Privacy Policy kasiwin – Malaysia User Data Protection

Welcome to the KasiWin Privacy Policy page. We, KasiWin, take every aspect of our users' personal data protection seriously. This Privacy Policy is written in clear, plain language so you know exactly what happens to your information when you register and use our platform.

This policy applies to all users accessing the KasiWin website at kasiwin.fun, the KasiWin mobile app, and any digital services operating under the KasiWin brand. This includes all information you provide directly to us as well as information collected automatically when you use the platform.

Kasiwin operates in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and relevant international data protection regulations. We are committed to ensuring your data is handled transparently, securely and responsibly at all times.

Kasiwin only collects data that is genuinely necessary to provide a safe, responsible and high-quality service. The following are the categories of data we collect:

A. Data You Provide Directly

• Registration information: Full name, date of birth, email address, mobile number and account password.
• Identity verification (KYC) information: Identity card number (MyKad), passport copy, proof of residential address and a selfie photo for verification.
• Financial information: Bank account number, account holder name, eWallet details (Touch 'n Go, GrabPay) for deposit and withdrawal purposes.
• Support communications: Records of live chat conversations, support emails, and complaints you submit to our team.

B. Data Collected Automatically

• Device data: Device type, operating system, web browser version, screen resolution and unique device identifier.
• Connection data: IP address, internet service provider (ISP), estimated geographic location (city/state level), and login timestamps.
• Behavioral data: Pages visited, games played, session duration, betting patterns, and game preferences.
• Cookie data: Session information, display preferences and website performance analytics data. (See Section 6 for further details.)

C. Data Types & Purposes Table

The data we collect is used solely for the stated purposes and is never used beyond the scope disclosed to you. The following are the primary purposes for which KasiWin uses your data:

• Account management: Creating, managing and securing your account on the kasiwin platform at all times.
• Financial transaction processing: Verifying and processing all deposits and withdrawals to your Malaysian bank account safely and accurately.
• Legal compliance: Meeting KYC, Anti-Money Laundering (AML) and reporting requirements to the relevant regulatory authorities.
• Fraud prevention: Detecting and blocking any unauthorised access attempts, identity fraud or system manipulation in real time.
• Customer support: Providing relevant, quality assistance when you reach our support team via live chat or email.
• Platform improvement: Analysing usage patterns to improve user experience, website performance and game quality.
• Marketing communications: Sending promotional offers, exclusive bonuses and the latest updates on new games — only if you have agreed to receive such communications.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and offer appropriate support.

We do not use your data for automated decision-making that has legal or significant effects on you without appropriate human review.

Kasiwin does not sell or disclose your personal data to external parties for marketing or commercial gain. However, there are limited situations where we need to share certain information to ensure the platform operates correctly and remains legally compliant:

• Payment service providers: Payment gateways and financial service providers used to process your deposits and withdrawals. They are bound by strict confidentiality agreements and PCI-DSS standards.
• Game providers: Game studios and software providers that supply games on the KasiWin platform may receive the game statistical data required for technical operations — with no personally identifiable information included.
• Regulatory authority: Government agencies, law enforcement bodies, or regulatory authorities when required by law or a valid court order.
• IT service providers: Companies providing technical infrastructure, server hosting, and cybersecurity services — all bound by strict data protection agreements.
• Auditors and professional advisors: Auditors, lawyers or accountants involved in legal compliance reviews — with only the minimum necessary information disclosed.

The security of your data is kasiwin's top priority. We implement multiple layers of technical and organisational protection to keep your information safe from unauthorised access, loss, alteration or unintended disclosure.

Technical Security Measures

• 256-bit SSL encryption: All data transmitted between your browser and KasiWin's servers is encrypted using the TLS 1.3 protocol — the same standard adopted by leading banking institutions.
• Encryption of data at rest: Sensitive data stored in our database is encrypted using the AES-256 algorithm, which cannot be decrypted without a valid key.
• Layered access controls: Only authorized personnel with a clear business need are permitted to access user data, and all access is automatically logged and monitored.
• Two-factor authentication (2FA): All KasiWin internal systems require multi-factor authentication to prevent unauthorised access.
• 24/7 Monitoring: Our intrusion detection system (IDS) operates around the clock to detect and block security threats in real time.
• Periodic penetration testing: Independent security audits and penetration testing are conducted periodically by third-party cybersecurity experts.

Data Retention Period

Kasiwin retains your data for as long as your account is active or as long as necessary to provide services to you. Following account closure, certain data may be retained for periods stipulated by Malaysian law:

• Financial transaction records: Minimum 7 years (AML legal requirement)
• KYC Documents: Minimum 5 years after account closure
• Support communication logs: 2 years after case resolution
• Anonymous analytics data: May be retained indefinitely

Kasiwin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as the platform will not function without them.
• Performance cookies: Collecting information on how you use our website to help us improve performance and user experience. All data is collected anonymously.
• Functional cookies: Remembering your preferences such as language, display settings and login information for a smoother return experience.
• Analytics cookies: Helping us understand traffic patterns and user interactions for continuous platform improvement.

You can manage your cookie settings through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the KasiWin platform.

As a KasiWin user, you have clear, legally protected rights over your personal data. We fully respect these rights and ensure you can exercise them with ease:

The KasiWin platform is intended exclusively for individuals aged 18 years and above. We do not knowingly collect or store any personal data from children under the age of 18.

During the registration process, we conduct an initial age check and a thorough KYC process to verify that all users meet the minimum age requirement. Should we discover that a child's data has been collected inadvertently, we will delete that data immediately and close the account in question without notice.

The KasiWin platform may from time to time contain links or references to third-party websites — such as game providers or payment platforms. This Privacy Policy applies solely to the KasiWin platform and does not cover the privacy practices of those third-party websites.

Kasiwin is not responsible for the content, privacy policies or security practices of third-party websites. We recommend reading the privacy policy of each website you visit separately before providing any personal information to them.

Kasiwin reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, new technologies or updated legal requirements. Any amendments will be posted on this page with a new "Last updated" date.

For significant amendments — particularly those affecting your rights or how we use your data — we will notify you via your registered email or an in-platform notification at least 7 days before changes take effect.

Your continued use of the KasiWin platform after any amendments are published constitutes your acceptance of the updated terms. If you disagree with any changes, you have the right to close your account at any time.

If you have any questions, concerns or complaints regarding how we handle your personal data, the kasiwin privacy team is ready to assist you.