Privacy Policy

This Privacy Policy (hereinafter referred to as the "Policy") sets out the practices of okwin33 (hereinafter referred to as "okwin33", "we", "us", or "our") with respect to the collection, use, storage, disclosure, and protection of personal data obtained from users (hereinafter "you", "User", or "Player") of the okwin33 online gaming platform accessible at https://okwin33.cam (the "Platform").

okwin33 is an internationally licensed online gaming platform catering to Malaysian players. We are committed to handling personal data responsibly and in accordance with applicable data protection laws and principles. This Policy reflects our obligations and your rights in relation to personal data processed in connection with your use of the Platform.

By accessing, registering on, or using the Platform, you acknowledge that you have read, understood, and consent to the collection and use of your personal data as described in this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to close your account.

For the purposes of this Privacy Policy, the following definitions apply:

okwin33 collects personal data across several categories depending on your level of engagement with the Platform. The categories and examples of data within each are set out below:

Identity & Registration Data:

• Full legal name as it appears on government-issued identification
• Date of birth and age verification data
• National Identity Card (MyKad) number or passport number
• Residential address (including city — e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam)
• Email address and telephone number registered to your account
• Username and encrypted password credentials

Financial & Payment Data:

• Payment method details used for deposits (e.g., Touch 'n Go eWallet account identifier, Boost account reference, GrabPay reference, bank account details used for DuitNow and FPX transfers)
• Transaction history — deposits, withdrawals, bonus credits, and wager records
• Bank account details provided for withdrawal processing (Maybank, CIMB, Public Bank, Hong Leong, RHB)

Gaming & Behavioural Data:

• Game session history, including game types, bet amounts, and outcomes
• Betting patterns, preferred game categories, and session duration
• Responsible gambling tool usage, including limit settings and self-exclusion requests

Technical & Device Data:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps, login history, and access logs
• Cookie identifiers and similar tracking technology data

Communications Data:

• Records of live chat interactions with our support team
• Email correspondence with okwin33 support or compliance teams
• Responses to surveys, feedback forms, or promotional participation

okwin33 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or update your account settings.
• Automatically through the Platform: Technical data including IP addresses, device identifiers, session logs, and cookie data are collected automatically when you access or use the Platform.
• From payment providers: When you initiate a transaction, relevant payment confirmation data may be transmitted to us by our payment partners including DuitNow, FPX network banks, Touch 'n Go eWallet, Boost, and GrabPay.
• From identity verification services: During KYC processing, data may be received from identity verification service providers used to cross-check information you have provided.
• From publicly available sources: In limited circumstances, okwin33 may supplement your profile with data available from public registers or databases, where this is permitted and relevant to our compliance obligations.

okwin33 processes your personal data only for defined, legitimate purposes. The table below sets out the primary purposes for which your data is processed:

okwin33 processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and okwin33 — including account management, game access, and payment processing — is carried out on the basis of contractual necessity. Without this processing, we cannot provide the services you have requested.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including KYC identity verification, AML transaction monitoring, and regulatory reporting — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out to pursue our legitimate business interests — including fraud prevention, platform security, and service improvement analytics — is carried out on the basis of legitimate interests, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications or non-essential cookies is carried out on the basis of your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing carried out prior to withdrawal.

okwin33 does not sell, rent, or trade your personal data to third parties for commercial purposes. Personal data is shared only in the following limited circumstances:

• Payment Service Providers: Transaction data is shared with payment processors and financial institutions — including DuitNow network banks (Maybank, CIMB, Public Bank, Hong Leong, RHB), Touch 'n Go eWallet, Boost, and GrabPay — to the extent necessary to process your transactions.
• Identity Verification Services: Identity and age verification data may be shared with licensed KYC and AML compliance service providers engaged by okwin33 to fulfil our verification obligations.
• Game Studio Providers: Limited technical data (such as session tokens) may be shared with our licensed game studio partners to deliver the gaming services you access on the Platform. No financial or identity data is shared with game studios.
• Regulatory Authorities: okwin33 may disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or other competent authorities where required to do so by applicable law, regulatory requirement, or valid legal process.
• Professional Advisors: Data may be disclosed to our legal, audit, or professional services advisors where necessary, subject to appropriate confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of okwin33's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

okwin33 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to use the Platform. okwin33 does not use third-party advertising cookies or allow external advertisers to place cookies on the Platform.

