kasiwin Privacy Policy

Last updated: 1 January 2026. This Privacy Policy applies to all users of the kasiwin platform accessible at kasiwin.win and governs all personal data collected in connection with the use of that platform.

1. Data Controller

1.1 For the purposes of applicable data protection legislation, the data controller in respect of personal data collected through the kasiwin platform is the kasiwin operating entity ("kasiwin", "we", "us", "our") as registered under the applicable international gaming authority licensing framework.

1.2 If you have questions about this Privacy Policy or wish to exercise any of your data rights, you may contact our Data Protection representative via the 24/7 live chat support channel available from your player dashboard, or by email at [email protected] (displayed as plain text only — not a clickable link).

2. Personal Data We Collect

2.1 Registration data: When you create a kasiwin account, we collect your full legal name, date of birth, residential address, email address, and mobile telephone number. This information is mandatory for account creation and identity verification purposes.

2.2 Identity verification documents: To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulatory requirements, kasiwin may request copies of government-issued identity documents (such as a Malaysian MyKad or passport), proof of address, and in some cases proof of source of funds. These documents are processed by our regulated third-party KYC verification provider.

2.3 Financial data: We collect information relating to your deposit and withdrawal transactions, including payment method identifiers (e-wallet account references, bank account details sufficient for transfer processing). kasiwin does not store raw card numbers. Payment instrument tokenisation is handled by our regulated payment processing partners.

2.4 Account activity data: We collect records of your gaming activity on the platform, including game history, wager amounts, win/loss records, session durations, and login timestamps. This data is used for regulatory reporting, responsible gaming monitoring, fraud prevention, and to resolve disputes.

2.5 Technical and device data: When you access kasiwin, our systems automatically collect IP address, device type and operating system, browser type and version, approximate geographic location derived from IP, and session identifiers. This data is used for security monitoring, fraud prevention, and platform optimisation.

2.6 Communications data: When you contact kasiwin support via live chat or email, we retain records of those communications. This enables us to track ongoing issues, maintain service quality, and comply with any regulatory requirement to retain customer communications.

2.7 Responsible gaming data: If you set deposit limits, session time reminders, or activate self-exclusion through your kasiwin account, we retain records of these elections and their associated dates. This data is used to enforce your chosen restrictions and cannot be deleted while those restrictions are active.

3. Legal Bases for Processing

3.1 kasiwin processes your personal data on the following legal bases:

• Contractual necessity: Processing required to operate your kasiwin account, process deposits and withdrawals, and provide the gaming services you have contracted for.
• Legal obligation: Processing required to comply with applicable anti-money laundering legislation, gaming regulation, tax reporting obligations, and other mandatory legal requirements.
• Legitimate interests: Processing undertaken to prevent fraud and abuse, maintain platform security, and improve service quality — where these interests are not overridden by your privacy interests.
• Consent: Where we rely on your consent for any specific processing activity (for example, optional marketing communications), this will be clearly indicated at the point of data collection and may be withdrawn at any time.

4. How We Use Your Personal Data

4.1 kasiwin uses the personal data described in Section 2 for the following purposes:

• Creating and maintaining your player account, including identity verification and age verification (21+ requirement).
• Processing deposits, withdrawals, and all financial transactions on the platform.
• Detecting and preventing fraud, money laundering, account abuse, and prohibited conduct as defined in the kasiwin Terms & Conditions.
• Complying with KYC, AML, and responsible gaming regulatory obligations under our operating licence.
• Providing customer support and resolving disputes or complaints.
• Monitoring for responsible gaming indicators — such as elevated session frequency, rapid loss recovery behaviour, or voluntary limit adjustments — and taking appropriate action where welfare concerns are identified.
• Sending transactional communications (account notifications, payment confirmations, security alerts) to your registered contact details.
• With your separate consent: sending promotional or marketing communications about kasiwin offers, which you may opt out of at any time.

5. Sharing of Personal Data

5.1 kasiwin does not sell, rent, or otherwise trade your personal data to third parties for their independent marketing use.

