Go2win Privacy Policy — How We Protect the Personal Data of Malaysian Players

This Privacy Policy ("Policy") describes how go2win ("Platform", "We") collects, uses, stores, and protects personal data in connection with all products and services offered through the go2win website, mobile application, and related channels.

This policy applies to all individuals who interact with go2win, including:

• Registered members who use the go2win platform to play Live Casino, jackpot slots, Blackjack, roulette or Sports Betting
• Individuals who browse the go2win website without having registered as a member
• Individuals who contact the go2win customer support team via Live Chat or email
• Individuals who have registered to receive marketing communications from go2win

Go2win operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection laws. We are committed to ensuring your personal data is processed in a lawful, fair, and transparent manner at all times.

Go2win collects your personal data through several means — directly when you register or use the platform, automatically via platform technology, and in certain cases from trusted third-party sources. The following are the categories of data we collect:

Personal Identification Data:

Financial & Transaction Data:

Platform Activity Data:

Technical Data:

Go2win uses the personal data collected for the following legitimate and necessary purposes:

• Account management: To create, verify and manage your go2win member account, including secure login processes and required identity verification.
• Service delivery: To enable you to play live casino, jackpot slots, blackjack, roulette, and Sports Betting on cricket, football EPL, Malaysia Super League, badminton, and e-sports through the go2win platform.
• Financial transaction processing: To process deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, CIMB Clicks and FPX, and to manage your winnings withdrawals quickly and securely.
• Fraud prevention: To detect and prevent fraudulent activity, money laundering, platform abuse, and violations of go2win's Terms & Conditions through monitoring of unusual transaction patterns.
• Customer support: To enable the go2win support team to provide effective, relevant assistance in Bahasa Malaysia or English whenever you contact us.
• Responsible gaming: To monitor usage patterns and identify early signs of problem gambling in order to protect your wellbeing, in line with go2win's commitment to responsible gaming.
• Marketing communications (with consent): To send you information about go2win promotions, bonuses, tournaments and new features that may interest you — but only if you have given consent to receive such communications.
• Platform improvement: To analyse aggregated usage patterns for the purpose of improving user experience, platform performance, and the go2win games library.
• Legal compliance: To fulfil applicable legal and regulatory obligations, including financial reporting requirements and anti-money laundering compliance.

Go2win will not use your personal data for any purpose other than those stated above without first obtaining your explicit consent.

Go2win does not sell your personal data. However, in certain limited and lawful circumstances, go2win may need to share your data with third parties as follows:

• Payment service providers: Information required to process financial transactions is shared with approved payment providers such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX, Maybank2u and CIMB Clicks. These providers maintain their own privacy and security policies, regulated by Bank Negara Malaysia.
• Game software providers: Certain game session data is shared with approved casino software providers for game processing and match integrity verification purposes. All such providers are bound by strict confidentiality agreements.
• Relevant authorities: go2win may be required to disclose personal information to government authorities, law enforcement, or regulatory bodies when mandated by Malaysian law or a valid court order.
• IT service providers: Third parties that provide technology infrastructure, server hosting, or cybersecurity services to go2win may have limited access to data within the scope of their work, subject to binding confidentiality agreements.

Go2win uses cookies and similar tracking technologies to enhance your experience on the platform. Below is an overview of the types of cookies used:

• Essential cookies (required): These cookies are required for the basic operation of the go2win platform — including login session verification, account security and betting cart functionality. Without them, the platform will not function properly. Essential cookies cannot be disabled.
• Functional cookies: These cookies allow go2win to remember your preferences — such as your chosen language, display settings and login details (if you selected "remember me") — to make your experience more comfortable and personalised.
• Analytics cookies: go2win uses aggregated analytics data (not individual data) to understand how players interact with the platform — which pages are visited most frequently, how long users spend in particular sections, and where players encounter difficulties. This helps us improve the go2win platform over time.
• Security cookies: Used to detect and prevent unauthorised activity, monitor suspicious login attempts, and protect your account from unauthorised access.

