🔒 Official Document

Privacy Policy gowin – Personal Data Protection for Malaysian Players

At gowin, your privacy is more than just a promise. We are committed to protecting every piece of personal information you entrust to us, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the latest international security standards.

Updated: 1 January 2026 Malaysia PDPA 2010 256-bit SSL Malaysia
📊 Gowin Data Protection Compliance Level
Data Encryption0%
PDPA 2010 Compliance0%
Transaction Security0%
Malaysia E-wallet Privacy0%
Player Control Over Data0%
🛡️
Malaysia PDPA Compliance

Gowin's Privacy Policy is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) — the country's primary data protection legislation. Your rights are protected by law.

🔐
256-bit SSL Encryption

All data transmitted between your device and Gowin's servers is encrypted using 256-bit SSL — the same standard used by leading financial institutions worldwide.

🚫
No Data Sales

Gowin has never sold, rented, or commercialised players' personal data to third parties, and never will. Your data belongs to you — it is not a business commodity.

👁️
Full Transparency

Gowin is transparent about what data we collect, why we collect it, and how it is used. There are no hidden agendas in our privacy policy.

⚙️
Full Control in Your Hands

You have the right to access, correct, request deletion of, or restrict the use of your personal data at any time. Contact us and we will respond within 7 days.

💳
Local Payment Security

Your e-wallet transaction data — Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX — is processed through secure channels and is not stored on gowin's systems.

📌
Important Note: This Privacy Policy describes gowin's practices for collecting, using, storing, and protecting personal data ("we", "platform"). By registering for or using any gowin service, you agree to the terms of this Privacy Policy. Please read it carefully and contact us at support@gowin-khelo.com if you have any questions.

Gowin understands that trust is the foundation of our relationship with our players. When you choose Gowin as your online entertainment platform — whether you're betting on EPL matches or weekend Malaysia Super League fixtures, enjoying jackpot slots, playing live baccarat, or wagering on our nation's beloved badminton tournaments — you are entrusting us with your personal information. We do not take that responsibility lightly.

This Privacy Policy is drafted in full compliance with the Malaysian Personal Data Protection Act 2010 and takes into account leading international privacy standards. It applies to all users of the Gowin platform in Malaysia regardless of how they access it — whether via the website or mobile app.

1 Personal Data We Collect

Gowin only collects personal data that is strictly necessary to operate the platform and deliver the best experience to you. The categories of data we may collect are as follows:

Data Category Type of Information Primary Purpose
Personal Identity Full name, MyKad/passport number, date of birth, gender Identity verification (KYC), legal compliance
Contact Information Email address, phone number, residential address Communication, account verification, support
Financial Data Deposit/withdrawal records, payment methods used Transaction processing, fraud prevention
Usage Data Betting records, games played, session duration Service improvement, pattern detection
Technical Data IP address, device type, web browser, cookie data Security, platform optimisation

Data Minimisation Principle: gowin adheres to the principle of data minimisation — we only collect information that is strictly necessary for the stated purpose. We do not collect irrelevant or excessive data. Every field in our registration form has a clear justification.

2 How We Use Your Data

The personal data we collect is used solely for legitimate purposes that are stated before or at the time of collection. These purposes are as follows:

  • Account Management: Creating and managing your gowin account, including identity verification, password recovery, and profile information management.
  • Transaction Processing: Processing deposits and withdrawals via your preferred Malaysian payment methods — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks) — securely and accurately.
  • Service Provision: Enabling you to access all Gowin games and services, including Sports Betting, live casino, slots, poker, and e-sports.
  • Service Communications: Sending important notices relating to your account, security alerts, policy updates, and transaction information.
  • Platform Improvements: Analysing usage patterns to improve the user experience, resolve technical issues, and develop better new features.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, duplicate account usage, and any misuse of the platform.
  • Legal Compliance: To fulfil legal obligations under Malaysian law, including PDPA 2010 and reporting requirements to the relevant authorities where required by law.
  • Marketing Communications: Sending relevant promotional information and bonus offers — only where you have given explicit consent. You may withdraw this consent at any time.
Legal Basis for Processing: All processing of personal data by Gowin is based on at least one of the following legal grounds: (a) your consent, (b) contractual necessity, (c) legal obligation, or (d) the legitimate interests of the platform. Gowin will not process your data for any other purpose without notifying you.

3 Data Sharing with Third Parties

Gowin does not sell, rent, or commercialise your personal data to any third party for marketing or commercial purposes. However, in the course of operating the platform, we may share certain data with the following categories of third parties, solely to enable us to deliver our services to you:

  • Payment Service Providers: Payment gateway providers that process your e-wallet and FPX transactions. They receive only the data required to complete a transaction and are bound by strict confidentiality agreements.
  • Game Providers: Providers of casino games, slots, fish shooting games, and other titles may receive anonymised player IDs for technical integration purposes. They do not receive any of your personally identifiable information.
  • Technology Service Providers: Cloud, hosting, and analytics service providers that assist us in operating the platform. All such providers are bound by data processing agreements that comply with PDPA.
  • Legal Authorities: Law enforcement agencies, courts, or Malaysian authorities such as Bank Negara Malaysia, where required by law or a valid court order.

