mwin8 Privacy Policy

1. Definitions

In this Privacy Policy, the following terms have the meanings set out below:

• "mwin8", "we", "us", "our" — the operator of the mwin8 Platform at mwin8.app and its affiliated entities.
• "Platform" — the mwin8 website, mobile site, and all associated services.
• "Player", "you", "your" — any individual who registers for or accesses the mwin8 Platform.
• "Personal Data" — any information that identifies or can reasonably identify a natural person, directly or indirectly.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "KYC" — Know Your Customer procedures required to verify player identity for regulatory and fraud prevention purposes.

2. Personal Data We Collect

mwin8 collects the following categories of personal data from players and visitors:

mwin8 does not intentionally collect sensitive personal data beyond what is required for identity verification and legal compliance. Where sensitive data (such as identity document copies) is collected, it is stored with heightened security controls and access restrictions.

3. How We Collect Your Data

mwin8 collects personal data through the following methods:

3.1 Direct Collection

Data you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.

3.2 Automated Collection

Data collected automatically when you use the Platform, including via cookies, server logs, and similar tracking technologies. This includes technical data such as your IP address, browser type, and session activity.

3.3 Third-Party Sources

mwin8 may receive personal data from third-party identity verification providers, payment processors, and fraud prevention services where this is necessary for KYC compliance or transaction security. All such third parties are contractually required to handle your data in accordance with applicable data protection standards.

4. How We Use Your Personal Data

mwin8 uses your personal data for the following purposes:

• To create and manage your mwin8 account, including identity verification and age verification;
• To process deposits and withdrawals and maintain accurate transaction records;
• To provide, maintain, and improve the Platform and its features;
• To detect, prevent, and investigate fraud, money laundering, and other illegal activities;
• To comply with our obligations under applicable gaming licensing requirements, including AML (Anti-Money Laundering) regulations;
• To enforce our Terms and Conditions and resolve disputes;
• To communicate with you regarding your account, security alerts, and transactional updates;
• To send promotional communications where you have opted in or where permitted under applicable law;
• To monitor compliance with responsible gaming obligations, including detecting signs of problem gambling behaviour;
• To analyse usage patterns and improve the overall player experience on mwin8.

mwin8 will not use your personal data for any purpose incompatible with those listed above without prior notice and, where required, your explicit consent.

5. Legal Basis for Processing

mwin8 processes personal data on the following legal grounds:

• Contractual necessity — processing required to perform the contract between mwin8 and the player, including account management, transaction processing, and game provision;
• Legal obligation — processing required to comply with applicable laws and licensing requirements, including KYC, AML, and data retention obligations;
• Legitimate interests — processing for fraud prevention, security monitoring, platform analytics, and responsible gaming purposes, where these interests are not overridden by your fundamental rights;
• Consent — processing for optional communications and marketing, where you have given explicit consent which may be withdrawn at any time.

6. Data Sharing & Disclosure

mwin8 does not sell, rent, or trade your personal data to third parties for commercial purposes. Personal data may be shared in the following limited circumstances:

• Payment Processors — Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment providers, to the extent necessary to process your transactions;
• Identity Verification Services — third-party KYC providers used to verify your identity and age as required by our licensing obligations;
• Fraud Prevention Services — third-party services used to detect and prevent fraudulent activity on the Platform;
• Regulatory and Legal Authorities — where mwin8 is legally required to disclose data to competent authorities, gaming regulators, or law enforcement bodies;
• Technology Service Providers — hosting providers, analytics tools, and customer support platforms operating under strict data processing agreements with mwin8.

All third parties with whom mwin8 shares personal data are contractually bound to process that data solely for the specified purpose, in accordance with applicable data protection requirements, and with appropriate security controls in place.

7. Cookies & Tracking Technologies

mwin8 uses cookies and similar technologies — including local storage and session tokens — for the following purposes:

• Essential Cookies — necessary for the Platform to function, including maintaining your login session and security tokens. These cannot be disabled without affecting Platform functionality;
• Analytics Cookies — used to collect aggregated, anonymised data about how players use the Platform, enabling mwin8 to improve performance and navigation;
• Preference Cookies — used to remember your settings and personalisation preferences, such as display options and notification settings.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to use core Platform features including the mwin8 login function. mwin8 does not use third-party advertising cookies or behavioural tracking cookies for external advertising purposes.

8. Data Retention

mwin8 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. Specific retention periods are as follows:

• Account and identity data — retained for the duration of the account plus a minimum of 5 years following account closure, as required under AML and gaming licensing regulations;
• Transaction records — retained for a minimum of 5 years from the date of the transaction;
• Support communications — retained for up to 3 years from the date of the communication for dispute resolution purposes;
• Technical and usage data — retained in identifiable form for up to 24 months, then anonymised for aggregated analytics purposes.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with mwin8's data disposal procedures.

9. Data Security

mwin8 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mwin8 Platform;
• One-way cryptographic hashing for account passwords — mwin8 does not store your password in plain text;
• Segregated storage of player funds, separate from operational funds;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of the Platform;
• Incident response procedures for detecting and responding to data security breaches.

In the event of a data security breach that is likely to result in a high risk to your rights and freedoms, mwin8 will notify affected players without undue delay and take appropriate remediation steps.

10. Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by mwin8:

• Right of Access — the right to request a copy of the personal data mwin8 holds about you;
• Right to Rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to Erasure — the right to request deletion of your personal data, subject to legal retention obligations that may require mwin8 to retain certain data;
• Right to Restrict Processing — the right to request that mwin8 limits processing of your data in certain circumstances;
• Right to Object — the right to object to processing based on legitimate interests, including for direct marketing purposes;
• Right to Data Portability — the right to receive your personal data in a structured, commonly used format.

To exercise any of the above rights, please contact the mwin8 support team via live chat or email. mwin8 will respond to verified requests within 30 days. Identity verification may be required before processing data rights requests to protect against unauthorised access.

11. Children's Privacy

The mwin8 Platform is strictly intended for individuals aged 21 years and above. mwin8 does not knowingly collect personal data from anyone under this age. If mwin8 discovers that personal data has been collected from a player who is under 21, that account will be immediately suspended, all associated data will be deleted to the extent permitted by law, and any funds will be returned to the payment source after verification.

If you believe a minor has created an mwin8 account, please contact our support team immediately so that we can take prompt action.

12. Third-Party Links

The mwin8 Platform does not contain links to external third-party websites as a matter of design policy. However, payment gateway interfaces accessed during deposit and withdrawal processes are operated by independent third-party providers. Once you navigate to a third-party payment interface, their privacy policy governs the processing of your data on that interface. mwin8 encourages players to review the privacy policies of payment providers before completing transactions.

13. Changes to This Privacy Policy

mwin8 reserves the right to update this Privacy Policy from time to time. Material changes will be communicated to registered players via their registered email address or through a prominent notice on the Platform. The "Last updated" date at the top of this page reflects the date of the most recent revision.

Continued use of the mwin8 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated policy, you should cease use of the Platform and contact the support team to close your account.

14. Contact Us

For any questions about this Privacy Policy, to exercise your data rights, or to raise a data protection concern, please contact the mwin8 data team:

• Live Chat: Available 24/7 via the chat widget on the mwin8 Platform
• Email: [email protected]
• Subject line: Include "Privacy Request" for data rights enquiries
• Response target: Within 2 business days for privacy-related requests

mwin8 takes all data protection queries seriously. Where you are not satisfied with our response, you have the right to escalate your concern to the relevant supervisory authority under our licensing framework.