Introduction
Enterwin Entertainment Ltd ("Enterwin", "we") is committed to protecting the privacy and personal data of every user on our platform at enterwin.win. This Privacy Policy is drafted to ensure you fully understand what information we collect, how it is used, and the rights you hold as the owner of that data.
This document applies to all information you provide to us when registering an account, using the platform's services, making deposits or withdrawals, contacting our support team, or participating in any promotional campaigns we run.
By using the Enterwin platform, you agree to the data collection and processing practices described in this Privacy Policy. We will notify you via an in-platform notice or email should any material changes to this policy occur.
This policy was written in Bahasa Melayu for the convenience of Malaysian players. In the event of any ambiguity in interpretation, the English version shall be the legally binding version.
Types of Data We Collect
Enterwin collects two main types of data from users of our platform:
2.1 Information You Provide Directly:
| Data Category | Example Information | Purpose |
|---|---|---|
| Identity Information | Full name, date of birth, IC/passport number | KYC verification, fraud prevention |
| Contact Information | Email address, phone number, address | Account communications, security notices |
| Financial Information | Payment methods, deposit/withdrawal history | Transaction processing, AML compliance |
| Verification Documents | IC copy, utility bills, bank statements | KYC process, withdrawal verification |
2.2 Information Collected Automatically:
- IP address and general location data (country or city level)
- Browser type, operating system, and device information
- Pages visited, duration of visit, and in-platform activity
- Gaming history including bets, wins, and losses
- Cookie data and session identifiers
Enterwin does not collect sensitive information such as biometric data, religious beliefs, political views, or health information without your specific consent.
How We Use Your Data
The personal data we collect is used solely for lawful purposes directly related to the provision of Enterwin's services. The following are the primary uses of your data:
- Account management — creating, verifying and maintaining your player account
- Transaction processing — processing deposits, withdrawals and other financial activities accurately and securely
- Identity verification (KYC) — ensuring compliance with anti-money laundering legal requirements
- Customer Support — resolving enquiries, complaints and technical issues you report to us
- Platform security — detecting and preventing fraud, unauthorised access and illegal activity
- Platform improvement — analysing usage patterns to improve the overall user experience
- Marketing communications — sending information about promotions and the latest offers (only if you have consented)
- Legal compliance — fulfilling applicable legal and regulatory obligations
Enterwin will not use your data for any other purposes not stated in this Privacy Policy without first obtaining your consent.
Data Sharing with Third Parties
Enterwin does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, there are limited situations where we need to share data with certain parties:
- Payment processors — such as FPX, Touch 'n Go eWallet and Boost to process your financial transactions
- KYC service providers — to verify player identity in order to meet compliance requirements
- Game providers — providers such as Evolution Gaming and Pragmatic Play receive the minimum game data required to run the games
- Regulatory authorities — when required by law or upon a lawful request from authorities
- Security consultants — in cases of fraud investigation or cybersecurity threats
All third parties we work with are required to comply with data protection standards at least equivalent to our own. Strict confidentiality agreements are signed with every service provider.
If enterwin is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction. You will be notified in advance and given a choice before your data becomes subject to a different privacy policy.
Data Retention Period
Enterwin retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy and to comply with relevant legal obligations.
- Active account data — retained for as long as your account is active and in use
- Financial transaction records — retained for a minimum of 7 years in accordance with financial compliance legal requirements
- KYC Documents — retained for 5 years after the account closure date or the date of the last transaction
- Activity and security logs — retained for 2 years for fraud detection purposes
- Customer support communications — retained for 3 years from the date of last communication
Once the retention period expires, data will be securely deleted or anonymised in a way that prevents re-identification of individuals. Where there are unresolved legal disputes, the relevant data may be retained for longer until the matter is settled.
Your Rights as a Data Owner
As an enterwin user and owner of your own personal data, you hold the following rights, which you may exercise at any time:
Right of Access
Request a copy of all personal data we hold about you in a readable format.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in our records.
Right to Erasure
Request deletion of your personal data under certain circumstances, subject to legal obligations.
Right to Object
Object to the processing of your data for direct marketing or profiling purposes at any time.
Right to Data Portability
Receive your data in a structured, machine-readable format to transfer to another platform.
Right to Restriction
Request restriction of your data processing in specific situations while a dispute is being resolved.
To exercise any of the above rights, contact our data protection team via the 24/7 live chat in the platform. We will process your request within 30 calendar days from the date we receive your complete request.
Some of these rights may be limited by legal obligations we are required to comply with — for example, we cannot delete financial records that are required by law to be retained. We will clearly explain any such restrictions when processing your request.
Cookie Policy
Enterwin uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:
| Cookie Type | Function | Can Be Disabled? |
|---|---|---|
| Essential Cookies | Required for login, session security, and core platform functionality | No — required for core functionality |
| Performance Cookies | Collects data on how users interact with the platform to drive improvements | Yes — via browser settings |
| Functional Cookies | Saves your preferences such as language and display settings | Yes — but your preferences will be lost |
| Marketing Cookies | Used to display relevant advertisements (if you have consented) | Yes — without affecting platform access |
You can manage or delete cookies at any time through your web browser settings. However, disabling essential cookies may affect your ability to log in or use certain platform features.
Data Security Measures
Data security is the highest priority at enterwin. We implement a range of technical and organisational measures to ensure your data is always protected:
- 256-bit SSL encryption for all data in transit between your device and our servers
- Encryption of sensitive data at rest in our database
- Tiered access control — only staff who need the data to perform their duties can access it
- Two-factor authentication (2FA) for all staff accounts with access to user data
- 24/7 security monitoring with automated intrusion detection systems
- Regular security audits by independent third parties
- Mandatory data protection training for all enterwin staff
- Comprehensive incident response procedures in the event of a data breach
In the event of a data breach that affects your rights and freedoms, enterwin will notify you and the relevant authorities within 72 hours of detecting the incident, in accordance with legal requirements.
While we take all reasonable precautions, no security system is 100% impenetrable. You also play an important role in protecting your account by using a strong password and not sharing it with anyone.
Third-Party Links & Services
The enterwin platform integrates third-party services to deliver a more complete experience for players — including game providers, payment processors, and customer support systems. It is important to understand that:
- Each game provider integrated with Enterwin has its own Privacy Policy governing the data they collect while you play their games.
- Payment processors such as FPX and Touch 'n Go eWallet operate under their own privacy policies and security standards
- Enterwin is not responsible for the privacy practices of these third parties, although we only work with providers that comply with recognised security standards.
We encourage you to read the Privacy Policy of each third-party service you use through the enterwin platform. If you do not agree with the privacy policy of any third-party provider, you may choose not to use that service without affecting your use of other parts of the enterwin platform.
Contact Our Data Protection Officer
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, enterwin's Data Protection Officer (DPO) is ready to assist you.
You can reach us through several channels:
- Live Chat 24/7 — The fastest way to get a response. Access via the chat icon in the bottom corner of the Enterwin platform.
- Email — Send your privacy enquiry to the support address listed on our About Us page.
- Support Page — Submit a support ticket through the help section in your account.
We are committed to responding to all privacy-related inquiries within 5 business days. For more complex requests such as data access or data deletion, the processing period is within 30 calendar days.
Enterwin also welcomes feedback and suggestions regarding our privacy practices. Your input helps us continually improve the way we protect user data.
This Privacy Policy may be updated from time to time to reflect changes in our practices, legal requirements, or the technologies we use. The latest effective date is always displayed at the top of this page. We encourage you to review this page periodically.