EUWins Privacy Policy

1. Introduction

EUWins ("we", "us", "our", "Company") operates the online gaming and sports betting platform accessible at euwins.cam ("Platform"). We are committed to safeguarding the privacy of every individual who accesses or uses our services ("Player", "User", "you").

This Privacy Policy ("Policy") describes in full how EUWins collects, uses, discloses, retains, and protects personal data in connection with the operation of the EUWins platform and all related services. It applies to all Players registered on the platform, visitors to our website, and individuals who interact with our customer support team — including Players located across Malaysia, from Kuala Lumpur and Penang to Johor Bahru, Petaling Jaya, and Shah Alam.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference. By registering an account or using the EUWins platform, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Term	Meaning
"Personal Data"	Any information that identifies or can reasonably be used to identify a living individual — including name, email address, date of birth, device identifiers, and transaction records.
"Processing"	Any operation performed on personal data, including collection, storage, use, disclosure, alteration, or deletion.
"Data Controller"	EUWins, as the entity that determines the purposes and means of processing personal data collected through the platform.
"Data Processor"	A third party that processes personal data on behalf of EUWins pursuant to a written agreement and EUWins's documented instructions.
"Consent"	A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
"KYC Data"	Identity and address verification documentation collected as part of the Know Your Customer compliance process, including government-issued ID and proof of address.
"Cookies"	Small text files placed on a user's device by a website to store preferences, session information, and behavioural analytics data.

3. Categories of Personal Data We Collect

EUWins collects the following categories of personal data in the course of operating the platform and providing our services:

3.1 Account Registration Data

• Full legal name
• Date of birth (for age verification — players must be 21 or older)
• Residential address (including postcode and state, e.g., Selangor, Kuala Lumpur, Penang)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred language and currency (MYR for Malaysian players)

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification — Malaysian Identity Card (MyKad), Passport, or Driver's Licence
• Proof of residential address — utility bill, bank statement, or official correspondence (dated within three months)
• Selfie photograph taken while holding the identity document
• Source of funds documentation, where required under anti-money laundering obligations

3.3 Financial Transaction Data

• Deposit and withdrawal history, including amounts, dates, and payment methods used (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB, USDT TRC20, BTC)
• Payment method identifiers (e-wallet registered number, bank account details, or cryptocurrency wallet addresses)
• Transaction reference numbers and processing timestamps

3.4 Gaming Activity Data

• Game session logs, including titles played, stake amounts, game outcomes, and session duration
• Sports betting records, including markets selected, odds accepted, and settlement results
• Bonus and promotional activity, including offers claimed and wagering requirement progress

3.5 Technical & Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Unique device identifiers and session tokens
• Referral URL and on-site navigation behaviour

3.6 Communication Data

• Records of live chat conversations, email correspondence, and WhatsApp support interactions
• Feedback and survey responses submitted voluntarily
• Complaint records and resolution documentation

4. How We Collect Personal Data

EUWins collects personal data through the following channels and mechanisms:

• Directly from you — when you register an account, complete identity verification, make deposits or withdrawals, contact customer support, participate in promotions, or submit feedback.
• Automatically during platform use — through server logs, cookies, web beacons, and analytics tools that record your interactions with the EUWins website and gaming services.
• From third-party service providers — including payment processors handling transactions through Touch 'n Go eWallet, DuitNow, FPX, and other Malaysian banking partners; identity verification service providers; and fraud detection systems.
• From publicly available sources — where necessary for compliance purposes, including sanctions screening databases and anti-fraud registries.

5. Legal Basis for Processing

EUWins processes personal data under the following legal bases, depending on the specific processing activity:

Legal Basis	Processing Activities
Contractual Necessity	Account registration, payment processing, withdrawal handling, KYC verification, bonus administration, and customer support — all necessary to fulfil the Player agreement.
Legal Obligation	Anti-money laundering (AML) compliance, counter-terrorism financing (CTF) checks, age verification, regulatory record-keeping, and responding to lawful authority requests.
Legitimate Interests	Fraud detection and prevention, platform security monitoring, responsible gambling checks, and service improvement activities, where these interests are not overridden by Player rights.
Consent	Marketing communications (where separately opted into), non-essential cookies and analytics tracking, and any other processing for which consent is the only appropriate lawful basis.

6. How We Use Your Personal Data

EUWins uses collected personal data for the following purposes:

• Account creation and management — verifying your identity, maintaining your account, and processing your gaming activity.
• Payment processing — facilitating deposits and withdrawals through your chosen Malaysian payment method (e.g., Touch 'n Go eWallet, Maybank FPX, CIMB DuitNow).
• Regulatory compliance — fulfilling KYC, AML, and CTF obligations imposed by applicable gaming and financial regulations.
• Responsible gambling — monitoring gaming behaviour to identify patterns associated with problem gambling, and applying deposit limits, cool-off periods, or self-exclusion where appropriate or requested.
• Customer support — responding to your queries, complaints, and feedback via live chat, WhatsApp, or email in English, Bahasa Melayu, or Mandarin.
• Platform security — detecting and preventing fraud, collusion, account takeovers, and other prohibited activities.
• Service improvement — analysing platform usage patterns to improve functionality, user experience, and game offerings.
• Marketing communications — sending promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications or where permitted under applicable law.

