1. Home
  2. Privacy Policy
Official Privacy Policy

Privacy Policy vwin21 — How We Protect Your Personal Data

Your privacy is our priority. This document transparently explains how vwin21 collects, uses, stores, and protects the personal information of Malaysian members. We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last updated: January 2026  |  Malaysia PDPA 2010
Contents of This Privacy Policy
1 Data We Collect
2 How We Use Your Data
3 Disclosure to Third Parties
4 Data Security & Storage
5 Your Privacy Rights
6 Cookies & Tracking Technologies
7 Marketing Communications
8 Contact Our Privacy Officer

Vwin21's Six Privacy Commitments to Malaysian Members

Core principles governing how vwin21 manages each member's personal data

256-bit SSL Encryption at All Times

All data transmitted between your browser and vwin21's servers is encrypted using 256-bit SSL — the same security standard used by leading banking institutions. Your personal information and financial transactions are never transmitted in an unencrypted format.

Data Not Sold to Third Parties

Vwin21 has never and will never sell, rent or share members' personal data with any third party for their marketing purposes. Your data is only shared with service providers necessary for platform operations — and strictly to the extent required.

Your Data, Your Control

Every vwin21 member has the full right to access, correct, download, or request the deletion of their personal data at any time. Such requests are processed within 30 working days in accordance with Malaysia's Personal Data Protection Act 2010.

Minimum Data Collection

Vwin21 only collects data that is strictly necessary for platform operations, identity verification, payment processing, and legal compliance. We do not collect excessive data that is unrelated to the services you use.

Marketing Communications Opt-Out Options

You may opt out of all marketing communications from vwin21 at any time — including promotional emails, offer SMS messages and in-platform notifications. Your preferences can be updated via your account settings or by contacting our support team.

Malaysia PDPA 2010 Compliance

Vwin21's Privacy Policy is built and updated in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). We appoint an internal Data Protection Officer (DPO) who is responsible for ensuring full compliance with all applicable privacy legislation.

Table of Contents
1 Data Collected 2 Data Usage 3 Third-Party Disclosure 4 Data Security 5 Your Privacy Rights 6 Cookies & Tracking 7 Marketing 8 Contact Us
1
Personal Data We Collect
Types of information collected when you use the vwin21 platform

vwin21 collects your personal data from several different sources — primarily information you provide directly during registration, information generated automatically through your use of the platform, and in certain cases, information we receive from third-party service providers such as payment providers.

Data Category Example Information Source
Identity Data Full name, date of birth, identification card number (MyKad), gender Yourself
Contact Data Malaysian phone number, email address, residential address Yourself
Financial Data Bank account number, bank name, MYR deposit & withdrawal transaction records Yourself Payment providers
Technical Data IP address, browser type, operating system, cookie data, device ID Automatic
Activity Data Betting history, games played, account balance, bonus records Automatic
KYC Data MyKad copy, proof of address, identity verification selfie Yourself
Communication Data Live chat conversation records, support emails, filed complaints Automatic
Important Note: vwin21 does not store credit or debit card details directly. All card processing is handled by registered and licensed third-party payment gateways. For local Malaysian e-wallets such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and DuitNow, we only receive transaction confirmation information — not your full e-wallet account details.

We may also collect additional information through customer satisfaction surveys you choose to participate in, friend referral programmes, or interactions with our marketing campaigns. Participation in these activities is entirely voluntary.

2
How vwin21 Uses Your Personal Data
The legitimate purposes for which we use the information we collect

vwin21 only uses your personal data for lawful, necessary and relevant purposes in connection with the services you use. Every use of data has a clear legal basis under Malaysia's PDPA 2010.

  • Member account management — registering your account, verifying your identity, processing logins, managing account settings and maintaining your account records.
  • Financial transaction processing — processing deposits via FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and CIMB Clicks; processing withdrawal requests to your Malaysian local bank account; generating transaction records in MYR.
  • Identity verification (KYC) — to verify your age, identity and address in order to meet legal requirements and protect the platform against fraud.
  • Legal compliance — fulfil anti-money laundering (AML) obligations, report to the relevant authorities when required by law, and maintain records as mandated.
  • Platform Security — detecting and preventing fraud, unauthorised access, multiple account usage and activities that violate the terms of service.
  • Product improvement — analyzing usage patterns in aggregate (not at the individual level) to improve the platform experience, develop new features, and optimize performance.
  • Customer support — resolving complaints, responding to enquiries and providing technical assistance.
  • Marketing communications — only where you have given consent, sending information about promotions, bonuses and new offers that may be of interest to you.
Important: vwin21 does not use your personal data to make automated decisions that materially affect you without human involvement — except for standard security functions such as automated fraud detection, which is always followed by human review.
3
Data Disclosure to Third Parties
When and with whom your data may be shared

vwin21 does not sell your personal data. We may share data with selected third parties only in the following situations and only to the extent necessary.

