Privacy Policy BigWin Casino

1

Introduction

BigWin Casino ("we", "us", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy describes our practices regarding the collection, use, disclosure and protection of your personal data when you use the bigwin casino platform via our website, mobile app or any other channel we provide.

This policy applies to all registered users, website visitors and any individual who interacts with BigWin Casino in any capacity. By registering or using our platform, you agree to the practices described in this Privacy Policy.

2

Data We Collect

We collect several categories of personal data for different purposes. Below is a breakdown of the data we collect and its sources:

We do not collect special categories of sensitive data such as health records, biometric information (other than for identity verification), political views, or religious beliefs unless required by law.

3

How We Use Your Data

BigWin Casino uses your personal data for the following purposes, all of which have a solid legal basis under PDPA 2010:

• Account Management: Creating, verifying, and maintaining your account on the platform.
• Service Provision: Processing transactions, managing wagering, and providing access to all platform features.
• KYC & AML Compliance: Fulfilling legal obligations related to identity verification and anti-money laundering prevention.
• Platform Security: Detecting and preventing fraud, unauthorized access attempts, and account misuse.
• Customer Support: Resolving complaints, responding to enquiries, and providing technical support.
• Experience Personalization: Personalizing game recommendations and promotions based on your preferences and gameplay patterns.
• Analytics & Improvement: Analyzing usage patterns to improve our platform and services.
• Marketing (With Consent): Sending information about promotions, bonuses, and new features if you have consented to receive them.

4

Sharing Data With Third Parties

BigWin Casino does not sell your personal data. We only share data with third parties in limited and controlled circumstances as follows:

• Payment Providers: Data required to process transactions is shared with payment processors holding PCI DSS security certification, including FPX, DuitNow and digital wallet providers.
• Identity Verification Providers: KYC data is shared with third-party verification services operating under strict data protection agreements.
• Game Software Providers: Limited game data is shared with game providers for technical maintenance and fairness audit purposes.
• Regulatory Authority: We are required to disclose certain data to competent authorities such as the Royal Malaysia Police, Bank Negara Malaysia, or relevant regulatory bodies when lawfully requested.
• Professional Advisors: Lawyers, accountants, and auditors bound by professional confidentiality obligations in certain circumstances.

All third parties that receive your data are required to meet data protection standards equal to or exceeding those we uphold.

5

Data Security

BigWin Casino continuously invests in security infrastructure to ensure your data is protected at all times. The security measures we implement include:

• 256-bit SSL/TLS encryption for all data communications in transit.
• Encryption of data at rest for all stored sensitive data.
• Role-based access control (RBAC) ensures that only authorized personnel can access specific data.
• Real-time security monitoring with intrusion detection systems (IDS/IPS).
• Penetration testing conducted regularly by independent third parties.
• Automated data backups with secure multi-location storage.
• Two-factor authentication (2FA) for all internal administrative access.

6

Cookies & Tracking Technologies

BigWin Casino uses cookies and similar tracking technologies to enhance the user experience, analyze platform performance and deliver more relevant content. The types of cookies we use include:

• Essential Cookies: Required for core platform operations such as login, session management and security. These cookies cannot be disabled.
• Preference Cookies: Saving your settings such as preferred language and display preferences for a more personalized experience.
• Analytics Cookies: Helps us understand how players use the platform for improvement purposes. This data is aggregated and does not directly identify individuals.
• Marketing Cookies: Used to deliver relevant advertisements. You can opt out of this type of cookie via your browser settings.

You can manage cookie settings through your web browser preferences. Disabling certain cookies may affect some platform features but will not prevent basic access to our services.

7

Cross-Border Data Transfers

As a digital platform, some of your data may be processed or stored on servers located outside Malaysia. In such cases, bigwin casino ensures that all data transfers are protected through appropriate legal safeguards, including data transfer agreements that comply with recognised international standards.

We only engage service providers in countries or regions that maintain a level of data protection equivalent to Malaysia's PDPA requirements. All data processing agreements with third parties include strict data protection clauses.

8

Data Retention Period

BigWin Casino retains your personal data for as long as your account is active or as long as necessary to provide services to you. After account closure, we will retain certain data for periods prescribed by law, in particular:

• Financial transaction records are retained for a minimum of 7 years in compliance with anti-money laundering legal requirements.
• KYC records and identity verification documents are retained for 5 years after account closure.
• Customer support communication records are retained for 3 years.
• Technical log data is retained for a maximum of 12 months.

Data that is no longer required will be securely deleted or anonymized in accordance with established data disposal procedures.

9

Child Protection

The bigwin casino platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Our age verification system is designed to prevent registration by individuals below the required age limit.

If we determine that personal data has been collected from an individual under the age of 18, the account in question will be closed immediately and all associated data will be permanently deleted from our systems.

10

Privacy Policy Amendments

BigWin Casino reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or new technologies. Any material amendments will be communicated to you via your registered email or a prominent in-platform notification at least 14 days before the changes take effect.

The "Updated" date at the top of this document reflects the latest version of the Privacy Policy. We encourage you to review this policy periodically. Continued use of the platform after any amendments take effect constitutes your acceptance of the revised terms.

11

Contact Our Data Protection Officer

If you have any questions, concerns, or wish to exercise your rights regarding personal data, please contact the bigwin casino Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24/7 on the bigwin casino platform — the fastest way to get an immediate response.
• Email: [email protected] (email displayed as text only — please copy and paste into your email client).
• FAQ Page: Browse our FAQ page for answers to frequently asked questions about privacy and data security.

We are committed to responding to all data protection enquiries within 5 business days. For more complex requests such as data exports or deletions, the processing period is up to 14 business days.