gdwin28 Privacy Policy

1 Introduction

1.1 This Privacy Policy applies to all personal data collected and processed by gdwin28 in connection with the gdwin28.club online gaming platform, including its website, account management system, and all related services offered to registered players.

1.2 gdwin28 is committed to protecting the privacy and security of personal data in accordance with applicable data protection legislation and the standards expected under the platform's international gaming licensing framework.

1.3 This Policy should be read alongside the gdwin28 Terms & Conditions and Responsible Gaming Policy. Together, these documents govern your relationship with the gdwin28 platform.

1.4 We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of the gdwin28 platform following any update constitutes acceptance of the revised Policy.

2 Data Controller

2.1 gdwin28 acts as the data controller in respect of personal data collected through the gdwin28.club platform. As data controller, gdwin28 determines the purposes and means of processing your personal data.

2.2 Where gdwin28 engages third-party service providers to process personal data on its behalf (for example, payment processors or KYC verification services), those parties act as data processors under contractual obligations consistent with the requirements of this Privacy Policy.

2.3 For all privacy-related enquiries, data subject rights requests, or complaints, you may contact the gdwin28 data protection team via the contact details provided in Section 15 of this Policy.

3 Personal Data We Collect

gdwin28 collects personal data in the following categories:

3.1 Registration & Identity Data

• Full legal name, date of birth, and nationality;
• Residential address (including city and postcode — for Malaysian players, this may include Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, or other locations);
• Email address and mobile phone number;
• Username and encrypted password;
• Government-issued identification documents submitted during KYC verification (MyKad, passport, or equivalent).

3.2 Financial & Transaction Data

• Payment method identifiers (e-wallet account references, bank account numbers, or crypto wallet addresses — but not full card numbers in unencrypted form);
• Deposit and withdrawal transaction history, including amounts, dates, and payment method used;
• Betting and gaming activity records, including bets placed, game rounds played, and win/loss records.

3.3 Technical & Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session duration, pages visited, and interaction logs;
• Cookie identifiers and similar tracking technologies (see Section 9).

3.4 Communications Data

• Records of communications between you and the gdwin28 customer support team, including live chat transcripts and email correspondence;
• Survey responses and promotional communications interactions (where applicable).

4 How We Use Your Personal Data

gdwin28 uses personal data for the following purposes:

• Account management: Creating, verifying, maintaining, and closing player accounts on the gdwin28 platform;
• Service delivery: Processing deposits and withdrawals, recording betting and gaming activity, and providing access to all gdwin28 products;
• Identity verification & KYC: Verifying your identity and age (21+) as required by gdwin28's operating standards and applicable regulations;
• Fraud prevention & AML: Detecting, investigating, and preventing fraudulent activity, money laundering, and other illegal conduct;
• Responsible gaming: Monitoring gaming behaviour, implementing player-requested limits, managing self-exclusion requests, and identifying potential indicators of problem gambling;
• Customer support: Responding to your queries, resolving disputes, and providing technical assistance;
• Legal compliance: Meeting obligations under applicable law, responding to lawful regulatory or law enforcement requests, and maintaining required records;
• Platform improvement: Analysing aggregated usage data to improve platform performance, product offerings, and user experience;
• Marketing communications: Sending promotional emails or in-platform messages about offers and updates, where you have not opted out of such communications.

gdwin28 does not use automated decision-making processes that produce legal or similarly significant effects on players, except where such processes are used as part of AML screening or fraud detection and are subject to human review.

5 Legal Basis for Processing

gdwin28 processes personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil our contractual obligations to you as a registered gdwin28 player — including account management, payment processing, and service delivery;
• Legal obligation: Processing necessary to comply with applicable laws, including AML, KYC, and gaming regulatory requirements;
• Legitimate interests: Processing necessary for fraud prevention, platform security, and the responsible operation of an online gaming business, where those interests are not overridden by your privacy rights;
• Consent: Where consent is the applicable basis (for example, certain marketing communications), you may withdraw consent at any time by contacting support or using the opt-out mechanism in any marketing communication.

6 Data Sharing & Disclosure

6.1 gdwin28 does not sell, rent, or trade personal data to third parties for commercial or marketing purposes.

6.2 Personal data may be shared with the following categories of recipients, only to the extent necessary for the stated purpose:

• Payment processors and e-wallet providers: Including but not limited to Touch n Go eWallet, Boost, GrabPay, and FPX banking partners, for the purpose of processing deposits and withdrawals;
• KYC and identity verification services: Third-party providers engaged to verify identity documents and screen against regulatory watch-lists;
• Game providers and technology partners: Live casino studios, slot providers, and platform technology suppliers who operate components of the gdwin28 service under data processing agreements;
• Regulatory and law enforcement authorities: Where disclosure is required by applicable law, court order, or regulatory obligation;
• Professional advisers: Legal, audit, and compliance advisers engaged by gdwin28, bound by appropriate confidentiality obligations.