In all instances of data sharing described above, Gowin ensures that the receiving party is bound by confidentiality and security obligations that are equivalent to, or stricter than, our own standards.

4 Data Security & Protection Measures

Gowin continuously invests in cybersecurity infrastructure to ensure your personal data is protected at every level — whether in transit or at rest.

  • 256-bit SSL/TLS Encryption: All communications between your device and gowin's servers are encrypted using the highest industry-standard encryption, ensuring your data cannot be intercepted by unauthorised parties while in transit.
  • Hashed Password Storage: Your password is never stored in plain text. We use the latest cryptographic hashing algorithms, so even in the event of a system compromise, your password remains secure.
  • Two-Factor Authentication (2FA): Gowin offers two-factor authentication as an additional layer of security for your account. We strongly recommend that you enable this feature.
  • 24/7 Monitoring: Gowin's security systems monitor for suspicious activity around the clock. Any unauthorised access attempts are automatically detected and blocked.
  • Internal Access Controls: Only gowin staff with a specific, work-related need are permitted to access user data. All access is logged and audited on a regular basis.
  • Regular Security Testing: Gowin conducts regular penetration testing and security audits by independent security experts to identify and address any vulnerabilities.

In the Event of a Data Breach: In the event of a data breach that may affect your personal information, Gowin is committed to notifying you within 72 hours of becoming aware of the incident, in line with data protection best practices. We will explain what happened, what data was involved, and the steps we are taking to address the situation.

5 Your Rights Under Malaysia's PDPA

Malaysia's Personal Data Protection Act 2010 (PDPA) grants you certain rights in relation to your personal data. Gowin respects and facilitates the exercise of all these rights:

👁️
Right of Access

You have the right to request a copy of all personal data we hold about you. We will provide this information within 14 business days.

✏️
Right to Rectification

If your personal data is inaccurate, incomplete, or outdated, you have the right to request a correction and we are obliged to update it promptly.

🗑️
Right to Erasure

You may request the deletion of your personal data under certain circumstances, such as when the data is no longer needed or when consent has been withdrawn.

🚫
Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time. We will cease all marketing communications immediately.

⏸️
Right to Restriction

In certain situations, you may request that we restrict how we process your data while a related issue is being resolved.

📦
Data Portability Rights

You have the right to receive your personal data in a machine-readable format and to transfer it to another service provider if you wish.

To exercise any of the rights above, please contact our Data Privacy Officer at support@gowin-khelo.com with the subject line "Data Privacy Rights Request", along with your full name and account number. We will respond within 7 business days.

6 Cookies & Tracking Technologies

Gowin uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and maintain security. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session protection, and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collects information on how you use the gowin platform to help us improve its design and functionality. All data is fully anonymised.
  • Functional Cookies: Remembering your preferences and settings — such as language, region, and display settings — to deliver a more personalised experience.
  • Analytics Cookies: Helping us understand usage patterns, the most visited pages, and player navigation paths for continuous improvement purposes.

You can manage your cookie preferences through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of some areas of the gowin platform.

7 Data Retention Period

Gowin retains your personal data only for as long as it is needed for the stated purpose or as required by Malaysian law. Our data retention guidelines are as follows:

  • Active Account Data: Retained for as long as your account remains active and for a minimum of 5 years after account closure for financial compliance purposes.
  • Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements.
  • Communications Data: Support emails and live chat records are retained for 2 years for service improvement and dispute resolution purposes.
  • Security Logs: Security activity logs are retained for 1 year for the purpose of investigating any security incidents that may arise.
  • Marketing Data: Retained until you withdraw your marketing consent or request data deletion.

Once the retention period expires, your data will be securely deleted or fully anonymised so that it can no longer be linked back to you.

📋 Additional Policies

The Gowin platform is intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18. Should we discover that we have collected data from a person under 18, we will promptly delete that data and close the account in question. If you believe your underage child has registered a Gowin account, please contact us immediately at support@gowin-khelo.com.

In the course of operating the platform, your personal data may be processed on servers located outside Malaysia, including within the Asia-Pacific region. Gowin ensures that any such data transfers are carried out with adequate safeguards and in compliance with Malaysia's PDPA requirements. We only work with cloud service providers that meet strict, internationally recognised security and privacy standards. Your data remains protected under the terms of this Privacy Policy regardless of where it is physically processed.

Gowin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new services, or updated legal requirements. The latest version of the Privacy Policy will always be available on this page, with the most recent update date shown at the top. For material changes, we will notify you via your registered email or an in-account notice. Continued use of the Gowin platform after any changes constitutes acceptance of the updated Privacy Policy.

Gowin has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Privacy Policy and handling all privacy-related enquiries. You may contact Gowin's Data Protection Officer by email at support@gowin-khelo.com with the subject line "Data Privacy Enquiry". We are committed to responding to all privacy enquiries within 7 working days. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.
🔒 Your Data Is Safe

Play with Confidence on a Platform That Protects Your Privacy

Gowin doesn't just promise data security — we prove it through PDPA compliance, 256-bit SSL encryption, and full transparency in every aspect of how your data is handled. Sign up today with confidence.

🔒 SSL 256-bit ✅ Malaysia PDPA Compliant 🚫 No Data Selling ⚡ Min deposit RM 10
Bahasa Melayu