Privacy Policy euwins – Our Commitment to Protecting the Personal Data of Every Malaysian Player

1Personal Data We Collect

1.1 Information You Provide Directly

When you register or use the euwins platform, you will provide us with various personal information. All such information is collected with your consent and for clearly defined purposes. The types of data we receive directly from you include:

• Full name as stated on your official Malaysian identification document.
• An active email address used for account communications.
• An active Malaysian mobile number for verification and communication.
• Date of birth to verify age eligibility (18 years and above).
• A copy of your Malaysian identity card or passport (where KYC verification is required).
• Payment method information linked to your account (Touch 'n Go, GrabPay, DuitNow, and others) — we store account identifiers only, not full payment details.
• Game preferences and account settings you have configured yourself.

1.2 Automatically Collected Data

Beyond the information you provide directly, the euwins platform also collects certain data automatically while you use our platform. This is standard practice across the technology industry and ensures the platform operates securely and efficiently:

• IP address and general network information to detect unauthorised access attempts.
• Device type, operating system, and browser version used.
• Session log records include login time, logout time, and actions taken within the platform.
• Betting history and transactions required for account records and legal compliance.
• Cookie data and local storage for an improved user experience (see Section 6).

2Purpose of Using Your Personal Data

2.1 Primary Purpose

Euwins uses your personal data solely for legitimate, stated purposes. Below is a summary of the primary purposes for which your data is used:

2.2 Marketing Communications

Euwins may send marketing communications — including promotional information, the latest bonuses and special offers — via email or SMS to players who have given their consent at registration. You may withdraw this consent at any time by updating your communication preferences in your euwins account settings or by contacting our support team. Withdrawing marketing consent will not affect your use of the platform.

Please note that account-related communications — such as transaction confirmations, security notices, and important service information — will continue to be sent even if you withdraw your marketing consent, as these are necessary communications required to fulfil our service contract with you.

3How euwins Protects Your Personal Data

3.1 Technical Security Measures

Euwins continually invests in security infrastructure to protect the personal data of all our Malaysian players. The key technical measures we implement include:

• 256-bit SSL encryption: All data communications between your device and the euwins platform are encrypted using the latest TLS protocol. This ensures that information transmitted cannot be intercepted or read, even if someone gains access to your network connection.
• Data-at-rest encryption: Sensitive data stored in euwins' databases — including passwords and financial information — is encrypted using industry-standard encryption algorithms before being stored.
• Layered access controls: Access to user data within euwins' internal systems is governed by a strict permissions framework. Each staff member can only access data relevant to their role, and all access is logged for audit purposes.
• 24-hour security monitoring: An automated threat detection system monitors the euwins platform around the clock to identify intrusion attempts, suspicious access patterns, or any abnormal activity that may indicate a security breach.
• Two-factor authentication (2FA): euwins offers and recommends the use of 2FA for all accounts. This additional layer of security ensures that only you can access your account, even if your password becomes known to someone else.

3.2 Organisational Security Measures

Beyond technical safeguards, euwins also enforces strict internal policies and procedures to protect player privacy from an organisational standpoint. Staff who handle user data undergo regular data protection training. Legally binding confidentiality agreements are signed by all personnel with access to user data. Internal and external security audits are conducted periodically to identify and address any vulnerabilities before they can be exploited.

4Data Sharing with Third Parties

4.1 Authorised Service Providers

Euwins does not sell or market players' personal data to third parties. However, to deliver a full platform experience, we do need to share limited information with the following categories of service providers, all of whom are bound by strict confidentiality agreements:

• Payment providers: Transaction processors for Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX receive only the minimum transaction information required to process deposits and withdrawals in Malaysian Ringgit (MYR).
• Identity verification (KYC) providers: Third-party services that assist us in verifying user identities for AML compliance purposes — only the information required for verification is shared.
• IT and hosting service providers: Companies that provide the server infrastructure and underlying technology services powering the euwins platform – bound by strict data processing agreements.
• Platform analytics providers: Services that help us understand platform usage patterns for improvement purposes — using anonymised data only.

4.2 Legally Required Disclosures

Euwins may be required to disclose users' personal data to the relevant authorities in the following circumstances: when directed by a court order or valid legal process; to comply with anti-money laundering (AML) regulations; in investigations into fraud or illegal activity involving the platform; or in emergencies involving user safety. In all such cases, euwins will only disclose the minimum information required by law.

