60Win Asia Privacy Policy – Personal Data Protection for Malaysian Users

This Privacy Policy is published by 60Win Asia ("Platform", "we", "us") and describes our privacy practices regarding the collection, use, disclosure, and protection of personal data belonging to users of our platform. This document forms part of our commitment to operating with full transparency and complying with applicable data protection laws in Malaysia.

This Privacy Policy applies to all users of the 60Win Asia platform — including those browsing our website, users who register an account, users who make deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and users who interact with any aspect of our services including Sports Betting, live casino, lottery, table games, and roulette.

If you have any questions about how we handle your personal data that are not addressed in this document, please contact our privacy team by email at support@60winasia.click. We are happy to assist in either Bahasa Melayu or English.

60Win Asia only collects data that is strictly necessary to provide the services you request. Below are the categories of data we may collect from you:

Registration and Identity Data:

• Full name as stated on your Malaysian identity document (MyKad)
• An active Malaysian phone number for OTP verification and communications
• Email address (if provided during registration)
• Date of birth to verify that you are 21 years of age or older
• Additional identity verification information requested during the KYC (Know Your Customer) process

Financial and Transaction Data:

• E-wallet account details used for deposits and withdrawals (Touch 'n Go, GrabPay, Boost, ShopeePay)
• Malaysian bank account number registered for withdrawal of winnings
• Records of all deposit and withdrawal transactions, including date, time, and amount in Malaysian Ringgit (RM)
• Betting activity records including game type, stake amounts, and outcomes

Technical and Usage Data:

• IP address of the device used to access the platform
• Device type, operating system, and web browser version
• Login records including date, time, and general location
• Platform usage data such as pages visited and session duration
• Cookies and similar tracking technologies used to enhance the user experience

Personal data you provide to 60Win Asia is used exclusively for the following purposes, all of which are directly related to operating the platform and delivering our services to you:

60Win Asia does not sell, rent, or disclose your personal data to third parties for commercial purposes. Data is only disclosed under the following limited circumstances, and always with appropriate safeguards in place:

• Payment Providers: Required transaction information is shared with payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks offering FPX (Maybank, CIMB, RHB, Public Bank), solely for the purpose of processing your transactions. All these providers are bound by strict confidentiality agreements and their own industry security standards.
• Technology Service Providers: Cloud infrastructure providers, security software vendors, and technology partners involved in operating the 60Win Asia platform have limited access to only the data necessary for their specific roles, and are bound by strict data processing agreements.
• Legal Authorities: 60Win Asia will disclose personal data to Malaysian or international authorities when required by a valid court order, official investigation request, or other binding legal obligation. We will endeavour to notify you of any such request unless prohibited from doing so by law.
• Age Verification and KYC: Your identity information may be shared with recognised third-party identity verification service providers solely for the purposes of age verification and KYC compliance.

60Win Asia retains your personal data only for as long as necessary for the purposes described in this Privacy Policy, or as required by Malaysian law. Below are general guidelines on our data retention periods:

• Active account data (name, phone number, login credentials) is retained for the duration your account remains active, plus an additional 5 years after account closure in accordance with legal requirements
• Financial transaction records including deposits and withdrawals in MYR are retained for a minimum of 7 years in accordance with tax and anti-money laundering legal requirements
• Technical logs and access records are retained for a maximum of 12 months for security and investigation purposes
• Customer support communication records are retained for 2 years for reference and service improvement purposes
• Once the relevant retention period has elapsed, data is securely deleted or anonymised using methods that prevent recovery

All data is stored on servers protected by strict access controls, data at rest encryption, and 24/7 security monitoring. Access to users' personal data is restricted to 60Win Asia staff who require it solely for their job responsibilities.

The 60Win Asia platform uses cookies and similar technologies to enhance the user experience and ensure the platform operates correctly. Below is an explanation of the types of cookies we use:

• Essential Cookies: Required for core platform functionality, including maintaining your login session, processing transactions securely, and ensuring security features work as intended. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects aggregated, non-identifiable information on how users interact with the platform — helping us identify areas for improvement and ensure the platform runs smoothly across different devices.
• Functional Cookies: Remembering your preferences — such as language settings, limits you have set, and display preferences — so the platform can deliver a more personalised experience without you having to reconfigure your settings each time.

You can manage cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality of the 60Win Asia platform. We do not use third-party cookies for advertising or marketing purposes.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding the personal data held by 60Win Asia:

To exercise any of the rights above, please contact our privacy team by email at support@60winasia.click, stating the type of request and the relevant account details. 60Win Asia will process your request within 30 business days of receipt, in accordance with Malaysia's PDPA 2010 requirements.

60Win Asia continually invests in security infrastructure to keep your personal data safe. Our technical and organisational security measures include:

• 256-bit SSL encryption covers all communications between your device and 60Win Asia servers — ensuring no third party can intercept your data in transit
• Data at rest encryption for all sensitive data stored on our servers, including passwords stored in an unreadable hashed format
• Multi-layered access controls based on the principle of least privilege — only staff who need to do so have access to users' personal data
• Two-factor authentication (2FA) for all 60Win Asia staff accounts with access to systems containing user data
• Continuous 24/7 security monitoring and intrusion detection
• Regular penetration testing by independent cybersecurity experts to identify and remediate vulnerabilities before they can be exploited
• A clear incident response procedure — in the event of a data breach, affected users will be notified within the timeframe stipulated by the PDPA

The 60Win Asia platform is strictly for individuals aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. Every new account registration goes through a rigorous age verification process to ensure compliance.

If we discover that data has been collected from a user under the age of 21 without proper verification, we will take immediate steps to delete that data and close the relevant account. If you believe we may hold information about someone who is not eligible to use the platform, please contact us immediately at support@60winasia.click.

60Win Asia reserves the right to amend, update, or revise this Privacy Policy from time to time to reflect changes in our privacy practices, updates to data protection legislation, or changes to the services we offer. The date of the most recent update is always displayed at the top of this document.

For material changes — that is, changes that significantly affect how we handle your personal data — 60Win Asia will endeavour to notify you via an in-platform notice or an email to your registered address before the changes take effect. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy.