PDPA Compliant Data Protection

GBOWin Privacy Policy –
Malaysia Member Data Security

At gbowin, your privacy is more than a legal obligation — it is a responsibility we take seriously. This policy clearly explains how your personal data is collected, used, protected, and shared in the context of using the gbowin platform.

Updated: 1 January 2026 PDPA: Full Compliance Encryption: SSL 256-bit
Note: This Privacy Policy is governed by Personal Data Protection Act 2010 (PDPA) Malaysia. By using the gbowin platform, you agree to the collection and use of your data as described in this document.

1. Introduction

Gbowin ("we", "Platform") is committed to protecting the privacy and personal data of every member who registers and uses our services. This Privacy Policy explains our practices for collecting, processing, storing, and protecting your personal information.

This policy applies to all users of the gbowin platform, including website visitors, registered members, and former members whose accounts have been closed. It covers all channels of interaction with gbowin — website, mobile app, live chat, and email communications.

By creating an account on gbowin or continuing to use our platform after this Privacy Policy is updated, you confirm that you have read and understood how we handle your personal data. If you do not agree, please contact us before continuing to use the platform.

2. Data We Collect

Gbowin collects your personal data through two main sources — information you provide directly when registering or using the platform, and information collected automatically through tracking technologies.

Data Categories Example Information How It Is Collected
Identity Full name, date of birth, MyKad number Registration & KYC
Contact Email, mobile number Registration
Finance Bank name, destination account number Withdrawal Process
Platform Activity Betting history, deposit & withdrawal logs Automatic — platform system
Technical IP address, device type, browser, OS Automatic — cookies & server logs
Location Country, time zone (not GPS) Automatic — IP address

Gbowin never has collect credit/debit card numbers directly. All payment processing is handled by third-party payment providers who maintain their own security standards.

3. How We Use Your Data

The personal data we collect is used solely for the following purposes:

  • Account Operations: Creating and managing your account, verifying identity, and processing secure logins.
  • Financial Transactions: Processing deposits, managing withdrawals, and maintaining accurate financial records in accordance with compliance requirements.
  • Customer Support: Resolving your inquiries, complaints, and disputes effectively and within the stipulated timeframe.
  • Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and other suspicious activity.
  • Legal Compliance: Fulfilling obligations under Malaysia's PDPA and anti-money laundering (AML) reporting requirements.
  • Service Communications: Sending important notifications related to your account, security, and platform updates.
  • Platform Improvements: Analyzing usage patterns in aggregate (not individually) to improve the user experience.
Marketing: gbowin only sends marketing communications to members who have given explicit consent. You may withdraw this consent at any time through your account settings.

4. Legal Basis for Processing

Under the Malaysia Personal Data Protection Act 2010 (PDPA), gbowin processes your personal data on the following valid legal bases:

  • Consent: You provided explicit consent during registration by agreeing to this Privacy Policy.
  • Contract Performance: Processing is necessary to carry out the service agreement between you and gbowin.
  • Legal Obligations: Certain processing is required to comply with applicable Malaysian law, including AML legislation.
  • Legitimate Interest: Processing for fraud prevention and platform security purposes represents our legitimate interest and does not override your privacy rights.

5. Data Sharing with Third Parties

Gbowin does not sell, rent, or trade your personal data to any third party for marketing purposes. However, we may need to share data in certain limited contexts:

  • Payment Providers: Required transaction information is shared with approved payment providers such as FPX, DuitNow, and eWallet providers to process your deposits and withdrawals.
  • Game Providers: Your basic account identity may be shared with third-party game providers solely for session management purposes.
  • KYC Services: Identity information is shared with approved third-party identity verification service providers for KYC purposes only.
  • Regulatory Authority: gbowin will disclose data when required by law or a valid court order from Malaysian authorities.

All third parties working with gbowin are bound by strict confidentiality agreements and are only permitted to use your data for the purposes specified in those agreements.

6. Encryption & Security Measures

Your data security is the absolute top priority for gbowin. We implement multiple layers of technical and organizational protection to ensure your data remains safe at all times:

  • 256-bit SSL Encryption: All communication between your browser/app and gbowin's servers is encrypted using TLS 1.3 protocol with 256-bit encryption.
  • Password Storage: Passwords are stored using the bcrypt hashing algorithm with a unique salt — gbowin cannot read your original password.
  • Two-Factor Authentication (2FA): 2FA is available and strongly recommended for all accounts as an extra layer of protection against unauthorized access.
  • Regular Security Scanning: The gbowin infrastructure undergoes regular vulnerability scanning and penetration testing by independent security experts.
  • Internal Access Controls: Access to members' personal data within gbowin staff is strictly limited based on a need-to-know principle.
  • 24/7 Monitoring: An automated monitoring system operates around the clock to detect and respond to security threats in real time.

