Privacy Policy

This Privacy Policy ("Policy") is issued by kwin8 ("kwin8", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at kwin8.cam. This Policy governs the collection, processing, storage, and protection of personal data relating to individuals ("you", "User", "Data Subject") who access or use the kwin8 platform.

kwin8 recognises that privacy is a fundamental right. We are committed to processing personal data responsibly, transparently, and in compliance with the international data protection standards applicable under our operating licensing framework. We do not sell, rent, or commercially exploit your personal data to unaffiliated third parties.

By registering an Account on kwin8, making a deposit, or otherwise using any kwin8 service, you acknowledge that you have read this Privacy Policy and understand how your personal data will be processed. If you do not agree with the terms of this Policy, you should not create an Account or use our services.

The following definitions apply throughout this Privacy Policy:

kwin8 collects Personal Data across several categories depending on the nature of your interaction with the platform. We apply the principle of data minimisation — collecting only what is necessary for the stated purpose.

3.1 Registration Data

• Full legal name (as appearing on official identification documents)
• Date of birth (for 21+ age verification purposes)
• Email address and account password (encrypted)
• Mobile telephone number
• Country of residence and preferred currency (MYR for Malaysian players)

3.2 Identity Verification (KYC) Data

• Malaysian NRIC (MyKad) number, or Passport number, or Driver's License number
• Scanned or photographed copies of the above identity documents
• Proof of residential address (utility bill, bank statement — dated within 3 months)
• Source of funds documentation (where required under anti-money laundering obligations)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including method, amount (MYR), timestamp, and reference number
• E-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay) or bank account details (Maybank, CIMB, Public Bank, Hong Leong) used for MYR transactions
• Cryptocurrency wallet addresses used for BTC or USDT transactions
• Account balance history and bonus crediting records

3.4 Gaming & Betting Activity Data

• Game session history, bet history, and game outcomes
• Sports betting selections, stakes, and settlement records
• Bonus usage, wagering requirement progress, and promotion participation records
• VIP tier status, cashback accrual, and loyalty point history

3.5 Technical & Device Data

• IP address and approximate geographic location at time of access
• Device type, operating system, and browser version
• Session duration, page interaction data, and platform navigation logs
• Cookie identifiers and analytics data (see Section 10)

3.6 Communication Data

• Content of live chat sessions with support agents
• Email correspondence sent to or received from kwin8
• Records of responsible gambling tool requests (deposit limits, self-exclusion applications)

Personal Data is collected through the following channels:

kwin8 processes Personal Data on the following legal bases, depending on the purpose and nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between kwin8 and a registered User — including account management, deposit processing, withdrawal execution, and customer support.
• Legal Obligation: Processing mandated by kwin8's international licensing requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) verification, and age enforcement.
• Legitimate Interests: Processing necessary for kwin8's legitimate operational interests, including fraud prevention, platform security, responsible gambling enforcement, and service improvement — where such interests are not overridden by your data protection rights.
• Consent: Where kwin8 relies on your consent for specific processing activities (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of prior processing.

kwin8 uses Personal Data for the following purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected without your knowledge or consent.

kwin8 does not sell, rent, or trade your Personal Data to unaffiliated third parties for commercial purposes. We share Personal Data only in the following limited circumstances:

7.1 Service Providers (Data Processors)

kwin8 engages carefully selected third-party service providers to assist with platform operations. These providers act as Data Processors under contractual arrangements that bind them to kwin8's data protection standards. Categories of service providers include:

• KYC and identity verification technology providers
• Payment processing infrastructure providers (supporting Touch 'n Go, DuitNow, FPX, and cryptocurrency channels)
• Fraud detection and AML screening services
• Cloud hosting and data storage infrastructure providers
• Customer support platform providers
• Independent game audit and RNG certification bodies

7.2 Regulatory and Legal Disclosures

kwin8 may disclose Personal Data to competent regulatory authorities, law enforcement bodies, or courts where required by applicable law, a valid legal order, or kwin8's obligations under its international operating licence. Such disclosures will be limited to the minimum data necessary to comply with the applicable legal requirement.

