GetWin is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy explains what data we collect, why we collect it, how it is used and stored, and what rights you hold as a data subject. Please read this document carefully alongside our Terms & Conditions.
At a Glance
These cards summarise the most important privacy principles that govern how GetWin handles your personal data. They supplement — and do not replace — the full policy below.
We Do Not Sell Your Data
GetWin does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing companies. Your information is used only to operate and improve the Platform, fulfil regulatory obligations, and prevent fraud.
Encrypted & Secure Storage
All personal data and KYC documents transmitted to or stored by GetWin are protected using 256-bit SSL encryption in transit and AES-256 encryption at rest. Our infrastructure undergoes regular independent security audits to ensure ongoing compliance.
You Control Your Data
You have the right to access, correct, port, restrict the processing of, and request the deletion of your personal data at any time, subject to applicable regulatory retention requirements. All such requests are handled by our Data Protection team within 30 days of receipt.
Minimal Data Collection
GetWin applies data minimisation principles — we collect only the personal data that is strictly necessary for the stated purpose. We do not harvest unnecessary profile data, and we regularly review our data collection practices to reduce scope where possible.
Defined Retention Periods
Personal data is retained only for as long as it is required to fulfil the purposes outlined in this Policy, or as mandated by applicable anti-money laundering and regulatory obligations. Data is securely deleted or anonymised upon expiry of the applicable retention period.
Breach Notification
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, GetWin will notify affected players within 72 hours of becoming aware of the breach, in accordance with our incident response obligations and applicable data protection standards.
Contents
This Privacy Policy ("Policy") is issued by GetWin ("the Company", "we", "us", or "our"), the operator of the online gaming platform accessible at https://getwin.cam ("the Platform"). This Policy describes how GetWin collects, uses, discloses, retains, and safeguards personal data relating to our players, prospective players, and website visitors ("you" or "Data Subject").
GetWin operates under international gaming licensing and processes personal data in connection with the provision of online casino and sports betting services to players, including those based in Malaysia. We are committed to handling personal data responsibly, transparently, and in compliance with the data protection obligations applicable to our licensed operations.
This Policy should be read in conjunction with our Terms & Conditions, which govern the contractual relationship between you and GetWin. By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and that your personal data will be processed as described herein.
The following terms carry the meanings set out below throughout this Policy:
GetWin collects the following categories of Personal Data in connection with the operation of the Platform. The specific data collected in each category is set out in the table below:
| Category | Data Types | Collected When |
|---|---|---|
| Registration Data | Full legal name, date of birth, email address, Malaysian mobile number, username, password (hashed) | Account registration |
| Identity / KYC Data | MyKad number, Passport number, Driver's Licence number, document scan images, selfie photograph, proof of address document | KYC verification submission |
| Financial Data | Bank account name and number, e-wallet identifiers (Touch 'n Go, GrabPay, Boost, DuitNow), FPX transaction references, cryptocurrency wallet addresses (BTC, USDT) | Deposit / withdrawal requests |
| Transaction Data | Deposit amounts, withdrawal amounts, wager history, game play history, bonus activations, balance movements | Ongoing platform use |
| Technical Data | IP address, device type and model, operating system, browser type and version, screen resolution, session timestamps | Platform access |
| Usage Data | Pages visited, game sessions initiated, features accessed, search queries within the Platform, clickstream data | Ongoing platform use |
| Communications Data | Live chat transcripts, support ticket content, email correspondence, survey responses | Customer support interactions |
| Responsible Gambling Data | Self-exclusion requests, deposit limit settings, session time control preferences, reality check acknowledgements | Use of responsible gambling tools |
GetWin collects Personal Data through the following means:
4.1 Directly from You
Data you provide actively when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting our customer support team, responding to surveys, or participating in promotions.
4.2 Automatically via the Platform
Technical and Usage Data collected automatically when you access the Platform, including IP address, device identifiers, browser characteristics, session data, and interaction logs generated through cookies and similar tracking technologies as described in Section 10.
