Privacy Policy

This Privacy Policy ("Policy") is published by lgowin ("the Platform", "we", "us", "our"), the operator of the online gaming and sports betting services available at https://lgowin.click. This Policy applies to all registered users, visitors, and any other individuals ("you", "your", "User") who interact with the Platform or provide personal data to us in any capacity.

lgowin operates primarily to serve users in Malaysia, including players located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across the country. We are committed to handling your personal data with transparency, integrity, and appropriate technical safeguards — consistent with internationally recognised data protection principles and applicable Malaysian law, including the Personal Data Protection Act 2010 (PDPA).

By registering an account, depositing funds, placing a bet, or otherwise using the lgowin Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

lgowin collects only the personal data that is necessary for the provision of its services, compliance with legal obligations, and the protection of the Platform and its users. The categories of personal data we collect include:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (used to verify you are 21 years of age or older)
• Gender
• Malaysian identification number (MyKad) or passport number (for foreign nationals)
• Nationality and country of residence
• Email address and mobile phone number
• Preferred username

3.2 KYC & Verification Data

• Copies of government-issued identity documents (front and back of MyKad, or passport data page)
• Proof of residential address (utility bill or bank statement not older than 3 months)
• Selfie or liveness check photograph (where required for advanced verification)
• Bank account or e-wallet ownership documentation

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and methods
• Bank account numbers, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow), and FPX transaction references associated with your account
• Cryptocurrency wallet addresses used for deposits (BTC, ETH, USDT, LTC)
• Account balance history and transaction logs

3.4 Gaming & Betting Activity Data

• Bets placed, stakes, odds accepted, and outcomes
• Games played, session durations, and win/loss records
• Bonus claims, wagering progress, and loyalty tier status
• Self-imposed limits and responsible gambling tool usage

3.5 Technical & Device Data

• IP address and approximate geolocation data
• Device type, operating system, and browser type
• Session timestamps, login history, and access logs
• Cookie identifiers and analytics tracking data

3.6 Communications Data

• Records of live chat interactions with our support team
• Email correspondence with lgowin
• Feedback, complaints, or dispute records

lgowin collects personal data through the following channels:

• Direct Submission: Information you actively provide during account registration, KYC verification, deposit or withdrawal requests, contact form submissions, and live chat interactions.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP addresses, device identifiers, session logs, and cookie-based tracking data.
• Payment Processors: Transaction-related data received from third-party payment providers including Malaysian bank FPX integrations, e-wallet platforms (Touch 'n Go eWallet, Boost, GrabPay, DuitNow), and cryptocurrency networks when processing deposits or withdrawals.
• Identity Verification Services: Data obtained through third-party KYC and AML screening providers engaged to verify user identity and assess risk.
• Analytics Platforms: Aggregated behavioural data collected through session analytics tools used to improve Platform performance and user experience.

lgowin processes your personal data for the following specific, legitimate purposes:

lgowin processes your personal data on one or more of the following legal bases, consistent with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contractual Necessity: Processing required to perform our obligations under the lgowin Terms & Conditions, including operating your account, processing payments, and delivering gaming services.
• Legal Obligation: Processing required for compliance with applicable laws, including identity verification (KYC), anti-money laundering (AML) screening, age verification, and regulatory reporting obligations.
• Legitimate Interests: Processing carried out in pursuit of lgowin's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, and analytics-driven service improvement.
• Consent: Processing for purposes such as promotional communications, where your express consent has been obtained. You have the right to withdraw this consent at any time by updating your communication preferences in account settings or by contacting support.

lgowin does not disclose your personal data to third parties except in the following circumstances, and only to the extent necessary for the stated purpose:

• Payment Service Providers: Financial and payment platforms including Malaysian bank FPX networks, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency processing services — to facilitate deposits and withdrawals associated with your account.
• Identity Verification Providers: Third-party KYC and AML screening services engaged under contractual data processing agreements to verify user identities and screen for sanctions list matches.
• Platform Technology Providers: Cloud infrastructure, database hosting, and technology service providers engaged to operate and maintain the Platform, all of whom are bound by confidentiality and data processing obligations.
• Legal and Regulatory Authorities: Government agencies, law enforcement, financial intelligence units, or other regulatory bodies where disclosure is required by law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect safety, or fulfil legal obligations.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of assets involving lgowin, your personal data may be transferred to the acquiring entity — provided that the recipient is bound by obligations no less protective than this Policy.

