01 Information We Collect
When you register and use the 123win platform, we collect several categories of information to enable us to provide a smooth, secure, and responsible service. Below is a detailed breakdown of the types of information we collect:
A. Registration & Identity Information
- Full name as stated on your identity card or passport.
- Date of birth for age verification (members must be 18 years of age or older).
- An active email address for account communications.
- Phone number for two-factor authentication and important notifications.
- Username and password set during registration.
B. KYC Verification Information
- A copy of a valid Malaysian identity card (MyKad) or passport.
- Recent proof of address (utility bill or bank statement not older than 3 months).
- A selfie with your identification document for liveness verification (if required).
C. Financial Information
- Bank account holder name and account number for withdrawal processing.
- Deposit and withdrawal transaction history within the platform.
- Your registered preferred payment methods.
D. Usage & Technical Data
- IP address and general geographic location (city/state level).
- Device type, operating system, and web browser version used.
- Game activity logs, login dates and times, and session history.
- Cookie data and session identifiers for security and performance purposes.
Note: We only collect information that is strictly necessary for operational and regulatory compliance purposes. We do not collect data unrelated to the provision of the 123win platform services.
02 How We Use Your Data
All information collected by 123win is used responsibly and solely for the purposes specified. We will not use your data beyond the scope stated in this privacy policy without obtaining your consent first.
| Purpose of Use |
Data Type |
Legal Basis |
| Registration & account management |
Name, email, phone number |
Contract performance |
| Identity verification (KYC) |
Identity document, selfie |
Legal obligation |
| Deposit & withdrawal processing |
Banking details, transaction history |
Contract performance |
| Fraud prevention & security |
IP, activity logs, device data |
Legitimate interests |
| Service & support communications |
Email, phone number |
Contract performance |
| Platform improvement & analytics |
Usage data, cookies |
Legitimate interests |
| Responsible gaming |
Game history, betting patterns |
Legal obligation |
Marketing Communications: We will only send you promotions, bonus offers, and the latest updates if you have agreed to receive them during registration. You may withdraw this consent at any time through your account settings.
03 Data Storage & Security
The security of your data is a responsibility we take very seriously. 123win implements multiple layers of technical and operational protection to ensure your information is always safeguarded against unauthorised access, loss, or leakage.
- Transmission encryption: All communications between your device and our servers are secured by TLS 1.3 protocol with AES-256 encryption. This means that even if someone manages to intercept network traffic, the data they see is nothing but unreadable code.
- Storage encryption: Passwords are stored in hashed form using the bcrypt algorithm. Other sensitive data such as bank account numbers are stored in encrypted format within the database.
- Internal access controls: Only authorised staff may access members' personal data, and every access is recorded in an immutable audit log.
- 24/7 threat monitoring: Our automated threat detection system monitors for suspicious activity around the clock and will respond immediately to any intrusion attempts.
- Regular backups: All data is automatically backed up every few hours to separate locations to ensure service continuity.
- Retention period: Active account data is retained for the duration the account remains active. Following account closure, data is kept for a minimum of 5 years to meet legal and financial audit requirements.
Regular Security Testing: 123win's security infrastructure undergoes penetration testing by independent cybersecurity firms every quarter to identify and address any potential vulnerabilities.
04 Sharing Information with Third Parties
123win upholds the principle that your personal data belongs to you. We do not sell, rent, or transfer your personal information to third parties for marketing or commercial purposes. However, there are limited situations where sharing information is necessary:
- Payment providers: Transaction information is shared with approved payment processors solely to process your deposits and withdrawals. All our payment providers are bound by strict confidentiality agreements.
- Identity verification services: For KYC purposes, your identity documents may be processed through trusted third-party identity verification service providers that comply with international security standards.
- Statutory authority: Where required by law, court order, or direction from a lawful law enforcement agency, we may be required to disclose certain information to the relevant authorities.
