Mwin5 Privacy Policy — Your Data Protection

This Privacy Policy ("Policy") is published by mwin5 ("we", "Platform" or "mwin5") and applies to all users who access or use the mwin5.org website and all services offered through it. This Policy explains in detail how mwin5 collects, stores, uses, discloses, and protects your personal information.

Mwin5 understands that privacy is a matter of trust, and that trust must be earned through concrete action — not just words. Our platform is therefore built with privacy as a priority from the ground up. Every decision involving data processing is made with the best interests of our users in mind.

This Policy should be read alongside the mwin5 Terms and Conditions and any additional policies relating to specific services. Together, these documents form the complete data protection framework for the mwin5 platform.

Mwin5 collects the personal information necessary to provide a secure, efficient and high-quality service. Data collection is carried out directly from you during registration and platform use, as well as automatically through permitted tracking technologies.

It is important to note that mwin5 only collects data that is strictly necessary for the stated purposes. This data minimisation principle ensures we do not retain unnecessary or excessive information about you.

Every piece of data we collect has a clear and legitimate purpose. mwin5 uses your personal information for the following purposes:

• Account Management: Creating and managing your account, verifying identity, processing registration, and enabling secure login.
• Transaction Processing: Processing deposits and withdrawals accurately and securely, and maintaining complete, auditable transaction records.
• Customer Support: Providing effective technical assistance and customer service whenever you contact our team.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and suspicious activity through behavioral pattern analysis.
• Legal Compliance: Fulfilling legal obligations under anti-money laundering (AML) regulations and reporting requirements to the relevant authorities.
• Service Improvement: Analyzing usage patterns to improve platform design, launch new features, and personalize your gaming experience.
• Marketing Communications: Sending promotional information, exclusive offers, and the latest news about mwin5 — only to members who have consented to receive such communications.

Mwin5 does not sell, rent or trade your personal data to any third party for commercial purposes. This is a core commitment that will not change. However, in certain limited circumstances, your data may be shared with the following parties:

• Payment Service Providers: Required transaction information is shared with trusted payment processors bound by strict confidentiality agreements with mwin5.
• Game Software Providers: Minimum technical data required to ensure games function correctly, excluding personally identifiable information.
• Legal Authorities: When required by law, court order, or official investigation by a competent authority — and only to the extent required by such legal obligation.
• Identity Verification Services: Information required for the KYC process is shared with certified identity verification partners operating under equally rigorous data protection standards.

All third parties working with mwin5 are required to comply with privacy standards equivalent to or exceeding those set by mwin5 itself. Data processing agreements are signed with every partner to ensure your data remains protected at all times.

Mwin5 invests seriously in security infrastructure to ensure your personal data is always protected from unauthorised access, loss, alteration or unintended disclosure. Key security measures we employ include:

• Encryption of Data at Rest and in Transit: All data is encrypted using AES-256 protocols during storage and SSL/TLS during transmission between servers and user devices.
• Role-Based Access Control: Only authorised staff with a legitimate operational need may access member personal data, with every access recorded in an audit log.
• Regular Security Testing: Penetration testing and security audits are conducted periodically by independent third parties to identify and address any vulnerabilities.
• Two-Factor Authentication: All internal staff accounts and member accounts that have chosen to enable it are protected with an additional layer of authentication.
• Continuous Monitoring: The mwin5 SIEM (Security Information and Event Management) system monitors all network and account activity in real time to detect anomalies immediately.

Mwin5 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your personal settings such as language preference, display theme, and gaming preferences so you do not need to reconfigure them every time you log in.
• Analytics Cookies: Helps us understand how users interact with the platform — which pages are visited most, how long sessions last — for continuous improvement purposes.
• Security Cookies: Used to detect suspicious login attempts, fraud, and bot activity that may threaten your account security.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality of some sections of the mwin5 platform. For the best experience, we recommend keeping essential and preference cookies enabled.

Mwin5 respects your rights as the owner of your personal data. You have the following rights, which may be exercised at any time:

Mwin5 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable laws and regulations. Our general data retention guidelines are as follows:

• Active Account Data: Retained for as long as your account remains active and for a reasonable period after account closure to resolve any related claims or disputes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable financial and anti-money laundering legal requirements.
• KYC Documents: Retained for the duration of active account status and up to 5 years after account closure in accordance with regulatory compliance requirements.
• Support Communication Logs: Retained for 3 years for reference purposes, service improvement, and dispute resolution.
• Technical Data & Access Logs: Retained for 12 months for security purposes, fraud detection, and threat pattern analysis.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications.

When the retention period expires and there is no legal requirement to continue storing it, your personal data will be securely deleted using methods that ensure it cannot be recovered.

In the context of operating an online platform like mwin5, personal data may be stored or processed on servers located outside Malaysia. When cross-border data transfers occur, mwin5 ensures equivalent protection is provided through:

• Standard data transfer agreements requiring recipients to comply with equivalent data protection standards.
• Selection of cloud infrastructure partners that comply with international security standards such as ISO 27001 and SOC 2.
• Data protection impact assessments (DPIAs) are conducted before any new data transfer outside Malaysia is implemented.
• Use of technical protection mechanisms such as end-to-end encryption for sensitive data in transit across borders.

The mwin5 platform is exclusively for users aged 18 and above. mwin5 does not knowingly collect, store or process any personal data from individuals under the age of 18.

All mwin5 account registration processes require age verification through strict KYC procedures. Should we find that personal data has been collected from a minor without our knowledge, immediate action will be taken to delete that data and close the account in question.

If you are aware of or have reason to believe that a minor has registered an account on mwin5, please contact our support team immediately so that appropriate remedial action can be taken without delay.

Mwin5 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable legal requirements, or improvements in the security technology we use.

For material changes — those that significantly affect how we use or protect your personal data — mwin5 will provide at least 14 days' advance notice before the changes take effect through:

• In-platform notifications when logged into your account.
• Email to the address registered to your account.
• Prominent announcements on the mwin5.org homepage.

Your continued use of the mwin5 platform after any policy amendment takes effect constitutes your acceptance of the updated Privacy Policy. The "Updated" date displayed at the top of this page indicates when this Policy was last revised.

If you have any questions, concerns or complaints regarding how mwin5 handles your personal data, or to exercise any of your data rights set out in this Policy, the mwin5 privacy team is ready to assist you.

You can reach us through the following channels:

• Official Email: [email protected] — for written inquiries requiring documentation or a formal response.
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the mwin5 platform for immediate enquiries.
• Help Centre: The FAQ section on the mwin5 platform contains answers to common questions about privacy and account security.