Privacy Policy

1 Introduction

This Privacy Policy (hereinafter referred to as "Policy" or "Privacy Policy") issued by SyokWin (hereinafter referred to as "SyokWin", "we", "us", or "our") and applies to all personal data collected, processed, stored, or transferred in connection with the operation of the website located at syokwin.cam and all associated services, features, and products (collectively, the "Platform").

SyokWin is a Malaysia-focused online casino and sports betting platform serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and the broader Malaysian market. We are committed to handling personal data responsibly, transparently, and in compliance with applicable data protection principles, including those reflected in Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards.

By accessing the SyokWin Platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree to this Policy, please do not use the SyokWin Platform.

2 Definitions

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person ("Data Subject"), including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" means SyokWin, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of SyokWin, such as payment service providers and KYC verification partners.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data.
• "Cookies" means small text files placed on your device by the Platform to store preference information and facilitate session management.
• "KYC" (Know Your Customer) means the identity verification process through which users must submit government-issued identification documents.
• "PDPA" refers to Malaysia's Personal Data Protection Act 2010, which regulates the processing of personal data in commercial transactions in Malaysia.

3 Personal Data We Collect

SyokWin collects personal data through several channels: directly from you when you register or use the Platform, automatically through your use of the Platform, and from third-party sources such as payment processors and identity verification partners. The categories of personal data we collect are set out below.

3.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification purposes —21+ requirement);
• Malaysian identification number (MyKad number) or passport number;
• Email address and mobile telephone number;
• Residential address (city, postcode, state — e.g., Kuala Lumpur, Selangor, Penang);
• Username and encrypted password.

3.2 Financial and Payment Data

• Bank account details (for withdrawals via Maybank, CIMB, Public Bank, Hong Leong, or other FPX-linked banks);
• E-wallet identifiers (for Touch 'n Go eWallet, Boost, GrabPay, DuitNow);
• Cryptocurrency wallet addresses (for USDT TRC20 transactions);
• Transaction history, including deposit amounts, withdrawal requests, and timestamps;
• Source-of-funds documentation where requested for anti-money laundering compliance.

3.3 KYC and Verification Data

• Copies of government-issued identity documents (MyKad, passport);
• Selfie photographs submitted during the KYC process;
• Proof-address documentation where applicable.

3.4 Platform Usage and Technical Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session duration and login timestamps;
• Game history, betting activity, and wagering patterns;
• Customer support interaction records, including live chat transcripts.

4 How We Use Your Personal Data

SyokWin processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your SyokWin account, including processing your login credentials and account preferences;
• Identity and Age Verification: Verifying that you are who you claim to be and that you meet the 21+ age requirement applicable to all users of the Platform;
• Payment Processing: Facilitating deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency, and processing withdrawal requests to your nominated payment method;
• Regulatory Compliance: Meeting our anti-money laundering (AML) obligations, responsible gambling requirements, and any other regulatory duties applicable to the operation of an online gaming platform;
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent transactions, account takeovers, bonus abuse, and other prohibited activities;
• Platform Operation and Improvement: Analysing usage patterns to improve platform performance, game offerings, and the overall user experience for Malaysian players;
• Customer Support: Responding to your queries, resolving disputes, and providing assistance via live chat and email;
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — but only where you have not opted out of such communications;
• Responsible Gambling Monitoring: Identifying indicators of problem gambling behaviour and making responsible gambling tools available in accordance with our obligations and commitment to player welfare.

5 Data Sharing & Third Parties

SyokWin does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your personal data with third parties in the following circumstances and for the following purposes:

5.1 Service Providers (Data Processors)

We engage third-party service providers to perform specific functions on our behalf. These providers act as Data Processors under instruction from SyokWin and are contractually obligated to process your data securely and only for the specified purpose. Categories of such providers include:

• Payment processing partners — to facilitate deposits and withdrawals via Malaysian payment methods including Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, and FPX;
• KYC and identity verification providers — to verify the authenticity of identity documents submitted during account verification;
• Game content providers — who may process limited technical and gameplay data for game integrity and dispute resolution purposes;
• Fraud detection and cybersecurity services — for real-time monitoring and threat prevention;
• Cloud hosting and infrastructure providers — who store platform data on secured servers.

5.2 Legal and Regulatory Disclosure

SyokWin may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where we are legally required or permitted to do so — for example, in response to a valid court order, to comply with anti-money laundering legislation, or to report suspected criminal activity.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of SyokWin or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that may result.

6 Data Retention

SyokWin retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, having regard to regulatory and legal retention obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and record-keeping obligations;
• Financial transaction records: Retained for a minimum of seven (7) years following the transaction date, in accordance with applicable financial record-keeping requirements;
• KYC documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later;
• Customer support records: Retained for three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes;
• Technical and usage data: Retained for a rolling period of up to 24 months, unless retained longer for security investigation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with SyokWin's data lifecycle management procedures.

7 Cookies & Tracking Technologies

SyokWin uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. They help us recognise your device, maintain your session, and understand how the Platform is being used.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for core Platform functionality, including session management and security features. These cannot be disabled without affecting Platform operation.
• Performance and Analytics Cookies: Collect aggregate information about how players interact with the Platform, used to identify and fix technical issues and improve the user experience.
• Functionality Cookies: Remember your preferences such as language settings, game display options, and notification preferences.
• Marketing Cookies: Used to deliver promotional content and track the effectiveness of marketing campaigns. These are non-essential and can be managed through your browser settings.

7.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please be aware that disabling certain cookies may affect the functionality of the Platform. Instructions for managing cookies vary by browser; consult your browser's help documentation for specific guidance.

8 Data Security

SyokWin implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, accidental loss, and destruction. Our security framework includes:

• Encryption: All data transmitted between your device and the Platform is protected by TLS 1.3 (Transport Layer Security). Personal data at rest is encrypted using AES-256 encryption;
• Access Controls: Strict role-based access controls limit access to personal data to authorised personnel only, on a need-to-know basis;
• Two-Factor Authentication: 2FA is available for all user accounts and is strongly recommended. Internal system access for SyokWin staff requires mandatory 2FA;
• Regular Security Audits: The Platform undergoes regular independent penetration testing and vulnerability assessments;
• Incident Response: SyokWin maintains a documented data breach response procedure. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify affected users as required by applicable law.

While SyokWin implements industry-standard security measures, no system is completely immune to risk. You also play an important role in keeping your data secure — by using a strong, unique password, enabling 2FA, and never sharing your login credentials with third parties.

9 Your Data Rights

As a user of the SyokWin Platform and a resident of Malaysia, you hold certain rights in respect of your personal data. SyokWin is committed to facilitating the exercise of these rights in a timely and straightforward manner.

9.1 Right of Access

You have the right to request a copy of the personal data SyokWin holds about you. We will provide this information in a structured, commonly used format within 21 days of a valid access request, unless an extension is required for complex requests.

9.2 Right to Correction

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Many basic details — such as your contact email or phone number — can be updated directly in your Account Settings. For corrections to KYC-verified data, please contact our support team.

9.3 Right to Erasure

You may request the deletion of your personal data where: the data is no longer necessary for the purposes it was collected; you withdraw consent and there is no other lawful basis for processing; or the data has been unlawfully processed. Note that we may be unable to delete data where we are required to retain it under applicable law (e.g., AML record-keeping obligations).

9.4 Right to Restrict Processing

You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified or a processing objection is being assessed.

9.5 Right to Withdraw Consent

Where processing is based on your consent (for example, marketing communications or non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.