125win Privacy Policy

1. Introduction

125win ("we", "us", "our") operates the online gaming and sports betting platform available at 125win.one (the "Platform"), serving registered members across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Bangsar. This Privacy Policy ("Policy") describes how 125win processes personal data in connection with your registration, use of the Platform, and any communications between you and 125win.

125win is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles, including those applicable under the international gaming authority framework under which 125win operates. This Policy should be read alongside the 125win Terms & Conditions and Responsible Gaming Policy.

2. Personal Data We Collect

2.1 Registration Data

When you create a 125win account, we collect the information you provide directly, including: full legal name, date of birth, email address, mobile phone number, preferred username, and self-declared country of residence. This information is required to create and maintain your account and to fulfil our Know Your Customer (KYC) obligations.

2.2 Identity Verification Data

To comply with anti-money laundering (AML) obligations and international gaming authority requirements, 125win may request documentary evidence of identity and address, including copies of government-issued identification documents (such as a Malaysian MyKad or passport), selfies or liveness verification images, and proof of address documents (utility bills, bank statements). This data is processed solely for verification purposes.

2.3 Financial Data

When you make deposits or request withdrawals, 125win collects data related to your payment method including partial card numbers (where applicable), e-wallet identifiers (e.g., Touch 'n Go eWallet or Boost account references), bank account identifiers (e.g., Maybank2u, CIMB Clicks, Public Bank), and transaction history on the 125win Platform. 125win does not store full card numbers or banking login credentials.

2.4 Gaming Activity Data

125win records all gaming activity on the Platform, including bets placed, games played, wager amounts, outcomes, session durations, and bonus utilisation. This data is used for account management, dispute resolution, regulatory reporting, and responsible gaming monitoring.

2.5 Technical and Device Data

When you access the 125win Platform, we automatically collect certain technical information including: IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and session timestamps. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

2.6 Communications Data

If you contact 125win via Live Chat, email, or any other support channel, we retain records of those communications, including the content of your messages and any attachments, for quality assurance and dispute resolution purposes.

3. How 125win Uses Your Personal Data

125win uses your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your 125win account, processing deposits and withdrawals, and providing access to Platform services.
• Identity verification and KYC: Verifying your identity, age, and payment method ownership in accordance with regulatory obligations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct.
• Regulatory compliance: Fulfilling reporting obligations under applicable gaming authority requirements and AML frameworks.
• Responsible gaming: Monitoring gaming behaviour to identify potential problem gambling patterns and implementing responsible gaming tools where appropriate.
• Customer support: Responding to your queries, resolving disputes, and providing technical assistance.
• Marketing communications: Sending you promotional offers and Platform updates, subject to your communication preferences and where you have not opted out.
• Platform improvement: Analysing aggregated usage data to improve the 125win Platform's features, performance, and user experience.

4. Legal Basis for Processing

125win processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations under the 125win Terms & Conditions, including account operation, payment processing, and support services.
• Legal obligation: Processing required to comply with applicable gaming regulatory requirements, AML obligations, and identity verification mandates.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, where those interests are not overridden by your fundamental rights.
• Consent: Where we send you marketing communications beyond service-related notifications, we rely on your consent, which you may withdraw at any time by updating your communication preferences in your account settings.

5. Data Sharing and Disclosure

5.1 Service Providers

125win engages third-party service providers who process personal data on our behalf and under our instruction, including: identity verification and KYC providers, payment processing partners (including FPX, DuitNow, and e-wallet operators), cloud infrastructure and hosting providers, customer support platform operators, and fraud detection and cybersecurity services. These providers are contractually bound to process data only as directed by 125win and to implement appropriate data security measures.

5.2 Gaming and Technology Partners

Game providers integrated into the 125win Platform (including live casino and slot providers) may receive session identifiers and account-level data necessary to authenticate your session and record game outcomes. They do not receive your full personal profile.

5.3 Regulatory and Legal Disclosure

125win may disclose personal data to gaming regulatory authorities, law enforcement agencies, or other competent authorities where required by applicable law, court order, or regulatory mandate. 125win will, where legally permissible, notify you of such disclosure.

5.4 No Sale of Personal Data

125win does not sell, rent, or trade your personal data to any third party for that party's own marketing or commercial purposes.

6. Cookies and Tracking Technologies

125win uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function, including session management, authentication, and security features. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to collect aggregated data about how members use the Platform, enabling us to identify performance issues and improve the user experience.
• Preference cookies: Used to remember your Platform settings, such as language preference and display options, between sessions.
• Marketing cookies: Used to understand traffic sources and measure the effectiveness of 125win's promotional campaigns. These are only activated with your consent.

You may manage your cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the 125win Platform, including the login function.

7. Data Retention

125win retains your personal data for as long as your account remains active and for such further period as is required by applicable regulatory obligations. Specifically:

• Account and KYC data is retained for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• Financial transaction data is retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity data is retained for a minimum of three (3) years for dispute resolution and regulatory reporting purposes.
• Customer support communications are retained for a minimum of two (2) years.
• Marketing preference data is retained until you withdraw consent or close your account, whichever occurs first.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 125win's data disposal procedures.

8. Your Data Rights

Subject to applicable law and regulatory restrictions, you have the following rights in relation to your personal data held by 125win:

• Right of access: You may request a copy of the personal data 125win holds about you.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. For registered account data, you can update most information directly from your 125win account settings.
• Right to erasure: You may request the deletion of your personal data, subject to our obligations to retain data for regulatory compliance purposes.
• Right to restriction of processing: You may request that 125win restricts the processing of your data in certain circumstances, for example while a dispute is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request that we provide your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. You can opt out of marketing communications at any time from your account settings.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, contact 125win's support team via Live Chat or at the email address listed in Section 13. 125win will respond to verified requests within 30 days.

9. Data Security

125win implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration, including:

• TLS 1.3 encryption for all data transmitted between your browser/device and the 125win Platform;
• Bcrypt hashing with unique salts for password storage — 125win does not store or have access to your plaintext password;
• Access controls limiting internal access to personal data on a need-to-know basis;
• Login anomaly detection and account lockout mechanisms following repeated failed authentication attempts;
• Two-Factor Authentication (2FA) available to all members as an additional account security layer;
• Regular security assessments and penetration testing of Platform infrastructure.

10. Children's Privacy

The 125win Platform is strictly for individuals aged 21 years and older. 125win does not knowingly collect personal data from persons under the age of 21. If 125win becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted and the associated account will be permanently closed. If you believe that a minor has registered on the Platform, please contact 125win support immediately.

11. Cross-Border Data Transfers

As a platform operating under an international gaming authority framework, certain personal data processed by 125win — and by third-party service providers acting on our behalf — may be stored or processed in jurisdictions outside Malaysia. Where such transfers occur, 125win ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection principles, including through the use of contractual data processing agreements with service providers.

12. Amendments to This Policy

125win reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered members via email notification or prominent notice on the Platform prior to taking effect. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of the 125win Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.

13. Contact and Data Queries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 125win, please contact our Data Privacy team via Live Chat (available 24/7 on the Platform) or in writing at: [email protected] (plain text only — not a clickable link).

125win aims to acknowledge all privacy-related correspondence within 5 business days and to provide a substantive response within 30 days. If you are not satisfied with 125win's response, you may have the right to lodge a complaint with the applicable gaming authority or data protection supervisory body.