7. Data Retention Period

Gbowin retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by Malaysian law.

  • Active Account Data: Retained for the duration your account is active and for seven (7) years after account closure, in accordance with Malaysia financial regulatory requirements.
  • Transaction Records: Retained for seven (7) years in accordance with Malaysia's AMLA (Anti-Money Laundering Act) requirements.
  • Security Logs: Retained for 12 months for security incident investigation purposes if required.
  • Marketing Data: Retained until you withdraw consent or a deletion request is submitted.

Once the retention period expires or a deletion request is approved, data will be securely erased using methods that ensure it cannot be recovered.

8. Your Rights Under PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights, which you may exercise at any time:

9. Cookies & Tracking Technologies

Gbowin uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyze platform performance. The cookies we use include:

  • Session Cookies (Required): Required to maintain your login session and ensure transaction security. These cookies cannot be disabled.
  • Functional Cookies: Stores user preferences such as language, theme, and display settings. Can be disabled but may affect the user experience.
  • Analytics Cookies: Helps us understand how the platform is used in aggregate for improvement purposes. Data is anonymized and does not identify individuals.
  • Security Cookies: Used to detect suspicious login attempts and protect your account from unauthorized access.

You can manage cookie settings through your browser preferences. However, disabling essential cookies will prevent you from accessing core features of the gbowin platform.

10. International Data Transfers

Some services we use — including server infrastructure and support services — may operate outside Malaysia. When your personal data is transferred overseas, gbowin ensures that:

  • The destination country has a level of data protection equivalent to or higher than Malaysia.
  • Appropriate and binding data transfer agreements have been established with overseas data recipients.
  • All data transfers comply with Section 129 of Malaysia's Personal Data Protection Act 2010.

The primary gbowin servers are located in data centers that comply with international security standards and are subject to periodic independent security audits.

11. Changes to the Privacy Policy

Gbowin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Material changes will be communicated to members via:

  • In-platform notification on gbowin at least 14 days before changes take effect.
  • Email notification to your registered email address for changes that significantly affect your privacy rights.
  • Update the "Last Updated" date at the top of this document.

Continued use of the gbowin platform after the effective date of any policy changes will be considered acceptance of the updated policy.

12. Contact Us About Privacy

For any inquiries, requests, or complaints regarding your data protection and privacy at gbowin, please contact our team via:

  • Privacy Email: [email protected]
  • Live Chat: Available 24/7 within the gbowin platform — select the "Privacy & Data" category when starting a chat.
  • Response Time: We are committed to responding to all privacy inquiries within 5 business days.

For rights exercise requests (such as data access or deletion), please provide your account number and request details via the privacy email above. We will process your request within 21 calendar days as required under Malaysia's PDPA.

Effective Date: This Privacy Policy is effective from 1 January 2026 and supersedes all previous versions.

Right Your Privacy at GBOWin

As a gbowin member, you have six fundamental rights under Malaysia's PDPA that we fully respect.

1
Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

2
Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data at no charge.

3
Right to Erasure

You may request deletion of your data when it is no longer needed and no legal obligation prevents it.

4
Right to Object

You may object to the processing of your data for specific purposes, including direct marketing.

5
Right to Restrict Processing

In certain situations, you may ask us to restrict how we process your data.

6
Right to Withdraw Consent

You may withdraw consent for data processing at any time without affecting prior transactions.

How GBOWin Protecting Your Data

More than just legal compliance — gbowin actively invests in the latest security technologies and processes.

End-to-End Encryption

All data transmitted between your device and the gbowin platform is encrypted with 256-bit SSL/TLS encryption — the same standard used by Malaysia's leading banks.

Full PDPA Compliance

Gbowin operates in full compliance with Malaysia's Personal Data Protection Act 2010. Our policies and procedures are reviewed periodically by independent privacy law experts.

Data Minimization

Gbowin only collects data that is strictly necessary for platform operations. We do not collect excessive information and do not retain data beyond the period required.

Strict Access Controls

Access to members' personal data within gbowin staff is tightly controlled based on a need-to-know principle and comprehensive audit logs.

No Data Sales

Gbowin has never and will never sell, rent, or trade members' personal data to advertisers or other third parties for commercial purposes.

Consent Management

You have full control over your marketing consent. Withdrawing consent is simple and can be done in under a minute through your account settings.

Your Privacy Fully Protected at GBOWin

Play with peace of mind knowing your personal data is always safe with gbowin. Register today and experience a platform that puts your security and privacy first.

PDPA Compliant 256-bit SSL Encryption No data sales Full privacy controls
Bahasa Melayu