Privacy Policy

1. Who We Are

kasiwin ("kasiwin", "we", "our", "us") operates the online casino and sports betting platform accessible at kasiwin.club, including all subdomains, mobile web versions, and associated services (collectively, the "Platform"). kasiwin acts as the data controller in respect of all personal data collected through the Platform.

This Privacy Policy applies to all visitors, registered users, and players of the kasiwin Platform. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Data We Collect

kasiwin collects personal data through a variety of means, including account registration, identity verification, platform usage, and customer support interactions. The categories of personal data we collect include:

2.1 Registration & Account Data

• Full legal name, date of birth, and gender
• Email address and contact telephone number
• Username and hashed account password
• Residential address (including postcode and state within Malaysia)
• Preferred currency and language settings

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., MyKad, passport)
• Proof of residential address (e.g., utility bill, bank statement dated within three months)
• Documentation evidencing ownership of payment methods used for deposits
• Selfie or liveness check images where required by our KYC process

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts and timestamps
• Payment method details (e.g., last four digits of card, e-wallet account reference — never full card numbers)
• Bonus and promotion redemption history
• Account balance history

2.4 Gaming & Betting Activity Data

• Bet placement, settlement, and history records across all product types (Casino, Slots, Sportsbook)
• Game session data including session duration, stake levels, and outcomes
• Responsible gaming tool settings and usage (deposit limits, self-exclusion elections)

2.5 Technical & Usage Data

• IP address, device type, operating system, and browser version
• Login timestamps, session duration, and navigation patterns within the Platform
• Geolocation data (country and region level, derived from IP address)
• Cookie identifiers and session tokens (see Section 6)

2.6 Communications Data

• Content of customer support interactions (live chat, email, and ticket submissions)
• Survey responses and voluntary feedback submitted through the Platform

3. How We Use Your Data

kasiwin uses the personal data it collects for the following purposes:

Purpose	Data Categories Used
Account creation, authentication, and management	Registration data, technical data
Identity verification and KYC compliance	KYC data, registration data, financial data
Processing deposits, withdrawals, and bonus credits	Financial data, registration data
Providing and improving gaming and betting services	Gaming data, technical data, usage data
Fraud detection, anti-money laundering, and security monitoring	All categories as necessary
Responsible gaming monitoring and intervention	Gaming data, account data
Responding to customer support requests	Communications data, account data
Sending service notifications and transactional emails	Registration data (email)
Sending promotional communications (where consented)	Registration data, gaming preferences
Regulatory reporting and legal compliance	All categories as required by law
Platform analytics and performance optimisation	Technical data, anonymised usage data

kasiwin will not use your personal data for any purpose incompatible with those listed above without first obtaining your consent or identifying a separate lawful basis for processing.

4. Legal Basis for Processing

kasiwin processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and kasiwin (i.e., to operate your account, process transactions, and deliver gaming services).
• Legal obligation: Processing required to comply with applicable law, including KYC, anti-money laundering regulations, and gaming authority requirements.
• Legitimate interests: Processing carried out for kasiwin's legitimate business interests, including fraud prevention, platform security, and improving services, where such interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, in particular for the sending of marketing and promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

kasiwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data with third parties only in the following circumstances and to the minimum extent necessary:

• KYC and identity verification providers: Specialist third-party services used to verify identity documents and conduct fraud screening as part of our regulatory obligations.
• Payment processors: Financial institutions and e-wallet operators (including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank processors) required to facilitate deposits and withdrawals.
• Game software providers: Licensed game studios and RNG technology providers whose games are integrated into the kasiwin Platform. These providers may receive anonymised session data for game performance monitoring.
• Platform infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on kasiwin's behalf under contractual data processing agreements.
• Regulatory and law enforcement authorities: Where kasiwin is required or permitted by law to disclose personal data to regulatory bodies, gaming authorities, financial intelligence units, or law enforcement agencies.
• Professional advisers: Legal, accounting, and compliance advisers acting under confidentiality obligations where access to personal data is necessary for the provision of professional services to kasiwin.

