Privacy Policy kuwin – Malaysia User Data Protection

1Introduction and Scope of This Policy

This privacy policy is published by kuwin and applies to all users who register, browse, or use any service on the kuwin platform, including kuwin's official website and mobile app.

We understand that trust is the foundation of the relationship between kuwin and every user. Protecting your privacy is not merely a legal obligation for kuwin — it is part of our core values. Every decision we make about data is guided by putting user interests and trust first.

This privacy policy clearly explains what data we collect, why we need it, how it is used, who it may be shared with under certain circumstances, and what your rights are as a data subject under applicable Malaysian law.

2Personal Data We Collect

Kuwin collects your personal data through several different methods depending on the type of interaction you have with our platform. Below are details of the types of data we collect:

3Purpose and Method of Data Use

All data collected by kuwin is used for legitimate and necessary purposes. The following are the main purposes for using your personal data:

• Service Provision: To create and manage your account, process deposit and withdrawal transactions, and provide access to all games and features of the kuwin platform.
• Identity Verification (KYC): To comply with anti-money laundering (AML) legal requirements and verify user identity before processing withdrawals or when necessary.
• Security and Fraud Prevention: To detect, investigate and prevent any fraudulent activity, game manipulation or use of the platform that violates kuwin terms and conditions.
• Legal Compliance: To fulfill reporting and record-keeping obligations required by law and relevant authorities.
• Platform Enhancement: To analyze usage patterns in aggregate and improve the features, performance and user experience of the kuwin platform.
• Service Communications: To send important notifications about your account, terms updates, platform changes or critical security information.
• Marketing (with consent): To send information about promotions, bonuses and kuwin offers that may interest you — only if you have given permission.

4Third-Party Data Sharing and Disclosure

Kuwin does not sell users' personal data to any third party. However, there are limited situations where kuwin may need to share data with certain parties:

• Payment Processors: Transaction data that must be shared with payment processors such as banks, DuitNow, FPX, and e-wallet providers to process your deposits and withdrawals.
• Technical Service Providers: Companies that help kuwin provide technical infrastructure, hosting, analytics and security services — bound by strict confidentiality agreements.
• Legal Authorities: When required by law, court order, or directive from a competent authority for the purposes of criminal investigation or regulatory compliance.
• Identity Verification Providers: Third parties that assist kuwin in conducting identity verification (KYC) processes to ensure compliance with applicable AML regulations.

5Data Security and Protection Measures

Kuwin takes data security seriously and implements multiple layers of technical and administrative protection to keep your personal data safe:

• 256-bit SSL/TLS encryption for all data communications between users' devices and kuwin servers.
• Passwords are stored using one-way hashing algorithms that cannot be decrypted.
• Role-based access control — only staff who require access can view users' personal data.
• Intrusion detection system and continuous 24/7 security monitoring.
• Regular security audits by independent third parties to identify and address vulnerabilities.
• Mandatory data security training for all staff who handle users' personal data.

6Use of Cookies and Tracking Technologies

The kuwin platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Several types of cookies are used:

• Essential Cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled.
• Performance Cookies: Collects anonymous information about how users interact with the platform to help us identify and resolve technical issues.
• Functional Cookies: Remembers your preferences such as language, display settings, and login information for a more convenient recurring experience.
• Analytics Cookies: Helps us understand aggregate usage patterns to make better decisions about platform development.

You can manage or block cookies through your web browser settings. However, blocking essential cookies may affect certain features of the kuwin platform.

7Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by kuwin:

• Right to Access: Request a copy of the personal data kuwin holds about you.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete data.
• Right to Withdraw Consent: Withdraw consent given for specific data processing — particularly for marketing communications.
• Right to Object to Processing: Object to the processing of your data for specific purposes, subject to relevant legal obligations.
• Right to Complain: Lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your privacy rights have been violated.

To exercise any of the above rights, please contact the kuwin support team via live chat on the platform. kuwin will respond to your request within 14 working days.

8Children's Data Protection

The kuwin platform is intended exclusively for individuals aged 18 and above. kuwin does not knowingly collect, use, or store personal data from individuals under the age of 18.

If kuwin discovers that personal data of someone under 18 years of age has been collected inadvertently, kuwin will take immediate steps to delete that data and terminate the related account. If you believe your underage child has registered on the kuwin platform, please contact our support team immediately.

9Data Retention Period

Kuwin retains your personal data for the period necessary to fulfil the purpose for which it was collected, subject to applicable legal record-keeping requirements:

• Active account data is retained for the duration of the account's active period and for several years after account closure for legal compliance purposes.
• Financial transaction records are retained for the minimum period prescribed by applicable anti-money laundering legislation.
• Communication data with the support team is retained for a defined period for service quality and compliance purposes.
• Technical data and system logs are generally retained for a shorter period and deleted periodically in accordance with kuwin's internal retention policy.

When data is no longer needed and there is no legal obligation to retain it, kuwin will securely delete or anonymise that data.

10Contact Us for Privacy Enquiries

If you have any questions, concerns, or requests regarding how kuwin handles your personal data, our privacy team is ready to help. We are committed to responding quickly and transparently to every privacy-related request.

You can reach us through the following channels:

• Live Chat: Available on the kuwin platform, 24 hours a day, 7 days a week — the fastest way to get immediate feedback.
• Support Email: [email protected] — for written inquiries requiring documentation or detailed responses.

Kuwin will endeavour to resolve all privacy-related enquiries within 14 business days of receipt. For more complex requests requiring thorough investigation, we will inform you of the expected timeframe.