big2win Privacy Policy for Malaysian Users

Introduction and Scope

big2win respects the privacy of visitors and users. References to “you” or “your” mean the individual whose personal information is processed. References to “we”, “our”, “us” or “the platform” mean big2win in the context of this policy.

This Privacy Policy applies when you browse big2win, communicate with support, create or manage an account, complete identity verification, use a payment feature, follow sports such as EPL or Liga Super Malaysia, access casino content or participate in an available promotion.

By using big2win, you acknowledge that your information may be processed as described here. Where consent is required for a specific activity, it will be requested separately and may be withdrawn subject to legal or operational limitations.

Definitions

• Personal information means information relating to an identified or reasonably identifiable individual.
• Processing includes collecting, recording, organising, using, disclosing, storing, correcting and deleting information.
• KYC data means identity, address and verification information used to confirm eligibility and prevent misuse.
• Transaction data means records connected with deposits, withdrawals, bonuses and payment methods.
• Service provider means a party processing information to support hosting, security, verification, payments, communications or other operations.

Information We May Collect

The information collected by big2win depends on how you use the website. Categories may include the following:

How Information Is Collected

big2win may receive personal information directly from you when details are entered, documents are uploaded, a transaction is requested or support is contacted. Information may also be generated automatically when you browse the website or use account features.

Certain information may be received from verification services, payment providers such as FPX or DuitNow participants, banks including Maybank and CIMB, e-wallet providers, game suppliers, fraud-prevention services and other authorised operational partners. These sources remain subject to their own obligations and privacy practices.

Purposes of Data Processing

big2win may process personal information to:

• create, maintain, verify and secure an account;
• confirm that a user meets the 21+ age requirement;
• process MYR deposits, withdrawals, refunds and account adjustments;
• record and settle sports wagers, casino activity and promotional participation;
• detect duplicate accounts, fraud, unauthorised access and suspicious transactions;
• provide support, investigate complaints and preserve relevant communications;
• apply deposit limits, cooling-off periods, self-exclusion and other responsible-gambling controls;
• analyse performance and improve website stability, accessibility and content;
• meet applicable record-keeping, security and lawful disclosure obligations; and
• send service notices or permitted promotional communications according to your preferences.

Basis for Processing

Depending on the context, big2win may process information because it is necessary to provide a requested service or perform an agreement, comply with an applicable obligation, protect legitimate security and operational interests, prevent fraud, establish or defend legal claims, or act with the user's consent.

Where legitimate interests are relied upon, big2win considers whether the processing is necessary and balanced against the rights and reasonable expectations of the affected individual. Consent may be withdrawn for future processing, but withdrawal does not make earlier lawful processing invalid.

Payment and Transaction Privacy

Malaysian users may interact with options such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank or Hong Leong. big2win may receive transaction references, account-holder confirmation, masked payment details, amount, currency, status, time and risk indicators.

Complete banking passwords, card security codes and one-time PINs are not required by big2win support and must never be disclosed. Payment providers may independently process information under their own privacy notices. A withdrawal may be delayed while identity, payment ownership or unusual activity is reviewed.

KYC and Sensitive Documents

Identity verification protects accounts, confirms age and helps prevent fraud. big2win may request a valid Malaysian identity document, passport, driving licence, recent proof of address and a selfie holding the relevant identification. Only information reasonably required for the stated review should be supplied.

KYC files receive restricted handling because they may contain sensitive details. Users should upload documents only through an approved HTTPS area. Where instructions permit, unnecessary ID digits may be covered. Documents must not be sent through an unknown chat account or an unverified third party.

Cookies and Similar Technologies

Cookies and local storage may be used to maintain sessions, remember preferences, support security, measure performance and understand how pages are used. Essential technologies are necessary for functions such as authentication and fraud prevention.

Analytics technologies may record aggregated or pseudonymous interaction information, including page views, browser type and approximate location. Browser settings can be used to remove or block cookies, although disabling essential storage may prevent some big2win features from operating correctly.

Disclosure and Service Providers

big2win does not disclose personal information without a relevant purpose. Information may be shared with authorised providers supporting hosting, cybersecurity, KYC, payments, game operation, analytics, customer service, professional advice and record storage. Providers should receive only the information needed for their assigned task.

Information may also be disclosed where reasonably required to investigate fraud, enforce terms, protect a person or the platform, respond to lawful authority, comply with an applicable obligation, or support a corporate reorganisation subject to appropriate safeguards.

International Data Transfers

Online services may use infrastructure or providers located outside Malaysia. Consequently, personal information may be stored or processed in another jurisdiction. Privacy laws in that location may differ from Malaysian requirements.

Where appropriate, big2win seeks contractual, technical and organisational measures designed to protect transferred information. These may include access controls, confidentiality duties, data-processing terms and transfer safeguards suitable for the circumstances.

Information Security

No internet service can promise absolute security. However, big2win applies reasonable safeguards intended to reduce unauthorised access, alteration, disclosure and loss. Measures may include:

• Encryption
  HTTPS protection for data transmitted through supported website areas.
• Access control
  Role-based access and limited handling of KYC and transaction records.
• Monitoring
  Review of suspicious logins, unusual payments and potential account misuse.
• Operational controls
  Retention procedures, staff confidentiality and incident-response processes.

Users also have a role in security. A strong unique password, a protected device and prompt reporting of suspicious activity materially reduce risk.

Data Retention

big2win keeps personal information only for as long as reasonably required for the purpose collected, account administration, transaction reconciliation, fraud prevention, dispute handling, responsible-gambling controls and applicable record-keeping.

Retention periods vary by category. KYC and transaction records may need to be retained after account closure, while optional preference or analytics data may be deleted or anonymised earlier. When information is no longer required, it may be securely deleted, anonymised or isolated from routine use.

User Rights and Privacy Choices

Subject to applicable law, verification and exceptions, you may request access to personal information held about you, correction of inaccurate information, deletion, restriction, objection to certain processing or a portable copy of eligible data.

You may also change permitted communication preferences or withdraw consent for future optional processing. Some requests cannot be completed where information must be kept for fraud prevention, transaction records, self-exclusion enforcement, legal claims or another overriding lawful purpose.

big2win may request identity verification before acting on a privacy request. This helps prevent account information from being disclosed to an unauthorised person. A clear response will be provided within a reasonable period, subject to the complexity of the request.

Responsible-Gambling Information

big2win may process information about deposit limits, session reminders, cooling-off periods, self-exclusion, support contacts and unusual patterns of play. This processing supports player protection, platform security and enforcement of requested restrictions.

Self-exclusion records may be retained after other account information would ordinarily be removed because they are needed to prevent re-registration or circumvention. Access to such records is limited to personnel and providers who require it for responsible-play controls. Gambling content is intended for adults aged 21 and above only.

Age Restriction

big2win casino-style services are not intended for anyone under 21. We do not knowingly seek personal information from underage individuals for gambling purposes. Where credible evidence indicates that an underage person has provided information, access may be suspended while age is investigated.

Parents and guardians should use appropriate device controls and avoid sharing payment access or account credentials. Concerns about possible underage access should be reported to website support without sending unnecessary personal documents.

Changes to This Privacy Policy

big2win may update this policy to reflect changes in services, technology, security practices, payment methods or applicable requirements. The revised effective date will appear at the top of the page. Material changes may also be communicated through an appropriate website or account notice.

Contact Us

Privacy questions or requests may be directed to big2win website support. Include a concise description of the request and the account identifier where relevant. Do not include a password, one-time PIN or complete banking credentials.