Compliant with Malaysia's PDPA 2010

Privacy Policy 98win — Our Commitment to Protecting the Personal Data of Malaysian Users

Your privacy is 98win's top priority. This document transparently explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. We believe you have the right to know exactly what we do with your information.

Last updated: 1 January 2026 256-bit SSL Protected Malay Version PDPA 2010 Compliance
🔐
SSL 256
Bit Encryption
🛡️
PDPA
Malaysia Compliant
🔒
0
Data Breach Records
24/7
Security Monitoring

98win's Six Pillars of Data Protection

The core principles governing how 98win handles the personal data of every Malaysian member

Data Minimisation

98win collects only the data that is strictly necessary to provide your services. We do not collect excessive data or data unrelated to your account and security needs.

Bank-Grade Encryption

All your personal data and financial transactions are protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banks, including Maybank and CIMB, to safeguard their customers.

Your Data, Your Control

You have the full right to access, correct, transfer or request the deletion of your personal data held by 98win at any time, in accordance with the provisions of Malaysia's PDPA.

No Sale of Data to Third Parties

98win has never and will never sell, rent, or commercialise your personal data to any third party for marketing or any other purpose without your explicit consent.

Controlled Data Retention Period

Your personal data will not be retained longer than necessary. Once an account is closed, your data will be deleted or anonymised within the timeframe prescribed by applicable Malaysian law.

Malaysia PDPA 2010 Compliance

The 98win Privacy Policy is designed and regularly updated to ensure full compliance with the Malaysia Personal Data Protection Act (PDPA) 2010 and all guidelines issued by the Personal Data Protection Commissioner of Malaysia.

01

Introduction and Scope of Privacy Policy

Welcome to the 98win Privacy Policy. This document is our written commitment to you — explaining precisely how the 98win platform manages the personal data of every member and user who accesses our services.

98win is an online entertainment platform offering sports betting (Malaysia Super League football, EPL, badminton, cricket), Live Casino, slots and other games. In operating these services, we need to collect a limited amount of personal data to enable us to deliver services that are safe, fair and responsible.

98win's Core Commitments: We are committed to collecting only what is necessary, never selling your data to anyone, and always giving you control over your personal information. Privacy is not merely a legal obligation for us — it is a core value we have upheld since 98win was founded in 2018.

This policy applies to all individuals who interact with 98win — including registered members, mobile app users, website visitors, and anyone who contacts our support team. By using the 98win platform, you agree to the terms of this Privacy Policy.

02

Personal Data We Collect

98win collects personal data through several channels — during account registration, during platform use, through customer support interactions, and automatically via browser technology. The following are the categories of data we collect:

Identity Data
Full name, date of birth, Malaysian identity card number (MyKad), gender and photo for the KYC (Know Your Customer) process
Contact Data
Email address, Malaysian mobile number, and social media account details if used for registration
Financial Data
Records of deposits and withdrawals in MYR, payment methods (Touch 'n Go, DuitNow, GrabPay, etc.), and transaction history
Gaming Data
Betting history, games played, wins and losses, and gameplay patterns for responsible gambling monitoring
Technical Data
IP address, device type, operating system, browser version, login timestamps, and activity logs for security purposes
Location Data
General geographic location based on IP address for regional compliance and fraud detection purposes

Important: 98win never collects your bank PIN, online banking passwords, or full credit/debit card details. All financial transactions are processed directly through licensed payment gateways such as Touch 'n Go, DuitNow, and FPX — 98win does not store this sensitive payment information in our systems.

03

How Your Personal Data Is Used

98win uses your personal data only for legitimate and reasonable purposes directly related to the provision of our services. We do not use your data for unrelated purposes without first obtaining your consent.

3.1 Account Operations Purposes

  • Verifying your identity during registration and the KYC process
  • Securely processes deposits and withdrawals in Malaysian Ringgit (MYR)
  • Maintains your transaction history and betting records
  • Managing the VIP Rewards Programme and bonuses you are entitled to
  • Providing effective and relevant customer support

3.2 Security and Compliance Purposes

  • Detecting and preventing fraud, money laundering (AML), and other unlawful activities
  • Ensuring compliance with applicable laws and regulations in Malaysia
  • Detecting system abuse or hacking attempts
  • Complying with court orders or requests from legitimate authorities

3.3 Service Improvement Purposes

  • Analysing usage patterns to improve the interface and overall user experience of the 98win platform
  • Personalising content, bonus offers and game recommendations that are relevant to you
  • Conducting internal research to develop new products and features

Legal Basis: All data processing by 98win is carried out on the basis of contractual compliance (to provide the services you requested), legal obligations (PDPA and AML compliance), our legitimate interests (security and service improvement), and in certain cases, your explicit consent.

04

Data Sharing with Third Parties

98win does not sell, rent, or commercialise your personal data to any third party. However, there are limited situations where we need to share certain data with trusted operational partners:

  • Licensed Payment Providers: Necessary transaction data is shared with payment providers such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX banks to process your deposits and withdrawals in MYR. All these providers comply with PCI DSS security standards.
  • Game Providers: Only the minimum data required is shared with game software providers (live casino, slots, sports) solely to enable gameplay functionality. These providers are bound by strict confidentiality agreements.
  • Independent Auditor: Anonymised data is shared with independent auditors who verify game fairness and policy compliance.
  • Legal Authority: 98win will disclose personal data to Malaysian authorities when required by law, court order, or a legitimate criminal investigation.

