Privacy Policy

This Privacy Policy ("Policy") is issued by 4uwin ("we", "us", "our", "4uwin") and governs the collection, use, storage, disclosure, and protection of personal data submitted by or collected from users ("you", "User") of the 4uwin platform accessible at https://4uwin.cam (the "Platform").

4uwin is an online gaming and sports betting platform serving players primarily located in Malaysia, including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions across the country. Our operations involve the processing of personal data as a necessary and integral part of delivering our Services, including account management, payment processing, identity verification (KYC), and responsible gambling monitoring.

This Policy should be read in conjunction with 4uwin's Terms & Conditions, which together form the complete agreement governing your relationship with the Platform. In the event of any conflict between this Policy and the Terms & Conditions with respect to data handling, this Policy shall prevail.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

4uwin collects personal data from you through several channels: information you provide directly when registering or using the Platform, data generated automatically through your interaction with our Services, and in certain cases, data received from authorised third-party sources such as payment providers and KYC verification partners.

3.1 Information You Provide Directly

• Full legal name as shown on government-issued identification
• Date of birth (for age verification purposes — 21+ requirement)
• Email address and mobile phone number
• Malaysian national identification number (IC number) or passport number
• Residential address, including postcode and state within Malaysia
• Username and encrypted password credentials
• Payment method details (e-wallet account, bank account, card details — stored in tokenised form only)
• Identity documents submitted during KYC verification (Malaysian IC / MyKad, driver's licence, passport, utility bill)
• Selfie photographs submitted as part of the KYC liveness verification process
• Communications you send to our customer support team via live chat, email, or any support channel

3.2 Data Generated Automatically

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session activity logs — pages visited, games played, bets placed, time spent on platform
• Transaction records including deposit amounts, withdrawal requests, bonus usage, and wager history
• Cookie identifiers and similar tracking technologies (see Section 08)
• Login timestamps and access frequency data

3.3 Data from Third Parties

• Identity verification results from licensed KYC service providers
• Payment confirmation data from Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and other integrated Malaysian payment processors
• Fraud screening results from risk assessment service partners

We process your personal data only for specific, defined, and legitimate purposes directly related to the provision of the 4uwin Services. The table below summarises how key categories of personal data are used:

4uwin processes your personal data on the following legal grounds, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted upon registration — including account management, payment processing, and delivery of the Services.
• Legal Obligation: Processing necessary to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, KYC requirements, and fraud prevention mandates.
• Legitimate Interests: Processing undertaken to protect the security and integrity of the Platform, detect fraud, prevent multi-accounting, and ensure responsible gambling monitoring — where such interests are not overridden by your rights.
• Consent: Processing for optional purposes such as marketing communications, promotional notifications, and personalised recommendations — only where you have given clear and informed consent, which you may withdraw at any time.

4uwin does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We will never disclose your personal information to external parties except in the strictly limited circumstances described below.

6.1 Authorised Service Providers (Data Processors)

We engage trusted third-party service providers who process data strictly on our behalf, under binding data processing agreements, and only to the extent necessary to deliver the Services. These include:

• Payment processors and Malaysian payment gateway operators (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Boost, GrabPay, and card networks)
• Identity and KYC verification service providers
• Cloud hosting and infrastructure providers
• Fraud detection and cyber-security service providers
• Customer support platform operators

6.2 Regulatory & Legal Disclosure

We may be required to disclose personal data to competent authorities, regulatory bodies, law enforcement agencies, or courts of law where we are legally compelled to do so — including in connection with anti-money laundering investigations, fraud inquiries, or court orders. In all such cases, we will disclose only the minimum data required and will notify you where legally permissible.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of substantially all assets of 4uwin, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and your rights under this Policy will be maintained.