4.3 From Third-Party Payment Providers
Transaction confirmation data, payment status updates, and account holder name verification data shared by payment partners including FPX, DuitNow, Touch 'n Go eWallet, Maybank, CIMB, Public Bank, Hong Leong, GrabPay, Boost, and cryptocurrency processors, in connection with deposit and withdrawal processing.
4.4 From Identity Verification Services
Verification outcome data — confirmed or rejected — provided by third-party identity verification and document authentication services engaged to support our KYC compliance obligations. These services operate under data processing agreements with GetWin.
4.5 From Fraud and Risk Intelligence Providers
Risk scoring, device fingerprint data, and fraud indicator signals obtained from third-party anti-fraud and AML screening services used to protect the Platform and its users from financial crime and account misuse.
GetWin relies on the following legal bases to process your Personal Data, depending on the nature of the processing activity:
GetWin processes your Personal Data for the following specific and documented purposes:
GetWin does not sell your Personal Data to any third party. We may disclose your data to the following categories of recipients, only to the extent necessary and under appropriate safeguards:
7.1 Payment Processing Partners
FPX-accredited banks (Maybank, CIMB, Public Bank, Hong Leong), e-wallet providers (Touch 'n Go, GrabPay, Boost, DuitNow), and cryptocurrency processors — strictly for the purpose of executing deposit and withdrawal transactions on your behalf.
7.2 Identity Verification Providers
Third-party KYC and document authentication services engaged under data processing agreements to verify identity documents and confirm age eligibility. These providers process only the minimum data required for verification and do not retain data beyond their stated processing periods.
7.3 IT Infrastructure and Cloud Service Providers
Hosting, database, content delivery, and security service providers that store and process Platform data on GetWin's behalf. All such providers are contractually bound to process data only on GetWin's instructions and in compliance with applicable security standards.
7.4 Fraud Prevention and AML Services
Third-party risk intelligence and anti-money laundering screening providers used to fulfil our compliance obligations. Data shared is limited to transaction metadata and account identifiers.
7.5 Regulatory and Legal Authorities
Where required by applicable law, court order, regulatory requirement, or our gaming licence conditions, GetWin may disclose Personal Data to law enforcement agencies, gaming regulators, financial intelligence units, or other competent authorities. We will notify you of such disclosures where we are legally permitted to do so.
GetWin operates internationally and may transfer your Personal Data to servers, processors, or service providers located outside Malaysia. Where such transfers occur, we implement appropriate safeguards to ensure that your data receives a level of protection equivalent to that provided under applicable data protection standards.
Safeguards used for international data transfers may include: standard contractual clauses incorporated into agreements with Data Processors, adequacy determinations applicable to the receiving jurisdiction, binding corporate rules, or other legally recognised transfer mechanisms.
Players who wish to obtain further information about the specific safeguards applicable to international transfers of their data may submit a written request to our Data Protection team using the contact details set out in Section 15 of this Policy.
GetWin retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licence obligations. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of account + 5 years post-closure | Contractual and regulatory obligation |
| KYC / Identity Documents | 5 years from date of submission | AML compliance requirement |
| Transaction & Wager Records | 7 years from transaction date | Financial and regulatory record-keeping |
| Customer Support Records | 3 years from last interaction | Dispute resolution and quality assurance |
| Marketing Consent Records | Until withdrawn + 2 years | Evidence of consent |
| Technical / Log Data | 13 months from collection | Security monitoring and analytics |
| Self-Exclusion Records | Duration of exclusion + 6 years | Responsible gambling compliance |
Upon expiry of the applicable retention period, Personal Data is securely deleted, permanently anonymised, or pseudonymised such that re-identification is no longer reasonably possible. Where data is anonymised, the anonymised dataset may be retained indefinitely for statistical and analytical purposes.
GetWin uses cookies and similar tracking technologies on the Platform to enable core functionality, improve user experience, and support fraud prevention. The following categories of cookies are used:
10.1 Strictly Necessary Cookies
Essential for the Platform to function correctly. These cookies maintain your login session, remember your language and currency preferences, and enable secure areas of the Platform. They cannot be disabled without impairing Platform functionality.
10.2 Performance & Analytics Cookies
Used to collect anonymised information about how visitors interact with the Platform — including pages visited, time spent, and errors encountered — to help us improve Platform performance and user experience. Data collected is aggregated and not linked to individual identities.