You can manage your cookie settings through your web browser. Please note, however, that disabling essential cookies may significantly affect the functionality of the go2win platform. For more information on how to manage cookies in your browser, please refer to your browser's help documentation.

Go2win continuously invests in data security to ensure your personal information is protected to the highest standard. Our security measures include:

• Data transmission encryption: All data transmitted between your device and go2win's servers is encrypted using the latest TLS (Transport Layer Security) protocol, ensuring no third party can intercept or read your data while in transit.
• Data-at-rest encryption: Sensitive data stored in go2win's databases is protected with AES-256 encryption — a security standard recognised by international cybersecurity bodies as among the strongest available.
• Strict access controls: Only go2win staff with a legitimate need to access your personal data are granted such permission, and only to the data necessary for their role. All access to sensitive data is logged and monitored on a regular basis.
• 24/7 security monitoring: The go2win cybersecurity team monitors the platform infrastructure around the clock to detect any suspicious activity, intrusion attempts, or unusual security anomalies.
• Regular security testing: go2win conducts regular security testing and audits by qualified third parties to identify and address system vulnerabilities before they can be exploited.
• Two-factor authentication: Two-factor authentication (2FA) is available to all go2win members who wish to add an extra layer of security to their account beyond a standard password.

Go2win retains your personal data only for as long as is necessary to fulfil the original purpose of collection or to comply with legal requirements. The retention periods for the various categories of data are as follows:

• Active account data: Retained for the duration of your active membership with go2win, plus any additional period required by law following account closure.
• Financial transaction records: Retained for a minimum of 7 years in compliance with Malaysian accounting and financial regulations, including requirements under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Gaming activity history: Retained for the duration of active membership and for 2 years following account closure, for the purpose of resolving any disputes that may arise.
• Customer support communication data: Correspondence records with the go2win support team are retained for 3 years for reference and training purposes.
• Cookies and technical log data: Stored for a shorter period — typically between 30 days and 13 months — depending on the type of data and its intended purpose.

Once the retention period expires, go2win will securely delete or anonymise your personal data in a manner that prevents it from being recovered or reused. If you request deletion of your data before the retention period ends, go2win will assess the request and process the deletion to the extent permitted by law.

As a go2win member and an individual protected under Malaysian data protection law, you have the following rights with respect to your personal data:

To exercise any of the rights above, you may reach the go2win support team via Live Chat on the platform or send an email to support@go2win.best. go2win will respond to your request within 30 business days. In complex cases, the response period may be extended, but you will be informed of the reason and a revised estimated resolution time.

Go2win is a digital entertainment platform exclusively for adults aged 21 and above. go2win does not knowingly collect, process or store the personal data of individuals under the age of 21.

If go2win discovers that personal data of an individual under the age of 21 has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. If you believe that a minor's personal data has been inadvertently collected by go2win, please contact us immediately at support@go2win.best so that we can take the appropriate action without delay.

Go2win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer.

When material changes are made to this Policy, go2win will:

• Updating the "Last Updated" date shown at the top of this page
• Displaying a clear notice on the go2win platform homepage regarding any changes made
• In the event of significant changes, sending a direct notification to members via their registered email address

It is your responsibility to review this Privacy Policy periodically. Continued use of the go2win platform after any amendments take effect constitutes acceptance of the revised terms.

If you have any questions, concerns, or complaints regarding how go2win handles your personal data, or if you wish to exercise any of your privacy rights, please reach out to us through the following channels:

• Live Chat: Available directly within the go2win platform, 24 hours a day, 7 days a week. This is the fastest way to get a response.
• Email: support@go2win.best — for more detailed privacy enquiries that require an official written response.

When contacting go2win regarding privacy matters, please clearly state that your request relates to data privacy and include sufficient information for us to identify your account and understand your request. go2win is committed to responding to all privacy enquiries within 30 business days of receipt.