Privacy Policy DDWin App

1Information We Collect

DDWin App collects several categories of information from users to ensure the platform runs smoothly, securely, and in compliance with applicable legal requirements. The information collected falls into two main categories: information you provide directly and information collected automatically when you use our platform.

Information you provide directly:

• Full name, date of birth, and national identity card or passport number for identity verification (KYC) purposes.
• A valid email address and mobile number for communication and account security purposes.
• Bank account details, e-wallet account numbers (Touch 'n Go, Boost, GrabPay), and other payment information for processing deposits and withdrawals.
• Supporting documents such as copies of MyKad, bank statements, or utility bills when required for advanced KYC processes.
• Any information you share when communicating with the ddwin app customer support team.

Information collected automatically:

• Your IP address, device type, operating system, and web browser information.
• Platform activity data including pages visited, bets placed, session duration, and usage patterns.
• Technical data such as error logs, response times, and app performance for system improvement purposes.
• General location information (based on IP address) for the purpose of verifying permitted geographic regions.

Below is a summary of the types of data collected and their purposes:

2How We Use Your Data

Every piece of information ddwin app collects is used responsibly and only for legitimate purposes. We do not use your data for anything unrelated to providing ddwin app services. Below is a full list of how we use your information:

• Account management: To create, verify, and manage your ddwin app account, including a secure registration and login process.
• Payment processing: To process your deposits and withdrawals efficiently and securely via your chosen payment method, including DuitNow QR, FPX, Touch 'n Go eWallet, Boost, GrabPay, and bank transfer.
• Regulatory compliance: To meet legal requirements for anti-money laundering (AML), identity verification (KYC), and reporting obligations set by regulatory authorities.
• Platform security: To detect and prevent fraud, unauthorised access, bonus abuse, and other suspicious activities.
• Service improvement: To analyse usage patterns, identify technical issues, and continuously improve the quality and performance of the ddwin app platform.
• Communications: To send important notifications regarding your account, transactions, security updates, and relevant promotional information (subject to your preferences).
• Customer support: To provide technical assistance and resolve any issues or complaints you report to the ddwin app support team.

DDWin App follows a "data minimisation" principle — meaning we only collect and use data that is strictly necessary for the stated purposes. We regularly review our data needs to ensure we do not retain information that is no longer required.

3Information Sharing with Third Parties

DDWin App upholds the principle that user privacy is a top priority. We does not sell, does not rent, and does not disclose your personal data to any third party for marketing or commercial purposes. However, there are limited situations where data sharing may occur:

• Payment service providers: Payment gateways we use (such as FPX, DuitNow, and e-wallet processors) receive only the transaction information necessary to process your payment. All such providers are bound by strict confidentiality agreements.
• Identity verification service: Third-party KYC service providers we use to verify user identities. Such sharing is kept to a minimum and solely for verification purposes.
• Legal authority: DDWin App will disclose information to the relevant authorities when required by court order, legal obligation, or a valid official investigation.
• Technology service providers: Companies providing technical infrastructure services such as server hosting and analytics — all bound by data protection agreements.

4Data Security

DDWin App continuously invests in the latest security infrastructure to ensure your personal data is always protected against cyber threats, unauthorised access, and data breaches. The key security measures we employ are as follows:

• 256-bit SSL encryption: All data transmitted between your device and the ddwin app servers is encrypted using TLS 1.3 protocol with 256-bit encryption, the highest industry standard.
• Secure password storage: User passwords are never stored in plain text. We use the bcrypt hashing algorithm with a random salt to securely store all passwords.
• Real-time threat monitoring: The ddwin app security monitoring system operates 24/7 to detect and respond to any cyber threats or intrusion attempts in real time.
• Periodic penetration testing: DDWin App conducts regular security tests (penetration testing) by independent security experts to identify and patch any vulnerabilities before they can be exploited.
• Internal access control: Only DDWin App staff with a legitimate business need are permitted to access user data, and every access is logged and monitored.
• Periodic data backups: User data is regularly backed up to secure, geographically separate locations to ensure rapid data recovery in the event of any technical incident.

5Cookies & Tracking Technologies

DDWin App uses cookies and similar tracking technologies to enhance your experience on the platform, ensure core functions operate correctly, and understand how users interact with our services. The types of cookies we use are as follows:

• Essential cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Preference cookies: Saves your preference settings such as language, time zone, and display preferences to deliver a more personalised experience.
• Analytics cookies: Helps us understand how users interact with the platform, the most frequently visited pages, and areas for improvement. This data is collected anonymously and in aggregate.
• Security cookies: Used to detect suspicious activity, prevent fraud, and protect the integrity of the DDWin App platform.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect certain features of the DDWin App platform. We recommend keeping cookies enabled for the best experience.

6User Rights Over Personal Data

DDWin App fully respects your rights over your personal data. As a DDWin App user, you have the following rights, which you may exercise at any time:

• Right to access: You have the right to request a copy of all personal data DDWin App holds about you. This request will be processed within 30 days.
• Right to rectification: If any information we hold is inaccurate or outdated, you have the right to request a prompt correction.
• Right to erasure: You may request the deletion of your personal data, subject to data retention requirements for legal and regulatory purposes.
• Right to restrict processing: You may request to restrict how DDWin App uses your data in certain situations.
• Right to object: You have the right to object to the use of your data for direct marketing purposes at any time.
• Right to data portability: You may request to receive your personal data in a machine-readable format for transfer to another service.

To submit any request related to your privacy rights, please contact the ddwin app support team via the platform's live chat or by email at [email protected]. DDWin App is committed to processing all privacy requests within a reasonable timeframe.

7Data Retention Period

DDWin App retains your personal data only for as long as necessary to fulfil the original purpose of collection, or for as long as required by applicable laws and regulations. Below are our data retention guidelines:

• Active account data: Retained for the duration your account remains active on DDWin App.
• KYC and identity verification data: Retained for a minimum of 5 years after account closure, in line with AML legal requirements.
• Financial transaction records: Retained for 7 years for financial accountability and tax compliance purposes.
• Customer support communication logs: Retained for 2 years for reference and service improvement purposes.
• Anonymous analytics data: May be retained for a longer period as it has been anonymised and cannot be linked to any individual.

Once the designated retention period has elapsed, data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-identified.

8Children's Privacy

DDWin App is a platform exclusively for adults aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

Should ddwin app discover that personal data of a child has been collected without our knowledge, we will take immediate steps to:

• Immediately closing the associated account.
• Deleting all data related to the individual from our systems.
• Reporting the incident to the relevant authorities where necessary.

9Amendments to This Privacy Policy

DDWin App reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements to our services. Any material changes to this policy will be communicated to users via:

• An in-platform notification within ddwin app the next time you log in.
• Notification emails sent to the email address registered to your account.
• Update the "Last Updated" date at the top of this Privacy Policy page.

Your continued use of the ddwin app platform after any amendments to this Privacy Policy are published will be considered your acceptance of the revised terms. We encourage you to review this page periodically to stay informed of how we protect your information.

10Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how ddwin app handles your personal data, please do not hesitate to contact us. The ddwin app Data Protection Team is ready to assist you.