Privacy Policy

This Privacy Policy ("Policy") describes how KipasWin ("Company", "We", "Us", "Our") collects, processes, stores, and protects the personal data of individuals ("Member", "User", "You") who register, access, or use the services available on the KipasWin platform, accessible at https://kipaswin.cam and all associated interfaces (collectively, the "Platform").

KipasWin operates as an internationally licensed online gaming and sports betting operator. We take our data protection obligations seriously and are committed to handling all personal data responsibly, securely, and in accordance with applicable data protection laws and our licensing requirements.

By registering an account on KipasWin, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform.

The following terms carry the meanings assigned to them below throughout this Policy:

KipasWin collects personal data from Members through various touchpoints during the registration, operation, and closure of an Account. The categories of data we collect include:

3.1 Registration & Account Data

• Full legal name as it appears on your Malaysian identification document (MyKad or passport)
• Date of birth (used for mandatory 21+ age verification)
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Email address and mobile telephone number
• Username and encrypted account password
• Preferred currency (MYR) and language settings

3.2 KYC & Identity Verification Data

• Copies of government-issued identification documents (MyKad, passport)
• Proof of address documentation (utility bill, bank statement)
• Source-of-funds documentation where required for enhanced due diligence
• Facial verification data where biometric identity checks are performed by our KYC provider

3.3 Financial & Transaction Data

• Bank account details (Maybank, CIMB, Public Bank, Hong Leong Bank) used for FPX and DuitNow transfers
• E-wallet identifiers associated with Touch 'n Go eWallet, Boost, and GrabPay accounts
• Cryptocurrency wallet addresses for USDT and BTC transactions
• Deposit and withdrawal transaction histories, including amounts in MYR and timestamps

3.4 Gaming & Behavioural Data

• Betting and gaming activity logs, including games played, wager amounts, outcomes, and session durations
• Bonus redemption history and wagering progress
• Responsible gambling tool settings and usage patterns
• Customer support interaction records and complaint histories

3.5 Technical & Device Data

• IP address, browser type and version, operating system, and device identifiers
• Session timestamps and navigation logs within the Platform
• Cookie data and similar tracking technology outputs (see Section 9)
• Geolocation data (country and region level) derived from IP address

KipasWin processes your personal data on one or more of the following legal grounds:

KipasWin uses collected personal data for the following specific purposes:

• Account Creation & Management: To register your Account, verify your identity and age (21+ mandatory), manage your profile, and provide access to our services.
• Payment Processing: To facilitate deposits via Malaysian payment methods (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank) and to process MYR withdrawal requests accurately and promptly.
• KYC & Regulatory Compliance: To fulfil our obligations under our gaming licence, including identity verification, age verification, and AML screening.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct.
• Responsible Gambling: To monitor gaming behaviour for indicators of problem gambling, to enforce responsible gambling tool settings set by Members, and to fulfil our duty of care under applicable responsible gambling standards.
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance via live chat, email, and WhatsApp.
• Service Improvement: To analyse Platform usage, improve game performance, personalise user experience, and develop new product features.
• Communications: To send transactional notifications (deposit confirmations, withdrawal receipts, account alerts) and, where consent is given, promotional communications about offers and bonuses.

KipasWin does not sell, rent, trade, or otherwise commercially exploit your personal data. We disclose personal data only in the circumstances described below:

• Licensed Service Providers (Data Processors): We share data with carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include KYC and identity verification providers, payment processing partners (including Malaysian e-wallet operators and banking institutions), gaming platform and software providers, cybersecurity and fraud detection services, and cloud hosting infrastructure providers. All processors are contractually prohibited from using your data for any purpose other than the specific service they provide to us.
• Regulatory & Legal Authorities: Where required by our gaming licence, applicable law, court order, or lawful request from a Malaysian or international regulatory body, we will disclose personal data to the relevant authority. We will inform you of such disclosure where we are lawfully permitted to do so.
• Anti-Money Laundering & Financial Intelligence: We may share transaction data and identity information with financial intelligence units or AML bodies where we are legally obligated to report suspicious activity.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of KipasWin's assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

KipasWin retains personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be used to identify an individual.

