Privacy Policy 69win —
Malaysian Player Data Protection

Welcome to the 69win Privacy Policy. This document has been prepared to clearly and transparently explain how the 69win platform manages the personal data of players using our services on the website https://69win.vu and the official 69win mobile app.

We understand that privacy is more than a formality — it is the trust you place in us every time you share your personal information. That is why 69win is committed to handling every piece of your data with the highest level of confidentiality and security.

By registering or using the 69win platform, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to request account deletion.

69win collects various types of information depending on how you interact with our platform. The following are the main categories of data we process:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive information such as biometric data, political affiliations, or religious beliefs.

The personal data we collect is used solely for lawful and necessary purposes to operate the 69win platform safely and efficiently. The following are the primary purposes for which your data is used:

• Account Management: Create, verify, and manage your player account, including the KYC process and age verification.
• Transaction Processing: Process deposits and withdrawals securely and verify every financial transaction made through your account.
• Fraud Prevention: Detect and investigate suspicious activity, including multi-account usage, money laundering, and promotional system abuse.
• Legal Compliance: Meet legal and regulatory obligations, including reporting suspicious transactions to the relevant authorities when required.
• Customer Support: Help you resolve issues, answer inquiries, and manage complaints effectively.
• Platform Improvement: Analyze aggregated usage patterns to improve the design, performance, and game collection of 69win.
• Service Communications: Send important notifications related to your account, transactions, terms changes, and security updates.

69win does not sell, rent, or disclose players' personal data to third parties for commercial purposes. However, there are limited situations where we need to share certain information with the following parties:

• Payment Providers: Transaction information that must be shared with banks and e-wallet providers for the purpose of processing your deposits and withdrawals.
• Game Service Providers: Minimal technical data required by third-party game providers (such as Pragmatic Play, Evolution, etc.) to ensure smooth gameplay sessions.
• Legal Authority: Information lawfully required by regulatory authorities, law enforcement, or courts through a valid order.
• Identity Verification Services: Data required to conduct KYC checks through approved identity verification service providers.
• Auditors and Professional Advisors: In very limited situations for audit, legal consultation, or actuarial purposes, subject to strict confidentiality agreements.

All third parties working with 69win are required to comply with data protection standards equivalent to our own policy and are not permitted to use that data for any purpose other than what has been specified.

69win continuously invests in cybersecurity infrastructure to ensure that players' personal data is always protected against unauthorized access, data breaches, or misuse.

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
• Encryption at rest for all sensitive records stored in the database.
• Role-based access control (RBAC) — only authorized staff can access player data, and every access is logged.
• Multi-layered firewall and intrusion detection system (IDS/IPS) operating 24/7.
• Regular security audits and penetration testing by independent third parties.
• Mandatory information security training for all 69win staff who handle player data.
• Clear incident response procedures — players will be notified within 72 hours in the event of a data breach affecting their information.

The 69win platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse platform usage. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled as they are critical to platform operations.
• Performance Cookies: Collect aggregated data on how players use the platform for improvement purposes — for example, which pages are visited most frequently.
• Functional Cookies: Save your personal preferences such as language, display theme, and sound settings so you do not need to reset them each time.
• Analytics Cookies: Help us understand overall usage patterns to make better product development decisions. This data is processed in anonymized form.

You can manage your cookie settings through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the 69win platform.

In accordance with the Malaysian Personal Data Protection Act (PDPA), you as a 69win player have the following rights regarding your personal data:

69win retains your personal data only for as long as necessary to fulfill the original purpose of collection or as required by law. The following are general guidelines for our data retention periods:

• Active Account Data: Retained for the duration your account is active and for a minimum of 5 years after account closure, in line with anti-money laundering legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years for financial audit and tax compliance purposes as required under Malaysian law.
• KYC Data and Verification Documents: Retained for 5 years after the business relationship ends or as required by the relevant regulatory body.
• Support Communication Logs: Retained for 2 years for reference and dispute resolution purposes.
• Anonymized Analytics Data: May be retained indefinitely as it contains no personally identifiable information.

When data is no longer needed, it will be securely deleted or anonymized in accordance with approved data disposal procedures.

69win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Each new version will be published on this page with a revised "Updated" date.

For material amendments that significantly affect how we process your data, 69win will notify you via your registered email or in-app notification at least 7 days before the changes take effect.

If you have any questions, concerns, or complaints regarding how 69win handles your personal data, our privacy team is ready to assist through the following channels:

• Live Chat: The fastest option — available 24/7 directly within the 69win platform. Select the "Privacy & Data" topic when starting a chat session.
• Privacy Email: [email protected] — for formal written enquiries that require a record or supporting documentation.
• FAQ: Visit the page our FAQ for immediate answers to frequently asked questions about privacy and data security.

We aim to respond to all privacy-related inquiries within 14 business days of receiving the request. For more complex cases such as data erasure requests or formal complaints, the response period is up to 30 business days.