SGCWin Privacy Policy — Malaysia Player Data Protection

Introduction — Why Privacy Matters to SGCWin

When you register and play on SGCWin, you are entrusting us with your personal information. We do not take that trust lightly. This Privacy Policy was written not merely to satisfy legal requirements — it was written because we genuinely want you to understand exactly how your data is handled, so you can make informed decisions about using the SGCWin platform.

As an online Sports Betting and casino platform serving Malaysian players, SGCWin collects certain information necessary to operate our services safely and effectively. Without this information, we are unable to process deposits via Touch 'n Go eWallet, GrabPay, or DuitNow, verify your identity for security purposes, or deliver the personalised experience that sets SGCWin apart.

Here's what matters most, right from the start: SGCWin never sells your data. We do not rent your email list to advertisers. We do not share your phone number with marketing parties. Your data serves one purpose only — to deliver the best SGCWin experience to you as a valued Malaysian player.

SGCWin collects information necessary to provide safe, responsible, and high-quality services to all Malaysian players. Below are the categories of information we collect and how they are gathered:

A. Information You Provide Directly

• Registration information: full name, date of birth, gender, an active Malaysian phone number and your current email address when you open a SGCWin account.
• Identity verification documents: a copy of your Malaysian MyKad or passport when required for the KYC (Know Your Customer) process — typically requested for withdrawals exceeding RM 5,000 or when additional security verification is needed.
• Financial information: details of the payment methods you use, such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks). SGCWin does not store full credit card details or bank account numbers — only the information required to process transactions is retained, in encrypted form.
• Communications with us: records of conversations with the SGCWin customer support team via live chat, WhatsApp or email, retained for quality training and complaint resolution purposes.

B. Automatically Collected Information

• Platform usage data: games you play on SGCWin, bets placed, session duration, login frequency and general usage patterns.
• Device technical data: IP address, web browser type, operating system, screen resolution, and device type (Android phone, iOS device, desktop computer, or tablet) used to access SGCWin.
• Approximate location data: location data at the country and state level, derived from your IP address, is used strictly for security and geographic compliance purposes — not to track your precise location.
• Cookie and similar technology data: please refer to Section 5 for detailed information on the use of cookies on the SGCWin platform.

The data we collect is used solely for purposes directly related to SGCWin's services. The table below summarises how your data is used and the corresponding legal basis under Malaysia's PDPA 2010:

SGCWin does not use your data for third-party advertising, commercial profiling or any purpose beyond those listed above. If you receive promotional communications from SGCWin and no longer wish to receive them, you may unsubscribe at any time by clicking the "unsubscribe" link in our promotional emails or by contacting our support team.

SGCWin does not sell, lease, or share your personal data for marketing purposes. However, there are limited circumstances in which your data may be shared with certain third parties, all for legitimate operational purposes:

• Payment provider: the minimum information required to process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX is shared with the respective provider. All payment providers used by SGCWin adhere to high financial security standards.
• Game software provider: your username and minimal session information are shared with our casino game providers such as Pragmatic Play, Evolution Gaming, Microgaming, and others, solely for the purpose of operating those games. They do not receive your phone number, email address, or financial information.
• Relevant authorities: SGCWin will disclose required data to Malaysian authorities or other law enforcement bodies when compelled by law, a valid court order or an official investigation related to fraud, money laundering or financial crime.
• Technical service providers: cloud computing companies and technical infrastructure providers that support SGCWin's operations may have access to your data in a technical capacity only. All such providers are bound by strict data protection agreements.

Data security is SGCWin's top priority. We continuously invest in advanced security infrastructure to ensure your personal and financial information remains protected at all times.

• 256-bit SSL Encryption: all communications between your device and SGCWin's servers are encrypted using 256-bit SSL (Secure Sockets Layer) — the same standard used by leading Malaysian banking institutions such as Maybank and CIMB. This ensures that data transmitted during login, deposits, or withdrawals cannot be intercepted by third parties.
• Secure data storage: personal data is stored on servers protected by strict, layered access controls. Only SGCWin staff who require access to specific data in order to perform their duties are permitted to do so, and every instance of access is carefully logged.
• Two-factor authentication (2FA): SGCWin offers and strongly encourages the use of 2FA for all accounts. With 2FA enabled, even if someone knows your password, they will not be able to log in without the verification code sent to your phone.
• Continuous security monitoring: SGCWin's systems are monitored around the clock to detect any suspicious activity, unauthorised access attempts, or potential cybersecurity threats. Any security incidents are addressed promptly by our dedicated security team.
• Regular security audits: SGCWin undergoes periodic independent security audits by third parties to ensure our security standards remain current and ahead of evolving threats.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against every threat. In the event of a security breach affecting your data, SGCWin will notify you within the timeframe required under Malaysia's PDPA and take immediate action to minimise any impact.

