclusion, deposit limit changes, or cooling-off requests, please visit our Responsible Gambling page. For disputes or questions about your account terms, see our Terms & Conditions.