  • Payment service providers — payment gateways and e-wallet providers (including FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay processors) for the purpose of processing deposits and withdrawals in MYR. These providers are bound by strict data confidentiality agreements.
  • Game software providers — companies providing slots and live casino games may receive the minimum technical data required to run the games properly. They do not receive your full personally identifiable information.
  • Third-party KYC services — identity verification providers that assist us in verifying MyKad and related documents. All our KYC providers comply with strict data protection standards.
  • Regulatory authorities and law enforcement — when required by Malaysian law, court order or direction from a relevant authority. vwin21 will notify you of any such disclosure where permitted by law.
  • Business transfers — in the event of a merger, acquisition or asset sale, your data may be transferred to the new entity. You will be notified in advance and will have the option to request data deletion if you do not agree.
International Data Transfers: Some of our third-party service providers may operate outside Malaysia. In such cases, vwin21 ensures a level of data protection equivalent to Malaysia's PDPA 2010 through legally binding data processing agreements before any data transfer takes place.
4
Security & Data Retention
How we protect your data and how long it is retained

vwin21 continuously invests in security infrastructure to ensure member personal data is protected at every stage — in transit, in processing and in storage.

  • Encryption in transit: SSL/TLS 256-bit encryption for all communications between your browser and vwin21's servers.
  • Encryption at rest: Sensitive data such as passwords is stored using one-way hashing algorithms that cannot be decrypted. Financial data is stored in encrypted format.
  • Internal access controls: Only staff who require access to perform specific duties are permitted to access member personal data. All access is monitored, logged and reviewed on a regular basis.
  • Regular security testing: The vwin21 platform undergoes regular penetration testing and security audits by independent third parties to identify and address vulnerabilities.
  • 24/7 Monitoring: A real-time threat detection system monitors suspicious activity and alerts our security team.

Data Retention Period

  • Active account data: Retained for the duration the account is active and for up to 7 years after account closure for legal compliance purposes.
  • Financial transaction records: Retained for 7 years in accordance with Malaysian financial and tax legislation.
  • KYC Data: Retained for 7 years after the business relationship ends.
  • Customer support records: Retained for 3 years after a case is closed.
  • Technical log data: Retained for 12 months for security and debugging purposes.
Data Breach Response: In the event of a data breach affecting your personal information, vwin21 will notify you within 72 hours of the breach being detected, in line with industry best practices. The notification will include details of the breach, the data potentially affected, and the steps taken to address the situation.
5
Your Privacy Rights as a vwin21 Member
Your rights under Malaysia's PDPA 2010

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our privacy policy vwin21, you have the following rights regarding your personal data.

Right of Access

You have the right to request a copy of all personal data we hold about you. Such requests are processed within 21 business days.

Right to Rectification

You have the right to request the correction of inaccurate or incomplete data. Contact support or update it directly in your account profile.

Right to Erasure

You may request the deletion of your personal data. Such requests are subject to our legal obligations to retain certain records for specified periods.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, without needing to provide any reason.

Data Portability Rights

You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.

Right to Restrict Processing

In certain situations, you may request that we restrict how we process your data — for example, while a dispute over data accuracy is under investigation.

To exercise any of the rights above, please contact our Data Protection Officer at privacy@vwin21.best or via our 24/7 live chat support. Please include your registered full name and account number to help us process your request faster.

Privacy Request Response Times
vwin21 will acknowledge receipt of all privacy requests within 3 business days and resolve requests within 21 business days. If a request requires more time (for example, in complex cases), we will notify you within that 21-day period and provide a revised estimated resolution time.
6
Cookies & Tracking Technologies
How vwin21 uses cookies and platform analytics tools

vwin21 uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance user experience and analyse usage patterns in aggregate. Below are the types of cookies we use.

Mandatory
Session Cookies
Required for login session management, account security and core platform functionality. These cookies cannot be disabled — without them, the platform will not function properly. They do not contain any personally identifiable information.
Mandatory
Security Cookies
Used for CSRF verification, replay attack prevention and suspicious activity detection. A critical component of the vwin21 platform's security system.
Optional
Preference Cookies
Stores your preferences such as language, display settings, favourite games, and betting preferences. This helps us deliver a more personalised experience on your next visit.
Optional
Analytics Cookies
Collects information about how you use the platform in aggregate — pages visited, session duration, buttons clicked. This helps us understand and improve the user experience. This data is not linked to your individual identity.
Rejectable
Performance Cookies
Monitors platform performance, page load times and technical errors for debugging and optimisation purposes. Data is collected in aggregate form and is not linked to individual users.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the vwin21 platform. For guidance on managing cookies in a specific browser, refer to your browser's help documentation.

