Summary: gdwin28 collects personal data necessary to operate a licensed online gaming platform, process payments in MYR, comply with regulatory obligations, and provide you with a personalised and secure experience. We do not sell your data to third parties. This Policy explains exactly what we collect, why, and what rights you have over your information.
1.1 This Privacy Policy ("Policy") describes how gdwin28 ("gdwin28", "we", "us", "our") collects, uses, stores, discloses, and protects personal data relating to individuals ("you", "Player", "User") who register for or use the gdwin28 online gaming platform accessible at gdwin28.org.
1.2 gdwin28 is committed to protecting the privacy and personal data of all players, with particular attention to the expectations of Malaysian players regarding data security and responsible data handling.
1.3 This Policy is incorporated into and should be read alongside the gdwin28 Terms & Conditions. By registering an account with gdwin28 or using the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
1.4 This Policy applies to personal data collected through: (a) the gdwin28.org website and mobile web platform; (b) account registration and management processes; (c) payment transactions; (d) customer support interactions; and (e) any promotional activities conducted by gdwin28.
2.1 For the purposes of applicable data protection legislation, gdwin28 acts as the data controller in respect of personal data collected from players who access the platform at gdwin28.org.
2.2 As data controller, gdwin28 determines the purposes and means of processing personal data collected through the platform and is responsible for ensuring that such processing is carried out in accordance with applicable data protection laws and the terms of this Policy.
2.3 Queries, requests, or complaints relating to data protection matters should be directed to gdwin28's data protection contact, details of which are provided in Section 15 of this Policy.
3.1 gdwin28 collects personal data from you in the following categories:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, national ID (MyKad), passport number | Registration form, KYC verification |
| Contact Data | Email address, Malaysian mobile number, mailing address | Registration form, account settings |
| Financial Data | Bank account details, eWallet identifiers (Touch 'n Go, Boost), transaction history | Payment processing, deposit/withdrawal requests |
| Gaming Data | Game sessions, wager amounts, wins/losses, game history, session duration | Platform activity logs |
| Technical Data | IP address, device type, browser type, operating system, login timestamps | Automated collection via cookies and server logs |
| Usage Data | Pages visited, features used, time on platform, navigation patterns | Analytics tools, cookies |
| Communications Data | Live chat transcripts, support emails, feedback submissions | Customer support interactions |
3.2 gdwin28 does not collect Special Categories of personal data (such as racial or ethnic origin, health data, or biometric data) except where required by applicable law or regulation.
3.3 Where you provide data relating to a third party (for example, a nominated contact for responsible gaming purposes), you confirm that you have obtained that person's consent to provide their data to gdwin28 for the stated purpose.
4.1 gdwin28 uses your personal data for the following purposes:
4.2 gdwin28 will not use your personal data for any purpose incompatible with the purposes set out in this Section without first obtaining your consent or establishing another lawful basis for processing.
5.1 gdwin28 processes your personal data on the following legal grounds:
6.1 gdwin28 does not sell, rent, or trade your personal data to any third party for their own marketing purposes.
6.2 gdwin28 may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:
6.3 All third parties with whom gdwin28 shares personal data are required to process that data in accordance with applicable data protection laws and gdwin28's contractual data processing requirements.
7.1 gdwin28 uses cookies and similar tracking technologies on the gdwin28.org platform to: (a) maintain your login session; (b) remember your platform preferences; (c) analyse platform usage and performance; and (d) support fraud prevention and security functions.
7.2 The following types of cookies are used on the gdwin28 platform:
7.3 You may manage cookie settings through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the gdwin28 platform.
8.1 gdwin28 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law.
8.2 The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML/KYC regulatory obligation |
| Transaction records | 7 years from transaction date | Financial regulatory obligation |
| Gaming session logs | 3 years from session date | Regulatory audit requirement |
| Customer support records | 3 years from last interaction | Dispute resolution / legal claims |
| Marketing consent records | Until withdrawal of consent + 1 year | Consent documentation |
| Technical / log data | 12 months on a rolling basis | Security and fraud prevention |
8.3 Where gdwin28 is no longer required to retain your data, it will be securely deleted or anonymised in accordance with gdwin28's data disposal procedures.