All third parties with whom kasiwin shares personal data are required to implement appropriate technical and organisational measures to protect the data and to process it only in accordance with kasiwin's instructions and applicable data protection law.

6. Cookies & Tracking Technologies

kasiwin uses cookies and similar tracking technologies to operate the Platform effectively. The types of cookies we use are as follows:

Cookie Type	Purpose	Duration
Strictly Necessary	Session authentication, login state, CSRF protection, load balancing. Cannot be disabled without breaking core Platform functionality.	Session
Functional	Remembering your language preference, display settings, and responsible gaming tool configurations.	Up to 12 months
Analytics	Anonymised aggregate usage statistics to understand how players navigate the Platform and identify areas for improvement. No personally identifiable information is included.	Up to 13 months

kasiwin does not use advertising or tracking cookies placed by third-party ad networks. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform.

7. Data Retention

kasiwin retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. Specific retention periods include:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulatory requirements.
• Transaction records: Retained for a minimum of seven (7) years for financial compliance and audit purposes.
• Gaming activity records: Retained for a minimum of five (5) years following the last recorded activity.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained for the duration of the consent and for three (3) years thereafter as evidence of consent.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised, aggregated data that cannot be used to identify you may be retained indefinitely for statistical and research purposes.

8. Data Security

kasiwin implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and kasiwin's servers.
• Encryption of sensitive data at rest using AES-256 or equivalent standards.
• Bcrypt hashing of account passwords — kasiwin does not store plaintext passwords.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need.
• Incident response procedures for detecting, reporting, and addressing data security incidents in a timely manner.

While kasiwin takes all reasonable steps to protect your data, no internet transmission is completely secure. You are responsible for maintaining the security of your own account credentials and for notifying kasiwin promptly of any suspected unauthorised access.

9. Your Rights

Subject to applicable law and regulatory obligations, you have the following rights in respect of your personal data held by kasiwin:

• Right of access: You may request a copy of the personal data kasiwin holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction: You may request that kasiwin restrict processing of your data in certain circumstances (e.g., while the accuracy of data is being contested).
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to kasiwin.
• Right to object: You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact kasiwin's data protection team at [email protected] with your request. kasiwin will respond within 30 days. We may request identity verification before processing your request.

10. Children & Minors

The kasiwin Platform is strictly intended for individuals aged 21 years or older. kasiwin does not knowingly collect personal data from persons under the age of 21. Where kasiwin discovers or reasonably suspects that an account is held by a person under 21, the account will be immediately suspended, all data relating to the underage account will be deleted (save where retention is required for regulatory purposes), and the matter will be escalated in accordance with kasiwin's responsible gaming and compliance protocols.

If you are a parent or guardian and believe that a minor has registered an account on kasiwin, please contact [email protected] immediately.

11. International Data Transfers

kasiwin's primary servers and operational infrastructure are designed to serve the Southeast Asian market. In certain circumstances, personal data may be processed by kasiwin's service providers in jurisdictions outside Malaysia. Where such transfers occur, kasiwin ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements incorporating standard data protection clauses binding the recipient to obligations equivalent to those applicable in the originating jurisdiction.
• Assessment of the adequacy of data protection frameworks in the destination jurisdiction prior to transfer.
• Technical and organisational measures applied at the destination equivalent to those applied by kasiwin within Malaysia.

12. Changes to This Privacy Policy

kasiwin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform functionality. The "Last updated" date at the top of this page will be revised accordingly. Where changes are material, kasiwin will notify registered users via email to the address held on file and/or by a prominent notice on the Platform. Your continued use of the kasiwin Platform following publication of an updated Privacy Policy constitutes acceptance of the revised version.

We encourage you to review this Privacy Policy periodically to stay informed about how kasiwin protects your data.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or kasiwin's data practices, please contact us:

• Data Protection Enquiries: [email protected]
• Subject Line: Please include "Privacy Request" or "Data Protection" in your email subject line for prompt routing.
• Response Time: kasiwin targets a response within 30 days for formal data subject rights requests and within 5 business days for general privacy enquiries.

For responsible gaming assistance, please visit the Responsible Gaming section of the Platform.