Privacy Policy Indowin88 — Personal Data Protection for Malaysia Members

Indowin88 is an online casino platform operating in Malaysia, committed to protecting the privacy of all members and visitors. This Privacy Policy is drafted in accordance with Malaysia Personal Data Protection Act 2010 (PDPA) and outlines our responsibilities as a personal data processor and controller.

This policy applies to all personal data collected through the Indowin88 website, the Indowin88 mobile app for iOS and Android, and through direct interactions with our customer support team. It does not apply to third-party websites or services that may be linked from our platform.

Indowin88 collects the following categories of personal data from our members:

Indowin88 does not collect sensitive data such as medical information, religious beliefs, political views, or biometric data unless required by applicable law.

Indowin88 collects your personal data through various legitimate and transparent channels:

• Account registration form — when you register as a new Indowin88 member.
• Identity verification process (KYC) — when you submit identity documents for verification purposes.
• Financial transactions — when you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks), or when you submit a withdrawal request.
• Platform usage — data collected automatically while you play slots, Live Casino, poker, lottery, or place Sports Betting wagers.
• Interactions with customer support — via live chat, email, or any written communication with our team.
• Cookies and tracking technologies — information collected automatically as you browse our platform.
• Affiliate and referral programme — if you registered via an existing member's referral link.

Indowin88 uses your personal data solely for the following legitimate purposes:

• Account management — to create, manage, and maintain your member account on the Indowin88 platform.
• Transaction processing — to securely process fund deposits and withdrawals via supported Malaysian payment methods.
• Identity verification — verifying member eligibility in accordance with legal and compliance requirements.
• Fraud prevention — to detect and prevent fraudulent activity, money laundering, and unauthorised access to your account.
• Service improvement — analysing usage data to improve the user experience, platform performance, and game offerings.
• Customer support — to respond to enquiries, resolve complaints, and provide technical assistance to members.
• Marketing communications — sending you information about indowin88's latest promotions, bonuses, and offers (you may unsubscribe at any time).
• VIP Rewards Program — calculating reward points, determining VIP membership tier, and applying the associated benefits.
• Legal compliance — to fulfil legal and regulatory obligations applicable in Malaysia.

Indowin88 will not use your personal data for any purpose beyond those stated above without first obtaining your consent.

Indowin88 does not sell, rent, or trade members' personal data to any third party. However, in the following limited circumstances, Indowin88 may need to share your data:

• Payment service providers — payment processors that facilitate your deposit and withdrawal transactions (e.g., FPX gateway providers, Touch 'n Go, GrabPay) are bound by strict confidentiality agreements.
• Game software providers — licensed gaming companies providing slots, Live Casino, and poker games on our platform may receive the minimum session data required for game functionality.
• Authorities and law enforcement — Indowin88 will comply with any valid court order or official request from a Malaysian government agency with jurisdiction.
• Auditors and professional advisors — accountants, lawyers, or independent auditors bound by strict professional confidentiality obligations.
• Business transfer — in the event of a merger, acquisition, or asset sale, member data may be transferred to the receiving entity, which agrees to honour this privacy policy.

Indowin88 applies multiple layers of technical and organisational security controls to protect members' personal data from unauthorised access, loss, destruction, or accidental disclosure:

• 256-bit SSL/TLS Encryption for all data transmissions between your browser and our servers.
• Two-factor authentication (2FA) available and encouraged for all Indowin88 member accounts.
• 24/7 Monitoring by our cybersecurity team to detect any intrusion attempts or suspicious activity.
• Tiered access controls — only authorised personnel with a legitimate business need may access member data.
• Regular security audits by independent third parties to assess and strengthen our security infrastructure.
• Encrypted data backups stored at a separate secure location to ensure service continuity.

While Indowin88 takes all reasonable steps to protect your data, no system is 100% immune to cyber threats. In the event of a data breach that affects you, Indowin88 is committed to notifying you within 72 hours after the breach is identified, in line with industry best practices.

The indowin88 platform uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. The types of cookies we use are:

• Essential cookies — required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance cookies — collecting information on how you use the platform (e.g. most visited pages, time spent) to help us improve our services.
• Functional cookies — saving your preferences such as language, display settings, and login details to make return visits more convenient.
• Marketing cookies — used to display relevant advertisements and measure the effectiveness of Indowin88 marketing campaigns.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may significantly affect the functionality of the indowin88 platform.

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Indowin88:

To exercise any of the rights above, please contact us at support@indowin88.my including your full name, account number, and the specific right you wish to exercise. We will respond within 14 working days.

Indowin88 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required under Malaysian law:

• Active account data — retained for the duration that your indowin88 account remains active.
• Financial transaction records — retained for a minimum of 7 years after the transaction date, in compliance with Malaysia's tax and financial regulatory requirements.
• Identity verification data (KYC) — retained for a minimum of 5 years after account closure for anti-money laundering compliance purposes.
• Support communication logs — retained for 2 years for reference and complaint resolution purposes.
• Technical data and logs — retained for 12 months for security purposes and technical troubleshooting.

Once the retention period has ended, your personal data will be securely deleted or anonymised so it can no longer be linked to you personally.

Indowin88 reserves the right to update this Privacy Policy from time to time to reflect changes in our business practices, Malaysian legal requirements, or technological developments. When material changes are made:

• The "Updated" date at the top of this page will be changed to reflect the date of the latest revision.
• Notifications will be sent to all active members via their registered email and/or in-platform notifications on Indowin88.
• For significant changes, we may ask you to reconfirm your consent before you can continue using the platform.

We encourage you to review this Privacy Policy periodically. Your continued use of the indowin88 platform after any changes take effect will be considered your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Indowin88 handles your personal data, please contact our Data Privacy Officer (DPO) through the following channels:

• Email: support@indowin88.my — please include "Privacy Inquiry" in your email subject line.
• Live Chat: Available 24 hours a day, 7 days a week via the Indowin88 platform.

We are committed to responding to all privacy-related enquiries within 14 working days after receiving your enquiry. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysian Communications and Multimedia Commission (MCMC) or the relevant regulatory authority.

For more information about your rights under the Malaysia PDPA, please visit the official website of the Malaysian Ministry of Communications and Digital.