Get2win Privacy Policy – Personal Data Protection for Malaysian Players

Get2win collects personal data from you in several ways — primarily during the registration process, your day-to-day use of the platform and whenever you interact with our support team. Below are the categories of data we collect and the purpose behind each.

1.1 Data You Provide Directly

When registering a get2win account and using our services, you provide the following information directly:

• Identity information: Full name as per MyKad or passport, date of birth and identification number
• Contact information: Email address, active Malaysian phone number, and current residential address
• Financial information: Payment method details such as your DuitNow phone number, Touch 'n Go or GrabPay account number, and bank account information for FPX — get2win does not store your credit card numbers or online banking passwords
• Identity verification (KYC) information: MyKad or passport copies and proof of address documents submitted during the verification process

1.2 Automatically Collected Data

When you use the get2win platform, our systems automatically collect certain technical data to ensure the service runs properly and securely:

• Device data: Device type (Android or iOS phone, computer), operating system, device model, and unique device identifier
• Connection data: IP address, browser type, browser language, and time zone
• Activity data: Pages visited, games played, session duration, in-platform actions, and navigation clicks
• Transaction data: Deposit, withdrawal, betting, winnings and bonus usage history

1.3 Data From Third-Party Sources

In certain circumstances, get2win may receive information about you from legitimate third-party sources — for example, identity verification information from licensed KYC checking agencies, sports result information from sports data providers we use to settle bets, and technical information from gaming software providers relating to your activity on their platforms that are integrated with get2win.

Every piece of data we collect has a clear and legitimate purpose. get2win does not use your data for any purpose not stated in this privacy policy without first obtaining your fresh consent.

2.1 Platform Operations

Your data is used primarily to keep the get2win platform running properly — this includes verifying your identity at login, processing deposits and withdrawals via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX Maybank2u or CIMB Clicks, settling bets and winnings, managing VIP accounts, and providing your transaction history within your profile.

2.2 Security & Fraud Prevention

Technical data such as IP addresses, device information and activity patterns are used by get2win's security systems to identify and prevent unauthorized access, fraud attempts, multiple account creation and money laundering activities. This is to protect all get2win members, not just accounts under suspicion.

2.3 Responsible Gaming

Get2win uses your gaming activity data — including session frequency, betting patterns, and deposit history — to identify early signs of at-risk playing behaviour. This allows our responsible gaming team to proactively offer assistance when needed, rather than waiting until a problem becomes serious.

2.4 Account-Related Communications

Get2win uses your email address and phone number to send essential account-related communications — including security notices, transaction confirmations, important policy updates, and responses to your customer support inquiries. These communications cannot be disabled while your account remains active, as they are necessary for account security and management.

2.5 Marketing Communications (Optional)

With your consent, get2win may send you information about the latest promotions, exclusive VIP member bonuses, major sporting events available for betting such as Malaysia Super League matches, EPL, BWF badminton tournaments and IPL cricket, as well as new games added to the platform. You may opt out of these marketing communications at any time via the unsubscribe link in any email or through the notification settings in your get2win account.

2.6 Platform Improvement

Anonymised and aggregated activity data is used by the get2win development team to understand how players use the platform, identify areas that are difficult to navigate, test new features, and make data-driven decisions to improve the user experience. This type of analytics does not involve any personally identifiable information.

Get2win does not sell, rent, or commercialise your personal data to any third party for advertising or marketing purposes. However, there are limited situations where we need to share certain data with other parties to keep the platform running properly and to meet legal requirements.

3.1 Trusted Service Providers

Get2win works with third-party service providers who act as data processors on our behalf. They are only permitted to use your data for purposes we have specified and must adhere to data protection standards no less stringent than get2win's privacy policy. These providers include:

• Game software providers such as Evolution Gaming, Pragmatic Play, and PG Soft — to deliver games to you
• Payment processors handling DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX transactions
• A licensed KYC identity verification agency in Malaysia
• Cloud service providers that store and process our data within secure infrastructure
• Analytics companies that help us understand platform usage (data is anonymised)

3.2 Legal & Regulatory Requirements

Get2win may be required to disclose your personal data to the relevant authorities — including Bank Negara Malaysia, the Companies Commission of Malaysia, the Royal Malaysia Police, or other enforcement bodies — when required by applicable law, a valid court order, or in the course of an investigation into suspected illegal activity. To the extent permitted by law, get2win will notify you before any such disclosure is made.

3.3 Business Transfers

Should get2win be involved in a merger, acquisition, or asset sale, users' personal data may form part of the transferred assets. In such circumstances, get2win will ensure that the new entity receiving the data adheres to a privacy policy of equivalent or greater stringency, and you will be notified of the transfer and given the option to delete your account if you do not agree.

Get2win continuously invests in security technologies and procedures to ensure your personal data is protected at every stage — from transmission through to storage.

