This Privacy Policy explains how mwin8 collects, uses, stores, shares, and protects your personal data when you access and use our online casino and sports betting platform. We are committed to handling your information responsibly and in accordance with internationally recognised data protection principles. Please read this Policy carefully before registering.
All data transmitted between your device and mwin8 is encrypted using industry-standard 256-bit SSL/TLS protocols. Your personal information and financial details are protected at every point of transfer.
mwin8 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your information is used solely to provide and improve the services you have requested.
We collect only the personal data that is necessary to operate your account, process transactions, and comply with our regulatory obligations. We do not collect data beyond what is required for these stated purposes.
You have the right to access, correct, restrict, or request deletion of your personal data held by mwin8, subject to our legal retention obligations. Requests are processed within 30 days.
This Policy sets out clearly what data we collect, why we collect it, how long we retain it, and with whom it may be shared. We do not engage in opaque or hidden data processing activities.
Payment data, including FPX transaction references, DuitNow records, and e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), is processed through PCI-DSS compliant payment gateways. mwin8 does not store full card numbers or full payment credentials.
mwin8 ("we", "us", "our", "the Operator", "the Platform") operates the online casino and sports betting services available at mwin8.cam. This Privacy Policy ("Policy") describes our practices with respect to the personal data we collect from registered players, platform visitors, and prospective users ("you", "your", "the Data Subject") who interact with our website and associated services.
We recognise that data privacy is of particular concern to Malaysian users, who increasingly engage with digital financial and gaming platforms and expect those platforms to handle their data responsibly. mwin8 takes this responsibility seriously. While Malaysia's Personal Data Protection Act 2010 (PDPA) is the primary domestic framework our Malaysian users may be aware of, mwin8's data practices are additionally informed by internationally recognised data protection principles including those reflected in frameworks such as the General Data Protection Regulation (GDPR) and equivalent standards.
By registering for an account on mwin8, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data in the manner described herein. If you do not agree with this Policy, you must not register or continue to use the Platform.
Note for Malaysian Users: mwin8 processes personal data of Malaysian users in connection with its international operations. mwin8 is not regulated by the Personal Data Protection Commissioner of Malaysia as a domestic data processor, but we apply equivalent standards of care to the personal data of all users regardless of jurisdiction. For questions about your data rights, see Section 11.
For the purposes of this Policy, the following terms have the meanings set out below:
mwin8 collects the following categories of personal data from users of the Platform:
| Data Category | Specific Data Points | Mandatory? |
|---|---|---|
| Account Registration Data | Full legal name, date of birth, email address, mobile number, username, password (hashed) | Yes |
| Identity Verification (KYC) Data | Malaysian MyKad / Passport / Driver's License scan, selfie with ID, proof of address (utility bill / bank statement) | Yes (pre-withdrawal) |
| Financial & Payment Data | FPX transaction references, DuitNow transfer records, e-wallet account identifiers (Touch 'n Go, Boost, GrabPay), bank account names and last 4 digits, deposit and withdrawal history | Yes |
| Account Activity Data | Login history, game play records, betting history, wagering volumes, session durations, responsible gambling tool activations | Automatic |
| Device & Technical Data | IP address, device type, operating system, browser version, screen resolution, referral URL | Automatic |
| Communication Data | Live chat transcripts, email correspondence, support ticket content, marketing preference records | When applicable |
| Location Data | Approximate geolocation derived from IP address (country, city-level only — e.g., Kuala Lumpur, Penang, Johor Bahru). No GPS or precise location data is collected. | Automatic |
mwin8 does not collect biometric data (facial geometry, fingerprints), precise GPS location coordinates, or sensitive health-related information. Selfie photographs submitted during KYC are used solely for identity matching and are not processed for biometric identification purposes beyond that scope.
mwin8 collects personal data through the following mechanisms:
mwin8 processes your personal data for the following purposes:
mwin8 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:
mwin8 does not sell your personal data to third parties. We may share your data in the following limited and controlled circumstances:
No Commercial Data Sales: mwin8 will never sell, lease, or otherwise commercially transfer your personal data to any third party for their own independent marketing, profiling, or commercial exploitation purposes. Any sharing described above is strictly operational and subject to appropriate contractual safeguards.