Our Guarantee: Any third party that receives your data from 98win is contractually bound to protect it to a standard at least equivalent to this Privacy Policy. We conduct annual reviews of all partners to ensure ongoing compliance.

05

Data Security Measures

Protecting your personal data is a responsibility we take very seriously at 98win. We continually invest in security infrastructure to keep your data safe at all times.

98win Platform Security Standards
Data Encryption (SSL/TLS)
98%
Two-Factor Authentication (2FA)
95%
24/7 Real-Time Monitoring
100%
Sensitive Data Segregation
97%
Data Backup & Recovery
99%

The technical measures we employ include:

  • 256-bit SSL/TLS encryption for all data transmitted between your device and 98win's servers
  • Encryption of data at rest within databases using industry-leading encryption algorithms
  • Intrusion detection systems (IDS/IPS) that monitor network traffic in real time
  • Regular security audits conducted by independent third-party cybersecurity experts
  • Strict internal access controls — only authorised personnel may access members' personal data
  • Ongoing cybersecurity training for all 98win staff
06

Cookies Policy

The 98win platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. The following are the types of cookies we use:

You can manage your cookie settings through your browser settings. However, disabling necessary cookies may affect the functionality of the 98win platform. Optional cookies can be declined without impacting the core functions of your account.

07

Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act (PDPA) 2010, you have several important rights regarding your personal data held by 98win. We are committed to respecting and facilitating the exercise of these rights:

Right of Access
You have the right to request and receive a copy of your personal data held by 98win within 21 business days of your request
Right to Rectification
If any of your personal data is inaccurate or out of date, you have the right to request a correction and 98win will update it promptly
Right to Erasure
Once your account is closed and all legal obligations have been fulfilled, you may request the deletion of your personal data from 98win's systems
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time, without providing any reason
Right to Data Portability
You may request your personal data in a machine-readable format for transfer to another service provider
Right to Restrict Processing
In certain circumstances, you may request that 98win restrict the processing of your data while an issue or objection is being resolved

How to Exercise Your Rights: To exercise any of the above rights, please contact the 98win data protection team by email at privacy@98win-vip.net or via live chat. We will process your request within 21 business days and may require identity verification beforehand to protect the security of your account.

08

Data Retention Period

98win retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law.

  • Active account data: Retained for the duration of your active account plus 5 years after account closure for legal compliance purposes
  • Financial transaction data: Retained for 7 years in accordance with Malaysia's accounting and AML legal requirements
  • Customer support communication logs: Retained for 3 years for service improvement and dispute resolution purposes
  • Technical log data (IP, login logs): Retained for 90 days for security and fraud detection purposes
  • Optional cookie data: Deleted in accordance with the defined retention period or when you deactivate it

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you. Our deletion process follows recognised security standards to ensure data is irrecoverable.

09

Cross-Border Data Transfers

Under certain operational circumstances, your personal data may be transferred to or processed outside Malaysia — for example, by cloud server providers or international gaming software vendors. When this occurs, 98win ensures that:

  • Transfers occur only to countries or entities that provide a level of data protection equivalent to or greater than Malaysia's PDPA
  • Comprehensive data processing agreements (DPAs) are signed with all overseas data recipients
  • Only the minimum necessary data is transferred, protected by end-to-end encryption in transit
10

Child Protection

The 98win platform is for individuals aged 18 and above only. We do not knowingly collect personal data from individuals under the age of 18. Should we discover that personal data belonging to someone under 18 has been collected, we will immediately delete that data and close the account in question.

If you are a parent or guardian who has discovered that your underage child has registered a 98win account, please contact us immediately at support@98win-vip.net and we will respond within 24 hours.

11

Privacy Policy Amendments

98win reserves the right to amend this Privacy Policy from time to time to reflect changes in our operations, legal requirements, or industry best practices. When material amendments are made, we will:

  • Publishing updated versions on the 98win website with a clearly stated revision date
  • Notifying registered members via email or in-app notifications of any significant changes
  • Providing at least 30 days' notice before any material changes take effect

Continued use of the 98win platform after any amendments take effect will be considered acceptance of the revised Privacy Policy. It is your responsibility to review this policy periodically.

12

Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 98win handles your personal data, you may contact our Data Protection Officer through the following channels:

Email
privacy@98win-vip.net
Live Chat
24/7 — Bahasa Malaysia & English
Response Time
Within 21 business days

If you are not satisfied with how we handle your privacy complaint, you have the right to lodge a complaint with Personal Data Protection Commissioner of Malaysia (PDPD) through their official channels. However, we encourage you to reach out to us first so that we have the opportunity to resolve any issues directly.

🔐

Your Data is Secure. Your Experience is Guaranteed.

98win protects your privacy to the highest standards while delivering Malaysia's best online entertainment experience. Register today and enjoy peace of mind with a platform you can trust.

By registering, you agree to Terms & Conditions and the 98win Privacy Policy. Minimum age requirement: 18 years old.

Bahasa Melayu