This Privacy Policy sets out transparently how kwin8 collects, uses, stores, and protects the personal information of members on our platform. We believe transparency is the foundation of trust — and your trust is the most valuable thing we safeguard.
The kwin8 Privacy Policy is built on six core principles that ensure your data is always protected and handled ethically.
All data transmitted between your device and kwin8's servers is protected by 256-bit SSL encryption — the same encryption technology used by Malaysia's major banks, including Maybank and CIMB. No third party can intercept or read your data in transit.
Kwin8 has never and will never sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data belongs to you — it is not a kwin8 business asset to be monetised without your knowledge.
Within kwin8's own organization, access to members' personal data is strictly limited — only staff who require access to carry out their specific duties are permitted to view that data. All access is logged and continuously monitored.
Every kwin8 member has the right to request a copy of the personal data we hold about them, and to request the correction of any inaccurate information. These requests will be processed within 14 business days of receiving a complete application.
Members who close their kwin8 account are entitled to request the deletion of their personal data, subject to record-keeping obligations required under Malaysian law. kwin8 will delete or anonymise the data within 30 days of a valid request.
In the event of any security breach affecting members' personal information, kwin8 is committed to notifying affected members within 72 hours of confirming that a breach has occurred, in line with international best practices for data protection.
Questions about privacy?
support@kwin8.xyzThis Privacy Policy outlines the privacy practices of the kwin8 platform (kwin8.xyz) in handling the personal data of our members in Malaysia. This document is written in English to ensure every Malaysian member fully understands their rights. By registering for or using the kwin8 platform, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the platform and contact us to close your account.
Kwin8 collects various types of information from members for legitimate and specified purposes. Below are the categories of data we collect and how they are obtained:
When you register a kwin8 account, we collect your full name, Malaysian mobile number, email address, date of birth, and the password you choose. All of this information is required to create and verify your account.
When you make a deposit or withdrawal, kwin8 records transaction details including the payment method used (Touch 'n Go eWallet, DuitNow, GrabPay, FPX, Boost, ShopeePay), the transaction amount in RM, and the date and time of the transaction. We do not store your credit card number or full banking details — only the transaction metadata necessary for account security.
For mandatory age and identity verification purposes, kwin8 may request a copy of your Malaysian identity card (MyKad) or passport. These documents are stored securely and accessed only by authorised compliance personnel.
When you contact kwin8's support team via live chat, email, or WhatsApp, we retain a record of that communication. This helps us provide better service and ensure consistency in handling your issues.
| Data Type | Details | Purpose |
|---|---|---|
| Device Data | Device type, operating system, phone model | Technical |
| IP Address | User IP, approximate location (state/city) | Security |
| Browser Data | Browser type, version, and language settings | Technical |
| Activity Logs | Games played, time spent playing, bets placed | Operations |
| Cookie Data | Session cookies, preference cookies, analytics cookies | Function |
| Access Time | Login date and time, session duration | Security |
Kwin8 only uses your personal data for legitimate purposes that are directly related to the provision of our platform services. We do not use your data for any purpose for which you have not given consent:
Registration data is used to verify your identity, confirm that you meet the minimum age requirement of 18 years, create and manage your kwin8 account, and prevent fraud such as multiple account registrations by the same individual.
Financial details are used to process deposits and withdrawals through Malaysian local payment methods, to verify that the payment account belongs to the same member, and to maintain transaction records as required by financial compliance obligations.
Communication records and account information are used by the kwin8 support team to help resolve your enquiries and complaints more quickly and accurately, without requiring you to repeat background information each time you get in touch.
IP address, device data, and login pattern data are used to detect and prevent unauthorised access to your account, identify suspected fraudulent activity, and protect the integrity of gameplay on the kwin8 platform.
Platform usage data that is analysed in aggregate and without personal identifiers is used to understand how members use kwin8, identify the most popular games, and make data-driven decisions to improve the overall user experience.
Your email address and phone number are used to send important account notifications, transaction confirmations, security alerts, and updates regarding changes to kwin8's terms or policies. You can manage your promotional communication preferences in your account settings.
Important Note: kwin8 will not use your personal data to make automated decisions that have a legal or significant impact on you without human involvement. Any decisions relating to account termination or transaction rejections will be reviewed by kwin8 staff before being enforced.
Kwin8 does not sell, rent, or trade members' personal data to any third party. However, there are limited situations where we may need to share certain data with carefully selected parties:
Kwin8's partner game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Play'n GO, and JILI Games — receive only the minimum technical data required to run the games, typically a session ID that cannot be directly linked to your identity. All these providers operate under strict data protection agreements.
