- Right to Access
- Right to Rectification
- Right to Erasure
- Right to Portability
- Right to Object
- Right to Restrict Processing
- Withdraw Marketing Consent
Introduction
euwin ("euwin", "we", "us", "our") is committed to protecting and respecting the privacy of all individuals who interact with our platform, including registered players, visitors, and any person whose personal data we process in the course of operating our online gambling services.
This Privacy Policy ("Policy") sets out the basis on which personal data collected from users of the euwin website at https://euwin.cam — including all associated services such as sports betting, live casino, slot games, account management, and customer support — will be processed by euwin. This Policy is to be read in conjunction with our Terms & Conditions.
By registering an account, accessing the euwin platform, or using any of our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the platform and contact us to request account closure.
Malaysian Players: While Malaysia has enacted the Personal Data Protection Act 2010 (PDPA), euwin's operations are governed by the data protection frameworks applicable under its international licence jurisdiction. We nonetheless apply data protection standards that we consider consistent with recognised international best practice. Where the PDPA provides you with applicable rights, we will endeavour to honour those rights in good faith.
Definitions
In this Privacy Policy, the following terms have the meanings set out below:
- "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, date of birth, financial information, and technical identifiers.
- "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion.
- "Data Controller" means euwin, which determines the purposes and means of processing Personal Data.
- "Data Processor" means any third party that processes Personal Data on behalf of euwin pursuant to written instructions.
- "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by the data subject to the processing of their Personal Data.
- "KYC Data" means identity verification documents and related information collected as part of our Know Your Customer compliance obligations.
- "Cookies" means small text files placed on your device by the euwin platform for functionality, analytics, and session management purposes.
Data We Collect
euwin collects Personal Data in several categories depending on how you interact with our platform:
3.1 Registration Data
When you create an euwin account, we collect:
- Full legal name as it appears on your government-issued identification;
- Date of birth (for the purpose of verifying you are aged 21 or above);
- Residential address, including city (e.g. Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam);
- Email address;
- Malaysian mobile number;
- Username and hashed password credentials.
3.2 KYC and Verification Data
To comply with anti-money laundering obligations and our licensing requirements, we may collect:
- Copy of Malaysian National Identity Card (MyKad) or valid passport;
- Proof of residential address (utility bill or bank statement dated within three months);
- Proof of payment method ownership (e.g., bank statement confirming account holder name);
- Source-of-funds documentation for large or irregular deposit activity.
3.3 Transaction Data
We collect records of all financial transactions processed through your account, including:
| Data Type | Examples | Purpose |
|---|---|---|
| Deposit records | Amount (MYR), method (Touch 'n Go, FPX, USDT), timestamp | Financial reconciliation, AML compliance |
| Withdrawal records | Amount (MYR), destination account (masked), processing status | Payment processing, fraud prevention |
| Betting history | Wager amounts, markets (EPL, Liga Super Malaysia, casino), outcomes | Account management, responsible gambling monitoring |
| Bonus activity | Bonus claimed, wagering progress, expiry | Promotion management, abuse prevention |
3.4 Technical & Usage Data
Our systems automatically collect technical information when you access the platform, including:
- IP address and approximate geographic location;
- Browser type, version, and operating system;
- Device type and screen resolution;
- Session duration, pages visited, and click patterns;
- Referral source (how you arrived at the euwin site).
3.5 Communication Data
When you contact our customer support team via live chat or email ([email protected]), we retain records of those communications, including the content of messages, timestamps, and resolution notes. These records are maintained for quality assurance and dispute resolution purposes.
How We Use Your Data
euwin processes Personal Data for the following purposes:
- Account creation and management: To register your account, verify your identity, and maintain your player profile;
- Service delivery: To process deposits (via Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, USDT TRC20), settle withdrawals, and manage your betting and gaming activity;
- Regulatory compliance: To fulfil our obligations under our international licence, including KYC verification and AML reporting;
- Fraud and abuse prevention: To detect and prevent fraudulent account activity, bonus abuse, multi-accounting, and unauthorised access;
- Responsible gambling: To monitor for signs of problem gambling behaviour and to action self-exclusion or limit requests as per our Responsible Gambling policy;
- Customer support: To respond to your enquiries, resolve disputes, and improve the quality of support interactions;
- Platform improvement: To analyse usage patterns, identify technical issues, and enhance the performance and features of the euwin platform;
- Marketing communications: To send you promotional offers and account updates, subject to your communication preferences and applicable consent requirements.
Legal Basis for Processing
euwin processes Personal Data on the following legal grounds:
- Contractual necessity: Processing required to perform the contract between euwin and you, including account operation and payment processing;
- Legal obligation: Processing required to comply with our international licensing conditions, AML legislation, and applicable regulatory requirements;
- Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights;
- Consent: Processing for marketing communications and optional analytics features, which you may withdraw at any time.
Data Sharing & Disclosure
euwin does not sell, rent, or trade your Personal Data to any third party for their own commercial use. We share Personal Data only in the following circumstances:
6.1 Service Providers
We engage regulated third-party service providers who process data on our behalf under binding Data Processing Agreements, including:
- KYC and identity verification providers;
- Payment processors and e-wallet integration partners (including those operating Touch 'n Go, Boost, GrabPay, and DuitNow services);
- Cloud hosting and data storage providers;
- Customer support platform providers;
- Fraud detection and cybersecurity vendors.
