Privacy Policy krwin – Data Protection Malaysia Members

1Introduction

Welcome to the krwin Privacy Policy. This document is part of our commitment to being fully transparent with you about how we handle the information you entrust to us.

Krwin ("we", "Platform") is the data controller responsible for personal data collected through the krwin.plus website and all related services. This policy applies to all users of our platform, including website visitors and registered members.

By using krwin's services, you acknowledge that you have read and understood this policy. If you do not agree with any part of this policy, please discontinue use of our platform.

2Personal Data We Collect

Depending on how you use the krwin platform, we may collect various types of personal data. Below is an overview of the data we collect:

We only collect data that is strictly necessary for the purposes stated in this policy. We do not collect sensitive data categories such as medical information, political views, or religious beliefs.

3How We Collect Data

Your personal data is collected through several methods:

• Directly from you — during account registration, the KYC process, deposits, customer support inquiries, and other interactions with the platform.
• Automatically — through cookie technology, server logs, and analytics tools when you browse or use the krwin platform.
• From third parties — payment providers that supply transaction verification, and identity verification service providers for KYC purposes.

4Purpose of Personal Data Use

Krwin uses your personal data for the following legitimate purposes:

• Provide and manage your member account and process financial transactions securely.
• Conduct identity verification (KYC) processes as required by anti-money laundering regulations.
• Communicate with you regarding your account, transactions, promotions, and platform updates.
• Improve the quality and security of the platform based on usage patterns and feedback.
• Detect, prevent and investigate fraud, misuse, or any suspicious activity.
• Comply with legal obligations and requirements of relevant regulatory authorities.
• Personalise your experience on the platform based on your preferences and gaming patterns.

We will not use your personal data for any other purpose without obtaining your consent first, except as required by law.

5Data Sharing with Third Parties

Krwin does not sell your personal data. However, we may share your data with certain parties in the following circumstances:

• Service providers — payment providers, identity verification companies, and technology service providers that help us operate the platform. All such parties are bound by strict confidentiality agreements.
• Statutory authorities — when required by law, court order, or directive from an authority with valid jurisdiction.
• Business transfer — in the event of any merger, acquisition, or asset sale, user data may be transferred as part of that transaction with appropriate safeguards.

6Data Security Measures

We employ a range of technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL encryption for all data transmitted over the internet.
• Passwords are stored using strong hashing algorithms — even we cannot read your password.
• Two-factor authentication (2FA) is available and recommended for all member accounts.
• Continuous security monitoring and periodic penetration testing by independent security experts.
• Strict internal access controls — only staff who require access to perform their duties may view user data.
• Documented incident response procedures to address any security breaches quickly and effectively.

While we take all reasonable precautions, no security system is entirely perfect. We encourage you to also take appropriate steps to protect your account, such as using a strong password and not sharing your login credentials with anyone.

7Cookies and Tracking Technologies

Krwin uses cookies and similar technologies to enhance your experience on our platform. Cookies are small files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies — required for core platform functions such as login and session security. These cookies cannot be disabled.
• Performance cookies — help us understand how users interact with the platform so we can improve it.
• Functional cookies — allow the platform to remember your preferences such as language and display settings.

You can manage and delete cookies through your web browser settings. Please note that disabling certain cookies may affect platform functionality.

8Your Rights as a Data Subject

As a krwin platform user, you have the following rights regarding your personal data:

• Right of access — you have the right to obtain a copy of the personal data we hold about you.
• Right to rectification — you have the right to request that we correct any inaccurate or incomplete data.
• Right to erasure — under certain circumstances, you have the right to request that we delete your personal data.
• Right to restrict processing — you have the right to request that we restrict the processing of your data in certain situations.
• Right to data portability — you have the right to receive data you have provided to us in a structured, machine-readable format.
• Right to object — you have the right to object to the processing of your data for direct marketing purposes at any time.

9Data Retention Period

Krwin retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable law.

In general:

• Active account data is retained for as long as your account remains active or as long as necessary to provide services to you.
• Financial transaction records are retained for a minimum of 7 years in accordance with applicable anti-money laundering legislation.
• After account termination, your personal data will be deleted or anonymised within a reasonable period, unless there is a legal requirement to retain it for longer.

10Children's Privacy

The krwin platform is intended for individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If you believe a minor has registered for or is using our platform, please contact us immediately so we can take the appropriate action.

11Changes to the Privacy Policy

Krwin reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or technological developments.

When we make significant changes:

• We will update the "Updated" date at the top of this document.
• Notifications will be sent via email to the address registered to your account.
• For highly material changes, we may request your renewed consent.

We encourage you to review this Privacy Policy periodically. Continued use of the platform after changes are published will be considered acceptance of the updated policy.

12Contact Us About Privacy

If you have any questions, concerns, or complaints regarding our Privacy Policy or how we handle your personal data, you are welcome to reach out to us:

• Live chat — available on the krwin platform 24 hours a day, 7 days a week for fast responses.
• Email — [email protected] for inquiries that require more detailed processing.
• FAQ — visit the Our FAQ for answers to frequently asked questions about privacy and security.