98win Privacy Policy — Our Commitment to Protecting Malaysian Members' Data

98win is a sports betting and online casino platform committed to protecting the privacy and personal data of every member. This Privacy Policy explains in detail how we collect, process, store, use, and protect your personal information when you use the services of 98win.

This document applies to all users of the 98win, including those who browse the website without registering, registered members, and any party who interacts with us via customer support channels, email, or other platforms associated with 98win.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. This means we only collect data that is genuinely necessary, retain it only for as long as required, and will never sell or rent your personal information to any third party for marketing purposes.

98win collects personal data from you in a number of different situations. Below is a full overview of the types of data we process:

2.1 Data You Provide Directly

• Registration information: Full name, date of birth, email address, Malaysian phone number, and encrypted password.
• Identity verification (KYC) information: MyKad number or passport for age and identity verification in compliance with legal requirements.
• Financial information: Bank account numbers and digital wallet details (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) for the sole purpose of processing deposits and withdrawals in Malaysian Ringgit (RM).
• Communications: Messages, complaints, and enquiries you send to our customer support team.

2.2 Data Collected Automatically

• Technical data: IP address, web browser type and version, device operating system, screen resolution, and language settings.
• Usage data: Pages visited, time spent in each section of the platform, game categories accessed, and login and logout times.
• Betting data: Betting history, games played, total wagers, and outcomes in MYR for anti-money laundering compliance purposes.
• Device data: Unique device identifiers, smartphone model, and related information for security and fraud prevention purposes.

98win uses your personal data solely for the lawful purposes stated here. We do not process your data for any other purpose without obtaining fresh consent from you:

• Account management: Creating, maintaining, and securing your account on the platform 98win.
• Financial transaction processing: Processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, CIMB Clicks, and other Malaysian payment methods in MYR.
• Service provision: Giving you access to all games and betting on 98win — from Malaysia Super League and EPL football, live baccarat, e-sports to virtual sports.
• Legal compliance: Meeting anti-money laundering (AML) compliance obligations, fraud prevention, and applicable legal reporting requirements.
• Platform security: Detecting, investigating, and preventing fraud, multi-account usage, and other suspicious activity.
• Service communications: Sending important notifications about your account, transactions, platform updates, and security matters.
• Product improvement: Analysing usage patterns to improve the user experience on the platform 98win.
• Marketing & Promotions (with your consent): Sending you information about bonuses, promotions, VIP offers, and related updates that may be of interest to you.

98win does not sell, rent or trade your personal data to any third party for their own marketing purposes. However, there are limited situations where we need to share your data with certain parties to keep our services functioning properly:

4.1 Trusted Service Providers

We share necessary data with service providers that help us operate the platform, including:

• Payment processors handling transactions via Touch 'n Go, GrabPay, DuitNow, FPX, and other Malaysian payment methods.
• Live casino and Sports Betting service providers that operate tables and markets on the platform 98win.
• Certified IT infrastructure and cloud services providers.
• Analytics companies that help us understand platform usage and improve the user experience.

All third-party service providers we work with are bound by strict data protection agreements and are not permitted to use your data for their own purposes.

4.2 Legal Requirements

We may be required to disclose your data to the relevant authorities if mandated by Malaysian law or a valid court order, including for the investigation of financial crime or unlawful activity.

The security of your personal data is our highest priority 98win. We continually invest in our security infrastructure to ensure your information is always protected to the highest standard:

• 256-bit SSL Encryption: All data transmitted between your device and our servers 98win is encrypted using industry-standard TLS/SSL protocols.
• Secure password storage: Your password is stored using a bcrypt hashing algorithm that cannot be decrypted — even by our own internal staff.
• 24/7 security monitoring: Our security team continuously monitors the platform to detect any suspicious activity or unauthorised access attempts.
• Internal access controls: Authorised staff only 98win with a legitimate operational need are the only ones permitted to access members' personal data, and all access is logged and audited.
• Regular security audits: We conduct regular independent penetration testing and security audits to identify and address any system vulnerabilities.
• Two-factor authentication (2FA): We offer and encourage the use of 2FA as an additional layer of protection for your account.

While we take all reasonable steps to protect your data, no system is 100% immune to cyber threats. In the event of any security incident involving your data, 98win is committed to notifying you within the timeframe stipulated under Malaysia's PDPA.

98win uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage or disable optional cookies through your browser settings or via the privacy settings panel in your 98win account. Please note that disabling certain cookies may affect the functionality of the platform.

As a member 98win and as a data subject under Malaysia's PDPA, you have the following rights over the personal data we hold about you:

To exercise any of the above rights, please contact us by email at support@98win-khelo.net or via our platform's live chat. We will respond to your request within 30 business days.

98win retains your personal data only for as long as necessary for the stated purposes or as required under Malaysian law:

• Active account data: Retained for as long as your account remains active at 98win.
• Data following account closure: Basic account information and transaction records in Malaysian Ringgit (RM) are retained for a minimum of 7 years following account closure, in compliance with Malaysia's Anti-Money Laundering Act.
• Security log data: Retained for 12 months for the purpose of security incident investigations.
• Support communication data: Customer support tickets and communication records are retained for 3 years.
• Marketing data (with consent): Retained until you withdraw consent or close your account.

Once the applicable retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked to you personally.

Platform 98win is intended for users aged 21 and above only. We do not knowingly collect, process or store personal data of individuals under the age of 21.

If we find or suspect that a person registering an account 98win is below the stipulated minimum age, we will immediately suspend the account in question, delete all associated data, and — where necessary — refer the case to the relevant authorities.

98win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Notifying all registered members via email or in-platform notice within a reasonable period before changes take effect.
• In the case of highly significant changes, we may require fresh consent from you before you can continue using the platform.

We encourage you to review this page regularly to stay informed about how we protect your personal data. Your continued use of the platform 98win after the changes are published will be considered acceptance of those changes.

If you have any questions, concerns or complaints about how 98win handling your personal data, or if you wish to exercise any of your rights as a data subject, please contact our Data Protection Officer:

If you are not satisfied with our response, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the Personal Data Protection Act 2010.