Last updated: 1 January 2026

2win Privacy Policy – How We Protect the Personal Data of Malaysian Members

At 2win, your privacy is more than a legal obligation – it is the trust you place in us every time you use our platform. This document clearly explains what data we collect, how it is used, who can access it, and your rights as a member under the Personal Data Protection Act (PDPA) Malaysia 2010.

PDPA 2010 Compliant 256-bit SSL No Data Sales Full Right of Access
2win's Privacy Commitment
Data protection is our priority
Your data is not sold to any third party
All data is encrypted with 256-bit SSL
You may request access to or deletion of your data at any time
Fully compliant with Malaysia's PDPA 2010
Payment data is processed through secure gateways
Cookies can be managed through your browser settings

2win's Six Data Protection Principles

How we approach our members' data privacy every day

Minimum Data Collection

2win only collects data that is strictly necessary to provide its services – no excess data is collected. Every piece of information requested has a clearly defined purpose that is disclosed transparently.

Storage Security

All personal data is stored on servers protected by AES-256 encryption and 256-bit SSL. Both physical and digital access to these servers is strictly controlled through a multi-layered access control system.

No Data Sales

2win never sells, rents, or trades members' personal data to any third party for commercial purposes. Your data belongs to you — it is not a business asset of ours.

Full Member Rights

As a 2win member, you have the right to access, update, amend, or request deletion of your personal data at any time. Requests are processed within 14 business days.

PDPA 2010 Compliance

All data processing practices at 2win are fully compliant with the Personal Data Protection Act (PDPA) Malaysia 2010 – the primary legislation governing personal data protection in Malaysia.

Breach Notification

In the event of any security incident involving member data, 2win is committed to notifying affected members within a reasonable timeframe and taking immediate action to contain the damage.

Key Summary: This Privacy Policy document explains how 2win collect, use, store, and protect your personal information. We respect your privacy and are committed to keeping your data safe and using it responsibly at all times. By using the 2win platform, you agree to the practices described in this policy.

§1 Introduction & Scope of Privacy Policy

2win ("we", "platform", "Company") operates an online betting platform accessible at 2win-bangla.com. This Privacy Policy applies to all personal information we collect and process in relation to our members, prospective members, website visitors, and any individuals who interact with the platform 2win.

This policy is formulated in accordance with the requirements of Personal Data Protection Act (PDPA) Malaysia 2010 and international best practices in data protection. We take this responsibility seriously, because we understand how sensitive the financial and personal information you entrust to us is every time you use 2win.

If you have any questions about how we handle your data, or wish to exercise your rights under the PDPA, please contact our Data Protection Officer at privacy@2win-bangla.com. We will endeavour to respond within 14 business days.

§2 Types of Personal Data We Collect

2win collects various types of personal data depending on your relationship with our platform. The following are the categories of data we may collect:

Data Categories Example Information Requirements
Identity Data Full name, date of birth, MyKad/Passport number Required for KYC
Contact Data Malaysian phone number, email address Required for registration
Financial Data Payment methods (TnG, DuitNow, FPX, GrabPay), transaction records in MYR Required for deposits/withdrawals
Betting Data Betting history, game types, wins and losses Required for platform operations
Technical Data IP address, device type, browser, operating system, session data Automatically during use
Behavioural Data Pages visited, clicks, time spent on the platform, game preferences For service improvement
Communication Data Live chat records, support emails, feedback For customer support records

Note: 2win does not collect sensitive data such as medical records, political views, or religious beliefs. Financial data such as full credit card numbers is not stored on our servers — it is processed securely through registered third-party payment gateways.

§3 How We Collect Personal Data

2win collects your personal data through a variety of means:

  • Directly from you — when you register an account, complete your profile, make a deposit or withdrawal, contact customer support, or respond to a survey.
  • Automatically during platform use – via cookies, web beacons, and similar tracking technologies when you visit or use the 2win platform. This includes IP addresses, device data, and usage patterns.
  • From legitimate third parties — including identity verification service providers, fraud prevention agencies, and payment gateway providers such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks) for transaction verification purposes.
  • Through affiliate programmes or partners – if you register via a 2win affiliate link, we may receive basic information about your referral source.