- Fraud prevention: In cases involving serious fraud, relevant information may be shared with financial institutions or fraud prevention bodies to protect all parties involved.
- Technical service providers: Technology infrastructure providers that help us operate the platform may process technical data within a very limited scope, subject to strict data processing agreements.
Cross-Border Data Transfers: If your data needs to be processed outside Malaysia, we ensure that the receiving country or organisation maintains a level of data protection equivalent to or higher than that provided in Malaysia.
05 Cookies & Tracking Technologies
The 123win platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and help us understand how the platform is used by our members.
Types of Cookies We Use:
- Essential Cookies: Required for core platform functions such as login, session verification, and security. These cookies cannot be disabled as they are essential to your account security.
- Functional Cookies: Saves your preferences such as interface language, display settings, and game preferences so you do not need to reset them each time you log in.
- Analytics Cookies: Helps us understand how members interact with the platform — which pages are visited most, where users encounter difficulties, and how we can improve the overall experience.
- Security Cookies: Used to detect suspicious activity such as login attempts from unusual locations or abnormal usage patterns.
You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect overall platform functionality. For the best experience, we recommend allowing essential and functional cookies.
Mobile App: On the 123win mobile app, we use a Device ID in place of cookies for the same purposes. You can reset this identifier through your device settings.
06 Your Rights as a 123win Member
We believe every member has the right to control their own personal data. 123win respects and facilitates the exercise of the following rights:
Right to Access
Request a copy of all personal data we hold about you in a readily readable format.
Right to Rectification
Correct any inaccurate or incomplete personal information in our records.
Right to Erasure
Request deletion of your personal data, subject to legal retention obligations.
Right to Restriction
Restrict the processing of your data in certain situations while an issue is being resolved.
Right to Portability
Receive your data in a structured, machine-readable format for transfer to another platform.
Right to Object
Object to the processing of your data for specific purposes, including direct marketing.
To exercise any of the rights above, please contact our Data Protection Officer (DPO) team via the in-platform live chat. We will respond to all valid requests within 30 working days.
Self-Exclusion Exemption: If you feel the need to take a break from gaming activity, 123win provides temporary or permanent self-exclusion tools via the
Responsible Gaming. Your data will be retained to ensure all restrictions are fully enforced.
07 Children's Data Protection
123win is a platform designed exclusively for adults aged 18 and above. We take child protection extremely seriously and enforce strict controls to prevent underage access to the platform.
- The 123win platform is not designed, marketed, or intended for individuals under the age of 18 under any circumstances.
- We do not intentionally collect or store any personal data from individuals under the age of 18.
- If we find that we have inadvertently collected data from a minor, the account in question will be terminated immediately and all related data will be deleted.
- Age verification during KYC is our primary layer of protection. Submitted identification documents are verified to ensure members meet the minimum age requirement.
If you notice or suspect that someone under the age of 18 is using this platform, please contact our support team immediately via live chat so that prompt action can be taken.
08 Policy Amendments & How to Contact Us
123win reserves the right to update or amend this privacy policy from time to time to reflect changes in operational practices, legal requirements, or technology. Any material amendments will be communicated to you via in-platform notifications or email at least 14 days before they take effect.
- The date of the latest update is always displayed at the top of this page.
- Continued use of the platform after the effective date of any amendment is considered acceptance of the revised policy.
- Older versions of the privacy policy are kept in an archive and can be requested through our support team.
Contact Our Data Protection Officer (DPO):
For any privacy-related inquiries, complaints, or requests, you may contact us via:
- Live Chat: Available 24 hours a day, 7 days a week via the in-platform chat icon.
- Email: [email protected] (displayed as text only)
- Response time: Within 3 working days for general inquiries; 30 days for formal data rights requests.
Language Note: This privacy policy is provided in Bahasa Melayu as the official language. In the event of any discrepancy between a translated version and the Bahasa Melayu version, the Bahasa Melayu version shall serve as the definitive reference.