Privacy Policy

This Privacy Policy ("Policy") is issued by Maswinking ("we", "us", "our", or "the Platform"), the operator of the online gaming services accessible at maswinking.cam. It sets out our practices regarding the collection, use, storage, disclosure, and protection of personal data obtained from individuals who register an account, visit, browse, or otherwise interact with the Maswinking platform.

Maswinking operates primarily for the benefit of Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions of Malaysia. We take our obligations in relation to your personal data seriously, and we are committed to handling your information with transparency, fairness, and a proportionality of purpose that reflects genuine respect for your privacy.

By registering an account on, or otherwise using, the Maswinking platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any aspect of this Policy, you must discontinue use of the Platform.

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, either directly or in combination with other data held by us or a third party.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, Maswinking.
• "Data Subject" means the individual to whom Personal Data relates — in this context, you, the User.
• "Third Party" means any individual or entity other than you and Maswinking.
• "Cookies" means small text files placed on your device by the Platform for session management, analytics, and functional purposes.
• "KYC" means Know Your Customer — the identity verification process required under applicable financial crime prevention legislation.
• "PDPA" means the Personal Data Protection Act 2010 (Malaysia), the primary legislation governing personal data protection in Malaysia.
• "Platform" means the Maswinking website and all associated online gaming services accessible at maswinking.cam.

Maswinking collects personal data that is necessary for the provision of our gaming services, the management of your account, compliance with legal and regulatory obligations, and the improvement of your overall platform experience. The categories of personal data we may collect are set out in the table below:

We do not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required by law — for example, where a government-issued identification document submitted for KYC purposes happens to disclose such information incidentally.

Maswinking collects personal data through the following channels:

• Account Registration: Data submitted directly by you when creating an account on the Platform, including your name, date of birth, email address, mobile number, and residential address.
• Identity Verification (KYC): Documents submitted in response to our KYC verification requests, including copies of your national identification card (MyKad) or passport, and proof of address.
• Financial Transactions: Data generated when you make deposits or withdrawal requests, including payment method identifiers and transaction records. Supported payment methods include Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank online banking, Hong Leong Connect, USDT TRC20, and Bitcoin.
• Platform Interaction: Data generated automatically as you use the Platform — including your IP address, device data, browser information, session timestamps, pages visited, and game activity.
• Customer Support: Information provided by you when contacting our support team via live chat, email, or other communication channels.
• Cookies and Tracking Technologies: Data collected via cookies and similar technologies as described in Section 8 of this Policy.
• Third-Party Sources: In limited circumstances, we may receive personal data about you from third-party identity verification services, fraud prevention databases, or payment processors, where this is necessary for compliance or security purposes.

Maswinking processes your personal data on the following legal grounds, consistent with the requirements of the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable data protection legislation:

• Contractual Necessity: Processing is required to fulfil our contractual obligations to you as a registered User of the Platform — including account management, processing financial transactions, and providing gaming services.
• Legal Obligation: Processing is necessary to comply with applicable legal requirements, including anti-money-laundering (AML) legislation, Know Your Customer (KYC) regulatory obligations, and age verification requirements under responsible gambling frameworks.
• Legitimate Interests: Processing is carried out in pursuit of Maswinking's legitimate business interests, including platform security, fraud prevention, responsible gambling monitoring, and service quality improvement, where those interests are not outweighed by your rights and interests.
• Consent: Where consent is required — for example, for the delivery of marketing communications or the placement of non-essential cookies — we will obtain your explicit consent prior to such processing. You may withdraw your consent at any time by contacting our support team or adjusting your account preferences.

Maswinking uses personal data collected from you for the following purposes:

1. Account Administration: To create, maintain, and administer your registered account, including processing account updates and managing login security.
2. Service Provision: To provide access to our gaming products, process bets, and deliver the features and functionality of the Platform.
3. Payment Processing: To process deposits and withdrawals through your designated payment method, whether via Touch 'n Go eWallet, DuitNow, FPX, bank transfer, or cryptocurrency channels.
4. Identity and Age Verification: To verify that you are who you claim to be and that you meet the minimum age requirement of 21 years for participation in online gaming.
5. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multiple account creation, and other prohibited conduct as described in our Terms & Conditions.
6. Responsible Gambling: To monitor gaming behaviour, identify indicators of potential problem gambling, apply responsible gambling tools such as deposit limits and session reminders, and where appropriate, initiate outreach or self-exclusion procedures.
7. Customer Support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for service quality and dispute resolution purposes.
8. Legal and Regulatory Compliance: To fulfil our obligations under applicable Malaysian and international law, including anti-money-laundering legislation, data protection requirements, and gaming regulations.
9. Platform Improvement: To analyse usage patterns, identify technical issues, and inform product development decisions that improve the platform experience for all users.
10. Marketing Communications: Where you have opted in, to send you promotional communications about bonuses, new game launches, sporting events, and platform updates. You may opt out at any time.

Maswinking does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate contractual or legal safeguards:

• Payment Service Providers: Malaysian payment processors and e-wallet operators — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX gateway providers, and cryptocurrency exchange infrastructure — as necessary to process financial transactions.
• Identity Verification Services: Third-party KYC and AML compliance service providers who assist us in verifying the identity and age of Users, and in meeting our financial crime prevention obligations.
• Technology and Infrastructure Providers: Cloud hosting, content delivery, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Game Studio and Content Partners: Game software providers whose games are hosted on the Platform may receive technical session identifiers as required for game integrity and dispute resolution purposes. No unnecessary personal data is shared.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required or permitted by law, including in response to formal legal process.
• Professional Advisers: Lawyers, auditors, accountants, and insurers engaged by Maswinking, subject to confidentiality obligations.