6.3 All third-party processors engaged by gdwin28 are required to process personal data only in accordance with gdwin28's instructions and in a manner consistent with this Privacy Policy.

7 Data Retention

7.1 gdwin28 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your account relationship with the platform.

7.2 Following account closure, gdwin28 is required to retain certain categories of personal data — including identity verification records and transaction history — for a minimum period mandated by applicable AML and gaming regulatory requirements. This retention period is typically five (5) years from the date of account closure, though longer periods may apply in specific circumstances.

7.3 Data retained solely for marketing purposes will be deleted or anonymised within twelve (12) months of your last active engagement with gdwin28 marketing communications, or upon receipt of an opt-out request.

8 Security Measures

8.1 gdwin28 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the gdwin28 platform;
• Encryption of sensitive data fields at rest, including payment identifiers and identity document references;
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a legitimate business need;
• Periodic security audits and vulnerability assessments of the platform infrastructure;
• Two-factor authentication (2FA) available to players wishing to add an extra layer of protection to their gdwin28 accounts.

8.2 While gdwin28 takes reasonable steps to protect personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your own account credentials.

8.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, gdwin28 will notify affected individuals and, where required, relevant regulatory authorities in accordance with applicable law.

9 Cookies and Similar Technologies

9.1 The gdwin28 platform uses cookies and similar tracking technologies to operate correctly and to improve your experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function, including session management, authentication tokens, and security features. These cookies cannot be disabled.
• Functional cookies: Enable the platform to remember your preferences, such as language settings and display preferences.
• Analytics cookies: Used on an aggregated, anonymised basis to measure platform traffic, identify popular features, and guide product improvements.

9.2 gdwin28 does not deploy advertising cookies, retargeting cookies, or third-party cookies that track your activity across websites other than gdwin28.club.

9.3 You may configure your browser to refuse cookies; however, disabling strictly necessary cookies may impair your ability to use the gdwin28 platform.

10 Children's Privacy

10.1 The gdwin28 platform is strictly intended for adults aged 21 years and above. gdwin28 does not knowingly collect personal data from persons under the age of 21.

10.2 If gdwin28 becomes aware that an account has been registered by or on behalf of a person under the age of 21, that account will be immediately closed, all personal data associated with the account will be deleted (subject to any mandatory legal retention requirements), and any funds on account will be returned to the verified payment source.

10.3 If you believe that a minor has registered on the gdwin28 platform, please contact our support team immediately.

11 Your Privacy Rights

11.1 Depending on applicable data protection law, you may have the following rights in respect of your personal data held by gdwin28:

• Right of access: The right to request a copy of the personal data gdwin28 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to gdwin28's legal retention obligations;
• Right to restriction: The right to request that processing of your personal data be restricted in certain circumstances;
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract;
• Right to object: The right to object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

11.2 To exercise any of these rights, please contact the gdwin28 support team. We will respond to your request within a reasonable timeframe and in any event within the period required by applicable law. We may need to verify your identity before processing certain requests.

11.3 Where we are unable to comply with a request — for example, where retention is required by law — we will explain the reason for that limitation.

12 International Data Transfers

12.1 In connection with the operation of the gdwin28 platform, personal data may be transferred to and processed in countries outside of Malaysia. Such transfers may occur in connection with the use of internationally operating game providers, KYC services, or technology infrastructure partners.

12.2 Where personal data is transferred outside Malaysia, gdwin28 takes steps to ensure that appropriate safeguards are in place to protect the data, including contractual protections with recipient parties consistent with applicable data protection requirements.

13 Third-Party Links

13.1 The gdwin28 platform may contain links to third-party websites or services, including those of licensed game providers. This Privacy Policy applies solely to the gdwin28.club platform. gdwin28 is not responsible for the privacy practices of any third-party websites, and we encourage you to review the privacy policies of any third-party sites you visit.

14 Changes to This Privacy Policy

14.1 gdwin28 reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players via the email address associated with their account or by a prominent notice on the platform.

14.2 The current version of this Privacy Policy is always accessible at gdwin28.club/privacy-policy. The "Last Updated" date at the top of this page indicates when the most recent revision was published.

14.3 Your continued use of the gdwin28 platform after the publication of any revised Privacy Policy constitutes your acknowledgement and acceptance of the changes.

15 Contact Us

For privacy-related enquiries, data subject rights requests, or to raise a concern about how gdwin28 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the gdwin28 platform
• Email: [email protected]

The email address above is provided as plain text. Please copy it manually into your email client to contact us.