7. Data Sharing & Disclosure

EUWins does not sell, rent, or transfer your personal data to third parties for their own marketing or commercial purposes. We may share your personal data in the following limited circumstances:

7.1 Service Providers and Data Processors

We engage trusted third-party service providers to assist in operating the platform. These include payment processors, identity verification providers, cloud hosting services, fraud detection systems, and customer support platform operators. All such providers are contractually bound to process personal data only on EUWins's documented instructions and to maintain appropriate security standards.

7.2 Regulatory Authorities and Law Enforcement

EUWins may be required to disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required by applicable law, a valid legal order, or our gaming licence obligations. We will, where legally permissible, notify affected Players of such disclosures.

7.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets involving EUWins, personal data held by EUWins may be transferred to the acquiring or successor entity. Affected Players will be notified prior to any such transfer taking effect, with the option to request account closure before completion if they do not consent.

7.4 With Your Consent

We may share your personal data with third parties in circumstances not described above where you have provided your explicit prior consent to such sharing.

8. Cookies & Tracking Technologies

The EUWins platform uses cookies and similar tracking technologies to deliver a functional and personalised user experience. Cookies we use fall into the following categories:

Cookie Type	Purpose	Required?
Strictly Necessary	Session authentication, login persistence, security tokens, and CSRF protection. These cookies are essential for the platform to function.	Yes
Functional	Remembering your preferred language (e.g., English vs. Bahasa Melayu), currency display (MYR), and layout preferences.	Optional
Analytics	Aggregated data on page visits, session duration, game popularity, and navigation paths — used to improve platform performance and content.	Optional
Marketing	Tracking engagement with promotional campaigns and measuring the effectiveness of marketing activities. Used only with your explicit consent.	Optional

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality. You may withdraw consent to optional cookies at any time without affecting the lawfulness of prior processing.

9. Data Retention

EUWins retains personal data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following general retention periods apply:

• Account data and transaction records: Retained for a minimum of five (5) years from the date of account closure or the last transaction, as required by AML and gaming regulatory obligations.
• KYC documentation: Retained for a minimum of five (5) years following the verification date, or longer where required by applicable regulation.
• Customer support correspondence: Retained for three (3) years from the date of the interaction.
• Cookie and analytics data: Aggregated analytics data retained for up to twenty-six (26) months; individual session cookies expire at the end of the browser session.
• Marketing consent records: Retained until consent is withdrawn, plus three (3) years as evidence of lawful processing.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents identification of the original individual.

10. Data Security

EUWins implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, and destruction. These measures include:

• Transport encryption: All data transmitted between your device and the EUWins platform is encrypted using 256-bit SSL/TLS protocols.
• At-rest encryption: Sensitive personal data stored in EUWins databases is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and regular security training.
• Two-factor authentication: EUWins accounts support and encourage the use of two-factor authentication (2FA) to protect against unauthorised login.
• Penetration testing: Regular third-party security audits and penetration testing are conducted to identify and address vulnerabilities in our systems.
• Incident response: EUWins maintains a documented data breach response procedure. In the event of a breach affecting Player data, we will notify affected individuals and relevant authorities within applicable regulatory timeframes.

11. International Data Transfers

EUWins may transfer personal data to, and process it in, countries other than Malaysia. This may occur where our service providers — such as cloud infrastructure providers or identity verification platforms — operate servers in jurisdictions outside Malaysia. Where such transfers occur, EUWins ensures that appropriate safeguards are in place to protect the personal data being transferred, including contractual protections consistent with applicable data protection standards.

By using the EUWins platform, you acknowledge and consent to the transfer of your personal data to countries that may have different data protection standards than Malaysia, subject to the safeguards described in this Policy.

12. Your Rights as a Data Subject

Subject to applicable law, you have the following rights in relation to the personal data EUWins holds about you. To exercise any of these rights, please contact us at [email protected]:

EUWins will respond to verified data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further sixty (60) days, with prior written notice. We may require proof of identity before processing a data rights request.

13. Children, Minors, and Age Verification

The EUWins platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from individuals under this age. EUWins employs age verification procedures at registration and as part of the KYC process to enforce this restriction.

If EUWins becomes aware that personal data has been collected from an individual under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on the EUWins platform, please notify us immediately at [email protected].

14. Third-Party Websites

The EUWins platform does not contain outbound links to third-party websites or services as part of its standard navigation. However, payment gateway redirects — such as those required to complete transactions through Touch 'n Go eWallet, DuitNow, or FPX — may temporarily direct you to a third-party payment provider's interface.

EUWins has no control over the privacy practices of third-party payment processors or other external services. We encourage you to review the privacy policy of any third-party service before providing your personal data. EUWins accepts no responsibility for the data practices of third-party providers.

15. Amendments to This Privacy Policy

EUWins reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered Players via email or a prominent notice on the platform at least seven (7) days prior to the effective date of the updated Policy.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the EUWins platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the platform and contact us to close your account.

16. Contact Us & Data Protection Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data EUWins holds about you, please contact our Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 on the EUWins platform — average response time 3–5 minutes
• Languages: English, Bahasa Melayu, and 中文 (Mandarin)

Our support team serves Players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond, around the clock every day of the year.

EUWins will acknowledge privacy-related enquiries within 24 hours and aims to resolve data protection requests within thirty (30) days. For complex requests, we will communicate an expected resolution timeline at the point of acknowledgement.