mwin8 retains personal data only for as long as is necessary for the purposes for which it was collected, taking into account our legal and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of account + 5 years post-closure | Legal / Regulatory obligation |
| KYC Identity Documents | Duration of account + 5 years post-closure | AML / CTF regulatory requirement |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping obligations |
| Account Activity & Gaming Records | Duration of account + 3 years post-closure | Regulatory / Dispute resolution |
| Customer Support Communications | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Marketing Preferences | Until consent withdrawn or account closed | Consent-based |
| Technical / Log Data | 12 months | Security and fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes and does not constitute personal data.
mwin8 uses cookies and similar tracking technologies to enable Platform functionality, analyse user behaviour, and — where you have consented — deliver relevant promotional content. The following categories of cookies may be used:
You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair Platform functionality. Consent for non-essential cookies may be withdrawn at any time via your account settings or browser controls.
mwin8 does not use fingerprinting, pixel tracking, or cross-device tracking technologies that could identify you across unrelated third-party websites without your knowledge.
mwin8 operates internationally, and your personal data may be transferred to, stored on, or processed by systems located in countries other than Malaysia. Where such transfers occur, mwin8 takes appropriate steps to ensure that your data receives a standard of protection consistent with this Policy, including:
By using the mwin8 Platform, you acknowledge that your data may be processed in jurisdictions outside Malaysia. If you have concerns about any specific cross-border data transfer, please contact us using the details in Section 15.
Subject to applicable law and our legitimate processing obligations, you hold the following rights in respect of your personal data held by mwin8:
Request a copy of the personal data we hold about you, along with information about how it is being processed.
Request correction of any inaccurate or incomplete personal data held in your mwin8 account or our records.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Request that we limit processing of your data in specific circumstances, such as while the accuracy of data is being contested.
Where technically feasible, request a structured, machine-readable copy of the data you have provided to us for transfer to another service.
Object to processing carried out on the basis of our legitimate interests, including direct marketing communications, at any time without providing justification.
To exercise any of the above rights, please contact our support team using the details provided in Section 15. We will respond to all valid data subject requests within thirty (30) days. We may ask you to verify your identity before processing your request. Where a request is refused in whole or in part, we will provide written reasons.
mwin8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
Notwithstanding these measures, no internet-based service can guarantee absolute security. You play an important role in protecting your own data by maintaining strong, unique passwords for your mwin8 account and notifying us immediately if you suspect unauthorised access.
Data Breach Notification: In the event of a data breach affecting your personal data that is likely to result in a risk to your rights and freedoms, mwin8 will notify affected individuals without undue delay, and in accordance with applicable regulatory notification requirements. Notifications will be sent to the email address registered on your account.
The mwin8 Platform is strictly for individuals aged 21 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21. Where we discover that personal data has been submitted by an individual who does not meet the minimum age requirement, we will take immediate steps to delete that data and close the associated account.
If you believe that a minor has registered on the mwin8 Platform or that we have inadvertently collected personal data from an underage individual, please contact us immediately using the details in Section 15. We treat such reports as a priority.
🔞 21+ Only: mwin8 enforces a minimum age requirement of 21 years through KYC identity verification. Any account found to belong to an individual under 21 will be immediately terminated and all funds forfeited, as set out in our Terms and Conditions.
mwin8 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in our processing practices, changes in applicable law, or improvements to our services. The date of the most recent revision is indicated at the top of this document.
Where we make material changes to this Policy — particularly changes that affect your rights or the way we process sensitive data — we will provide advance notice via:
Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the amended Policy, you must stop using the Platform and may request account closure by contacting support.
For all privacy-related queries, data subject access requests, complaints, or concerns about how mwin8 handles your personal data, please contact us through the following channels:
When submitting a data subject rights request, please include your registered email address and a brief description of your request so we can identify your account and respond promptly. We aim to acknowledge all privacy requests within five (5) business days and to respond in full within thirty (30) calendar days.
Escalation: If you are dissatisfied with our response to a privacy complaint, you may have the right to escalate your concern to the relevant data protection supervisory authority in the jurisdiction applicable to your circumstances. Our support team can provide further guidance on escalation options upon request.
Our support team is available 24/7 to address any concerns about how mwin8 handles your personal data. You can also explore our FAQ for answers to common privacy and account questions.