Privacy Policy bigwin888 – Personal Data Protection for Malaysian Members

This Privacy Policy is published by bigwin888 and applies to all users of our platform at bigwin888.club, covering all services we offer — Sports Betting on the Malaysia Super League and EPL, Live Casino, online lottery, e-sports, badminton, and cricket. This Policy explains how bigwin888 collects, uses, discloses, and protects your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering a bigwin888 account, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any provision in this policy, please stop using the bigwin888 platform and contact us to request account deletion.

Bigwin888 acts as the Data Controller as defined under Malaysia's PDPA 2010. This means we are responsible for determining the purposes and means of processing your personal data, and we are fully accountable for ensuring that all such processing is carried out lawfully, fairly, and transparently.

Bigwin888 collects various types of personal data across different situations. Below is a full breakdown of the data we collect and the context in which it is collected:

Data you provide directly during registration:

• Full name as stated on your MyKad
• MyKad number or a valid identification document
• Date of birth
• An active Malaysian phone number
• Email address
• Current residential address in Malaysia
• Account password (stored in encrypted form — we cannot read it)

Financial data collected during transactions:

• Bank account or e-wallet details used for deposits and withdrawals — including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX via Maybank2u or CIMB Clicks
• Deposit and withdrawal history in Malaysian Ringgit (RM)
• Transaction records and transaction timestamps

Platform usage data collected automatically:

• Your device's IP address
• Web browser type and version
• Device type (mobile, tablet or desktop)
• Device operating system
• Pages visited within the bigwin888 platform and duration of each visit
• Betting history and gaming activity within your bigwin888 account

Bigwin888 uses the personal data we collect solely for lawful, clearly stated purposes. We do not process your data for unrelated purposes without obtaining your consent first.

Primary purposes for which bigwin888 uses your data:

• Account management: To create, verify and manage your bigwin888 account, including processing logins and maintaining account security.
• Financial transaction processing: To accurately and securely process deposits and withdrawals via your chosen Malaysian local payment method.
• KYC & AML Verification: To comply with Malaysia's Know Your Customer and Anti-Money Laundering legal requirements.
• Customer service: To respond to enquiries, resolve complaints, and provide technical support to bigwin888 members.
• Service communications: To send you important notifications about your account, platform updates and policy changes that affect you.
• Platform improvements: To analyse usage patterns for the purpose of improving the overall user experience.
• Fraud prevention: To identify and prevent fraudulent activity, money laundering, and violations of bigwin888's terms.
• Legal compliance: To fulfil the legal and regulatory obligations imposed on bigwin888 as an online platform operator in Malaysia.

Bigwin888 may also use anonymised and aggregated data that cannot be linked to any individual for statistical analysis, market research and internal business reporting. Such data is no longer considered personal data and is not subject to the same restrictions under PDPA 2010.

Every instance of personal data processing carried out by bigwin888 has a valid legal basis under Malaysia's PDPA 2010. bigwin888 only processes your data when at least one of the following bases applies:

• Your consent: By registering a bigwin888 account and accepting this Privacy Policy, you give us consent to process your data for the stated purposes. You may withdraw this consent at any time, though doing so may mean you can no longer continue using the bigwin888 platform.
• Contractual requirement: Processing necessary to fulfil the contract between you and bigwin888 — such as processing deposits and withdrawals, managing bonuses and settling bets.
• Legal obligation: Processing required to fulfil bigwin888's legal obligations under applicable Malaysian law, including anti-money laundering requirements and financial reporting.
• Legitimate interests: In certain cases, bigwin888 processes data on the basis of legitimate business interests — such as fraud prevention and platform security enhancement — provided those interests do not override your fundamental right to privacy.

Bigwin888 does not sell, rent or trade members' personal data to third parties for marketing or any other purposes. However, bigwin888 may need to share your data with certain parties in limited and lawful circumstances, as outlined below:

• Payment service providers: bigwin888 shares the necessary transaction information with local Malaysian payment service providers such as DuitNow operators, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and the FPX network to process your deposits and withdrawals. All these providers are bound by strict confidentiality agreements.
• Technology service providers: bigwin888 works with carefully selected third-party service providers to manage the platform's technical infrastructure — including cloud computing services, payment processing and analytics tools. All such providers are only permitted to use your data for purposes we specify.
• Legal authority: bigwin888 will disclose members' personal data when required by applicable Malaysian law, court order, or a legitimate request from Malaysian government authorities.
• Identity verification: For KYC purposes, bigwin888 may use the services of a licensed third-party identity verification provider in Malaysia to verify the information you provide.

In all instances of data sharing, bigwin888 ensures that the receiving parties have adequate data protection measures in place and only use the data for permitted purposes. bigwin888 remains accountable for data shared with third-party service providers.

