We take the protection of your personal data seriously. This document explains exactly what information we collect, how it is used, and your rights as a 2win member under Malaysian law.
Six key things you need to know about how 2win protects your personal data.
All data processing at 2win fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA), without exception.
All data transmitted between your device and 2win's servers is protected with industry-standard 256-bit SSL encryption, the same standard used by the banking sector.
2win never sells, rents, or shares your personal data with third parties for marketing purposes without your consent.
You have the right to access, correct, transfer, or request the deletion of your personal data held by 2win at any time.
2win uses cookies solely to enhance user experience and platform performance. You can manage your cookie settings through your browser.
You can opt out of marketing communications from 2win at any time through your account settings or by contacting our support team.
Important Notice: This Privacy Policy describes how 2win ("we", "the Platform") collects, uses, stores, and protects your personal data ("Member", "you"). By registering for or using the 2win platform, you agree to the terms of this Privacy Policy in full. Please read it carefully before providing us with any personal information.
2win is an online betting platform operating under the domain https://2win.cash, providing betting entertainment services to Malaysian players including online slots, Live Casino, Sports Betting, cricket, and e-sports. In delivering these services, we are required to collect and process certain personal data to ensure your account operates securely and the platform runs smoothly.
This Privacy Policy is drafted and enforced in full compliance with Malaysia Personal Data Protection Act 2010 (PDPA). It applies to all personal data you provide to 2win through the registration process, use of the platform, customer support, or any other interaction with our platform.
This Privacy Policy is to be read together with 2win Terms & Conditions and forms part of the overall agreement between you and our platform. In the event of any conflict between these documents in relation to data protection, this Privacy Policy shall prevail.
2win collects your personal data in two main categories — data you provide directly, and data collected automatically as you use the platform.
Data you provide directly:
Automatically collected data:
Data Minimisation Principle: 2win only collects data that is strictly necessary for the stated purposes. We do not collect sensitive personal data such as health information, religious beliefs, or political views, except in specific circumstances required under Malaysian law.
Your personal data is collected by 2win through several different interaction points throughout your use of the platform:
2win processes your personal data only for legitimate and transparent purposes. Below is a summary table of data processing purposes along with the relevant legal basis:
| Purpose of Processing | Data Type | Legal Basis |
|---|---|---|
| Registration & Account Management | Identity, contact | Contractual Agreement |
| Deposit & withdrawal processing | Financial, identity | Contractual Agreement |
| Identity verification (KYC) | Identity, documents | Legal obligations |
| Fraud prevention & security | Technical, usage | Legitimate interests |
| Customer Support | Contact & communication | Contractual Agreement |
| Analytics & platform improvement | Usage, technical | Legitimate interests |
| Marketing communications | Relationships, preferences | Consent |
| Legal compliance | All categories | Legal obligations |
2win will not use your personal data for purposes unrelated to those listed above without first obtaining your consent or without a valid legal basis under Malaysia's PDPA.
2win takes an extremely cautious approach when it comes to sharing members' personal data. We does not sell, rent, or disclose your personal data to third parties for their own commercial marketing purposes, under any circumstances.
Your personal data may only be shared in the following limited circumstances:
Contractual Protections: All third parties that receive 2win members' personal data are bound by data processing agreements requiring them to protect that data to a standard equal to or higher than this Privacy Policy, and to use it only for the purposes specified in their agreement with 2win.
Protecting your personal data is 2win's top technical and operational priority. We implement multiple layers of security to keep your data safe from unauthorised access, loss, or misuse.
While we implement all reasonable security measures, no system can guarantee absolute 100% security. You also play an important role in keeping your account secure — use a strong password, do not share your login credentials, and report to us immediately if you suspect unauthorised access to your account.
2win retains your personal data only for as long as is necessary to fulfil the processing purposes set out in this Privacy Policy, or as required by applicable Malaysian law.
Once the applicable retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you. Requests for early data deletion may be submitted to us through the channels specified in Section 12, subject to the fulfilment of any applicable legal record-keeping obligations.
The 2win platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and help us understand how the platform is used. Below are the types of cookies we use:
You can manage your cookie settings through your browser's preferences. Keep in mind that disabling essential cookies may affect how the 2win platform functions and your overall playing experience. For guidance on managing cookies in your browser, refer to your browser's help documentation.
