Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how Interwin ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "UserPlayer") who access or use the online gambling and sports betting services available athttps://interwin.cam and all associated pages and features (collectively, the "Services").

Interwin is committed to handling your personal data with transparency, integrity, and in accordance with applicable data protection standards under its international licensing framework. We recognise that privacy is a fundamental right, and we have designed our data practices accordingly.

By registering an account or otherwise using the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned to them below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living natural person, directly or in combination with other data.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, Interwin.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller pursuant to a contractual arrangement.
• "Sensitive Personal Data" means a subset of personal data that warants heightened protection, including identity documents, financial account details, and any data related to health or biometric identifiers.
• "KYC Data" means identity and address verification documentation collected as part of the Know Your Customer process mandated by applicable licensing obligations.
• "Cookies" means small text files placed on your device by a website to store session information, user preferences, or tracking identifiers.
• "Account Data" means the information you provide upon registration and during the operation of your Interwin account, including profile details, transaction history, and communication records.

Data We Collect

Interwin collects personal data across several categories, depending on the nature of your interaction with the platform. The categories of data we collect include the following:

3.1 Registration and Account Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth (for age verification purposes);
• Residential address;
• Email address;
• Mobile phone number;
• Chosen username and encrypted password credentials.

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification — Malaysian MyKad, Driver's License, or Passport;
• Proof of residential address documentation — utility bills or bank statements dated within three months;
• In certain circumstances, a photograph of you holding your identity document;
• Payment method ownership verification documentation.

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts, dates, and payment method references;
• Payment method identifiers — last four digits of cards, DuitNow reference numbers, e-wallet account references (we do not store full card numbers or banking credentials);
• Account balance history and bonus award records.

3.4 Gameplay and Behavioural Data

• Game session logs including game titles accessed, stakes placed, and session duration;
• Sports betting selections, bet amounts, and outcomes;
• Platform navigation patterns and feature usage data.

3.5 Technical and Device Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, and browser version;
• Session timestamps and access logs.

3.6 Communication Data

• Records of live chat conversations with our support team;
• Email correspondence sent to or received from Interwin;
• Responses to surveys or feedback requests (where you choose to participate).

How We Collect Your Data

Interwin collects personal data through the following means:

4.1 Directly From You

The majority of personal data we hold is provided by you directly during the account registration process, during KYC submission, when making deposits or withdrawals, and when contacting our support team.

4.2 Automatically Through Platform Use

When you access and use the interwin platform, technical systems automatically record certain data, including IP addresses, device identifiers, session logs, and gameplay records. This data is collected through server logs, cookies, and similar tracking technologies as described in Section 10.

4.3 From Third-Party Service Providers

In certain circumstances, we may receive supplementary personal data from third-party service providers engaged for identity verification, payment processing, fraud detection, or responsible gambling compliance. Such providers are contractually bound to handle data in accordance with applicable data protection standards.

Purposes of Data Processing

Interwin processes your personal data for the following specific purposes:

Legal Basis for Processing

Interwin processes your personal data under the following legal grounds, consistent with internationally recognised data protection standards:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions, including account management, payments, and gameplay.
• Legal Obligation: Processing necessary to comply with our licensing conditions, anti-money laundering obligations, and KYC requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gambling monitoring, where our interests do not override your fundamental rights.
• Consent: Processing for optional purposes such as marketing communications, where you have given specific, informed, and freely withdrawable consent.

You may withdraw consent for-based processing at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Sharing Your Personal Data

Interwin does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited circumstances:

7.1 Service Providers and Data Processors

We engage third-party service providers who process personal data on our behalf under contractual data processing agreements. Categories of processors include payment gateway operators, identity verification providers, fraud detection platforms, cloud infrastructure providers, and customer support tooling providers. All such processors are bound by strict confidentiality and data protection obligations.

7.2 Regulatory and Licensing Authorities

Interwin may be required to disclose personal data to its licensing authority or to other competent regulatory bodies where required by our licensing conditions, a court order, or applicable law. We will disclose the minimum necessary information in such circumstances.

7.3 Anti-Money Laundering and Financial Crime Reporting

Where required by applicable anti-money laundering regulations, Interwin may be obligated to disclose account information and transaction records to relevant financial intelligence authorities without prior notice to the affected player.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection protections being maintained.

