Privacy Policy krwin

This Privacy Policy is published by krwin and describes our practices regarding the collection, use, disclosure, and protection of personal information you provide to us when using the krwin platform in Malaysia.

By registering a krwin account or using any of our services — whether via the website or mobile app — you agree to the terms set out in this Privacy Policy. This Policy applies to all users of the krwin platform regardless of how they access our services.

We built this policy on the foundation of Malaysia's Personal Data Protection Act 2010 (PDPA) and industry best practices for data protection. Our goal is for you to use the krwin platform with full confidence, knowing your information is handled with responsibility and integrity.

Krwin collects various types of information depending on how you interact with our platform. Below is a full breakdown:

We do not collect sensitive data such as your health information, religious beliefs, or sexual orientation unless required by law.

Data collected by krwin is used for lawful and specific purposes only. Below is a detailed explanation of each use case:

• Account Management: Create, verify, and maintain your user account, including the KYC process to meet compliance requirements.
• Transaction Processing: Process deposits, withdrawals, and bonus payments accurately and securely using Malaysia's local payment methods.
• Service Provision: Enables you to play games, place bets, and use all features on the krwin platform.
• Security & Fraud Prevention: Detect and prevent fraudulent activity, money laundering, and multiple-account usage that violates our terms.
• Customer Support: Respond to inquiries, resolve complaints, and provide necessary technical support.
• Legal Compliance: Fulfill applicable legal and regulatory obligations, including reporting requirements to relevant authorities.
• Platform Improvements: Analyze usage patterns to improve the user experience, identify technical issues, and develop new features.
• Marketing Communications: Send information about promotions, special offers, and platform updates — only to users who have consented to receive them.

Krwin do not sell users' personal data to any third party. However, under certain limited and legitimate circumstances, we may share information with:

• Payment Providers: Financial institutions and e-wallet providers such as Maybank, CIMB, Touch 'n Go, GrabPay, and Boost that process your transactions. This sharing is limited strictly to the information needed to complete the transaction.
• Game Providers: Game software providers that supply games on the krwin platform require certain data to ensure the games function correctly and fairly.
• Technical Service Providers: Companies providing server hosting, analytics, and cybersecurity services that enable the krwin platform to operate. All such companies are bound by strict data protection agreements.
• Legal Authorities: Police, courts, or regulatory authorities when required by law or a valid court order.
• Fraud Investigators: Authorised anti-fraud and anti-money laundering agency, in cases where there is suspicion of illegal activity.

All third parties that receive krwin user data are bound by data protection agreements requiring them to safeguard that information to a standard no less stringent than our own policy.

User data security is krwin's top priority. We apply multiple layers of technical and organizational protection to keep your data safe at all times:

• 256-bit SSL Encryption: All communication between your device and krwin's servers is secured using the same encryption employed by leading financial institutions.
• Two-Factor Authentication (2FA): An additional security layer is available for all user accounts, requiring verification via a second device at login.
• Strict Access Controls: Only krwin staff with specific authorisation may access user data, and every access is logged and monitored.
• Regular Security Scanning: The krwin platform undergoes regular penetration testing and security audits conducted by independent parties.
• 24/7 Monitoring: An active threat detection system monitors the platform for any suspicious activity around the clock.
• Data Backup: User data is regularly backed up to a secure, separate location to ensure recovery is possible in the event of an incident.

Krwin uses cookies and similar tracking technologies to enhance the user experience and understand how our platform is used. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect information about how visitors use our platform — most visited pages, time spent, and errors encountered. This information is used to improve the platform.
• Functional Cookies: Save your preferences such as language, display settings, and game choices so you do not need to reset them each time.
• Analytics Cookies: Helps us understand overall platform usage patterns for service improvement purposes.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the krwin platform. For more information on managing cookies, refer to your web browser's help guide.

Krwin retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by law. The following are general data retention guidelines:

• Active Account Data: Retained for as long as your account is active and for a specified period after account closure to meet legal compliance requirements.
• Financial Transaction Records: Retained for a minimum of 7 years after a transaction in accordance with Malaysian legal requirements relating to financial reporting and anti-money laundering.
• KYC Records: Retained for the period required by applicable compliance regulations, typically 5–7 years.
• Technical Logs: Retained for 90 days for troubleshooting and security purposes, then automatically deleted.
• Support Communication Records: Retained for 2 years for service quality and dispute resolution purposes.

Once the retention period expires or data is no longer required, krwin will securely delete or anonymise the data using approved procedures.

As a krwin user in Malaysia, you have the following rights under the Personal Data Protection Act 2010:

To exercise any of the above rights, please contact the krwin customer support team via live chat on the platform. We will process your request within 14 business days.

Krwin is a platform restricted to individuals aged 18 and above only. We do not intentionally collect, process, or store any personal data from individuals under the age of 18.

If we become aware that we have collected data from someone under the age of 18 without proper age verification, we will take immediate steps to delete that data and close the relevant account.

If you are a parent or guardian and believe your underage child has registered an account on our platform, please contact the krwin support team immediately via live chat for prompt action.

Krwin reserves the right to modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new technologies we adopt.

When material changes are made to this Privacy Policy, we will notify you via:

• In-platform notification at your next login.
• Email sent to the address registered to your account.
• A clear notice on the krwin website's home page.

The "Last Updated" date at the top of this document will be revised whenever changes are made. We encourage you to review this Privacy Policy periodically to stay informed about how your information is handled.

Continued use of the krwin platform after any amendments to this Privacy Policy is considered your acceptance of the updated terms. If you do not agree with the amendments, you have the right to close your account.