SyokWin Privacy Policy – Protection of Your Personal Information

1Personal Information We Collect

Syokwin collects users' personal information through several different methods to ensure a smooth and secure experience. Information collected is used solely for legitimate purposes as stated in this policy.

Information you provide directly:

• Full name as shown on your identity card (MyKad) or passport.
• An active mobile number registered in your name.
• A valid and reachable email address.
• Date of birth for age verification (18 years and above).
• Bank account or e-wallet details for deposit and withdrawal purposes.
• Identity documents during the KYC verification process (MyKad, bank statements, proof of address).

Information collected automatically:

• IP address and general location data (state/city) based on your internet connection.
• Device type, operating system, and web browser version used.
• Gaming activity data including dates, times, game types, and wagering amounts.
• Your account's deposit and withdrawal transaction history.
• Cookie and session data to maintain login status and user preferences.

2How We Use Your Information

Personal information collected by syokwin is used responsibly for the following purposes only. We will not use your data for any other purpose without obtaining your consent first.

We also use your information to comply with legal obligations such as anti-money laundering (AML) reporting and identity verification requirements set by the relevant authorities.

3Sharing Information with Third Parties

Syokwin does not sell, rent, or distribute your personal information to any third party for their own marketing purposes. However, we share information with certain parties under limited and controlled circumstances as follows:

• Payment provider: Transaction details required to process your deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost.
• KYC service provider: Identity data for regulated identity verification purposes.
• Cloud infrastructure provider: Secure data storage on servers that comply with international security standards.
• Legal authorities: When required by court order, Malaysian law, or an authorised enforcement agency.
• Analytics provider: Anonymised data only for platform performance analytics.

All third parties we work with are required to comply with strict privacy policies and are not permitted to use your data for any purpose beyond what is specified in their service agreements with syokwin.

4Data Security Measures

Syokwin invests heavily in security infrastructure to ensure your personal data is always protected. The security measures we implement include:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and syokwin servers.
• Two-Factor Authentication (2FA) available for all user accounts to add an extra layer of security.
• 24/7 Monitoring by our cybersecurity team to detect and prevent unauthorised access.
• Hashed password storage using irreversible algorithms — your original password is not stored in our system.
• Network Isolation — payment systems and user data are stored in fully isolated environments.
• Regular security audits by independent third parties to identify and remediate any system vulnerabilities.

While we take all reasonable precautions, no system can be guaranteed 100% free from cyber threats. We encourage users to also take personal protective measures, such as using strong, unique passwords and avoiding login over unsecured public Wi-Fi networks.

5Use of Cookies and Tracking Technologies

Syokwin uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining login sessions and language settings. These cookies cannot be disabled.
• Performance Cookies: Collects anonymised data on how users interact with the platform to help us improve the user experience.
• Functional Cookies: Saves your preferences such as interface theme and display settings for future visits.
• Analytics Cookies: Helps us understand overall platform usage trends without identifying individual users.

You can manage your cookie settings through your web browser at any time. Disabling certain cookies may affect the functionality of some parts of the SyokWin platform. For the best experience, we recommend keeping essential cookies enabled.

6Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal information that we hold:

To exercise any of the above rights, please contact the syokwin support team via in-app live chat. We will process your request within 14 business days. Some requests may require identity verification first to ensure your account's security.

7Data Retention Period

Syokwin retains your personal information for as long as necessary to fulfil the purpose of data collection or to comply with applicable legal requirements. Our general principles are as follows:

• Active account data is retained for as long as your account remains active and for a period of 5 years after account closure.
• Financial transaction records are retained for 7 years in accordance with Malaysian financial regulatory requirements.
• Customer support communication records are retained for 3 years.
• Security and audit logs are retained for 2 years.
• Marketing data is deleted when you unsubscribe from our marketing communications.

Once the retention period expires, data will be securely deleted or anonymised so it can no longer be linked to your identity. We do not retain data longer than necessary.

8Children's Privacy

The syokwin platform is not suitable for children under 18 years of age. We do not knowingly collect any personal information from individuals under 18 years of age.

If we find that we have inadvertently collected personal information from someone under the age of 18, we will take immediate steps to delete that information from our systems and close the relevant account.

Parents and guardians who have reason to believe that a child under their care has registered an account at SyokWin are requested to contact us immediately via live chat so that appropriate action can be taken.

9Changes to This Privacy Policy

Syokwin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Every update will include the latest revision date at the top of this page.

For significant changes, we will notify users via:

• In-app notifications on syokwin while you are logged in.
• Notification emails sent to the address registered in your account.
• A prominent notice on the platform's home page.

Your continued use of the syokwin platform after any changes to this Privacy Policy are published will be considered as your acceptance of those changes. If you do not agree with the changes made, please stop using the platform and contact us to close your account.

10Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, our team is ready to assist you.

You can reach SyokWin's Data Privacy Officer through the following methods:

• Live Chat: Available 24 hours a day, 7 days a week via the syokwin app or our website.
• Email: [email protected]
• Response time: We aim to respond to all privacy enquiries within 3 business days and to resolve formal requests within 14 business days.

If you are not satisfied with our response, you have the right to file an official complaint with Malaysia's Personal Data Protection Department (JPDP) in accordance with the procedures set by that authority.