International Data Transfers

Given the international nature of Interwin's operations and its third-party service provider network, your personal data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, Interwin takes appropriate measures to ensure that your data receives a level of protection consistent with the standards described in this Policy.

Such measures may include contractual data protection clauses with receiving parties, reliance on adequacy determinations where applicable, or other legally recognised transfer mechanisms under the licensing framework.

Data Retention

Interwin retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or licensing obligations.

In practice, the following general retention guidelines apply:

• Active account data: Retained throughout the lifetime of your account and for a period of at least five (5) years following account closure, as required under anti-money laundering obligations.
• KYC documentation: Retained for a minimum of five (5) years following the end of the business relationship, consistent with standard licensing requirements.
• Transaction records: Retained for a minimum of five (5) years for audit, compliance, and dispute resolution purposes.
• Technical and log data: Generally retained for up to twelve (12) months for security monitoring, after which it is deleted or anonymised.
• Communication records: Retained for up to three (3) years for customer service and complaint resolution purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of identifiable information.

Cookies & Tracking Technologies

Interwin uses cookies and similar tracking technologies on its platform. Cookies are small data files stored on your device that help us provide a functional, personalised, and secure user experience.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for platform functionality, including session authentication, security tokens, and maintaining your logged-in state. These cannot be disabled without disrupting core platform features.
• Analytical Cookies: Used to understand how users interact with the platform, including page visit frequency, navigation paths, and feature usage. Data is aggregated and used to improve the platform experience.
• Preference Cookies: Store your settings and preferences — such as language preference and display settings — so you do not need to reconfigure them on each visit.
• Marketing Cookies: Used only where you have provided explicit consent, to help us deliver relevant promotional communications. These are not used to share your data with third-party advertisers.

10.2 Managing Cookies

You can manage or disable cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. Instructions for managing cookies vary by browser — refer to your browser's help documentation for guidance.

Your Data Rights

Subject to applicable law and any overiding legal obligations, you have the following rights in respect of your personal data held by Interwin:

To exercise any of the above rights, please contact our Data Protection team via the support channels listed in Section 16. We will respond to all verified requests within thirty (30) calendar days. We may need to verify your identity before processing your request.

Data Security

Interwin implements a layered set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and Interwin servers;
• Encryption of sensitive personal data at rest within our storage infrastructure;
• Role-based access controls limiting internal employee access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of platform infrastructure;
• Incident response procedures for rapid containment and notification in the event of a security breach;
• Staff training on data protection obligations and security practices.

Children & Minors

The Interwin platform is strictly intended for individuals aged twenty-one (21) years and above. We do not knowingly collect personal data from any under the age of 21.

If we become aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete all associated personal data, and return any deposited funds in accordance with our responsible gambling obligations.

If you believe that we may have inadvertently collected data from a minor, please contact our support team immediately so that we can investigate and take appropriate remedial action.

Third-Party Services

The Interwin platform may contain links to pages operated by third-party service providers, such as payment gateways (DuitNow, FPX, Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, Hong Leong Bank) and game content providers. When you interact with third-party services, you do so under the privacy policies and terms of those third parties.

Interwin is not responsible for the data practices of third-party providers. We encourage you to review the privacy policies of any third-party service you interact with in connection with using the Interwin platform.

Our engagement of payment processing providers is limited to the transmission of transaction reference data necessary to complete your deposit or withdrawal. We do not share your full identity documents or sensitive personal data with payment processors beyond what is strictly required for payment authentication.

Policy Amendments

Interwin reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform functionality. The date of the most recent revision is displayed at the top of this document.

Material changes to this Policy — particularly changes that affect the purposes for which we process your data or rights in relation to that data — will be communicated to registered users via email notification or a prominent in-platform notification prior to the changes taking effect.

Your continued use of the Interwin platform following notification of any material amendment constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with the revised Policy, you should cease using the platform and request account closure.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how your personal data is being handled, please contact the Interwin Data Protection team through the following channels:

We aim to respond to all data-related enquiries and rights requests within thirty (30) calendar days of receipt. Where a request is complex or where we have received a high volume of requests, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reason for the delay.