bigwin | Privacy Policy — How We Protect Your Data

Why Your Privacy Is Safe with bigwin

We invest in the latest security infrastructure to ensure every detail of your information remains protected.

256-bit SSL Encryption

All data transmitted between your device and bigwin servers is protected by 256-bit SSL encryption — the same standard used by leading banking institutions worldwide. No one can read your data in transit.

Secure & Restricted Servers

Your personal data is stored on servers protected by multi-layered access controls. Only authorised personnel may access your information, and every access is logged in an audit trail reviewed on a regular basis.

No Data Selling

BigWin has never and will never sell your personal data to third parties for commercial purposes. Your information is used solely to operate the platform and improve your experience as a player.

Transparent & Secure KYC

Identity verification documents you upload during the KYC process are fully encrypted and retained only for as long as required by law. We do not keep unnecessary copies and do not share these documents without your consent.

Real-Time Threat Monitoring

Bigwin's security systems monitor for suspicious activity around the clock. Any unauthorised attempt to access your personal data is automatically detected and blocked within seconds.

Privacy Controls in Your Hands

You have the full right to access, correct, or request deletion of your personal data. All privacy-related requests are processed within 30 business days and we will notify you of the action taken.

1. Introduction
2. Data We Collect
3. How We Use Your Data
4. Data Sharing
5. Cookies & Tracking Technologies
6. Data Security
7. Data Retention
8. Your Rights
9. Cross-Border Data Transfers
10. Children & Underage Players
11. Changes to the Privacy Policy
12. Contact Us

1Introduction & Scope of This Policy

BigWin is committed to protecting the privacy of every player on our platform. This Privacy Policy applies to all BigWin services, including our official website, mobile app, and any other digital channels we operate.

This document is written in plain language because we believe you deserve to know exactly what happens to your information — not just legal jargon that is hard to understand. If any section is unclear, our support team is ready to help.

By using the BigWin platform, you agree to the terms of this Privacy Policy. If you do not agree, please stop using the platform and contact us to close your account.

2Types of Personal Data We Collect

BigWin only collects data that is strictly necessary to operate our services safely and efficiently. The following are the categories of data we collect:

Data You Provide Directly

Data Types	Example	Requirements
Identity Information	Full name, date of birth, identification card number	Mandatory (KYC)
Contact Information	Email address, phone number	Mandatory
Financial Information	Bank account number, payment method	Mandatory (transaction)
Verification Documents	Copy of identification card, utility bill	Mandatory (KYC)
Preference Information	Preferred game types, language preference	Optional

Automatically Collected Data

When you use the BigWin platform, our systems automatically record certain technical information for security and service improvement purposes:

IP address and general geographic location (city or state level only).
Device type, operating system, and web browser version used.
Session times and duration, pages visited, and in-platform actions.
Records of all deposit transactions, withdrawals, and wagering activity.
Communication logs with the customer support team.

BigWin will never ask for sensitive information such as your full password, card PIN, or OTP via email, live chat, or phone. Do not disclose this information to anyone claiming to be a BigWin representative.

3How We Use Your Personal Data

Every piece of data we collect has a clear and lawful purpose. bigwin uses your personal data for the following purposes:

Account Management: To create, verify, and manage your bigwin account, including any required KYC processes.
Transaction Processing: To process deposits, withdrawals, and all financial transactions securely and efficiently.
Platform Security: To detect and prevent fraud, money laundering, and any suspicious activity.
Customer Support: To resolve complaints, respond to inquiries, and provide the necessary technical assistance.
Platform Communications: To send important account notifications, service updates, and promotional information (subject to your preferences).
Legal Compliance: To fulfil applicable legal and regulatory obligations, including mandatory reporting requirements.
Service Improvement: To analyse usage patterns in order to improve your gaming experience and overall platform performance.

We only use your data for the purposes stated in this Privacy Policy. Any significant new use will be communicated to you in advance and will require your consent.

4Data Sharing with Third Parties

BigWin does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, there are limited situations where we may need to share your data:

Payment Service Providers: To process your deposits and withdrawals, the necessary information is shared with approved payment processors. All such providers are bound by strict data protection agreements.
Game Software Providers: Basic account information is shared with third-party game providers solely to enable you to play within their integrated platforms.
Legal Authorities: BigWin will disclose required data to the relevant authorities when mandated by law, court order, or for the prevention of financial crime.
Technical Service Providers: Our technical partners, such as cloud service and cybersecurity providers who help operate the platform — all bound by strict confidentiality agreements.