To process deposit and withdrawal transactions via Touch 'n Go eWallet, DuitNow, GrabPay, FPX (Maybank2u, CIMB Clicks), Boost, and ShopeePay, kwin8 is required to share the minimum necessary transaction information with the respective payment processors. This sharing is governed by each payment processor's own privacy policy and Malaysia's financial regulatory requirements.
To fulfil Know Your Customer (KYC) requirements and comply with anti-money laundering laws, kwin8 works with authorised third-party identity verification services. Data sharing is limited to the minimum information required for verification.
Kwin8 may be required to disclose a member's personal data to the relevant authorities if mandated by a court order, warrant, or valid legal requirement in Malaysia. In such cases, kwin8 will endeavour to notify the member in advance where permitted by law.
Data Sharing Assurance: All third parties that receive data from kwin8 are bound by data processing agreements that prohibit them from using that data for any purpose other than the specific permitted use. kwin8 only works with third parties that meet data protection standards equal to or higher than kwin8's own.
Kwin8 continuously invests in security technologies and procedures to protect members' personal data from unauthorised access, misuse, disclosure, alteration, or destruction.
All data communications are secured with TLS 1.3 and 256-bit SSL encryption. Sensitive data such as identity verification information is stored in encrypted format using industry-standard encryption algorithms.
Kwin8 servers are hosted in data centres with multi-layered physical and digital protection, 24/7 monitoring, intrusion detection systems, and regular secure data backups.
Access to members' personal data within kwin8 is governed by a role-based access control (RBAC) system. All access is logged and regularly audited to ensure no unauthorised access occurs.
Kwin8's security system monitors platform activity in real time to detect suspicious patterns, hacking attempts, or unauthorized access to member data.
While kwin8 takes all reasonable steps to protect your data, account security also depends on your own actions. We encourage you to:
As a kwin8 member and as a user in Malaysia, you have certain rights regarding the personal data we hold about you. kwin8 is committed to respecting and facilitating the exercise of these rights:
You have the right to know what data we hold about you and to request a copy of that data in a readable format.
You have the right to request the correction of any inaccurate or incomplete data we hold about you.
You have the right to request the deletion of your personal data, subject to statutory record-keeping obligations.
Under certain circumstances, you have the right to request that kwin8 restrict how we use your data.
You have the right to receive your personal data in a structured, portable format that can be transferred to another service provider.
You have the right to object to the processing of your personal data for direct marketing purposes at any time.
How to Exercise Your Rights: To exercise any of the rights above, submit a written request to support@kwin8.xyz stating the right you wish to exercise along with your account details. kwin8 will respond within 14 business days. No fee is charged for the first request within any 12-month period. For repeated requests or those requiring exceptional effort, kwin8 reserves the right to charge a reasonable fee.
The kwin8 platform uses cookies and similar technologies to enhance the user experience and ensure the platform operates smoothly. Below is an explanation of the types of cookies we use:
You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of the kwin8 platform. For more information on how to manage cookies in your browser, refer to your browser's help documentation.
Kwin8 is an adult entertainment platform intended exclusively for individuals aged 18 and above. We do not knowingly target, collect, or store personal data from anyone under the age of 18.
Kwin8's registration system is built with multiple layers of age verification to prevent access by underage individuals. If kwin8 discovers that data belonging to a person under the age of 18 has been collected inadvertently, we will promptly delete that data and close the account in question.
To Parents & Guardians: If you believe your child under the age of 18 has registered an account on kwin8, please contact us immediately at support@kwin8.xyz. We will investigate and close the account, and delete all associated data within 48 hours of a confirmed report.
As a platform that works with international game providers such as Evolution Gaming (Sweden), NetEnt (Sweden), Microgaming (Isle of Man), and Pragmatic Play (Malta), certain technical data may be processed in countries outside Malaysia in the course of delivering gaming services.
In all cases of cross-border data transfers, kwin8 ensures:
Core data — such as account information, transaction records, and identity verification documents — is stored on servers operating under strict data protection requirements.
Kwin8 does not retain members' personal data for longer than is necessary for the stated purposes or as required by law. Below are our data retention period guidelines:
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Active account registration data | Throughout active account + 2 years | Contract |
| Financial transaction records | 7 years from the transaction date | Legal |
| KYC verification documents | 5 years after account termination | Compliance |
| Support communication logs | 3 years from the date of communication | Legitimate Interest |
| Security & Access Logs | Rolling 12 months | Security |
| Aggregated analytics data | Unlimited (no identification) | Legitimate Interest |
Once the retention period has ended, data will be securely deleted or permanently anonymised so that it can no longer be linked to any individual.
If you have any questions, concerns, or wish to exercise your privacy rights in relation to kwin8's Privacy Policy, please contact us through the following channels:
For enquiries related to data privacy, data access requests, or privacy complaints: support@kwin8.xyz. Please include "Privacy Enquiry" in your email subject line to help us prioritise your response.