10.3 Security & Fraud Prevention Cookies
Used to detect and prevent fraudulent activity, bot access, and account misuse. These cookies assign a device fingerprint that allows our security systems to identify unusual access patterns without storing personally identifiable information beyond what is necessary for the security function.
10.4 Preference Cookies
Remember your Platform preferences — such as display settings, responsible gambling tool configurations, and notification preferences — across sessions, so you do not need to re-configure settings on each visit.
You may manage cookie preferences through your browser settings. Note that disabling certain cookie categories may affect Platform functionality. For strictly necessary cookies, no opt-out is available as they are required for the Platform to operate.
Subject to applicable law and the regulatory retention obligations described in Section 9, you hold the following rights with respect to your Personal Data held by GetWin. All requests are handled by our Data Protection team and responded to within 30 calendar days:
Request a copy of the Personal Data GetWin holds about you, including the categories of data, the purposes of processing, and any third-party recipients.
Request correction of inaccurate or incomplete Personal Data. We will update your records and notify any third parties to whom the data has been disclosed.
Request deletion of your Personal Data where it is no longer necessary for its original purpose, where consent has been withdrawn, or where processing is unlawful — subject to regulatory retention requirements.
Request that processing of your data be restricted to storage only while a rectification or objection request is being assessed.
Request a structured, machine-readable copy of Personal Data you have provided to GetWin under a contract or consent basis, for transfer to another controller.
Object to processing of your Personal Data carried out on the basis of legitimate interests or for direct marketing purposes. Marketing opt-outs take immediate effect.
The GetWin Platform is strictly intended for use by individuals aged 21 years and above. GetWin does not knowingly collect, use, or retain Personal Data relating to persons under the age of 21. Mandatory KYC identity verification — including government-issued photo ID — is required for all accounts prior to full activation, specifically to enforce this age restriction.
If GetWin becomes aware that Personal Data of a person under 21 has been collected inadvertently, we will take immediate steps to delete all such data and permanently close the associated account. Any funds deposited by an underage user will be returned subject to fraud and AML review.
If you believe that a minor has registered an account on GetWin, please contact our compliance team immediately at [email protected] with the subject line "Underage Account Report".
GetWin implements a multi-layered security programme to protect Personal Data against unauthorised access, loss, alteration, or disclosure. Our security measures include:
Notwithstanding these measures, no system is entirely immune to risk. Players are advised to maintain strong, unique passwords, enable 2FA, and report any suspected unauthorised access to their account immediately by contacting our support team.
GetWin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes — those that significantly affect your rights or the way we handle your data — will be communicated to registered players via in-Platform notification and email to the registered address a minimum of fourteen (14) days prior to the effective date.
Minor amendments — such as clarifications of existing provisions, corrections of typographical errors, or non-substantive restructuring — may be made without advance notice, provided that the "Last Reviewed" date at the top of this Policy is updated to reflect the revision.
Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with any amendment, you should cease use of the Platform and request account closure, which will be processed in accordance with our standard account closure procedures.
For all privacy-related enquiries, data subject rights requests, consent withdrawals, or concerns about how GetWin handles your Personal Data, please contact our Data Protection team through the following channels:
Subject Line Format
"Data Subject Request — [Right Type]"
E.g., "Data Subject Request — Erasure"
Response Time
Within 30 calendar days
Identity verification required before processing
Live Chat Support
Available 24 / 7
For general privacy queries and guidance
When submitting a data subject rights request, please include: your full name as registered on your GetWin account, your registered email address, the specific right you wish to exercise, and — where applicable — the specific data or processing activity to which your request relates. We will verify your identity before processing the request to ensure that we do not inadvertently disclose or delete data in response to an unauthorised request.
For issues related to account self-exclusion, deposit limits, or responsible gambling tools, please refer to our dedicated Responsible Gambling page, or state "Responsible Gambling Request" at the start of your support communication.
Our Data Protection team is here to help. Submit a request, exercise your data rights, or browse our FAQ for quick answers. GetWin is committed to transparent and responsible data handling for every Malaysian player. For players aged 21 and above only.