4uwin retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. Retention periods vary depending on the category of data and the purpose of processing:

• Account data: Retained for the duration of the account's active status and for a period of up to five (5) years following account closure, to satisfy potential regulatory inquiries or dispute resolution requirements.
• KYC documents: Retained for a minimum of five (5) years following completion of the verification process, in accordance with anti-money laundering regulatory requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping obligations.
• Support communications: Retained for a period of two (2) years following resolution of the relevant query or complaint.
• Cookie and session data: Retained in accordance with the cookie retention periods described in Section 08.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents its reconstruction.

4uwin uses cookies and similar tracking technologies on the Platform to ensure functionality, analyse usage patterns, detect fraud, and enhance the overall user experience. By continuing to use the Platform, you consent to the use of cookies in accordance with this section.

The following categories of cookies are used on the 4uwin Platform:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including session management, login authentication, and payment gateway integration. These cannot be disabled without affecting core functionality.
• Performance & Analytics Cookies: Collect anonymous data about how users navigate the Platform — page load times, error rates, and feature usage — to inform platform improvements.
• Functional Cookies: Remember your preferences such as language settings, preferred payment methods, and display options to personalise your experience.
• Security Cookies: Assist in fraud detection, multi-account identification, and geographic access compliance monitoring.

You may manage your cookie preferences through your web browser's settings. Disabling certain categories of cookies may affect the functionality of some features of the Platform. 4uwin does not use third-party advertising cookies or behavioural advertising tracking technologies.

4uwin implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
• Tokenisation of payment credentials — raw card numbers and bank account details are never stored on our servers
• Two-factor authentication (2FA) available for all user accounts
• Role-based access controls limiting staff access to personal data on a strictly need-to-know basis
• Regular security audits and penetration testing conducted by independent security professionals
• Real-time fraud monitoring with automated anomaly detection and alerting systems
• Encrypted storage for all KYC documents and sensitive identity data

In the event of a data security incident that may affect your personal data, 4uwin will take immediate remediation action and notify you and relevant authorities in accordance with applicable legal requirements.

As a data subject, you hold the following rights with respect to your personal data held by 4uwin. You may exercise any of these rights by contacting our Data Privacy team using the contact details provided in Section 14.

• Right of Access: You may request a copy of the personal data 4uwin holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you may request that it be corrected or updated. Requests to change identity-critical data such as name or date of birth may require supporting documentation.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. This right is subject to exceptions where retention is required for legal or regulatory compliance — for example, AML record-keeping obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. Objections to processing based on legitimate interests will be assessed on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

We will respond to data rights requests within thirty (30) calendar days of receipt. Where a request is complex or high in volume, we may extend this period by a further thirty (30) days, with prior notification to you.

The 4uwin Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from persons under the age of 21 and maintain robust age verification controls as part of our KYC process to enforce this restriction.

If 4uwin becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will immediately suspend the relevant account, delete the collected data, and if applicable, report the matter to the relevant authorities.

4uwin's primary operations and data storage infrastructure are maintained to serve users in Malaysia. However, certain third-party service providers engaged by 4uwin — including cloud infrastructure operators and KYC verification partners — may process or store personal data in jurisdictions outside of Malaysia.

Where international transfers of personal data occur, 4uwin ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection law. These safeguards may include contractual clauses, data processing agreements, or reliance on jurisdictions recognised as providing adequate levels of data protection.

You may request further information about the specific safeguards applicable to any international transfer of your personal data by contacting our Data Privacy team.

4uwin reserves the right to update or amend this Privacy Policy at any time. The revised Policy will be published on this page with an updated effective date. Where amendments are material — such as changes to the categories of data collected, new third-party sharing arrangements, or updates to your rights — we will provide notice via your registered email address or through a prominent on-platform notification.

Your continued use of the Platform following the publication of an amended Privacy Policy constitutes your acceptance of the updated terms. We recommend that you review this page periodically to remain informed of how your personal data is being managed.

Historical versions of this Privacy Policy are available upon request by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 4uwin, please contact us through any of the channels below. Our Data Privacy team will respond to all enquiries within the timelines specified in Section 10.