6.2 Regulatory and Legal Disclosure
We may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts where we are legally required to do so — including for anti-money laundering reporting obligations under our licence jurisdiction. We will notify you of such disclosures to the extent permitted by law.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of euwin's assets, Personal Data held by euwin may be transferred to the acquiring entity. We will provide notice of any such transfer and ensure that the receiving entity is bound by data protection obligations at least equivalent to those in this Policy.
What we never do: euwin does not sell, licence, or share your Personal Data with advertising networks, data brokers, or third parties for their independent marketing use. Your gambling activity data is never disclosed to unrelated commercial parties.
International Data Transfers
As an internationally licensed platform serving players in Malaysia, euwin may transfer Personal Data to servers or service providers located in jurisdictions outside Malaysia. Where such transfers occur, we ensure they are made subject to appropriate safeguards, including:
- Standard Contractual Clauses approved by recognised data protection authorities;
- Adequacy determinations or equivalent data protection frameworks in the receiving jurisdiction;
- Binding corporate rules where applicable to intra-group transfers.
By using the euwin platform, you acknowledge that your Personal Data may be transferred and processed in locations outside Malaysia. We take steps to ensure such transfers are handled securely and in accordance with this Policy.
Data Retention
euwin retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and contractual obligations. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and registration data | 5 years after account closure | Regulatory and licensing obligations |
| KYC documents | 5 years after account closure | AML compliance requirements |
| Transaction records | 7 years | Financial record-keeping obligations |
| Customer support records | 3 years after last interaction | Dispute resolution and quality assurance |
| Technical and usage logs | 12 months | Security monitoring and fraud detection |
| Marketing consent records | Until consent withdrawn + 1 year | Compliance with consent obligations |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised. Data subject to a legal hold or active investigation will be retained until the relevant matter is resolved.
Security Measures
euwin implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and euwin's servers;
- Encryption at rest for sensitive stored data, including KYC documents and payment information;
- Role-based access controls, ensuring only authorised personnel can access specific categories of Personal Data;
- Multi-factor authentication for administrative access to backend systems;
- Regular penetration testing and vulnerability assessments;
- Security incident response procedures with defined response timeframes;
- Employee data protection training and confidentiality obligations.
While we take all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. If you suspect your account has been compromised, contact us immediately at [email protected].
Cookies & Tracking Technologies
euwin uses cookies and similar tracking technologies to operate the platform, improve your experience, and analyse usage patterns. The following categories of cookies are used:
- Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that maintain your login state and security tokens. They cannot be disabled without impairing core platform functionality.
- Functional Cookies: Remember your preferences, such as language settings and display options, to personalise your experience.
- Analytics Cookies: Collect aggregated, anonymised data about how users interact with the platform, helping us improve navigation and performance. euwin uses analytics tools operating under data processing agreements.
- Security Cookies: Used to detect and prevent fraudulent activity, multi-accounting, and abusive access patterns.
You may configure your browser to refuse all or certain cookies. Note that disabling strictly necessary cookies will affect your ability to log in and use core platform features. euwin does not use third-party advertising cookies or track your activity across unrelated websites.
Your Rights
Subject to applicable law and our legitimate processing obligations, you have the following rights in relation to your Personal Data held by euwin:
- Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed;
- Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. For account details, this can often be done directly through your account settings;
- Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our obligations to retain data for regulatory and legal compliance purposes;
- Right to Data Portability: You may request a copy of your Personal Data in a structured, machine-readable format for transfer to another service provider;
- Right to Object: You may object to processing based on legitimate interests, including direct marketing;
- Right to Restrict Processing: You may request that we restrict processing of your data in certain circumstances, such as while a rectification request is under review;
- Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will respond within fourteen (14) working days. We may need to verify your identity before processing the request.
Minors & Age Restriction
The euwin platform is strictly intended for persons aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a minor has registered an account or provided us with Personal Data, we will immediately suspend the relevant account, delete the associated data, and notify the appropriate parties where required.
We take age verification seriously and apply KYC procedures that include mandatory verification of date of birth as part of the account registration and verification process. If you have reason to believe that a minor has accessed our platform using your details or otherwise, please contact us immediately.
Marketing Communications
With your consent, euwin may send you promotional emails, platform notifications, and SMS messages relating to new features, bonus offers, seasonal promotions, and account activity. You may opt out of marketing communications at any time by:
- Clicking the unsubscribe link in any marketing email;
- Updating your communication preferences in your account settings;
- Contacting our support team at [email protected] with the subject line "Unsubscribe".
Please allow up to 5 business days for your opt-out request to take full effect. Please note that opting out of marketing communications will not affect transactional messages — we will continue to send you account-related communications such as deposit confirmations, withdrawal notifications, and security alerts, as these are necessary for the operation of your account.
Policy Amendments
euwin reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. Material changes to this Policy will be communicated to registered Players via the email address on file at least seven (7) days before the change takes effect.
The "Last Updated" date at the top of this page reflects the date the current version was published. We encourage you to review this Policy periodically. Your continued use of the euwin platform following any update constitutes acceptance of the revised Policy.
Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact euwin's Data Protection team using the details below:
Data Protection Contact: [email protected]
Subject Line for Data Requests: "Privacy Policy Enquiry" or "Data Rights Request"
Response Timeframe: Within 14 working days of receipt of a verified request.
Support Language: English. Available 24/7, with peak staffing during 8AM–2AM MYT.
If you are not satisfied with our response to your privacy enquiry, you may have the right to lodge a complaint with the relevant data protection authority in the jurisdiction applicable to our operating licence. Details of the applicable authority will be provided upon request.
This Privacy Policy was last reviewed and approved on 1 January 2026. euwin reserves all rights not expressly granted herein.