KipasWin implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmissions between your device and the Platform are encrypted using the same standard employed by major Malaysian banks including Maybank and CIMB.
• Encrypted Data Storage: Personal data, including financial and KYC information, is stored in encrypted databases on access-controlled, security-certified cloud infrastructure.
• Access Controls: Personal data is accessible only to authorised KipasWin personnel on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and regular data protection training.
• Penetration Testing: Our Platform and infrastructure undergo regular third-party security penetration testing to identify and remediate vulnerabilities.
• Incident Response: KipasWin maintains a documented data breach response procedure. In the event of a material breach affecting your personal data, we will notify affected Members and relevant authorities in accordance with applicable requirements.

While we employ industry-standard security practices, no transmission over the internet or electronic storage system is completely secure. Members are responsible for maintaining the confidentiality of their Account login credentials and for ensuring their devices are protected with appropriate security software.

KipasWin uses cookies and similar technologies (including web beacons and local storage) to provide a functional, personalised, and secure experience on the Platform. Cookies are small data files stored on your device that help us remember your preferences and analyse Platform usage.

We use the following categories of cookies:

You may manage non-essential cookie preferences through your browser settings or via our cookie consent interface on the Platform. Please note that disabling essential cookies may affect the functionality and security of your Account.

As a data subject, you have the following rights in relation to your personal data held by KipasWin. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all valid requests within thirty (30) days.

Please note that some rights may be limited where KipasWin is required to retain data to comply with regulatory obligations, including AML requirements applicable to all licensed gaming operators.

KipasWin strictly prohibits the registration and use of our Platform by persons under the age of 21. We do not knowingly collect, process, or store personal data of individuals under 21 years of age.

All new Account registrations are subject to mandatory age verification as part of our KYC process. We use third-party age verification services to supplement our internal checks. Where we have reasonable grounds to believe that an Account is being operated by a person under 21, we will immediately suspend the Account, conduct a verification review, and — if underage access is confirmed — close the Account and return deposited funds in accordance with our Terms & Conditions.

Parents and guardians concerned about underage access to gambling platforms are encouraged to use internet filtering software to restrict access to gambling websites on shared or family devices. Please contact our support team if you have reason to believe a minor has registered an Account on KipasWin.

As an internationally licensed operator, KipasWin may transfer your personal data to servers and service providers located outside Malaysia. This may include data centres and processing facilities in jurisdictions where our gaming platform infrastructure and licensed service providers operate.

Where personal data is transferred internationally, KipasWin ensures appropriate safeguards are in place to protect your data, including binding contractual clauses with data processors, and selecting providers that maintain recognised security certifications.

We do not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual or technical safeguards.

The KipasWin Platform does not contain links to external third-party websites for commercial or marketing purposes. Where technical integrations with third-party service providers exist — such as payment gateways (DuitNow, Touch 'n Go eWallet) or KYC verification tools — those providers operate under their own privacy policies. KipasWin is not responsible for the privacy practices or content of external services.

Members should review the privacy notices of any third-party payment providers they use in connection with their KipasWin Account.

KipasWin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or licensing requirements. The current version of this Policy will always be published at https://kipaswin.cam/privacy-policy with the effective date noted at the top of the document.

Where amendments materially affect how we process your personal data, we will notify registered Members via email or an on-Platform notification before the changes take effect. Your continued use of the Platform following such notification constitutes acceptance of the updated Policy.

If you do not agree to any amendment, you may request Account closure by contacting our support team. Closing your Account does not affect our right to retain data as required by our regulatory and legal obligations.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the KipasWin Data Support team through the following channels:

• Email: support@kipaswin.cam — please include "Privacy Request" in the subject line
• Live Chat: Available 24 hours a day, 7 days a week via the on-Platform chat widget
• WhatsApp Support: Available 9:00am – 1:00am MYT
• Postal Address: KipasWin Data Support, Operations Centre, Kuala Lumpur, Malaysia

We will acknowledge all privacy-related enquiries within 5 business days and aim to resolve them fully within 30 days. For complex requests, we may require additional time and will communicate any extension to you in writing.

If you are not satisfied with our response to your privacy concern, you may escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.