Privacy Policy — forwin8

forwin8 ("forwin8", "Company", "we", "us", "our") operates the online gaming and sports betting platform accessible at https://forwin8.cam (the "Platform"). We are committed to protecting the personal data of our users ("User", "Player", "you") and to ensuring that all data processing activities are conducted in accordance with applicable data protection laws and international best practices.

This Privacy Policy ("Policy") sets out in detail the types of personal data we collect from you, the purposes for which we process that data, the legal bases on which processing is conducted, and the rights you hold in relation to your personal data. It applies to all persons who access or use the Platform, including registered account holders and anonymous visitors.

By accessing the Platform, creating an Account, or otherwise using our services, you acknowledge that you have read, understood, and agreed to the practices described in this Policy. This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means forwin8, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of forwin8 in accordance with our documented instructions.
• "KYC" means Know Your Customer — the identity verification process required under applicable regulatory obligations.
• "Cookies" means small text files placed on a User's device by a web server that store session and preference data.
• "Sensitive Personal Data" means Personal Data revealing racial or ethnic origin, political opinions, religious beliefs, health information, biometric data, or financial details, which are afforded enhanced protection under applicable law.

forwin8 collects the following categories of Personal Data, depending on how you interact with the Platform:

3.1 Registration and Account Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify the 21+ age requirement)
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Email address
• Malaysian mobile phone number
• Username and encrypted password
• Preferred language (English, Bahasa Melayu, or Mandarin)

3.2 Identity Verification (KYC) Data

• Copy of Malaysian MyKad (National Identity Card), passport, or other government-issued photo identification
• Proof of residential address (utility bill, bank statement dated within three months)
• Selfie or photograph for facial verification purposes
• Proof of payment method ownership (e.g., screenshot of Touch 'n Go eWallet, Boost, GrabPay, or bank account statement)

3.3 Financial Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers
• Payment method details sufficient for transaction processing (e.g., partial account numbers for Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, FPX)
• Account balance history and bonus redemption records

3.4 Gaming and Betting Activity Data

• Game session records, bet history, wager amounts, and win/loss outcomes
• Sports betting selections (e.g., Liga Super Malaysia, EPL, UFC) and live betting activity
• Responsible gambling tool usage, including deposit limits and self-exclusion requests

3.5 Technical and Device Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser information
• Session duration, page interaction data, and navigation patterns
• Cookie identifiers and local storage data (see Section 8)

3.6 Communications Data

• Customer support chat transcripts, emails, and any other correspondence with forwin8
• Survey responses and feedback you voluntarily provide
• Promotional communication preferences and opt-in or opt-out records

forwin8 collects Personal Data through the following means:

forwin8 processes your Personal Data for the following specific and documented purposes:

forwin8 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions you have accepted, including account management, game service delivery, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML, and responsible gambling obligations imposed on licensed gaming operators.
• Legitimate interests: Processing carried out to protect the security and integrity of the Platform, prevent fraud, improve our services, and conduct analytics — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your freely given, specific, informed, and unambiguous consent — in particular for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

forwin8 does not sell, rent, or trade your Personal Data with unaffiliated third parties for commercial purposes. We may share your Personal Data with the following categories of recipients only to the extent strictly necessary for the stated purpose:

7.1 Authorised Service Providers

Third-party vendors engaged by forwin8 to provide specific services, including payment processing (including operators of Maybank2u, CIMB Clicks, DuitNow, and e-wallet platforms), KYC and identity verification services, IT infrastructure and hosting providers, customer support platform operators, and fraud prevention specialists. All such providers are bound by contractual data processing agreements requiring them to process data only for the purposes instructed by forwin8 and to maintain appropriate security standards.

7.2 Regulatory and Legal Authorities

forwin8 may disclose Personal Data to competent regulatory authorities, law enforcement agencies, courts, or other government bodies where required to do so by applicable law, regulatory directive, court order, or legal process. In such cases, forwin8 will disclose only the minimum data necessary to satisfy the legal obligation.

7.3 Business Restructuring

In the event of a merger, acquisition, asset sale, restructuring, or other corporate transaction involving forwin8, Personal Data may be disclosed to prospective purchasers or transferred to successor entities as part of that transaction, subject to appropriate confidentiality arrangements. You will be notified of any such transfer where required by applicable law.