okwin33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following permanent account closure, in accordance with AML regulatory requirements.
• Transaction and Financial Data: Retained for a minimum of seven (7) years to comply with financial record-keeping obligations under applicable gaming and financial regulations.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction, unless the matter relates to a dispute or legal proceeding in which case the relevant records are retained for the duration of that matter plus three (3) years.
• Gaming Session Data: Retained for a minimum of three (3) years for audit, dispute resolution, and responsible gambling monitoring purposes.
• Technical and Log Data: Typically retained for a rolling period of twelve (12) months for security and platform diagnostic purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or rendered permanently anonymous. Data that has been anonymised in a manner that prevents identification of individuals is no longer considered personal data and may be retained indefinitely for statistical and analytical purposes.

As a user of the okwin33 Platform, you have the following rights in respect of your personal data. These rights may be exercised free of charge by contacting our support team via live chat or at the email address provided in Section 15.

okwin33 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and the Platform is encrypted using 256-bit TLS/SSL encryption, preventing interception by unauthorised parties.
• Encryption at Rest: Sensitive personal data stored on our servers — including KYC documents, financial records, and authentication credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is strictly controlled and limited to authorised okwin33 personnel who require the data to perform their specific job functions. All access is logged and audited.
• Two-Factor Authentication (2FA): okwin33 supports 2FA for player accounts to provide an additional layer of security against unauthorised access.
• Regular Security Audits: Our Platform undergoes periodic third-party security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential security weaknesses.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okwin33 will notify you and relevant authorities in accordance with our legal obligations and within the timeframes required.

okwin33 is strictly intended for use by individuals who are at least 21 years of age. We do not knowingly collect personal data from individuals under the age of 21. The minimum age requirement is enforced through our KYC identity verification process.

If okwin33 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete such data and permanently close the associated account. Any deposits made by an underage individual will be returned to the payment source, less any administrative costs incurred.

If you believe that a minor may have accessed or registered on the Platform, please contact our support team immediately so that we can investigate and take appropriate action.

The okwin33 Platform integrates services provided by third-party partners including payment processors, game content providers, and identity verification services. While okwin33 carefully selects and contractually obligates these partners to maintain appropriate data protection standards, each third-party provider operates under its own privacy policy for data processed directly within its systems.

When you use a third-party payment method — such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX bank transfers — your transaction will be processed by the relevant payment provider and subject to that provider's terms and privacy practices. okwin33 receives only the confirmation and reference data necessary to credit or debit your account.

okwin33's Privacy Policy does not govern the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform.

okwin33 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or the services we offer. When material changes are made to this Policy, we will notify registered Users by email to the address held on their account, and by posting a prominent notice on the Platform, at least fourteen (14) days prior to the changes taking effect.

For minor amendments — such as clarifications, corrections, or changes that do not materially alter the substance of any provision — okwin33 may update the Policy without prior individual notification. The "Last Updated" date at the top of this document will always reflect the most recent revision.

We encourage you to review this Policy periodically to stay informed about how we are protecting your information. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which okwin33 processes your personal data, please contact our support team using the details below. All contact information is provided as plain text only — please copy and use these details manually:

• Live Chat: Available 24/7 directly on the okwin33 Platform. Average response time under 5 minutes. Agents available in English, Bahasa Melayu, and Mandarin Chinese.
• Email: [email protected] — please use the subject line "Privacy Request — [Your Full Name]" to ensure your enquiry is routed to our data protection team. Responses are typically provided within 24 to 48 hours.
• Support Hours: 24 hours a day, 7 days a week, including Malaysian public holidays. All times reference Malaysia Standard Time (MYT, UTC+8).

For formal data subject access requests, erasure requests, or objections to processing, please contact us via email with sufficient detail to allow us to identify your account and respond accurately. We will acknowledge all formal data subject requests within five (5) business days and complete our response within thirty (30) calendar days, unless an extension is required under applicable law.