Privacy Policy mwin5 — Your Data, Our Responsibility

1Personal Information We Collect

Mwin5 collects your personal data through several channels — primarily when you register an account, use platform services, contact customer support, or interact with our promotional content. All data collection is carried out transparently and only for legitimate purposes.

The categories of personal data we collect include:

• Identity information: full name, date of birth, gender, identity card or passport number;
• Contact information: email address, mobile number, mailing address;
• Financial information: bank account number, digital wallet details, deposit and withdrawal transaction history;
• Usage information: betting history, game preferences, account activity logs, session times and duration;
• Technical information: IP address, device and browser type, operating system, cookie data, and device identifiers;
• KYC verification documents: copies of identity documents and proof of address submitted during the verification process.

We do not collect sensitive personal data such as health information, religious beliefs, or political views unless you voluntarily provide it in the context of responsible gambling or self-account management.

2How We Use Your Personal Data

The data we collect is used solely for legitimate and reasonable purposes related to the operation of the mwin5 platform. We never use your data for purposes beyond the scope stated in this policy.

If you have given consent to receive marketing communications, we may use your data to send you promotional offers, the latest bonus information, and relevant platform news via email or app notifications. You may opt out of such communications at any time via the unsubscribe link included in every message.

3Legal Basis for Data Processing

Every instance of personal data processing by mwin5 has a clear legal basis in accordance with the provisions of Malaysia's Personal Data Protection Act 2010. We do not process your data without valid justification.

• Contract performance: processing necessary to carry out services you have requested, such as bet processing and financial transactions;
• Legal obligation: processing required to comply with applicable laws including AML, KYC, and financial reporting requirements;
• Legitimate interests: processing for platform security, fraud prevention, and service improvement purposes that do not affect your fundamental rights;
• Consent: for marketing communications and preference-based processing activities that require your explicit consent.

4Data Sharing and Disclosure

Mwin5 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in the course of operating the platform, we may share your data with certain parties under limited and controlled circumstances:

• Payment service providers: to process your deposits and withdrawals securely. They are bound by strict confidentiality obligations;
• Game software providers: minimum data required to run a game session and accurately settle wagers;
• Technology service providers: companies that assist us in managing the platform's technical infrastructure, analytics, and customer support;
• Relevant authorities: where required by law, a valid court order, or a legitimate request from a law enforcement agency.

5Data Retention Period

Mwin5 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with ongoing legal obligations. We do not retain data longer than required.

• Active account data: retained for as long as your account remains active and in use;
• Data following account closure: retained for a minimum of 7 years after account closure to meet anti-money laundering and financial accounting legal requirements;
• Technical and security logs: retained for 12 months for security investigation and dispute resolution purposes;
• Support communication data: retained for 3 years for service reference and quality assurance;
• Marketing data: retained until you withdraw consent or request deletion.

Upon expiry of the specified retention period, your data will be securely deleted or anonymised so that it can no longer be personally linked to you.

6Cookies and Tracking Technologies

Mwin5 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small data files stored on your device when you visit our website.

We use several categories of cookies:

• Essential cookies: required for core platform operations such as login verification and session security. These cookies cannot be disabled;
• Performance cookies: collects information on how you use the platform to help us improve it. All data is collected anonymously;
• Functional cookies: allows the platform to remember your preferences such as language and display settings;
• Marketing cookies: used to deliver more relevant promotions based on your betting interests. This is only active if you provide consent.

You can manage your cookie settings through your internet browser at any time. Disabling certain cookies may affect the functionality of some platform features. For more information on managing cookies, please refer to your browser's help documentation.

7Data Security Measures

Protecting your personal data is mwin5's top priority. We implement a comprehensive range of technical and organisational security measures to ensure your data is always safeguarded against unauthorised access, loss, or misuse.

• 256-bit SSL/TLS encryption for all data communications between your device and our servers;
• Databases protected with high-level encryption and strict need-to-know access controls;
• Intrusion detection and prevention systems (IDS/IPS) operating 24 hours a day;
• Regular security audits and penetration testing by independent security experts;
• Two-factor authentication (2FA) is available for all user accounts as an added layer of protection;
• Cybersecurity awareness training for all mwin5 staff who handle user data;
• Established incident response procedures to address any security breaches promptly and efficiently.

8Cross-Border Data Transfers

In operating the platform globally, your personal data may be transferred to and stored on servers located outside Malaysia. This includes transfers to cloud infrastructure service providers and international game providers.

Every cross-border data transfer carried out by mwin5 is subject to adequate safeguards, including:

• Data transfer agreements that comply with data protection standards equal to or higher than Malaysia PDPA requirements;
• Use of internationally recognised standard contractual clauses to ensure ongoing data protection;
• Periodic assessments of recipient countries and parties to ensure adequate levels of data protection.

9Children's Privacy

The mwin5 platform is intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered or used the mwin5 platform are advised to contact our support team immediately.

10Amendments to This Privacy Policy

Mwin5 reserves the right to update this Privacy Policy from time to time to reflect changes in our data handling practices, current legal requirements, or platform developments. Any changes will take effect on the date stated at the top of this document.

For significant or material changes, we will notify you via in-app notification or email to the address registered to your account at least 7 days before the changes take effect. It is your responsibility to review this policy periodically. Continued use of the platform after changes take effect constitutes acceptance of the updated terms.

11Contact Our Privacy Officer

For any inquiries, concerns, or requests regarding this Privacy Policy or the handling of your personal data, you may contact the mwin5 Data Privacy Officer (DPO) through the following channels:

• Privacy Email: [email protected]
• Live Chat: Available 24/7 on the platform — select the "Privacy & Data" category
• Telegram: Contact us via official mwin5 support channels

We are committed to responding to all privacy-related inquiries within 5 business days. For formal data subject rights requests, please include your account number and a copy of your identification document so we can process your request promptly and accurately.