For general privacy inquiries requiring a prompt response, you may use the live chat function within the kwin8 platform. Our Malay-speaking support team is available 24/7.
Kwin8 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or services. Any material changes will be communicated to members via email or in-platform notification at least 14 days before the effective date. Continued use of the kwin8 platform after the effective date of any changes constitutes acceptance of the updated policy.
Effective Date: This Privacy Policy takes effect from 1 January 2026 and supersedes all previous versions of kwin8's Privacy Policy. The most current version will always be available on this page at kwin8.xyz/privacy-policy.
If you have ever felt uneasy about the security of your personal information when signing up for an online platform, you are not alone. That concern is entirely valid — and it is precisely why kwin8 invests so heavily in security infrastructure and a comprehensive privacy policy.
At kwin8, we understand that when you register as a member and provide personal information such as your name, phone number, and Touch 'n Go or DuitNow e-wallet details, you are placing a great deal of trust in us. That trust is not something we take lightly — it is a responsibility we uphold with every technical and organisational capability at our disposal.
The online casino industry has historically had a mixed reputation when it comes to data privacy and security. Some platforms are not transparent about how they use member data, some sell information to advertisers without users' knowledge, and some maintain inadequate security practices that have led to large-scale data breaches.
Kwin8 takes a fundamentally different approach. We believe that members who know exactly what data we collect and why will trust our platform more. Transparency is not just the right thing to do ethically — it is also sound business strategy. Members who trust their platform are loyal members, and member loyalty is the foundation of kwin8's long-term growth.
Malaysia has a clear legal framework for data protection through the Personal Data Protection Act 2010 (PDPA 2010). kwin8 operates in accordance with the principles set out in the PDPA 2010, which covers seven core principles: the general principle, notice and choice, disclosure, security, data integrity, access, and correction.
This means that as a kwin8 member, you have rights protected under Malaysian law — the right to know what data we hold about you, to correct inaccurate data, and to withdraw your consent to data processing under certain circumstances. kwin8 respects these rights not merely because it is required to, but because it is the right thing to do.
When kwin8 analyses aggregated platform usage data — for example, discovering that many members from Johor Bahru enjoy playing Gates of Olympus slots at night, or that live baccarat is more popular among members from Kuala Lumpur than slots — this information helps us make better decisions about which games to add, which promotions are most relevant, and how to improve the user experience for different player segments.
It is important to understand that this analysis is conducted on aggregated data that cannot be linked to any specific individual. kwin8 does not build individual profiles based on members' playing patterns for the purpose of manipulation or targeting. The objective of our data analysis is to improve the platform — not to exploit members' playing habits.
One of the biggest concerns for online platform users is the security of their financial information. When you make a deposit to kwin8 using Touch 'n Go eWallet, DuitNow, GrabPay, or FPX (Maybank2u, CIMB Clicks), you may wonder — what happens to your transaction details?
Kwin8 does not store your credit card numbers, bank account numbers, or e-wallet passwords. Our system records only the minimum transaction metadata required for operations — namely the transaction amount in RM, the payment method used (without full account details), the date and time, and the transaction status. This means that even in the unlikely event of a security incident, an attacker would not be able to access your complete financial details.
The actual processing of financial transactions is carried out by authorised third-party payment processors — companies that specialise in financial transaction security and operate under the oversight of Bank Negara Malaysia and relevant regulatory bodies. kwin8 receives only a confirmation that a transaction was successful — not your full account details.
There is a close relationship between data privacy and responsible gaming. The responsible gaming tools kwin8 provides — such as deposit limits, loss limits, and self-exclusion programs — rely on members' gaming activity data to function effectively. kwin8's deposit limit system, for example, needs to track how much you have deposited within a given period in order to enforce the limits you set for yourself.
This data is used solely to protect you — not to analyse vulnerabilities or exploit your gameplay patterns. kwin8 treats information related to a member's gaming behaviour as among the most sensitive data we hold. It is never shared with anyone and is used only for purposes you have consented to: helping you play within healthy limits.
Answers to the most frequently asked questions about how kwin8 handles the personal data of Malaysian members.
This Privacy Policy should be read together with Terms & Conditions kwin8 governs the overall relationship between the platform and its members. For information on how to protect yourself while gaming, please visit the Responsible Gaming who provide free self-management tools. If you have any concerns about your data privacy or wish to exercise your rights, kwin8's support team is available at any time via email at support@kwin8.xyz. All kwin8 services are intended for users aged 18 and above only.
Register for a free account, deposit via Touch 'n Go or DuitNow, and enjoy over 1,500 games backed by bank-grade data protection and full support in Bahasa Melayu.
For users aged 18 and above only. Gamble responsibly.