Privacy Policy 32win — Personal Data Protection for Malaysian Members

This Privacy Policy applies to all personal information collected by 32win through our platform, accessible at 32win-jit.net, including all subpages, services, and related features. It also applies to any communications between you and 32win via email, live chat, or other channels.

By registering an account or using any 32win service, you agree that your personal information will be managed in accordance with the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please stop using our platform and contact us to close your account.

32win collects various categories of personal data depending on how you interact with our platform. Below is a summary of the types of data we collect:

32win collects your personal data through several different channels during your interactions with our platform:

Data You Provide Directly

• During account registration — name, email, Malaysian phone number, date of birth.
• During the identity verification (KYC) process — a copy of your identity card or passport.
• When registering a payment method — Malaysian bank account or e-wallet details (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX).
• When contacting customer support — live chat conversation records or emails.
• When completing a feedback form or satisfaction survey.

Automatically Collected Data

Each time you use the 32win platform, our systems automatically record certain technical information required for security and platform operations. This includes your IP address, web browser type and version, device operating system, access date and time, pages visited, and cookie data. This information does not directly reveal your personal identity, but is used to detect unusual activity or suspicious access attempts.

32win uses your personal data only for legitimate, clearly defined purposes. The following outlines the primary ways your data is used:

Account Management & Services

• Creating and managing your 32win account.
• Processing deposits in MYR and withdrawing winnings to your bank account or e-wallet.
• Verifying your identity before processing withdrawals or when required by law.
• Providing access to casino games, baccarat, blackjack, slots, Malaysia Super League and EPL Sports Betting, and other services on the 32win platform.
• Managing the VIP Rewards programme and accumulated points.

Security & Compliance

• Detecting and preventing fraud, money laundering, and any unlawful activity on the platform.
• Verifying that all members meet the minimum age requirement of 18 years.
• Meeting reporting obligations to Malaysian authorities as required by law.
• Supporting responsible gaming programmes, including self-deposit limits and self-exclusion options.

Communications & Support

32win uses your email address and phone number to send important account notifications, transaction confirmations, and service updates. With your consent, we also send information about current promotions and offers. You may opt out of marketing communications at any time without affecting your access to the platform's core services.

32win does not sell, rent, or transfer your personal data to third parties for marketing purposes. Your data is shared only in the following limited circumstances:

Trusted Service Providers

To operate the platform effectively, 32win works with a carefully selected group of third-party service providers. These include payment service providers that process deposits and withdrawals in MYR via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, and Malaysian banking channels. These providers receive only the minimum data necessary to carry out their functions and are not permitted to use your data for any other purpose.

Legal Requirements

32win may be required to disclose your personal data to the relevant authorities when mandated by Malaysian law — including anti-money laundering enforcement units, the Personal Data Protection Department, or courts acting on a valid order. In all such cases, we disclose only the minimum information necessary and will notify you to the fullest extent permitted by law.

32win invests seriously in security infrastructure to ensure your personal data is protected against unauthorised access, disclosure, alteration, or destruction.

• Data Encryption in Transit: All communications between your device and 32win's servers are protected by 256-bit SSL encryption using the latest TLS 1.3 protocol.
• Encryption of Data at Rest: Sensitive data stored in 32win's databases — including passwords, financial information, and identity verification documents — is encrypted using the industry-standard AES-256 protocol.
• Access Controls: Access to member personal data within 32win's internal systems is restricted to staff with a legitimate business need, with complete audit logs maintained for every access.
• Two-Factor Authentication (2FA): All members are encouraged to enable 2FA on their accounts for an additional layer of security.
• Real-Time Security Monitoring: 32win's systems are continuously monitored to detect any suspicious activity or attempted security breaches.
• Regular Security Testing: 32win conducts regular penetration testing and security audits carried out by independent third parties to identify and address any vulnerabilities.

While we take all reasonable steps to protect your data, no system can guarantee 100% security at all times. As an added precaution on your end, please ensure your 32win account password is strong and unique, and never share your login credentials with anyone.

32win retains your personal data only for as long as necessary for the purposes outlined in this privacy policy or as required by Malaysian law.

Retention Periods by Data Category

• Financial Transaction Records: 7 years from the transaction date, in accordance with the requirements of the Malaysian Companies Act and tax legislation.
• Identity Verification (KYC) Documents: 5 years after account closure, in accordance with Malaysia's AML legal requirements.
• Platform Usage Data: 2 years after the last session, or until account closure, whichever comes first.
• Support Communication Records: 3 years from the date of last interaction, for dispute reference purposes.
• Cookie Data: Depending on the cookie type — from the current session up to a maximum of 2 years for preference cookies.

Once the relevant retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity. This deletion process follows secure data deletion procedures to ensure the data cannot be recovered.

32win uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how members use our services.

Types of Cookies Used

• Session Cookies (Required): A temporary cookie required to keep you logged in during an active gaming session. It is deleted automatically when you close your browser. This cookie cannot be disabled as it is fundamental to the platform's functionality.
• Security Cookies (Required): Used to detect suspicious login attempts and protect your account against CSRF attacks. This is also a mandatory cookie for platform security.
• Optional Cookies (Non-Essential): Saves your language preference and display settings so you do not have to reconfigure them on each visit. Can be disabled.
• Analytics Cookies (Optional): Helps us understand which parts of the platform are used most frequently, so we can make improvements. This data is collected in aggregate and does not identify you individually. Can be disabled.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect the core functionality of the 32win platform.

In the course of its operations, 32win may need to transfer or store your personal data on servers located outside Malaysia. This occurs primarily in connection with the use of cloud computing services and international technology service providers.

In all such cases, 32win ensures that any international data transfer is carried out with adequate safeguards — including the use of data transfer agreements that require recipients to comply with data protection standards equivalent to Malaysia's PDPA. 32win will not transfer member personal data to countries with insufficient data protection standards without obtaining your explicit consent or putting appropriate contractual safeguards in place.

The 32win platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data of a minor has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the relevant account. If you believe a child or person under 18 has registered or used the 32win platform, please contact us immediately at support@32win-jit.net so we can act promptly.

32win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the services we offer. When material amendments are made, we will notify members through one of the following channels:

• An in-platform notification on your next login to 32win.
• Notification emails sent to the address registered to your account.
• Update the "Last Updated" date at the top of this page.

We encourage you to review this page periodically to stay informed about 32win's privacy practices. Continued use of the platform after any amendments to this Privacy Policy take effect will be considered acceptance of the revised terms. If you do not agree with any changes, you have the right to close your account before those changes come into effect.

The current version of this Privacy Policy is effective from 15 January 2026.

If you have any questions or concerns, or wish to exercise any of your data protection rights as described in this Privacy Policy, please reach out to the 32win privacy team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the 32win platform. The fastest way to get immediate assistance — typical response time is under 2 minutes.
• Privacy Email: support@32win-jit.net — for official requests relating to data protection rights, including requests for access, correction, or deletion of data. We aim to respond within 14 business days.

When submitting a request related to your data protection rights, please clearly state the type of request you are making and provide sufficient information for us to verify your identity. This is required to protect your privacy — we want to ensure your personal data is never disclosed to an unauthorised party.