We only collect data that you voluntarily provide or that is collected automatically during your use of the platform. No data is collected from your social media accounts without your explicit consent.

§4 Purposes for Using Personal Data

2win using your personal data for the following purposes:

  • Account management and identity verification: To verify your identity during registration and the KYC process, manage your account, and securely process login requests.
  • Provision of betting services: To enable you to place sports bets (Super League football, EPL, badminton, and more), play Live Casino, slots, virtual sports, and Poker on the 2win platform.
  • Financial transaction processing: To process deposits via Touch 'n Go, DuitNow, FPX, GrabPay, Boost, ShopeePay, and to pay out your winnings in MYR.
  • Fraud prevention and security: To detect and prevent fraud, money laundering, unauthorised access, and other illegal activities on the 2win platform.
  • Legal and regulatory compliance: To comply with legal obligations under Malaysia's PDPA, KYC/AML requirements, and directives from the relevant authorities.
  • Customer support: To provide technical assistance and resolve any complaints or disputes you raise with the 2win support team.
  • Service communications: To send you important notifications about your account, changes to our terms, or security information you need to be aware of.
  • Product improvement: To analyse usage patterns for the purpose of improving the interface, platform speed, and overall user experience — all using aggregated data with no personal identification.
  • Marketing (with your consent): To send you promotional offers, bonuses, and 2win product updates, where you have agreed to receive marketing communications at the time of registration.

2win will not use your data for purposes beyond those stated above without obtaining fresh consent from you. You may withdraw consent to marketing communications at any time by contacting us or through your account settings.

§5 Data Sharing with Third Parties

2win does not sell or trade members' personal data. However, we may share certain data with selected third parties in the following situations:

  • Payment service provider: Payment gateways such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks) receive the transaction information required to process your deposits and withdrawals. These providers have their own privacy policies and are bound by confidentiality agreements with 2win.
  • Identity verification (KYC) service providers: To verify your identity during the KYC process, we work with recognised identity verification providers that are fully PDPA-compliant.
  • Game service providers: Third-party slots and Live Casino providers may receive player IDs and game data necessary for operation – no full personal information is shared.
  • Relevant authority: We are legally obligated to disclose information to law enforcement agencies, regulatory authorities, or courts when lawfully directed to do so.
  • Professional advisors: Lawyers, accountants, or auditors bound by professional confidentiality obligations may access relevant data in the context of professional services rendered to 2win.

All third parties with whom we share data are bound by data processing agreements ensuring they use the data only for permitted purposes and adhere to appropriate data protection standards.

§6 Data Security Measures

2win invests seriously in security infrastructure to protect your personal data from unauthorised access, loss, misuse, or unlawful disclosure:

  • 256-bit SSL encryption: All communications between your device and 2win's servers are encrypted using 256-bit TLS/SSL — the same standard used by Malaysia's major banks such as Maybank and CIMB.
  • Data-at-rest encryption: Personal data stored on our servers is encrypted using AES-256 at rest.
  • Role-based access controls: Only 2win staff with a legitimate business need are permitted to access member data, and all access is logged for audit purposes.
  • Two-factor authentication (2FA): 2win's internal administration system requires mandatory 2FA for all access to member data.
  • 24/7 security monitoring: Intrusion detection systems (IDS) and threat monitoring operate around the clock to identify any suspicious activity.
  • Periodic penetration testing: 2win conducts regular security testing and audits by independent security experts to identify and address any vulnerabilities.
  • Secure data backup: Data is regularly backed up to separate secure locations to ensure recovery in the event of any technical incident.

Please Note: While 2win takes all reasonable steps to protect your data, no system is 100% foolproof. You also play an important role — never share your password, and always log out of your 2win account when using a shared or public device.