7.3 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring involving kwin8, your Personal Data may be transferred to the acquiring or successor entity as part of the transaction. We will provide advance notice of any such transfer where reasonably practicable.

kwin8 operates as an international platform and your Personal Data may be processed and stored on servers located outside of Malaysia. kwin8 ensures that any cross-border transfer of Personal Data is subject to appropriate safeguards, including contractual data protection clauses with receiving parties that meet international standards for data security.

Where Personal Data is transferred to a jurisdiction that does not maintain equivalent data protection standards to those applicable under kwin8's licensing framework, kwin8 implements supplementary technical and organisational measures to ensure that the data receives an equivalent level of protection.

kwin8 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and legal obligations. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with kwin8's data lifecycle management procedures.

kwin8 uses cookies and similar tracking technologies to deliver a secure, functional, and personalised platform experience. A cookie is a small data file stored on your device by your web browser when you visit the kwin8 website.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for core platform functionality, including maintaining your login session, processing transactions, and enforcing security controls. These cannot be disabled without disrupting platform access.
• Performance & Analytics Cookies: Collect aggregated, anonymised data about how Users interact with the platform — which pages are visited, session durations, and navigation paths — to help kwin8 improve performance and usability.
• Functional Cookies: Remember your preferences (such as language settings and preferred payment method) to provide a more personalised experience on return visits.
• Security & Fraud Detection Cookies: Used to detect and prevent fraudulent logins, account takeover attempts, and abnormal betting patterns. These form part of kwin8's layered security infrastructure.

10.2 Managing Cookies

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or selectively accept cookies. Please note that disabling strictly necessary cookies will impair your ability to use the kwin8 platform, including the ability to log in or process transactions. Cookie settings do not affect your withdrawal rights under this Policy.

kwin8 implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, loss, destruction, alteration, or disclosure. Our security architecture includes the following controls:

• Transport Layer Security: All data transmitted between your device and the kwin8 platform is encrypted using TLS 1.3 (256-bit SSL encryption), the same standard used by financial institutions.
• Data Encryption at Rest: Sensitive Personal Data and KYC documents stored on kwin8's infrastructure are encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to Personal Data within kwin8's systems is governed by role-based access controls. Only personnel with a legitimate operational need are granted access to identifiable player data.
• Regular Security Audits: kwin8 conducts periodic security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential security weaknesses.
• Incident Response: kwin8 maintains a documented data breach response procedure. In the event of a confirmed data breach affecting your Personal Data, we will notify affected Users in accordance with our obligations under applicable regulations.

Subject to applicable data protection law and kwin8's regulatory obligations, you hold the following rights in relation to your Personal Data. Requests to exercise these rights should be submitted to our support team via email, with sufficient information to verify your identity.

kwin8 will respond to verified data subject requests within 30 days of receipt. Where a request is complex or voluminous, we may extend this period by a further 60 days with prior notification. We reserve the right to decline requests that are manifestly unfounded, repetitive, or that conflict with our legal obligations — in which case we will explain our reasoning in writing.

The kwin8 platform is strictly intended for persons aged 21 years and above. kwin8 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is conducted as a mandatory component of the KYC process, and any Account discovered to belong to a person under 21 will be immediately suspended and the matter investigated.

If you are a parent or guardian and believe that a minor has registered an Account on kwin8, please contact our support team immediately at the email address provided in Section 15. We will take prompt action to investigate and close the Account, and will securely delete any Personal Data collected in connection with it.

kwin8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable regulatory requirements, or operational circumstances. When material changes are made, kwin8 will provide advance notice to registered Users via email to the address on record, or via a prominent notice displayed on the kwin8 platform.

The effective date displayed at the top of this Policy indicates the date of the most recent revision. We encourage Users to review this Policy periodically to remain informed of how their Personal Data is being handled. Your continued use of the kwin8 platform following the effective date of any revised Policy constitutes your acknowledgement of the changes.

For any questions, concerns, or requests relating to this Privacy Policy or kwin8's data processing activities — including requests to exercise your data subject rights — please contact us through the following channels:

When submitting a data subject rights request by email, please include your full registered name, Account email address, and a clear description of the right you wish to exercise. Identity verification may be required before your request is processed.