In all data sharing cases, BigWin ensures that recipients meet data protection standards equivalent to or stricter than those we uphold ourselves.

5Cookies & Tracking Technologies

BigWin uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

Essential Cookies: Required for core platform functions such as login, session verification, and security. These cookies cannot be disabled.
Performance Cookies: Helping us understand how you interact with the platform so we can make meaningful improvements.
Functional Cookies: Saving your preferences such as language, display settings, and game preferences so you don't have to reconfigure them every time you log in.
Analytics Cookies: Used to analyse aggregate usage patterns for service improvement purposes. This data does not identify you individually.

You can manage your cookie preferences through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of the BigWin platform.

6Data Security Measures

Protecting your personal data is bigwin's top priority. We implement a range of technical and operational security measures to keep your data safe:

Data encryption in transit using the latest TLS 1.3 protocol.
Data encryption at rest using AES-256 for sensitive information.
24/7 security monitoring with automated intrusion detection systems.
Regular penetration testing conducted by independent security experts.
Role-based access control — only staff who require access to specific data are granted that permission.
Mandatory cybersecurity training for all bigwin staff who handle player data.
Tested incident response procedures to ensure any data breach is handled promptly and accurately.

While we take all reasonable measures, no security system is entirely foolproof. In the event of a data breach affecting your information, we will notify you within 72 hours of detection.

7Data Retention Period

BigWin does not retain your personal data longer than necessary. Retention periods depend on the type of data and applicable legal requirements:

Active account data: Retained for as long as your account is active and in use.
Closed account data: Basic information is retained for 5 years after account closure to fulfil legal and audit requirements.
Financial Transaction Records: Retained for 7 years in accordance with financial reporting regulatory requirements.
KYC documents: Retained for the period specified by the relevant regulatory body, typically 5 to 7 years.
Support Communication Logs: Retained for 2 years for reference and dispute resolution purposes.
Session data and technical logs: Retained for 90 days before being automatically deleted.

Once the relevant retention period has ended, your data will be securely deleted or anonymised so it can no longer be personally linked to you.

8Your Rights Regarding Personal Data

As a bigwin player, you have the following rights regarding your personal data. We fully respect and facilitate the exercise of these rights:

Right to Access

You may request a copy of all personal data we hold about you at any time.

Right to Rectification

You may request correction of any inaccurate or incomplete information in your account.

Right to Erasure

You may request deletion of your personal data, subject to legal retention obligations.

Right to Restrict Processing

You may request that we restrict the processing of your data under certain circumstances.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another service.

Right to Object

You may opt out of having your data processed for direct marketing purposes at any time.

9Cross-Border Data Transfers

BigWin operates on server infrastructure that may be located outside Malaysia to ensure optimal platform performance and consistent service availability. When your personal data is transferred outside Malaysia, we ensure:

The recipient country or region has an adequate level of data protection.
Appropriate data transfer agreements have been established with all data recipients outside our borders.
All data transfers comply with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and related legislation.

Regardless of where your data is stored or processed, the level of protection provided is consistent with the standards set out in this Privacy Policy.

10Children & Underage Players

The bigwin platform is for individuals aged 18 and above only. We do not knowingly collect personal data from children or individuals below the specified age.

If we find that a child's personal data has been collected without our knowledge, we will take immediate action to delete that data and close the relevant account. Parents or guardians who become aware that their child has registered on bigwin are encouraged to contact us immediately.

If you suspect someone under 18 is using the bigwin platform, please contact our support team immediately at [email protected].

11Changes to This Privacy Policy

BigWin reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or how we operate the platform. Whenever we make significant changes, we will:

Updating the "Last Updated" date at the top of this page.
Sending notifications to all active members via their registered email.
Displaying a prominent notice on the platform for a minimum of 14 days.

Continued use of the bigwin platform after any changes to the Privacy Policy constitutes acceptance of the updated terms. We recommend reviewing this page periodically to stay informed about how we protect your privacy.

12Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your rights regarding personal data, please contact bigwin's Data Protection Officer (DPO) through the following channels:

Email: [email protected] (with "Privacy Inquiry" in the subject line)
Live Chat: Available 24/7 on the bigwin platform
Response Time: All privacy inquiries will be responded to within 30 business days.

We encourage you to reach out to us first before filing a complaint with any regulatory authority. We will make every effort to resolve your concerns directly and to your satisfaction.

Privacy Policy BigWin — Personal Data Protection for Malaysia Players