Maswinking uses cookies and similar tracking technologies (collectively, "Cookies") to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. They serve a range of functional, analytical, and security purposes.

The categories of Cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies that keep you logged in during a session, security tokens, and load-balancing cookies. These cannot be disabled without preventing use of the Platform.
• Functional Cookies: Used to remember your preferences and settings, such as your preferred language (English, Bahasa Melayu, or Mandarin), display preferences, and notification settings.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform, including pages viewed, session duration, and navigation paths. This information helps us improve the Platform experience.
• Fraud Prevention Cookies: Used as part of our security and fraud detection systems to identify suspicious access patterns or unusual account behaviour.

You may configure your browser settings to refuse or delete cookies; however, please note that disabling strictly necessary cookies will impair your ability to use the Platform. Most modern browsers provide cookie management tools in their settings or preferences menu. Clearing cookies will typically log you out of any active Platform session.

Maswinking retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligations. The following indicative retention periods apply:

• Account Data: Retained for the duration of your active account relationship with Maswinking, and for a period of at least five (5) years following account closure, in compliance with anti-money-laundering and financial record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with applicable Malaysian financial record-keeping legislation.
• KYC Documentation: Retained for a minimum of five (5) years following the conclusion of the account relationship, or longer where required by applicable law.
• Support and Communication Records: Retained for a period of three (3) years from the date of the most recent interaction, or longer where the interaction is relevant to an unresolved dispute or legal proceeding.
• Marketing Consent Records: Retained for as long as you remain opted in, and for a further period of two (2) years following any opt-out, as evidence of compliance with consent obligations.
• Technical and Usage Data: Retained in aggregated or anonymised form for platform analytics purposes indefinitely; personally identifiable technical data retained for up to two (2) years.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data governance procedures.

Maswinking implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption applied to all data transmitted between your device and the Maswinking platform.
• Encrypted storage of sensitive personal data, including financial information and identity documents, on secured servers with restricted access controls.
• Multi-factor authentication options available to all registered Users for enhanced account security.
• Regular security audits, penetration testing, and vulnerability assessments conducted on Platform infrastructure.
• Strict internal access control policies ensuring that personal data is accessible only to employees and contractors with a legitimate operational need.
• Documented data breach response procedures, including obligations to notify affected Users and relevant authorities where a breach meets the threshold for mandatory notification under applicable law.

Notwithstanding these measures, no method of electronic transmission or data storage is 100% secure. Maswinking cannot guarantee the absolute security of data transmitted over the internet. You are responsible for maintaining the security of your account login credentials and for reporting any suspected unauthorised access to our support team promptly.

Subject to applicable legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights in relation to your personal data held by Maswinking:

• Right of Access: You have the right to request a copy of the personal data Maswinking holds about you, along with information about how it is processed. Access requests will be responded to within a reasonable period and, in any event, within 21 days of receipt of a valid request.
• Right to Correction: You have the right to request that inaccurate or incomplete personal data held by Maswinking be corrected or updated. You may update certain account information directly through your account settings, or by contacting our support team for data that cannot be self-corrected.
• Right to Withdraw Consent: Where processing is based on your consent — for example, for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to overriding legal obligations — for example, Maswinking cannot delete financial transaction records during the mandatory retention period required by anti-money-laundering legislation.
• Right to Object to Processing: You have the right to object to processing carried out on the basis of legitimate interests where you believe your rights and interests override those legitimate interests. Any such objection will be reviewed on a case-by-case basis.
• Right to Data Portability: Where technically feasible and legally required, you may request a copy of your personal data in a structured, machine-readable format for the purpose of transferring it to another service provider.

To exercise any of the above rights, please contact our Data Protection team via the email address or live chat channel described in Section 15. We may ask you to verify your identity before acting on any data rights request, to ensure the security of your information.

The Maswinking platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 21.

If we become aware that an account has been registered by an individual who does not meet our minimum age requirement, that account will be immediately suspended and any associated personal data will be deleted to the extent permitted by law. Any funds held in such an account will be returned via the depositing payment method following appropriate verification.

In the course of providing the Platform's services, your personal data may be transferred to, stored in, or processed in countries outside Malaysia. This may occur, for example, when data is processed by game content providers whose infrastructure is located internationally, or when cloud infrastructure used for Platform hosting is operated from data centres in other jurisdictions.

Where such international transfers occur, Maswinking will ensure that appropriate safeguards are in place to protect your personal data to a standard that is substantially equivalent to the protections afforded under the PDPA 2010. These safeguards may include contractual data processing agreements containing equivalent data protection obligations, or transfers to countries that have been assessed as providing an adequate level of data protection.

By using the Maswinking platform, you acknowledge and consent to the international transfer of your personal data as described in this section, provided that such transfers are carried out with appropriate safeguards in place.

Maswinking reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. Any revised Policy will be published on this page with a revised "Last Updated" date.

Where an amendment to this Policy materially affects the way in which we process your personal data, we will use reasonable endeavours to notify you in advance — for example, via a notification within the Platform interface or via the email address associated with your account. Your continued use of the Platform following such notification constitutes acceptance of the revised Policy.

We encourage you to review this Policy periodically to remain informed of how Maswinking protects your information. A current version of this Policy will always be accessible at maswinking.cam/privacy-policy.

If you have questions, concerns, or complaints regarding this Privacy Policy or the way in which Maswinking processes your personal data, please contact our Data Protection team through the following channels:

We take all privacy complaints seriously. Upon receipt of a formal privacy complaint, we will acknowledge your submission within five (5) business days and endeavour to issue a substantive response within 21 calendar days. Where a complaint cannot be resolved to your satisfaction through our internal process, you may have the right to lodge a complaint with the relevant data protection authority in Malaysia.

For general enquiries about our platform, bonuses, or account management, you may also refer to our FAQ page.