Privacy Policy 23win – We Protect Your Data

23win collects your personal information for clear and legitimate purposes. We only collect data that is strictly necessary to provide a safe, fair service that complies with applicable legal requirements. Generally, there are two main categories of information we collect:

Information you provide directly:

• Full name as shown on official identification documents
• Date of birth and gender
• Current residential address
• Active mobile phone number
• Accessible email address
• A copy of your identity document (MyKad, passport, or driving license) for the KYC process
• Bank account or digital wallet details for financial transaction purposes
• Any information you share when contacting our customer support team

Information collected automatically:

• IP address and general location data based on IP
• Device type, operating system, and browser version used
• Game session data including login times, session duration and wagering activity
• Cookie data and similar tracking technologies (see Section 6)
• Access logs and platform activity records for security purposes

23win uses collected personal information solely for legitimate and specified purposes. We will not use your data for any other purpose without first obtaining your consent. The following are the primary purposes for which your data is used:

• Account management — registration, identity verification, maintenance, and security of your account
• Transaction processing — processing deposits, withdrawals, and all financial activities within the platform
• Fraud and money laundering prevention — monitoring suspicious activity and fulfilling AML/CTF compliance obligations
• Customer Support — responding to inquiries, resolving complaints, and providing technical assistance
• Service improvement — analyzing usage patterns to enhance the gaming experience and platform functionality
• Marketing communications — sending promotional offers, bonus information, and relevant platform updates (you may unsubscribe at any time)
• Legal compliance — meeting applicable legal requirements, regulations, and directives from relevant authorities
• Responsible Gaming — detecting potentially harmful gaming patterns and providing timely assistance

23win maintains a strict policy against sharing personal information. We does not sell, rent, or disclose your personal data to any third party for their own commercial purposes. However, in the following limited situations, we may share your information:

• Accredited service providers — payment processing companies, KYC verification platforms, cloud service and technical infrastructure providers, all bound by strict confidentiality agreements
• Legal obligation — when required by law, court order, or lawful directive from a regulatory authority
• Financial crime prevention — to relevant agencies in efforts to prevent money laundering, terrorism financing, or fraud
• Protection of vital interests — in emergency situations where disclosure is necessary to protect someone's safety

The security of your personal information is a responsibility we take very seriously. 23win continuously invests in the latest security infrastructure to ensure your data is always protected in the most effective way. The security measures we implement include:

• Data encryption in transit — all communications between your browser and our platform are secured with TLS 1.3 protocol and 256-bit SSL encryption
• Data encryption at rest — sensitive information stored in our databases is encrypted using AES-256 standards
• Layered access controls — only specifically authorized personnel may access sensitive data, with comprehensive audit trail logs
• 24/7 security monitoring — a real-time threat monitoring system that automatically detects and responds to any suspicious activity
• Regular penetration testing — we conduct regular security assessments by independent security experts to identify and remediate any potential vulnerabilities
• Two-factor authentication (2FA) — available to all member accounts to add an extra layer of security during the login process

23win respects your rights over your own personal information. As a user of our platform, you have the following rights, which you may exercise at any time:

The 23win platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand how users interact with our platform. Below are the types of cookies we use:

You can control or delete cookies through your browser settings. Please note, however, that disabling essential cookies may affect the normal functionality of the 23win platform and your overall user experience.

23win services are strictly limited to individuals who are of age 18 years and above. We do not intentionally collect, store or process any personal information from children or minors.

23win uses an integrated age verification system as part of the KYC process to ensure all users meet the minimum age requirement before being granted full access to the platform.

In the course of platform operations, your personal information may be transferred to and stored on servers located outside Malaysia. This occurs primarily in the context of cloud computing infrastructure and international technical service providers we utilise.

When cross-border data transfers occur, 23win ensures that:

• The destination country or region has an adequate level of data protection
• Appropriate and legally binding data transfer agreements have been executed with the receiving parties
• Technical and organizational security standards equivalent to or exceeding local requirements are strictly observed

23win retains your personal information only for as long as necessary to fulfil the purposes outlined in this privacy policy or as required by applicable law. The following are our general data retention guidelines:

Upon expiry of the applicable retention period, your data will be securely deleted or anonymized in accordance with our established data deletion procedures.

23win reserves the right to update or amend this privacy policy at any time to reflect changes in our practices, new legal requirements, or improvements in how we handle personal data.

Any significant changes to this policy will be communicated to you via:

• In-platform notifications on 23win upon your next login
• Notification email to the address registered in your account
• Update the "Last Updated" date displayed at the top of this page

Your continued use of the 23win platform after the effective date of any amendment shall be deemed your acceptance of the updated privacy policy. We encourage you to review this page periodically to stay informed about how we handle your personal information.

If you have any questions, concerns, or wish to exercise any of your privacy rights set out in this policy, the 23win team is ready to assist you. We are committed to providing accurate and comprehensive responses within the stipulated timeframe.

For more information about your rights and responsibilities as a 23win platform user, please also refer to the Terms and Conditions, Responsible Gaming and Frequently Asked Questions (FAQ) us.