SGCWin uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an overview of the types of cookies we use and their purposes:

• Essential cookies (required): these cookies are essential for the core functions of the SGCWin platform, including login sessions, language selection, and security. Without them, the platform cannot function properly. These cookies cannot be disabled.
• Preference cookies: these cookies remember your preferences — such as your preferred odds format, favourite games, and selected currency — so you don't have to reconfigure them every time you log in to SGCWin.
• Analytics cookies: we use anonymised analytics data to understand how players use the SGCWin platform as a whole — which pages are visited most, which games are most popular, and where players encounter difficulties. This information helps us improve the platform for all users.
• Session cookies: temporary cookies that are automatically deleted when you close your browser, used to maintain your current session while you play on SGCWin.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the SGCWin platform.

SGCWin retains your personal data for as long as necessary to fulfil the purposes stated in this privacy policy, or for as long as required under Malaysian law.

• Active account data: your account information is retained for as long as your SGCWin account remains active. Upon account closure, the data deletion process is initiated within 30 days, subject to the retention requirements outlined below.
• Financial transaction records: in compliance with Malaysian financial laws and anti-money laundering requirements, SGCWin is required to retain financial transaction records for a minimum of 7 years even after account closure.
• KYC Documents: copies of MyKad or passport submitted for verification purposes are retained for the period required under applicable anti-money laundering regulations.
• Customer support communication records: chat logs with the SGCWin support team are retained for 2 years for quality control purposes and to resolve any disputes that may arise at a later stage.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a SGCWin user have certain rights regarding your personal data. SGCWin fully respects and upholds these rights:

• Right to access: you have the right to request a copy of the personal data SGCWin holds about you. We will process this request within 14 business days from the date it is received.
• Right to rectification: if you believe that the personal data SGCWin holds about you is inaccurate or outdated, you may request a correction by contacting us at support@sgcwin.xyz. Most basic information can also be updated directly through your account user panel.
• Right to object: you may object to the use of your data for specific purposes such as marketing communications. We will respect your objection and cease using your data for that purpose.
• Right to request erasure: under certain circumstances provided for by the PDPA, you have the right to request the deletion of your personal data. This request is subject to the legal retention requirements set out in Section 6.
• Right to withdraw consent: where SGCWin processes your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing carried out prior to that withdrawal.

To exercise any of the above rights, please contact the SGCWin data protection team by email at support@sgcwin.xyz, clearly stating the type of request. We will respond within 14 business days.

SGCWin is an online betting and casino platform exclusively for individuals aged 18 years and above only. We do not intentionally collect, process or store any personal data from individuals under the age of 18.

During the registration process, SGCWin requires date of birth verification and reserves the right to request valid identification documents at any time to confirm a player's age. Should we find that data belonging to an individual under 18 has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account.

If you are a parent or guardian and believe your underage child has registered or accessed the SGCWin platform, please contact us immediately at support@sgcwin.xyz and we will take appropriate action without delay.

The SGCWin platform may from time to time contain references or information about third-party game providers such as Pragmatic Play, Evolution Gaming or Microgaming within game descriptions. SGCWin's Privacy Policy applies solely to the SGCWin platform and does not cover the platforms of those third-party providers.

SGCWin is not responsible for the privacy practices of any third parties associated with our services. We encourage you to read the privacy policy of the relevant provider if you interact directly with their platform outside the context of SGCWin.

SGCWin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or relevant technological developments.

• You will be notified of any material changes to this Privacy Policy via your registered email or a prominent notice on the SGCWin platform at least 14 days before the changes take effect.
• The "Updated" date at the top of this document will always reflect the date of the current version of this Privacy Policy.
• Continued use of the SGCWin platform after the effective date of any amendment constitutes acceptance of the revised policy.
• If you do not agree with any amendments made, you have the right to stop using the SGCWin platform and close your account before the changes take effect.

We encourage you to review this Privacy Policy page periodically. If you have any questions about amendments made, please contact us before the effective date.

If you have any questions, concerns, or requests regarding this Privacy Policy or how SGCWin handles your personal data, please don't hesitate to reach out. Our team is happy to assist you in either Bahasa Malaysia or English.

If you are not satisfied with SGCWin's response to your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body responsible for enforcing the PDPA 2010 in Malaysia.