4.3 Cross-Border Data Transfers

Some of euwins' service providers may operate outside Malaysia, which means your personal data may be transferred to and stored in other countries. In all such cases, euwins ensures that these transfers are carried out with adequate safeguards equivalent to Malaysia's data protection standards, including data processing agreements that comply with international best practices.

5Your Rights as an euwins User

As an euwins player and under Malaysia's Personal Data Protection Act 2010, you have a range of rights relating to your personal data. euwins is committed to respecting and facilitating the exercise of all these rights:

5.1 How to Submit a Data Rights Request

To exercise any of the rights above, contact the euwins support team by emailing support@euwins.best with the subject line "Personal Data Rights Request". Please include your full name, registered email address, and the type of request you wish to make. euwins will verify your identity before processing the request to ensure the security of your data, and will respond within 14 business days from the date a complete request is received.

6Cookies, Data Retention & Policy Updates

6.1 Cookie Usage on euwins

The euwins platform uses cookies and similar local storage technologies to enhance the user experience. Cookies are small text files stored on your device when you visit our platform. The following are the types of cookies we use:

• Required session cookies: These cookies are essential for the basic functionality of the euwins platform, such as maintaining your login status and ensuring session security. Without them, the platform cannot function properly.
• User preference cookies: Saves your preferences — such as language, display settings and game preferences — so you do not need to reconfigure them each time you log in to euwins.
• Analytics cookies: Helps us understand how players use the euwins platform at an aggregate level (not individually), so we can make meaningful improvements to the user experience.
• Security cookies: Used to detect suspicious access attempts and protect your account from unauthorised access.

You can manage your cookie settings through your browser. However, disabling essential cookies may affect certain features of the euwins platform. For guidance on managing cookies in your browser, refer to your browser's help documentation.

6.2 Data Retention Period

Euwins retains your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law. In general:

• Active account data: retained for the duration your account is active and for 5 years after account closure for legal compliance purposes.
• Financial transaction records: retained for a minimum of 7 years as required by Malaysian financial regulations.
• Customer support communication logs: retained for 3 years for dispute resolution purposes.
• Anonymised platform analytics data: may be retained for a longer period for long-term trend analysis.

6.3 Privacy Policy Updates

Euwins reserves the right to update this Privacy Policy from time to time to reflect changes in how we operate, the technology we use, or applicable legal requirements. Any significant changes will be communicated to all registered players via email and in-platform notification at least 14 days before taking effect. The date of the most recent update is always displayed at the top of this document. Continued use of the euwins platform after the effective date constitutes acceptance of the updated policy.

Why Data Privacy Is the Foundation of Trust at euwins

When you think about it, trust is the single most valuable asset in the online betting industry. Malaysian players depositing RM 100 or RM 1,000 into their accounts need confidence that their money is safe, that their personal information won't fall into the wrong hands, and that the platform they choose takes every aspect of data security seriously.

At euwins, we understand that trust has to be earned, not assumed. That is why we invest far more in security infrastructure than the law strictly requires. 256-bit SSL encryption, two-factor authentication, 24-hour monitoring — these are not mere compliance checkboxes. They reflect a genuine responsibility we feel towards every player who entrusts their personal information to our platform.

Malaysia's digital population is increasingly security-conscious. Today's Malaysian players can tell the difference between a platform that genuinely cares about their privacy and one that treats a privacy policy as little more than a cosmetic document. euwins is committed to being the former – a platform where every word in this privacy policy is backed by real action within our systems and processes.

One thing we strongly emphasise to all Malaysian players: never share your euwins account login credentials with anyone — including anyone claiming to be an euwins staff member. The euwins support team will never ask for your password through any channel. If you receive any such request, it is a fraudulent attempt — report it to us immediately and do not follow those instructions. Your account security is a shared responsibility between euwins and yourself.

Finally, we want to reaffirm that euwins has never sold and will never sell players' personal data for commercial purposes. Your data is used solely to provide you with a better service and to fulfil our relevant legal obligations. This is not just a statement — it is a commitment we uphold in every business decision involving our users' data.