Privacy Policy InfiniWin – Malaysia Member Personal Data Protection

InfiniWin ("we", "Platform", or "company") is committed to protecting the privacy and security of the personal data of all its members. This Privacy Policy explains how we collect, store, use, and disclose your personal information when you use the InfiniWin platform.

This document has been prepared in accordance with applicable data protection requirements and international industry best practice standards. We believe that transparency in data management is the foundation of the trust you place in InfiniWin.

This Privacy Policy applies to all information you provide when registering an account, using our services, contacting our customer support team, or browsing the InfiniWin platform. Please read this document carefully and contact us if any section requires further clarification.

InfiniWin collects your personal information through several different channels. Below are the types of data we collect and the reasons for collecting them:

Data You Provide Directly

• Identity information: full name, date of birth, identification card number or passport number.
• Contact information: email address, phone number, and residential address.
• Financial information: bank account details, credit/debit card information (stored in encrypted format).
• Identity verification documents for KYC purposes: copies of your national ID, utility bill, or bank statement.
• Account preferences: preferred language, communication settings, and profile information.

Data We Collect Automatically

• Access log data: IP address, web browser type, operating system, and access timestamps.
• Platform activity data: game history, transaction records, and usage patterns.
• Device data: mobile device information, unique device identifiers, and app version.
• Cookie and tracking technology data: session information, preference cookies, and usage analytics data.

InfiniWin uses your personal data only for legitimate purposes as stated in this policy. We will not process your data for any other purpose without notifying you in advance.

Platform Operations Purpose

• Process account registration and verify your identity through the KYC process.
• Allows you to log in, access games, and use all features of the InfiniWin platform.
• Process deposits, withdrawals, and other financial transactions securely.
• Provide responsive customer support whenever you contact us.

Security and Compliance Purpose

• Detect and prevent fraud, money laundering, and other illegal activities.
• Fulfil applicable legal and regulatory compliance obligations.
• Investigate complaints and resolve disputes related to your account.
• Verify that all members meet the minimum age eligibility requirement.

Service Improvement Purpose

• Analyse usage patterns to improve platform design and functionality.
• Personalise your gaming experience based on your preferences and activity history.
• Test and develop new features that meet the needs of members in Malaysia.

InfiniWin does not sell your personal data. However, we may share your information in the following limited circumstances:

Third-Party Service Providers

We work with carefully selected service providers to handle specific platform functions such as payment processing, identity verification, and platform analytics. All such providers are bound by strict data protection agreements and are only permitted to use your data for specified purposes.

Legal Requirements

We may need to disclose your information to the relevant authorities when required by law, court order, or a lawful regulatory directive. In such situations, we will comply with legal requirements while endeavouring to protect your privacy rights to the fullest extent permitted.

Vital Interests Protection

In very limited circumstances, we may need to disclose information to protect your vital interests or those of another person, for example in an emergency involving risk to life.

Protecting your personal data is a responsibility we take very seriously. InfiniWin implements multiple layers of technical and organisational protection to ensure the security of your information.

Technical Security Measures

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
• Encryption of sensitive data stored in databases using industry-standard encryption algorithms.
• Two-factor authentication (2FA) is available for all member accounts as an additional security layer.
• Continuous monitoring of suspicious activity by an automated fraud detection system.
• Penetration testing and security audits are conducted periodically by independent parties.

Organisational Security Measures

• Access to members' personal data is restricted to staff who genuinely require it to carry out their duties.
• All infiniwin staff who handle personal data undergo regular privacy and security training.
• A clearly defined and tested security incident response procedure to minimise the impact of any potential data breach.

The InfiniWin platform uses cookies and similar tracking technologies to provide you with a better experience and to help us understand how our platform is used.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
• Preference Cookies: Save your settings such as preferred language and display preferences to enhance ease of use.
• Analytics Cookies: Helps us understand how users interact with the platform so we can improve it. This data is processed in aggregate and anonymised form.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can control or disable certain cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the InfiniWin platform.

As an InfiniWin member, you have several rights regarding your personal data. We are committed to making it easy for you to exercise these rights in a straightforward and hassle-free manner.

InfiniWin does not retain your personal data longer than necessary for the stated purposes, subject to applicable legal requirements.

Active account data is retained for the duration your account remains active. Once an account is closed, core data is retained for a minimum of 5 years to meet legal obligations, including financial regulatory compliance and anti-money laundering requirements.

Anonymised analytics and activity log data are retained for a longer period for security and platform improvement purposes. Data that is no longer required is securely deleted in accordance with established data deletion procedures.

InfiniWin reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements to the services we offer.

When we make material changes to this policy, we will notify you via an in-platform notification and the email registered to your account at least 14 days before the changes take effect. For non-material changes, the "Last Updated" date at the top of this document will be updated.

We encourage you to review this page periodically to stay informed about how we protect your information. Continued use of the InfiniWin platform after any changes are published constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the infiniwin data protection team is ready to assist you.

You can reach us via live chat on the InfiniWin platform, available 24 hours a day, 7 days a week. Our team will respond within 5 minutes for live chat enquiries, and within 2 business days for more complex data privacy matters.

For formal privacy complaints requiring further review, please submit full details of your complaint including your account number (excluding your password) and a detailed description of the issue encountered. We are committed to resolving all privacy complaints fairly and within a reasonable timeframe.