4.1 Technical Protection Layers

Get2win's security infrastructure comprises multiple layers of protection working simultaneously:

• Transmission encryption: SSL/TLS 256-bit encryption protects all data in transit between your device and our servers
• Storage encryption: Sensitive data such as financial information and KYC documents are stored in encrypted form within get2win's databases
• Firewall & IDS: Multi-layered firewall systems and intrusion detection that monitors all incoming and outgoing traffic 24/7
• Data segregation: Player funds are held separately from the company's operational accounts, and personal data is stored in segregated server segments according to confidentiality level
• Internal access controls: get2win staff can only access the data required for their specific role — the principle of least privilege is strictly enforced

4.2 Two-Factor Authentication

Get2win provides and encourages the use of two-factor authentication (2FA) for all accounts. When 2FA is enabled, every new login attempt requires additional verification via SMS to your registered Malaysian phone number — adding a significant layer of security even if your password is compromised.

4.3 Continuous Security Monitoring

Get2win's cybersecurity team continuously monitors our systems to detect anomalies, intrusion attempts and suspicious activity. Our automated detection systems will generate an immediate alert if unusual access patterns are detected on your account — such as sudden login attempts from different geographic locations or multiple attempts within a short period.

4.4 Security Incident Response

In the event of a security incident involving your personal data, the get2win team will respond in accordance with established incident response protocols. This includes isolating affected systems, conducting a forensic investigation to determine the scope of the incident, notifying you and the relevant authorities within the timeframe required by law, and taking immediate remediation steps to prevent further harm.

Under Malaysia's Personal Data Protection Act 2010 and get2win's privacy policy, you have several rights that you may exercise at any time in relation to the personal data get2win holds about you.

5.1 Right to Access Your Data

You have the right to request a copy of all personal data that get2win holds in relation to your account. Data access requests can be submitted by email to support@get2win.click, stating your full name and registered phone number. get2win will process such requests within 14 business days and provide data in a readable format.

5.2 Right to Correct Inaccurate Data

If you find that any personal data get2win holds about you is inaccurate or outdated, you have the right to request a correction. For details such as your phone number or email address, you can update these directly through your get2win account profile settings. For corrections to identity information that require re-verification, please contact our support team.

5.3 Right to Erasure (Right to be Forgotten)

You have the right to request the deletion of your personal data from get2win's systems under certain circumstances — for example, when you close your account and the data is no longer needed for the purpose it was originally collected. However, this right has limitations: get2win may be required to retain certain data for periods prescribed by law for AML compliance, financial record-keeping, or the resolution of outstanding disputes.

5.4 Right to Withdraw Consent

For data processing based on your consent — such as receiving marketing emails — you may withdraw that consent at any time without affecting the validity of any processing that took place prior to withdrawal. It's straightforward: click the "Unsubscribe" link in any get2win marketing email or update your notification preferences in your account settings.

5.5 How to Exercise Your Rights

To exercise any of the rights above, contact the get2win data protection team by emailing support@get2win.click with the subject line "Data Protection Request" followed by the type of request you are making. Please provide your full name and registered phone number for identity verification. get2win will acknowledge receipt of your request within 3 business days and complete it within 14 business days, or notify you if additional time is required for complex cases.

Get2win uses cookies and similar tracking technologies to enhance your user experience, maintain session security, and gather analytics data that helps us improve the platform.

6.1 What Are Cookies

Cookies are small text files stored on your device when you visit the get2win website. They allow the platform to remember your preferences, maintain your login session, and personalise your experience based on previous interactions. Cookies cannot execute programs or transmit viruses to your device.

6.2 Types of Cookies get2win Uses

• Essential Cookies: Required for core platform functionality — including login session authentication, security and payment processing. These cookies cannot be disabled as they are critical to platform operations.
• Preference Cookies: Remembering your preferences — such as display language, interface layout, and your last game selection — to make your next visit more convenient.
• Analytics Cookies: Collects data on how you use the get2win platform — pages visited, time spent and key interactions. This data is used in aggregate form to improve the platform.
• Security Cookies: Detect suspicious access patterns and assist our security systems in identifying intrusion attempts or unauthorized access.

6.3 Managing Your Cookies

You can manage and delete cookies through your browser settings. Most modern browsers allow you to block or delete cookies entirely or selectively by domain. Please note, however, that disabling essential cookies may affect the functionality of the get2win platform — you may need to log in more frequently or certain features may not work as expected.

Get2win retains your personal data only for as long as it is needed for the purposes stated in this privacy policy, or as required by applicable law. The following are the retention period guidelines we follow.

If you have any questions, concerns or complaints about how get2win handles your personal data, our data protection team is ready to help. We take every privacy inquiry and complaint seriously and are committed to providing a meaningful response within a reasonable timeframe.

8.1 Data Protection Officer

Get2win has appointed a Data Protection Officer responsible for ensuring the platform's compliance with all applicable data protection laws. You can reach them directly at:

8.2 How to Submit a Privacy Complaint

To submit a formal privacy complaint, please email support@get2win.click with the subject line "Data Privacy Complaint" and include a detailed description of your concern, the date(s) of any relevant incident (if applicable), and your expected resolution. get2win will acknowledge receipt of your complaint within 3 business days and provide a resolution or update within 14 business days.

8.3 Privacy Policy Amendments

Get2win reserves the right to update this privacy policy from time to time to reflect changes in our data management practices, new legal requirements or new platform features. For material amendments, we will notify all active members via their registered email at least 14 days before the changes take effect. The last updated date is always displayed at the top of this document. Continued use of the get2win platform after the effective date of any amendment constitutes your acceptance of the updated privacy policy.