All third-party service providers engaged by lgowin are required to handle your personal data in compliance with applicable data protection law and in accordance with our data processing standards. We do not permit third parties to use your data for their own independent purposes.

lgowin retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account and identity data: Retained for the duration of your active account, plus a minimum of 5 years following account closure — in accordance with AML record-keeping requirements under Malaysian law.
• KYC documents: Retained for a minimum of 5 years after the completion of the business relationship, in line with applicable financial crime prevention obligations.
• Transaction records: Retained for a minimum of 5 years following the date of each transaction.
• Communication records (support chats, emails): Retained for up to 3 years from the date of the last interaction, unless required longer for dispute or legal purposes.
• Technical and device logs: Retained for up to 12 months from the date of creation, unless retained longer for security investigation purposes.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter for evidentiary purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

lgowin implements and maintains a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and our servers.
• Encryption at rest for sensitive personal data and financial records stored in our databases.
• Access controls — personal data is accessible only to authorised personnel with a documented business need, governed by role-based access policies.
• Two-factor authentication (2FA) available on all user accounts to protect against unauthorised login.
• Regular security audits and penetration testing conducted by independent security professionals.
• Incident response procedures to ensure prompt detection and containment of any data security incidents.

Notwithstanding the above, no data transmission over the internet or electronic storage system is completely secure. While we apply industry-standard protections, lgowin cannot guarantee absolute security of your data and you provide information to the Platform at your own risk.

lgowin uses cookies and similar tracking technologies on the Platform to enhance functionality, maintain session continuity, and gather anonymised analytics data. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session management cookies that keep you logged in during your visit. These cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Used to remember your preferences (such as language settings and responsible gambling limit selections) to improve your experience on return visits.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors use the Platform — including pages visited, session duration, and click patterns — to help us identify areas for improvement. No personally identifiable information is collected through analytics cookies.
• Security Cookies: Used to detect and mitigate fraudulent activity, bot traffic, and account security threats.

You may adjust your browser settings to refuse non-essential cookies at any time. Please note that disabling certain cookie categories may affect the functionality and performance of the Platform. lgowin does not use cookies to serve third-party advertising or to track your activity across other websites.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection principles, you are entitled to exercise the following rights in respect of your personal data held by lgowin:

To exercise any of the above rights, please submit your request in writing to our support team via live chat or email. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days, or advise you of any extension required for complex requests.

The lgowin Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in our KYC process, and access to real-money gaming features is restricted until age verification is successfully completed.

If we discover or are notified that personal data has been collected from an individual who is under 21 years of age, we will take immediate action to close the associated account, return any deposited funds in accordance with applicable procedures, and securely delete all personal data relating to that individual — subject only to any mandatory legal retention obligations.

If you are a parent or guardian and believe that a minor in your care has registered an account on lgowin, please contact our support team immediately via live chat or email.

lgowin reserves the right to update, revise, or supplement this Privacy Policy at any time to reflect changes in law, our data processing practices, or the services we offer. The date of the most recent revision is displayed prominently at the top of this page.

Where material changes are made to this Policy — particularly changes that affect how we use your personal data or reduce your rights — we will notify you by email (to the address registered on your account) or by displaying a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the lgowin Platform following the effective date of any revised Policy constitutes your acknowledgement of, and consent to, the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way lgowin handles your personal data, please contact our Data Privacy team using the details below. All data-related enquiries are treated with priority and handled with strict confidentiality.