Official Privacy Document

Privacy Policy Gowin –
Protection of Your Personal Data

At Gowin, your privacy is not merely a legal obligation — it is a responsibility we take seriously. This document transparently explains how your personal data is collected, used, and protected while you use our platform.

Updated: 1 January 2026 Malaysia PDPA 2010 SSL 256-bit

Six Guarantees Data Protection Gowin to You

High-Grade Data Encryption

All data transmitted between your device and gowin's servers is protected by SSL 256-bit encryption — the same standard used by Malaysian banking institutions to secure online financial transactions.

Strict Data Access Controls

Your personal data can only be accessed by authorised Gowin staff who have a legitimate need to do so. All access is logged and continuously monitored to detect any suspicious activity.

No Sale of Data to Third Parties

Gowin does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data is used solely for the purposes clearly stated in this policy.

Malaysia PDPA Compliance

All of gowin's data handling practices are conducted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). You have the right to access, correct, and withdraw consent for the use of your data at any time.

Secure Data Storage

Your personal data is stored on servers protected by layered security systems including firewalls, intrusion detection systems, and continuous threat scanning. Data backups are performed regularly to prevent data loss.

Data Breach Notification

In the event of any security breach involving your personal data, gowin is committed to notifying you within the timeframe required by Malaysian law, along with the steps taken to address the situation.

1Introduction and Scope of This Policy

This Privacy Policy is issued by Gowin ("we", "Platform") and applies to all individuals who access or use the Gowin platform via the website gowin.ceo or via Gowin App for Android and iOS.

We take your privacy seriously. This document is written in clear, plain language so you know exactly what happens with your personal data — not in hard-to-understand legal jargon. If you have any questions after reading this, the gowin support team is available 24/7 via live chat on the platform.

By using the Gowin platform, you agree to the collection and processing of your personal data as described in this document. This Privacy Policy should be read together with Terms and Conditions us.

Core Principles: Gowin only collects data that is truly necessary, retains it only for as long as needed, and never uses it for purposes you have not agreed to.
2Types of Personal Data We Collect

Gowin collects your personal data in several ways — directly when you register or use the platform, automatically through tracking technologies, and in some cases from legitimate third-party sources.

Data Category Example Information How It Is Collected
Personal Identity Full name, date of birth, national identity card number Registration form, KYC process
Contact Information Phone number, email address, residential address Account registration
Financial Data Bank account number, bank name, eWallet details Withdrawal and KYC process
Usage Data Game history, deposits, in-platform activity Automatically during use
Technical Data IP address, device type, browser, operating system Cookies and system logs
Communication Data Live chat records, support emails, feedback Interactions with customer support

Gowin never collects unnecessary sensitive data such as your medical information, religious beliefs, or political views.

3How Gowin Uses Your Personal Data

The personal data we collect is used solely for legitimate and necessary purposes in order to operate Gowin services properly. The following are the primary purposes for which your data is used:

  • Account Management: Creating, verifying, and managing your gowin account, including the required KYC process
  • Transaction Processing: Processing deposits, withdrawal of winnings, and adjustments to your account balance
  • Service Delivery: Provides access to all games and platform features on gowin, including slots, Bingo, and sports betting
  • Security and Fraud Prevention: Identifying and preventing fraud, money laundering, and platform abuse
  • Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance
  • Service Communications: Sending important notifications about your account, transactions, and policy changes
  • Platform Improvements: Analysing usage patterns to improve the experience for all gowin users
  • Legal Compliance: Fulfils legal and regulatory obligations applicable in Malaysia
Marketing: Gowin only sends you marketing communications if you have given explicit consent during registration or through your account settings. You may withdraw this consent at any time via the notification settings in your Gowin account.
4Legal Basis for Data Processing

Gowin processes your personal data on the following legal bases as provided under Malaysia's Personal Data Protection Act 2010 (PDPA):

  • Contract Performance: Processing required to fulfill the service agreement between you and gowin — including account management and payment processing
  • Legal Obligation: Processing required to comply with applicable Malaysian laws, such as anti-money laundering (AML) requirements
  • Legitimate Interests: Processing necessary for gowin's legitimate business interests, including fraud prevention and service improvement, provided it does not override your interests or fundamental rights
  • Consent: Processing based on your explicit consent, primarily for marketing communications
5Data Sharing with Third Parties

Gowin does not sell your personal data. However, in the course of delivering our services, we may need to share certain data with trusted third parties in the following circumstances:

  • Payment Providers: Data required to process deposits and withdrawals is shared with payment gateways and legitimate financial institutions such as local Malaysian banks, DuitNow providers, Touch 'n Go, and GrabPay
  • Technical Service Providers: Hosting, cybersecurity, and analytics service providers that help gowin operate the platform safely and efficiently
  • Game Providers: Game session data required by third-party game providers to deliver the requested game content
  • Authorities: When required by law, court order, or a competent Malaysian government agency

All third parties that receive data from gowin are bound by strict data protection agreements and are not permitted to use your data for any purpose outside the scope of services they provide to gowin.