§7 Data Retention Period

2win retain your personal data for as long as your account is active and for as long as necessary to fulfil the purposes outlined in this policy. The following are general data retention guidelines:

  • Active account data: Retained for as long as your account remains active on the 2win platform. This data is required to provide you with uninterrupted service.
  • Data after account closure: After an account is closed, we retain the minimum necessary personal data for 7 years to comply with legal and regulatory requirements, including financial record-keeping and anti-money laundering obligations.
  • Financial transaction data: Records of all deposit and withdrawal transactions in MYR are retained for a minimum of 7 years in accordance with Malaysian legal requirements.
  • Support communication data: Live chat records and support emails are retained for 2 years for service quality and dispute resolution purposes.
  • Cookies and technical data: Session cookies expire when you close your browser. Preference cookies are stored for up to 12 months or until you delete them.

When data is no longer needed for any of the stated purposes and the mandatory retention period has expired, 2win will securely destroy or delete that data using recognised methods such as data overwriting or physical destruction of storage media.

§8 Your Rights as a Data Subject

Under the Personal Data Protection Act (PDPA) Malaysia 2010, you have the following rights regarding your personal data held by 2win:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests are processed within 21 days and a nominal fee may apply.

Right to Rectification

If your data is inaccurate or out of date, you have the right to request a correction. Contact 2win support with the correct information to have it updated.

Right to Withdraw Consent

You may withdraw your consent to marketing communications at any time without affecting your access to 2win services.

Right to Object to Processing

You have the right to object to the processing of your data for certain purposes – such as direct marketing – under circumstances permitted by the PDPA.

To exercise any of the rights above, submit a written request to privacy@2win-bangla.com by stating the right you wish to exercise and providing sufficient identifying information for us to verify your identity. 2win will respond within 14 business days and resolve the request within 21 business days.

Please note that these rights are not absolute — there are situations where we are legally required to retain or process data even if you object, such as for regulatory compliance and financial crime prevention purposes.

§9 Cookies Policy

Platform 2win uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform usage. The following are the types of cookies we use:

  • Essential Cookies (Required): These cookies are required for the core functionality of the 2win platform – including login session management, CSRF security, and language preferences. Without them, the platform cannot function properly. These cookies cannot be disabled.
  • Functional Cookies (Optional): These cookies remember your preferences — such as your chosen language, display settings, and gaming preferences — to deliver a more personalised experience on 2win.
  • Analytics Cookies (Optional): We use aggregated, anonymised analytics data to understand how members use the 2win platform, helping us improve our services. This data contains no information that can personally identify you.
  • Security Cookies: Used to detect and prevent fraudulent activity, verify the devices being used, and protect your account from unauthorised access.

You can manage and delete cookies through your browser settings. Please refer to your browser's help section for detailed instructions. Please be aware that disabling certain cookies may affect the functionality of the platform 2win.

§10 Protection of Children's Data

Platform 2win is exclusively for individuals aged 18 and above. We do not knowingly collect or process the personal data of individuals under the age of 18.

If we discover that we have collected personal data from someone under the age of 18 without appropriate age verification, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who believe their child has registered an account on 2win are urged to contact us immediately at privacy@2win-bangla.com.

To parents and guardians: Please monitor your child's online activity. If you discover that your child has accessed a betting platform such as 2win, please contact us immediately. We take the protection of minors very seriously.

§11 Cross-Border Data Transfers

In certain cases, your personal data may be transferred to, and stored on, servers located outside Malaysia – primarily for technical processing, data backup, or service delivery by our technology providers.

When such data transfers occur, 2win ensure that:

  • The recipient country has a level of data protection equivalent to or higher than Malaysia's
  • Recipients are bound by standard contractual data protection clauses that ensure your data is safeguarded to the same standards as in Malaysia
  • All data transfers comply with the requirements of the Personal Data Protection Act (PDPA) Malaysia 2010 concerning cross-border data transfers

You may contact us for further information about the safeguards we apply to international data transfers.