5.2 We share personal data with third-party service providers only where necessary for the operation of the kasiwin platform. These providers include:

• KYC/AML verification providers — to verify your identity and comply with regulatory requirements.
• Payment processors — including the operators of Touch n Go eWallet, Boost, Maybank2u, CIMB Clicks, Public Bank, and FPX integrations — to process your financial transactions.
• Fraud prevention and security services — to detect and prevent account abuse and financial crime.
• Game providers — live casino studio operators and RNG game developers may receive session-level technical data necessary for game operation and dispute resolution.
• Customer support platforms — to operate the live chat support function.

5.3 All third-party service providers with whom kasiwin shares personal data are contractually required to handle that data in accordance with applicable data protection law and kasiwin's data processing standards.

5.4 kasiwin may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. We will, where legally permitted, notify affected players of such disclosures.

6. Data Retention

6.1 kasiwin retains personal data for the following periods:

• Active accounts: Data is retained throughout the life of an active kasiwin account.
• Closed accounts: Following account closure, personal data is retained for a minimum of five years to satisfy anti-money laundering regulatory requirements applicable to gambling operators. Specific data categories may be retained for longer where required by other applicable law.
• Communications records: Customer support communications are retained for three years following the last interaction, unless a specific regulatory or dispute reason requires longer retention.

6.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identified individual.

7. Data Security

7.1 kasiwin implements technical and organisational security measures appropriate to the sensitivity of the personal data processed. These include:

• SSL/TLS encryption for all data transmitted between your device and kasiwin servers.
• Encryption at rest for stored personal data and identity documents.
• Payment instrument tokenisation — raw financial credentials are not held on kasiwin systems.
• Access controls restricting internal access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing by qualified security professionals.
• Incident response procedures to detect, investigate, and notify affected parties of any data breach in accordance with applicable regulatory timelines.

8. Cookies and Tracking Technologies

8.1 kasiwin uses cookies and similar tracking technologies when you access the platform. These include:

• Essential cookies: Required for platform operation, session management, and security functions. These cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to understand aggregate platform usage patterns and improve the kasiwin experience. These do not identify you personally.
• Fraud prevention cookies: Used to detect suspicious access patterns and protect accounts from unauthorised access.

8.2 You may manage non-essential cookie preferences through your browser settings. Disabling essential cookies will impair your ability to use the kasiwin platform.

9. Your Rights

9.1 Subject to applicable data protection law and regulatory retention obligations, you hold the following rights in respect of your personal data held by kasiwin:

• Right of access: You may request a copy of the personal data kasiwin holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding regulatory retention obligations.
• Right to restriction: You may request that we restrict processing of your data in defined circumstances — for example, while the accuracy of data is being contested.
• Right to object: You may object to processing based on legitimate interests, and to any direct marketing processing.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a machine-readable copy of your data.

9.2 To exercise any of these rights, please contact kasiwin support via live chat or at [email protected]. We will respond within 30 days of receiving a valid request.

9.3 Where kasiwin is unable to comply with a data rights request due to a conflicting regulatory obligation (for example, AML-mandated data retention), we will explain the basis for that refusal in writing.

10. International Data Transfers

10.1 Some of kasiwin's third-party service providers are located or operate servers outside of Malaysia. Where personal data is transferred internationally, kasiwin ensures that appropriate transfer safeguards are in place — including standard contractual clauses or other legally recognised transfer mechanisms — to ensure your data receives an equivalent level of protection regardless of where it is processed.

11. Children and Minors

11.1 The kasiwin platform is strictly intended for individuals aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If kasiwin becomes aware that personal data has been collected from an individual under 21, that account will be closed immediately and the associated data deleted or retained only as required for regulatory reporting purposes.

12. Changes to This Privacy Policy

12.1 kasiwin may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or platform functionality. Material changes will be communicated to registered players via email to the address on file, or via a prominent notice on the Platform, at least 14 days before the change takes effect. Continued use of kasiwin following the effective date of any updated Policy constitutes acceptance of the revised terms.

13. Contact and Complaints

13.1 For any privacy-related enquiry, to exercise a data right, or to raise a complaint about kasiwin's data handling practices, contact us via 24/7 live chat from your player dashboard or by email at [email protected].

13.2 If you are not satisfied with our response to a complaint, you may refer the matter to the relevant data protection supervisory authority or gaming regulatory authority in the applicable jurisdiction.