Cross-Border Transfers: In cases where data needs to be transferred outside Malaysia, Gowin ensures that a level of protection equivalent to the PDPA 2010 is upheld by data recipients in the destination country.
6Cookies and Tracking Technologies

The gowin platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as they are essential to your account security
  • Preference Cookies: Saving your preferences such as language, theme, and display settings to deliver a more personalised experience
  • Analytics Cookies: Helps us understand how users interact with the platform so we can make meaningful improvements
  • Security Cookies: Helps detect and prevent fraudulent activity and unauthorized access

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the Gowin platform.

7Data Retention and Deletion Period

Gowin retains your personal data only for as long as necessary for the stated purposes or as required by Malaysian law. In general:

  • Active account data is retained for as long as your account remains active on Gowin
  • Financial transaction records are retained for 7 years after a transaction is made, in accordance with Malaysian financial regulatory requirements
  • Customer support communication data is retained for 3 years
  • Security and audit logs are retained for 2 years
  • When an account is closed at your request, personal data no longer required for legal purposes will be deleted or anonymised within 90 days
Right to Erasure: You may request the deletion of personal data that is no longer needed by contacting Gowin support. Requests will be processed subject to any applicable legal data retention obligations.
8Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Gowin:

Right of Access

You have the right to request a copy of the personal data we hold about you and to know how it is used.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data in your Gowin account.

Right to Erasure

You have the right to request the deletion of your personal data when it is no longer needed, subject to legal obligations.

Right to Withdraw Consent

You may withdraw consent for marketing processing at any time through your account settings.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another platform.

Right to Object

You have the right to object to the processing of your personal data for certain purposes, including direct marketing.

To exercise any of the above rights, contact the gowin support team via live chat within the platform. We will process your request within 21 working days from the date of receipt.

9Data Security Measures

Gowin implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure:

  • End-to-End Encryption: All data communications are protected by TLS 1.3 protocol with SSL 256-bit encryption
  • Two-Factor Authentication: Additional security features are available to protect your account from unauthorised access
  • Continuous Security Monitoring: Automated monitoring systems operate 24/7 to detect and respond to security threats
  • Penetration Testing: Gowin conducts regular security testing by independent security experts to identify and address any vulnerabilities
  • Staff Training: All gowin staff who handle personal data receive comprehensive data security training
Shared Responsibility: While gowin takes all reasonable steps to protect your data, account security also depends on you. Please use a strong password, do not share your login credentials, and promptly report any suspicious activity to our support team.
10Children and Underage Users

Gowin Platform not intended for individuals under the age of 21. gowin does not intentionally collect personal data from minors.

If we find that personal data has been collected from someone under the age of 21 without proper verification, we will take immediate action to delete that data and close the relevant account. Any associated deposits will be refunded via the original payment method.

If you are aware that someone under the age of 21 has registered a gowin account, please report it to our support team immediately via live chat on the platform.

11Amendments to This Privacy Policy

Gowin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. Each version will include the latest amendment date at the top of this document.

If there are material changes to how we handle your personal data, we will notify you via:

  • Notifications clearly displayed on the gowin platform upon Login
  • Email to the address registered in your account
  • Announcements on the gowin homepage

Your continued use of the gowin platform after any amendment takes effect constitutes your acceptance of the latest version of this Privacy Policy. You are advised to review this page periodically.

12How to Contact Us

If you have any questions, concerns, or wish to exercise your rights regarding personal data held by gowin, please contact us through the following channels:

  • Live Chat: Available 24/7 directly within the gowin platform — the fastest way to get help
  • Support Email: [email protected] (response within 1–2 business days)
  • FAQ: Visit page FAQ us for answers to frequently asked questions about privacy and data security

We are committed to addressing every privacy-related enquiry seriously and within a reasonable timeframe. Your trust is our priority.

Complaints to the Relevant Authority: You also have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner if you believe your rights under the PDPA 2010 have been violated.

Your Privacy, Our Priority

Gowin is committed to protecting your personal data at every step. If you have any concerns about privacy or account security, our support team is available 24/7.

🔐

Play with Peace of Mind at Gowin

Your personal data is protected. Your wins are processed quickly. Customer support is available 24/7. That is the Gowin promise to every Malaysian member.

Bahasa Melayu