Mobile Browser Note: Over 85% of vwin21 users access the platform via smartphone. Cookie settings for mobile browsers (Chrome for Android, Safari for iOS) are typically found under Settings > Privacy > Cookies. The exact steps vary by device model and operating system version.
7
Marketing Communications & Unsubscribe Options
How vwin21 communicates with you and how to manage your preferences

vwin21 may send you marketing communications — including information about new promotions, bonus offers, upcoming sporting events and platform updates — through the following channels, depending on the preferences you provided at registration.

  • Promotional emails — information about bonuses, the latest promotions, and exclusive offers for members.
  • SMS notifications — important updates on limited-time offers, transaction confirmations and security alerts.
  • In-platform notifications — personalised offers, betting reminders and new feature updates displayed when you are logged in.
  • Telegram — for members who have opted in to receive updates via vwin21's official Telegram channel.

For opt out of marketing communications, you can:

  • Click the "Unsubscribe" link at the bottom of any email we send you.
  • Update your communication preferences in the Settings section of your vwin21 account.
  • Contact our customer support via live chat or email us at privacy@vwin21.best and specify the channel(s) you wish to opt out of.
Note: Opting out of marketing communications does not mean you will stop receiving all communications from vwin21. You will still receive important account-related communications — such as transaction confirmations, security notifications, changes to terms and conditions, and support communications related to your enquiries.
8
Contact vwin21's Data Protection Officer
How to contact us for privacy-related inquiries or requests

vwin21 appoints a Data Protection Officer (DPO) who is fully responsible for ensuring compliance with Malaysia's PDPA 2010 and handling all privacy-related enquiries from members.

For any inquiries, requests, or complaints regarding this Privacy Policy or the processing of your personal data by vwin21, please contact us via:

  • Privacy Officer Email: privacy@vwin21.best
  • General Support Email: support@vwin21.best
  • Live Chat: Available 24/7 within the vwin21 platform — select the "Privacy & Data" category when starting a chat session.

If you are dissatisfied with how we have handled your privacy request, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010.

Effective Date of This Privacy Policy: This Privacy Policy was updated in January 2026 and supersedes all previous versions. vwin21 will notify members of material changes via in-platform notifications or email. Continued use of the platform after the update date constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

Frequently Asked Questions — vwin21 Privacy Policy

Questions members most frequently ask about privacy and data protection at vwin21

No. vwin21 does not share members' personal data with any third-party advertising companies for targeted advertising purposes. We do not use advertising platforms such as Google Ads remarketing or Facebook Custom Audiences in ways that involve sharing members' personal data. Any analytics we conduct for internal marketing purposes is based on aggregated data that cannot be linked to specific individuals.

vwin21 does not store your bank card information or e-wallet account details directly in our systems. All payment processing is handled through licensed third-party payment gateways that comply with PCI DSS (Payment Card Industry Data Security Standard). For local Malaysian e-wallets such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and DuitNow, we only receive transaction verification tokens — not your full e-wallet account details. Bank account numbers registered for withdrawals are stored in encrypted format and can only be accessed by our secure withdrawal processing system.

Yes, you may request the deletion of your personal data. However, there are a few important limitations to be aware of. First, your vwin21 account must be closed with no outstanding balance or pending bets before any deletion can be processed. Second, certain categories of data cannot be deleted due to legal obligations — financial transaction records must be retained for 7 years under Malaysian law, as must KYC data and AML-related records. Data that must be retained will be removed from active systems and held in a secure archive with strictly limited access. To submit a deletion request, email privacy@vwin21.best or contact our live chat support.

Accounts that have been inactive for more than 12 consecutive months may be flagged as dormant in our system. vwin21 will send you an email notification before any action is taken on a dormant account. For dormant accounts with a remaining balance, you will be contacted to confirm whether you wish to keep the account or process a withdrawal. Dormant account data remains securely stored in accordance with our standard retention policy. To avoid dormant status, simply log in to your vwin21 account at least once every 12 months.

In the event of a data breach or leak affecting your personal information, vwin21 is committed to notifying you within 72 hours of the breach being detected by our security team. Notification will be sent to the email address registered to your account and via in-platform notification (if you are still able to log in). The notification will include: the type of data potentially affected, the estimated date of the breach, steps vwin21 has taken to contain the situation, and recommended steps for you to take to protect yourself. Please ensure the email address registered to your vwin21 account is always active and up to date.

Have more questions? Visit our Frequently Asked Questions in full or contact our 24/7 support.

Your Data Is Safe with vwin21 — Register with Confidence

Vwin21 takes the privacy of every Malaysian member seriously. Register a free account today and enjoy a safe, fair, and exciting Sports Betting and casino experience — with the data security assurance you deserve.

Register Free Now Log In

For users aged 18 and above only. Terms & Conditions | Responsible Gaming

Bahasa Melayu