Your privacy is our priority. This policy clearly explains how clubwin collects, uses, stores and protects your personal information in accordance with the Personal Data Protection Act 2010 (PDPA).
Effective: 1 January 2026
Policy Version: 2.5
Your data is protected with 256-bit SSL encryption and stored on certified secure servers.
We don't just comply with the law — we go beyond the minimum requirements to ensure your personal data remains safe and under control at all times.
All data transmitted between your device and clubwin's servers is protected with SSL/TLS 256-bit encryption — the same standard used by leading banking institutions in Malaysia.
ClubWin operates in full compliance with Malaysia's Personal Data Protection Act 2010. Every data collection and usage process has a clear and lawful legal basis.
ClubWin has never and will never sell, rent, or trade your personal data to third parties for marketing purposes without your express prior consent.
You have the full right to access, correct, transfer, or request deletion of your personal data at any time through your account settings or by contacting our support team.
Your data is stored in enterprise-grade data centers with multi-layered physical and digital access controls. Our systems undergo independent security audits annually by qualified third-party bodies.
You can opt out of receiving any marketing communications from ClubWin at any time. Your preference will take effect within 48 business hours.
ClubWin is committed to protecting the privacy of every user who registers and uses our platform. This Privacy Policy explains transparently and in detail how we collect, use, disclose, store, and protect your personal information when you use the clubwin.onl website and all related services.
This policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable legal provisions. By registering an account or continuing to use the ClubWin platform, you agree to the terms set out in this Privacy Policy.
We encourage you to read this document carefully and thoroughly. If you have any questions or concerns about how we handle your personal data, our data protection team is available to assist you at any time.
This Privacy Policy is to be read together with Terms and Conditions and Responsible Gaming Policy ClubWin.
ClubWin only collects information that is strictly necessary to provide you with high-quality services. The following are the categories of information we collect:
| Data Category | Example | Primary Purpose |
|---|---|---|
| Personal Identity | Name, IC, Date of Birth | KYC & Legal Verification |
| Contact Information | Email, Phone, Address | Account communications & support |
| Financial Data | Bank Account, e-Wallet | Secure payment processing |
| Technical Data | IP, Device, Browser | Security & anti-fraud |
| Behavioural Data | Gaming history, betting | Service improvement |
ClubWin uses your personal data solely for lawful and transparent purposes. We will not use your data for any purpose not stated here without first obtaining your consent.
Every data use purpose has a clear legal basis — whether your explicit consent, contractual necessity, legal obligation, or clubwin's legitimate interests that do not override your rights.
ClubWin does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, we may share your information in the following limited circumstances:
We work with carefully selected third-party service providers to support our platform operations. They are only permitted to use your data for purposes we specify and are bound by strict confidentiality agreements.
ClubWin may disclose your information when required by law or upon a lawful request from authorities such as the Royal Malaysia Police, Inland Revenue Board, Bank Negara Malaysia, or a competent court.
Should clubwin undergo a merger, acquisition or asset sale, user data may be transferred as part of that process. You will be notified in advance and will have the option to delete your account before the transfer takes place.
All third parties we work with have undergone a rigorous security and privacy assessment process. They are required to uphold data protection standards equivalent to or higher than those of clubwin itself.
The security of your personal data is our most important responsibility. clubwin continuously invests in the latest security infrastructure to ensure your information is always protected from both external and internal threats.
SSL/TLS 256-bit encryption for all data in transit
AES-256 encryption for data stored on servers
Web application firewall (WAF) and intrusion detection system
24/7 Real-Time Security Monitoring
Least-privilege principle — each staff member can only access the data required for their role
Multi-factor authentication (MFA) for all internal system access
Comprehensive audit logs for all data access and modifications
Mandatory privacy and security training for all staff
While we take all reasonable precautions, no system can be guaranteed 100% secure. You also play an important role in keeping your account safe by using a strong password, enabling two-factor authentication, and never sharing your login details with anyone.
In the event of a data breach that may affect your personal information, clubwin will notify you within 72 hours of becoming aware of the incident, in line with industry best practices.
ClubWin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Necessary Cookies | Secure login, session security | Session only |
| Preference Cookies | Saving your language settings & preferences | 1 year |
| Analytics Cookies | Understanding platform usage patterns | 6 months |
| Marketing Cookies | Displaying relevant promotions | 30 days |
You can control or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect specific features of the ClubWin platform, including the ability to stay logged in.
Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data that we hold. We are committed to ensuring you can exercise these rights easily and without unnecessary barriers.
Requesting a copy of all personal data we hold about you in a readable format.
Correcting any inaccurate or incomplete personal information in our records.
Requesting the deletion of your personal data, subject to applicable legal requirements.
Object to the use of your data for direct marketing or profiling purposes.
Receiving your data in a structured format that can be used by other platforms.
Requesting us to restrict the processing of your data while a dispute is being resolved.
To exercise any of the above rights, contact our Data Protection Officer (DPO) via email or Live Chat. We will process your request within 30 calendar days of receipt.
In the course of operating the platform, some of your personal data may be transferred to, stored in, or processed in countries outside Malaysia. This occurs when we use cloud service providers or international technology partners.
Every international data transfer is carried out with adequate safeguards in place, including:
All international data transfers are carried out in compliance with the requirements of PDPA 2010 and the guidelines of Malaysia's Personal Data Protection Commissioner.
ClubWin only retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law.
| Data Type | Retention Period | Basic |
|---|---|---|
| Active account data | Throughout the active account lifetime | Contractual requirements |
| Financial transaction records | 7 years after transaction | Legal requirements |
| KYC Documents | 5 years after account closure | AMLA & regulatory requirements |
| Support communication logs | 3 years | Legitimate business interests |
| Analytics cookie data | 6 months | Service improvement |
| Closed account data | 5 years after closure | Fraud prevention |
Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity.
The clubwin platform may contain links to third-party websites or services in certain contexts, such as payment providers. We wish to make it explicitly clear that this Privacy Policy applies solely to the clubwin platform.
ClubWin is not responsible for the privacy practices, content, or security of those third-party websites. We encourage you to read the privacy policy of each website you visit separately, especially before providing any personal information.
Links to third-party websites do not imply that clubwin endorses or validates their content. Always exercise caution when sharing your personal information on other platforms.
ClubWin is an online entertainment platform restricted to users aged 18 and above only. We do not intentionally collect, store, or process any personal information from individuals under the age of 18.
All account registrations go through a strict age verification process using official identification documents. Should we discover that we have inadvertently collected data from a minor, we will take immediate action to permanently delete that information from our systems.
If you have reason to believe that someone under the age of 18 has registered an account on our platform, please contact us immediately so we can take the appropriate action.
ClubWin uses a multi-layered age verification system that includes identity document checks and digital facial verification to ensure no underage users can access our platform.
ClubWin reserves the right to amend, update, or modify this Privacy Policy at any time to reflect changes in our practices, the latest legal requirements, or service improvements. All changes take effect immediately upon publication on this website.
When we make significant changes to this policy, we will notify you via:
The "Effective Date" at the top of this document will be updated whenever changes are made. Continued use of the clubwin platform after any policy update constitutes your acceptance of the latest version of this policy.
We recommend reviewing this Privacy Policy regularly, at least every three months, to stay informed about how we protect your personal information.
If you have any questions, concerns or complaints regarding this Privacy Policy or the way clubwin handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:
Available 24 hours, 7 days a week
For urgent enquiries regarding your privacy and account security
You may also lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your privacy rights have been violated and ClubWin has failed to address your concerns to your satisfaction.