Bigwin888 continually invests in the latest security technologies and procedures to protect the personal data of all our members. Data protection is the top priority in every technical decision we make.

Technical measures we employ:

• 256-bit SSL encryption: All data transmitted between your browser and the bigwin888 platform is encrypted using TLS 1.3 with 256-bit encryption — the same standard used by Malaysia's leading banking institutions.
• Data-at-rest encryption: Sensitive personal data stored in bigwin888's database is encrypted using modern encryption algorithms. Account passwords are stored in hashed form that cannot be decrypted by anyone, including bigwin888 staff.
• Role-based access control: Only bigwin888 staff who require access to specific data in order to carry out their duties are permitted to do so. All access is logged and monitored.
• Regular security audits: bigwin888 conducts regular internal and external security audits to identify and address any potential vulnerabilities.
• 24/7 Monitoring: bigwin888's automated monitoring system is always on alert to detect any unauthorised access attempts or suspicious activity.

While bigwin888 takes all reasonable steps to protect your data, no security system can guarantee 100% protection against every cyber threat. You also play an important role in keeping your account secure by using a strong password and not sharing your login details with anyone.

Bigwin888 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian laws and regulations.

• Active account data: For as long as your bigwin888 account remains active and you continue using the platform, we retain all data associated with your account.
• Data after account closure: After you close your bigwin888 account, we retain basic account records and transaction history for seven (7) years in accordance with Malaysia's financial and tax regulatory requirements. After this period, your data will be securely deleted.
• KYC Documents: Copies of identity verification documents are retained for seven (7) years from the account closure date in accordance with Malaysia's anti-money laundering legislation.
• Access and activity logs: Technical logs of activity within the bigwin888 platform are retained for 12 months for security and technical troubleshooting purposes.
• Communications data: Communication history with the bigwin888 support team is retained for three (3) years for reference and dispute resolution purposes.

When data is no longer needed, bigwin888 will ensure it is securely deleted or anonymised using methods that prevent any future recovery.

As a bigwin888 member and data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal data. bigwin888 respects and facilitates the exercise of all these rights:

To exercise any of the rights above, please send a written request to support@bigwin888.club with the email subject "DATA RIGHTS REQUEST", along with your bigwin888 account number and a clear description of your request. bigwin888 may require additional identity verification before processing the request in order to protect the security of your data.

The bigwin888 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Cookies are small text files stored in your browser or device when you visit the bigwin888 platform.

Types of cookies used by bigwin888:

• Essential Cookies: Required for the basic functions of the bigwin888 platform, such as login authentication, session security and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Helps bigwin888 understand how members use the platform — which pages are visited most, where members encounter difficulties, and how long they spend in each section. This information is used solely to improve the platform.
• Functional cookies: Allows bigwin888 to remember your preferences such as display settings, preferred language and game preferences, delivering a more personalised experience.

Bigwin888 does not use third-party cookies for advertising or marketing purposes. We do not permit ad networks or data brokers to collect information about our members through the bigwin888 platform.

Bigwin888 takes child protection very seriously. Our platform is strictly for users aged 18 and above. bigwin888 does not knowingly collect, process, or store any personal data from individuals under the age of 18.

If bigwin888 discovers that we have collected personal data from an individual under the age of 18, we will take the following steps immediately:

• Suspending the account's platform access pending age verification.
• Deleting all personal data associated with that individual from bigwin888's systems.
• Returning any deposited funds to the original payment method.
• Reporting incidents to the relevant authorities where required under Malaysian law.

If you know or suspect that someone under the age of 18 has registered a bigwin888 account, please contact us immediately at support@bigwin888.club so we can take the appropriate action.

Bigwin888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, new legal requirements or improvements to how we operate the platform. The latest version of the Privacy Policy will always be available on this page, with the update date clearly stated at the top of the document.

When bigwin888 makes significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the bigwin888 platform informing members of the changes that have been made.
• Sending email notifications to the address registered on your account for changes that materially affect your privacy rights.

If you disagree with any changes to this Privacy Policy, you have the right to stop using the bigwin888 platform and request account closure and data deletion by contacting our support team.

If you have any questions, concerns, or complaints about how bigwin888 handles your personal data, or wish to exercise any of your rights under Malaysia's PDPA 2010, our team is ready to assist you.

How to contact bigwin888 regarding privacy matters:

• Privacy Email: support@bigwin888.club — please use the subject line "PRIVACY ENQUIRY" or "DATA RIGHTS REQUEST" to ensure your email is processed with the appropriate priority.
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the bigwin888 platform. For privacy-related requests requiring formal action, we recommend communicating via email for record-keeping purposes.
• Response Time: bigwin888 aims to respond to all privacy-related enquiries within 3 business days and to fulfil data rights requests within the timeframes set out in Section 8 of this document.

Bigwin888 takes every privacy-related enquiry and complaint seriously. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant regulatory authority.