The forwin8 Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The following categories of cookies may be deployed on your device:

You may manage your cookie preferences through your web browser settings. Most modern browsers allow you to block, delete, or receive alerts about cookies. Please note that disabling strictly necessary cookies will impair your ability to use core Platform functions, including account login and payment processing.

forwin8 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following Account closure, as required for anti-money laundering compliance and regulatory audit purposes.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with applicable financial record-keeping requirements.
• Gaming activity data: Retained for a minimum of three (3) years following the relevant activity, to support responsible gambling monitoring, dispute resolution, and regulatory reporting.
• Customer support communications: Retained for three (3) years following the resolution of the relevant matter, or longer where a dispute remains unresolved.
• Marketing preferences and consent records: Retained until consent is withdrawn or the User's Account is permanently closed, plus three (3) years thereafter for evidentiary purposes.

Upon expiry of the applicable retention period, Personal Data will be securely erased or irreversibly anonymised. Anonymised data that can no longer identify any individual may be retained indefinitely for statistical and analytical purposes.

forwin8 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the forwin8 Platform is encrypted using industry-standard TLS/SSL protocols (256-bit encryption).
• Encryption at rest: Sensitive Personal Data, including KYC documents and payment credentials, is stored in encrypted form using AES-256 or equivalent standards.
• Access controls: Access to Personal Data is restricted on a strict need-to-know basis. All personnel with access to Personal Data are subject to confidentiality obligations.
• Two-factor authentication: Account login and administrative access to data systems requires two-factor authentication.
• Regular security audits: forwin8 conducts periodic security assessments, penetration testing, and vulnerability scans of its Platform and infrastructure.
• Incident response: forwin8 maintains a documented data breach response procedure. In the event of a breach that creates a risk to your rights and freedoms, you will be notified promptly and in accordance with applicable regulatory requirements.

Subject to applicable law and certain conditions, you hold the following rights in respect of your Personal Data processed by forwin8. To exercise any of these rights, please contact our support team using the details in Section 15.

We will respond to all valid requests within thirty (30) calendar days of receipt. In complex cases, we may extend this period by a further sixty (60) days, in which case we will inform you of the extension and the reasons for the delay.

Please note that certain rights may be limited where forwin8 is required to retain or process data to comply with a legal obligation, or where exercising the right would adversely affect the rights and freedoms of others.

The forwin8 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or store Personal Data from any person under the age of 21. Age verification is a mandatory component of the Account registration process, and forwin8 reserves the right to request additional proof of age documentation at any time.

If forwin8 becomes aware that it has inadvertently collected Personal Data from a person under the age of 21, such data will be deleted promptly and the associated Account will be suspended pending investigation. If you are a parent or guardian and believe that a minor has registered on the Platform, please contact our support team immediately.

In order to provide the forwin8 Platform and related services, your Personal Data may be transferred to and processed in countries other than Malaysia, including countries where data protection laws may differ from those applicable in Malaysia. Such transfers may occur when we engage third-party service providers for KYC verification, payment processing, IT infrastructure, or customer support functions.

Where Personal Data is transferred internationally, forwin8 takes appropriate safeguards to ensure that your data receives a level of protection consistent with applicable data protection standards. These safeguards may include the use of standard contractual clauses, data processing agreements, or other legally recognised transfer mechanisms.

forwin8 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform functionality. The revised Policy will be published on this page with an updated "Last Updated" date.

Where amendments are material — for example, where we introduce a new processing purpose or make significant changes to how we share data — we will provide you with advance notice via email or a prominent in-Platform notification. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the amended Policy.

We encourage you to review this Policy periodically to stay informed of how forwin8 handles your Personal Data.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how forwin8 handles your Personal Data, please contact our team using the details below. We aim to respond to all privacy-related enquiries within thirty (30) calendar days.

• Live Chat: Available directly on the Platform, 24 hours a day, 7 days a week. Supported languages: English, Bahasa Melayu, and Mandarin.
• Email: [email protected] — please include "Privacy Request" in your subject line.
• Serving: Players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all regions of Malaysia.

This Privacy Policy was last reviewed and updated on 1 January 2026. All previous versions of this Policy are superseded by this document.