68wwin Privacy Policy – Malaysia User Data Protection

68wwin takes user privacy very seriously. This Privacy Policy is designed to provide full transparency on how we handle your personal information when you use our platform — whether through the 68wwin.fun website or our official mobile app.

This policy applies to all registered users and visitors of the 68wwin platform. "Personal information" in this context refers to any information that can be used to identify you directly or indirectly — including your name, phone number, email address, payment information, and platform usage data.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and operate in accordance with internationally recognised data protection principles. Any changes in relevant legislation will be reflected in updates to this policy.

Below are the categories of data collected by 68wwin, the purpose of collection, and the legal basis for each category:

Collected data is used solely for legitimate and transparent purposes. 68wwin uses your personal information to:

• Account management — registering, verifying, and maintaining your account on the Platform;
• Transaction processing — processing deposits, withdrawals, and other financial activities you perform;
• Identity verification (KYC) — fulfilling legal requirements related to anti-money laundering and counter-terrorism financing;
• Platform Security — detecting and preventing unauthorized access, fraud, and suspicious activity;
• Customer Support — responding to inquiries, resolving complaints, and providing technical assistance;
• Service communications — sending important account notifications such as transaction confirmations and security alerts;
• Regulatory compliance — meeting legal obligations and reporting to relevant authorities when required.

68wwin does not use your data to make automated decisions that have a material impact on you without human oversight. Any use of data beyond the purposes stated above requires your separate consent.

68wwin does not sell or trade your personal data. However, in the course of platform operations, there are situations where data may be shared with certain parties:

• Technical service providers — cloud computing providers, email service providers, and analytics tools that help us operate the platform. All such parties are bound by strict data confidentiality agreements;
• Payment processors — payment gateways and financial institutions required to process your transactions. They receive only the minimum information necessary;
• Game providers — game software providers may receive non-personally identifiable session data for technical maintenance purposes;
• Legal authorities — we will disclose data when required to do so by court order, law enforcement agency directive, or valid legal requirement.

68wwin continually invests in security infrastructure to protect your data. The technical and organisational measures we implement include:

• Data encryption in transit using TLS 1.3 with 256-bit key length;
• Data at rest encrypted using AES-256 for all sensitive information;
• Role-based access control (RBAC) — only staff who require access to specific data to perform their duties are permitted to do so;
• Internal security audits conducted quarterly and independent third-party security assessments once a year;
• Intrusion detection system (IDS) and real-time threat prevention, 24/7;
• Two-factor authentication (2FA) for all internal access to systems containing user data;
• Regularly scheduled encrypted data backups to ensure data recovery in the event of an emergency.

While we take all reasonable steps to protect your data, no system is completely immune to all threats. We encourage you to also help secure your account by using a strong password, enabling 2FA, and promptly reporting any suspicious activity to us.

68wwin uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The types of cookies we use are:

• Essential Cookies — required for core platform functions such as maintaining login sessions and security. Cannot be disabled;
• Preference Cookies — saving your preferences such as preferred language and interface layout;
• Analytics Cookies — collecting anonymized information about how you use the platform to help us improve our services;
• Security Cookies — helping identify suspicious access and protecting your account from takeover.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect platform functionality. Note: the 68wwin mobile app uses local storage in place of cookies, with equivalent functionality.

68wwin retains your personal data for as long as necessary to fulfil the purpose of collection and to comply with legal obligations. Our data retention guidelines are as follows:

• Active account data — retained for the duration your account remains active on the Platform;
• Data after account closure — retained for 7 years after account closure to fulfil legal and financial audit requirements;
• Transaction records — retained for a minimum of 7 years as required by Malaysian financial and taxation laws;
• Security logs — retained for 2 years for the purpose of security incident investigation;
• Customer support data — retained for 3 years after case resolution;
• Anonymised analytics data — may be retained indefinitely as it cannot be linked to any specific individual.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered.

Under Malaysia's PDPA and the data protection principles we uphold, you have the following rights regarding your personal data held by 68wwin:

To exercise any of the above rights, please contact us via support email or live chat. Requests will be processed within 14 working days. We may request identity verification before processing your request.

The 68wwin platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Our age verification process (KYC) is designed to identify and block registrations by underage individuals. Should we discover that data belonging to an individual under 18 has been collected without our knowledge, we will promptly delete that data and close the relevant account.

68wwin reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any amendments will be published on this page with an updated revision date.

For material amendments — meaning changes that significantly affect how we use your data — we will provide additional notice by email or in-account notification at least 14 days before the changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.

For any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our team:

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 on the 68wwin Platform
• Expected Response Time: 14 working days for personal data-related requests

Our team communicates in Bahasa Melayu, Mandarin and English. We are committed to providing transparent and meaningful responses to every privacy-related inquiry we receive.