Third-Party Cookie Notice: Third-party game providers operating within the 2win platform may set their own cookies when you play their games. These cookies are governed by the respective provider's privacy policy, not this 2win Privacy Policy. We recommend reviewing the relevant game provider's privacy policy if you would like to know more.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and this Privacy Policy, you have the following rights in respect of your personal data held by 2win:
You have the right to request and receive a copy of the personal data we hold about you, including details of how it is used and shared.
If the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it promptly.
In certain circumstances, you may request that we delete your personal data, subject to any record-keeping obligations prescribed by Malaysian law.
You have the right to object to the processing of your personal data for direct marketing purposes at any time, without having to provide any reason.
You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider, upon request.
Where the processing of your data is based on consent, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out prior to the withdrawal.
To exercise any of the rights above, please contact us by email at support@2win.cash stating the right you wish to exercise along with sufficient information for us to verify your identity. We will respond to your request within a reasonable timeframe in accordance with Malaysia's PDPA requirements.
The 2win platform is a service strictly restricted to individuals aged 18 years of age and above only. We do not knowingly collect, process, or store personal data of individuals under the age of 18 under any circumstances.
If you are a parent or guardian who believes your minor child has provided personal data to 2win or created an account using false information, please contact us immediately at support@2win.cash. We will act promptly to investigate, delete the relevant data, and close the account without unnecessary delay.
2win implements an age verification process during registration and throughout the KYC process to prevent underage individuals from accessing the platform. Accounts suspected of belonging to underage users will be suspended immediately pending age verification.
2win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or technological developments relating to data security.
When we make significant changes to this Privacy Policy, we will notify you through:
Your continued use of the 2win platform after any such amendment notice is taken as your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your personal data through the channels listed in Section 12, subject to any applicable legal record-keeping obligations.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 2win handles your personal data, please do not hesitate to contact us through the following channels:
We are committed to addressing all privacy enquiries and complaints within 14 working days from the date of receipt. For requests that require more in-depth investigation, we will keep you informed of progress within a reasonable timeframe.
Complaints to the Regulatory Authority: If you believe that 2win has processed your personal data in a manner that violates the Malaysian PDPA and we have been unable to resolve your concerns to your satisfaction, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia. Further information about JPDP is available through the official website of the Ministry of Digital Malaysia.
Six concrete commitments we uphold every day to safeguard the privacy and data security of 2win Malaysia members.
The 256-bit SSL encryption we use is the same technology trusted by Malaysia's leading banking institutions, including Maybank2u and CIMB Clicks. Every bit of data that travels between you and the 2win platform is protected by the same level of security that safeguards your online banking transactions.
Every aspect of personal data collection, processing, and storage at 2win is designed to ensure full compliance with Malaysia's Personal Data Protection Act 2010. This goes beyond mere legal obligation — it is our moral responsibility to every Malaysian player who entrusts us with their data.
2win only collects data that is genuinely necessary to deliver our services. We do not gather extra personal data "just in case" or for unstated purposes. Every information field we request during registration or KYC has a clear and legitimate reason behind it.
Not all 2win staff have access to members' personal data. A role-based access control system ensures that only personnel who require specific data to perform their duties are granted access, and every access instance is recorded in an audit log that is reviewed on a regular basis.
Cyber threats are constantly evolving, and static security systems are no longer sufficient to counter them. The 2win IT team continuously monitors the current threat landscape and proactively implements security updates — rather than simply reacting after an incident occurs. Protecting your data is an ongoing process, not a one-time effort.
2win's Privacy Policy is written in plain, easy-to-understand language for all Malaysian players — free from confusing legal jargon or unnecessary technical terms. We believe you deserve to fully understand how your data is used, not just agree to a document you can't make sense of.
Answers to the questions Malaysian players ask most about data protection at 2win.
Your data is used not only to secure your transactions — but also to help you play in a healthier, more controlled way.
We use your deposit history to help you set limits that are suited to your own financial needs.
Your game session data is used to power time-reminder features that help you stay in control of how long you play.
If you choose self-exclusion, your data is used to ensure that this restriction is effectively enforced across the entire 2win platform.
Your KYC data is used to verify your age and ensure that the 2win platform is only accessible to eligible individuals.
Need help or support? Contact Talian Kasih 15999 or visit Responsible Gaming page us for additional support resources.
All personal data you provide to 2win is protected under the Malaysia Personal Data Protection Act 2010 (PDPA). You have the right to access, correct, transfer, or request deletion of your data at any time. For any privacy-related enquiries, contact us at support@2win.cash or check Terms & Conditions us for more information.
You now know how 2win protects your personal data to the highest standards. Register for free today and enjoy over 2,500 games with your data secured under Malaysia's PDPA.