Privacy Policy

msiawin ("we", "us", "our", "the Platform") operates the online casino and sports betting website at https://msiawin.cam. As a platform serving players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond — we recognise the responsibility we carry in handling the personal information of our users. This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by msiawin.

This Policy applies to all personal data collected via the msiawin website, mobile browser experience, customer support channels, and any other services operated under the msiawin brand. It should be read alongside our Terms & Conditions, which govern your use of the platform as a whole.

By registering an account, depositing funds, or otherwise using the msiawin platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to this Policy, you should not use the msiawin platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

msiawin collects personal data through multiple channels in the ordinary course of operating the platform. The categories of data we collect include:

We do not collect data beyond what is necessary for the purposes described in this Policy. Where you are asked to provide data that is optional, this will be clearly indicated at the point of collection.

msiawin uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your msiawin account, including processing login authentication and maintaining your account balance.
• Identity & Age Verification: To fulfil our KYC obligations and confirm that all users meet the 21+ minimum age requirement, and to prevent underage gambling on the platform.
• Transaction Processing: To process deposits via Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX, and to process withdrawal requests to your verified payment accounts.
• Customer Support: To respond to your enquiries, resolve disputes, manage complaints, and provide assistance via live chat and email.
• Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct as required by applicable law.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable laws, including responding to lawful requests from regulatory authorities, courts, or law enforcement agencies.
• Responsible Gambling: To monitor gambling patterns, identify indicators of problem gambling behaviour, and implement responsible gambling tools such as deposit limits and self-exclusion where required.
• Platform Improvement: To analyse usage patterns, test new features, and improve the overall performance, security, and user experience of the msiawin platform.
• Service Communications: To send you transactional notifications such as deposit confirmations, withdrawal updates, and account security alerts. We do not send unsolicited marketing communications without your consent.

msiawin processes your personal data on the following legal bases, depending on the specific purpose of the processing:

• Contractual Necessity: Processing required to perform the contract between you and msiawin — i.e., to operate your account, process transactions, and deliver the services you have requested.
• Consent: Where you have given explicit consent to the processing — for example, by accepting cookies beyond strictly necessary ones, or by opting in to promotional communications.
• Legal Obligation: Processing necessary to comply with a legal or regulatory obligation applicable to msiawin, including KYC, AML, and data retention requirements.
• Legitimate Interests: Processing necessary for the legitimate interests of msiawin, including fraud prevention, security monitoring, platform improvement, and responsible gambling oversight — provided these interests are not overridden by your rights and freedoms.

msiawin does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. We may share your data with the following categories of recipients strictly for the purposes described in this Policy:

• Payment Service Providers: Banks, e-wallet operators, and payment processors (including those facilitating Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX transactions) to whom we must transmit payment information to complete deposit and withdrawal transactions.
• Identity Verification Partners: Third-party KYC and AML compliance providers engaged to verify user identities and screen against sanctions lists or politically exposed person (PEP) databases.
• Technology Service Providers: Cloud hosting, infrastructure, and platform service providers who process data on our behalf under binding data processing agreements that restrict their use of the data.
• Game Content Providers: Licensed international game studios whose games are hosted on the msiawin platform may receive anonymised session data required for game delivery and fairness certification purposes.
• Regulatory & Law Enforcement Authorities: Government authorities, regulators, courts, or law enforcement agencies where we are legally required or compelled to disclose information.
• Fraud Prevention Agencies: Third-party fraud detection and prevention services used to protect the platform and its users from fraudulent activity.

Any third party to whom we disclose personal data is required to maintain appropriate technical and organisational measures to protect that data and to process it only in accordance with our instructions and applicable law.

msiawin uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and improve your experience. A "cookie" is a small text file stored on your device when you visit a website.

The following categories of cookies are used on the msiawin platform:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without impairing core platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how users interact with the platform — pages visited, features used, error messages encountered. This data helps us improve platform performance and user experience.
• Functional Cookies: Used to remember your preferences such as language settings, responsible gambling limit configurations, and display preferences.
• Security Cookies: Used to detect and prevent fraudulent activity and to support our account security measures, including session integrity checks and device recognition.

You may configure your browser to refuse all or some cookies, or to alert you when cookies are being sent. However, disabling strictly necessary cookies may affect your ability to use the platform. msiawin does not use cookies for the purpose of serving third-party advertising.

msiawin retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and Registration Data: Retained for the duration of your account and for a period of at least 5 years following account closure, in accordance with applicable AML regulations.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, as required by anti-money laundering compliance obligations.
• Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years in accordance with applicable financial record-keeping requirements.
• Customer Support Communications: Retained for up to 3 years from the date of the last communication, to enable us to respond to any subsequent dispute or escalation.
• Technical and Log Data: Server logs and IP address records are typically retained for up to 12 months, unless required for longer periods in connection with a fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents reconstruction of the original personal information.

msiawin implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the msiawin servers is encrypted using industry-standard SSL/TLS protocols. You can verify this by confirming the padlock icon and "https" in your browser's address bar.
• Password Hashing: Account passwords are never stored in plain text. All passwords are hashed using a strong cryptographic algorithm before storage.
• Two-Factor Authentication (2FA): msiawin offers 2FA on all accounts. We strongly recommend that all users enable this additional layer of account security.
• Access Controls: Access to personal data within msiawin's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations.
• Regular Security Audits: Our platform undergoes periodic security assessments and penetration testing to identify and address vulnerabilities.
• Data Breach Response: In the event of a personal data breach that is likely to result in risk to your rights and freedoms, msiawin will notify affected users and relevant authorities as required by applicable law, without undue delay.

As a data subject, you hold the following rights in respect of your personal data held by msiawin. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request".

msiawin will respond to all verified data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, with notice provided to you. Please note that certain rights may be limited where their exercise would conflict with our legal obligations — for example, we cannot erase transaction records that we are legally required to retain under AML regulations.

msiawin strictly prohibits the use of its platform by individuals under the age of 21. We do not knowingly collect personal data from minors. The collection of any personal data from an individual under 21 years of age is contrary to our Terms and Conditions and to this Privacy Policy.

If msiawin becomes aware, or has reasonable grounds to suspect, that personal data has been collected from a minor — whether through a false age declaration at registration or any other means — we will immediately suspend the relevant account, void any associated transactions, and delete the personal data concerned as soon as practically possible, subject to any legal retention requirements.

If you believe that a minor has registered or is actively using an msiawin account, please notify us immediately at [email protected] so that we may take appropriate action.

The msiawin platform may integrate with or reference third-party payment services and banking infrastructure — including Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, and the DuitNow and FPX systems operated by Bank Negara Malaysia and Payments Network Malaysia (PayNet). Your use of these services is subject to the respective privacy policies of those providers, over which msiawin has no control.

When you initiate a deposit or withdrawal via any of these payment methods, the relevant transaction data is transmitted to the payment provider's systems in accordance with that provider's terms and privacy practices. msiawin recommends that you review the privacy policies of any third-party service you use in connection with your msiawin account.

msiawin reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. When changes are material, we will notify registered users by posting a notice on the Website and, where practicable, by email to your registered address, at least 7 days before the changes take effect.

The "Last updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the msiawin platform following the effective date of any revised Policy constitutes your acceptance of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by msiawin, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on the msiawin website. The fastest channel for urgent data queries or account security concerns.
• Email: [email protected] — for formal data rights requests, privacy complaints, and policy enquiries. Please allow up to 5 business days for initial acknowledgement of your request.

When submitting a data rights request by email, please include your registered email address, account username, and a brief description of your request so we can verify your identity and process your request efficiently.