9.1 gdwin28 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
9.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, gdwin28 will notify affected players and the relevant supervisory authority in accordance with applicable data breach notification obligations.
9.3 Notwithstanding the security measures described above, no method of electronic transmission or storage is completely secure. gdwin28 cannot guarantee the absolute security of data transmitted over the internet and you transmit data at your own risk. Once gdwin28 has received your data, appropriate security procedures are applied.
10.1 Subject to applicable data protection law, you have the following rights in respect of your personal data held by gdwin28:
10.2 To exercise any of the above rights, please contact gdwin28 via the details provided in Section 15. gdwin28 will respond to valid requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days with notification.
10.3 gdwin28 reserves the right to verify your identity before processing a data subject request to prevent fraudulent or unauthorised access to personal data.
11.1 As gdwin28 operates under an international gaming jurisdiction licence and works with global technology and game providers, your personal data may be transferred to and processed in countries outside of Malaysia.
11.2 Where personal data is transferred outside of Malaysia, gdwin28 ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses binding the recipient to standards equivalent to those described in this Policy.
11.3 By using the gdwin28 platform, you acknowledge and consent to the transfer of your personal data to third countries as described in this Section, subject to the safeguards described herein.
gdwin28 strictly prohibits use of the platform by persons under 21 years of age. gdwin28 does not knowingly collect personal data from individuals under the age of 21. If gdwin28 becomes aware that personal data has been collected from an underage person, that data will be deleted immediately and the account closed.
12.1 If you are a parent or guardian and believe your child has provided personal data to gdwin28 in breach of the age restriction, please contact gdwin28 immediately via the contact details in Section 15.
13.1 The gdwin28 platform does not include links to external third-party websites. This Policy applies solely to personal data collected through the gdwin28.org platform and associated services operated by gdwin28.
13.2 gdwin28 is not responsible for the data practices of any third-party game providers whose game content is accessed through the gdwin28 platform. Players should review the privacy policies of such providers independently where relevant.
14.1 gdwin28 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via a notice displayed on the gdwin28 platform and/or by email to your registered address at least 14 days before the changes take effect.
14.2 The date of the most recent revision will always be displayed at the top of this Policy. Your continued use of the gdwin28 platform after the effective date of any revision constitutes your acceptance of the updated Policy.
14.3 If you do not accept a material change to this Policy, you should cease using the platform and may close your account by contacting gdwin28 support.
15.1 For any questions, requests, or complaints regarding this Privacy Policy or gdwin28's handling of your personal data, please contact gdwin28 through the following channels:
15.2 If you are not satisfied with gdwin28's response to a data protection complaint, you have the right to escalate the matter to the relevant supervisory authority in the jurisdiction governing your rights under applicable data protection law.
15.3 For responsible gaming concerns, please visit the Responsible Gaming page or contact the live chat support team directly.
Every connection between your device and the gdwin28 platform is encrypted with 256-bit SSL. Your login credentials, financial data, and personal information are never transmitted in plain text.
gdwin28 does not sell, rent, or trade your personal data to third parties for marketing purposes. Data shared with service providers is limited to what is strictly necessary for them to deliver their service to gdwin28.
You have the right to access, correct, delete, or export your personal data. gdwin28 will respond to valid data subject requests within 30 days. Submit requests directly through the 24/7 live chat support channel.
gdwin28 processes player data in compliance with the requirements of its international gaming licence, including mandatory KYC, AML, and responsible gaming monitoring obligations that protect both players and the integrity of the platform.
gdwin28 does not retain your personal data indefinitely. Clear retention schedules are defined for each data category, after which data is securely deleted or anonymised. We only keep data for as long as we need it.
Marketing communications from gdwin28 are only sent where you have given explicit consent. You can withdraw consent at any time by contacting gdwin28 support. Opting out of marketing does not affect your ability to use the platform.
Licensed platform · SSL encrypted · MYR payouts · 3,500+ games · 21+ only
Login to gdwin28