§12 Changes to This Privacy Policy

2win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use.

When material changes are made to this Privacy Policy, we will:

  • Updating the "Last Updated" date displayed at the top of this page
  • Displaying a clear notice on the 2win platform's main page regarding such changes
  • Notifying members via their registered email or in-platform notifications at least 7 days before significant changes take effect

Continued use of the platform 2win after the changes take effect will be considered acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

§13 Contact Us – Data Protection Officer

For any enquiries, requests, or complaints relating to this Privacy Policy or the way 2win handles your personal data, please contact:

  • Privacy Email: privacy@2win-bangla.com
  • General Support Email: support@2win-bangla.com
  • Live Chat: Available 24/7 on the 2win platform after logging in
  • Support Languages: Bahasa Melayu and English

We will endeavour to address all privacy-related enquiries within 14 business days. For formal requests under the PDPA (such as data access requests), please clearly state in your email that it is a "PDPA Data Subject Rights Request" so we can process it through the appropriate channel.

If you are not satisfied with how 2win has handled your privacy complaint, you have the right to lodge a complaint with Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital. However, we encourage you to reach out to us first so that we may attempt to resolve the matter directly.

FAQ — 2win Privacy Policy

The most frequently asked questions by members about how 2win protects their data

Absolutely not. 2win does not sell, rent, or trade members' personal data to any third party for commercial or advertising purposes. Your data belongs to you, and we never use it as a product to be sold. We only share the information necessary with service providers directly involved in operating the 2win platform — such as payment gateways Touch 'n Go, DuitNow, and FPX — and all of this is subject to strict confidentiality agreements.

You may request access to your personal data by emailing privacy@2win-bangla.com with the subject line "PDPA Data Access Request". Please include your full name, registered phone number, and a copy of your MyKad or passport for identity verification purposes. 2win will process your request within 21 business days. We will provide a summary of the data we hold about you in a readable format. For repeated requests within a short period, a reasonable administrative fee may be charged in accordance with the provisions of Malaysia's PDPA.

Yes. 2win does not store your full credit card number or e-wallet password on our servers. All payments – whether via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, or FPX – are processed through secure payment gateways that hold their own security certifications. 2win only receives a success or failure confirmation for each transaction, never your full payment details. All communication between you and our servers is also protected by 256-bit SSL encryption, making any attempt to intercept your data virtually impossible.

You may request deletion of your personal data by contacting privacy@2win-bangla.com. However, please note that 2win may not be able to delete all of your data in full due to legal obligations. Under Malaysian law, we are required to retain financial and transaction records for a minimum of 7 years for anti-money laundering (AML) compliance and tax purposes. Data that has exceeded the mandatory retention period will be securely deleted. We will inform you which data can be deleted and which must be retained in accordance with the law.

When you close your 2win account, we will stop actively processing your data for service purposes. However, certain data will be retained for a period stipulated by law — typically 7 years for financial records. This is a legal requirement that cannot be waived. Once the mandatory retention period expires, all your data will be permanently deleted or anonymised. During this period, your data is only accessible in situations required by law and is not used for marketing or any other service purposes.
Related Policy Documents

This Privacy Policy should be read together with the other documents governing the use of the platform 2win. For a complete overview of your rights and responsibilities as a 2win member, please also read Terms & Conditions which sets out the full terms of use for the platform, as well as the Responsible Gaming us for information on responsible betting tools and available support resources. If you have any questions, the 2win support team is here to help 24/7.

Your Data Is Fully Protected

Play with Confidence at 2win – A Platform That Respects Your Privacy

Create a free account on 2win today. Your data is protected with 256-bit SSL encryption, never sold to anyone, and managed in accordance with Malaysia's PDPA 2010. Enjoy Sports Betting, Live Casino, and slots safely and securely.

By registering, you agree to Terms & Conditions and our Privacy Policy. Minimum deposit RM20 only. Play responsibly. For individuals aged 18 and above. Find out more.

Bahasa Melayu