Privacy Policy

1. Introduction

PedangWin ("we", "us", "our", "Platform") operates the online casino and sports betting website located at https://pedangwin.cam. This Privacy Policy describes how PedangWin collects, processes, stores, shares, and protects the personal data of individuals ("you", "User", "Player") who access or use the Platform and its associated services.

This policy applies to all personal data collected through your use of the PedangWin website, whether you are a registered account holder, a visitor browsing the Platform, or an individual who contacts our customer support team. It covers data collected via all interaction channels including web browsing, account registration, deposit and withdrawal transactions, live chat, and promotional communications.

By accessing PedangWin and creating an account, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this policy, you must cease using the Platform immediately.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" refers to PedangWin, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" refers to any third party that processes personal data on behalf of PedangWin under a written data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data.
• "KYC Data" refers to identity verification documents and supporting information collected as part of the Know Your Customer process, including copies of your MyKad, proof of address, and selfie verification.
• "Cookies" refers to small text files stored on your device by your web browser when you visit the Platform, used to remember preferences and collect usage analytics.
• "MYR" means Malaysian Ringgit, the primary transaction currency on the Platform.

3. Data We Collect

PedangWin collects personal data across several categories, depending on how you interact with the Platform:

3.1 Identity & Registration Data

• Full legal name (as it appears on your MyKad or passport);
• Date of birth (to verify the 21+ age requirement);
• Gender;
• National Identity Card (MyKad) number or passport number;
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam);
• Email address and mobile phone number.

3.2 Financial & Payment Data

• Bank account details or e-wallet account identifiers used for deposits and withdrawals (e.g., Maybank2u, CIMB Clicks, Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Public Bank, Hong Leong Connect, Boost);
• Transaction history including deposit amounts, withdrawal requests, and bonus redemptions;
• Cryptocurrency wallet addresses where applicable.

3.3 KYC Verification Data

• Scanned or photographed copies of your Malaysian National Identity Card (MyKad — front and back);
• Selfie photographs taken for liveness verification;
• Proof of address documents (utility bills, bank statements dated within 90 days);
• Source of funds declarations where required by anti-money laundering obligations.

3.4 Usage & Technical Data

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session duration, pages visited, and features used;
• Game history, bet amounts, win/loss records, and wagering activity;
• Login timestamps and access logs.

3.5 Communications Data

• Records of live chat conversations with our support team;
• Email correspondence and support ticket content;
• Responses to surveys, promotions, or feedback requests.

4. How We Collect Your Data

Personal data is collected through the following channels and mechanisms:

4.1 Direct Collection

You provide data directly to PedangWin when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion. The accuracy of this data is your responsibility, and you must notify us of any changes promptly.

4.2 Automated Collection

When you access the Platform, our servers automatically record technical data including your IP address, browser type, referring URL, and device identifiers. This data is collected through server logs and first-party analytics tools to monitor platform performance, detect suspicious activity, and improve the user experience.

4.3 Cookies and Tracking Technologies

PedangWin uses cookies and similar technologies to maintain your session state, remember your language and display preferences, and analyse aggregated usage patterns. For full details on cookie types and how to manage them, refer to Section 8 (Cookies & Tracking Technologies) of this policy.

4.4 Third-Party Sources

In some circumstances, PedangWin may receive supplementary information about you from third-party KYC verification providers, fraud detection services, or payment processors. Such data is used solely to verify your identity, assess financial risk, or comply with anti-money laundering obligations.

5. Legal Basis for Processing

PedangWin processes your personal data on the following legal grounds:

6. How We Use Your Data

PedangWin uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and administer your PedangWin account, including processing login authentication and managing your account wallet balance in MYR;
• Payment Processing: To verify and process deposit and withdrawal transactions via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect;
• Identity Verification: To confirm your identity, verify the 21+ age requirement, and fulfil Know Your Customer obligations under applicable anti-money laundering regulations;
• Fraud & Security Monitoring: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, and other prohibited conduct on the Platform;
• Responsible Gambling: To monitor gambling patterns, enforce self-imposed deposit limits and cooling-off periods, and identify players who may be exhibiting signs of problem gambling;
• Customer Support: To respond to your enquiries, complaints, and support requests in a timely and informed manner;
• Promotions & Bonuses: To administer bonus offers, verify wagering requirement completion, and communicate relevant promotions to opted-in players;
• Platform Improvement: To analyse aggregated usage data, optimise platform performance, and develop new features aligned with the needs of our Malaysian player base;
• Legal Compliance: To meet our obligations under applicable laws and regulations, including responding to lawful requests from regulatory authorities.

7. Data Sharing & Disclosure

PedangWin does not sell, rent, or trade your personal data. We may share your data with carefully selected third parties only in the circumstances described below:

7.1 Service Providers

We engage trusted third-party service providers to assist with the operation of the Platform, including payment processing partners, KYC verification providers, fraud prevention services, cloud infrastructure providers, and customer support software vendors. All such providers are bound by data processing agreements and are prohibited from using your data for any purpose other than providing their contracted services to PedangWin.

7.2 Game Providers

To enable gameplay, limited session data (such as a pseudonymous player ID and game session token) may be transmitted to our licensed game content providers including Evolution, Pragmatic Play, PG Soft, and Spribe. These providers do not receive your full identity information and process only what is necessary to deliver the game experience.

7.3 Legal & Regulatory Disclosure

PedangWin may disclose your personal data to regulatory authorities, law enforcement agencies, or financial intelligence units where we are required to do so by applicable law, court order, or regulatory directive. This includes anti-money laundering reporting obligations. We will notify you of such disclosures where we are legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of PedangWin's business, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that may result.

8. Cookies & Tracking Technologies

PedangWin uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience on the Platform. The following categories of cookies are used:

8.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, CSRF protection cookies, and load balancer routing cookies. Without these, core platform features — including login, deposit, and withdrawal — cannot operate.

8.2 Preference Cookies

These cookies remember your settings and preferences, such as your display language, lobby layout preferences, and favourite game categories. They are set upon your first interaction with relevant features and expire after 12 months of inactivity.

8.3 Analytics Cookies

We use first-party analytics cookies to collect aggregated, anonymised data about how players navigate and use the Platform. This data helps us identify performance bottlenecks, improve content structure, and optimise the player journey. No individually identifiable data is exported from these tools to third parties.

8.4 Security Cookies

These cookies assist our fraud detection systems by tracking login patterns, device fingerprints, and unusual navigation behaviour. They are a necessary component of our security infrastructure and cannot be disabled without impairing account protection.

8.5 Managing Cookies

You may adjust your browser settings to block or delete cookies at any time. Please note that disabling strictly necessary or security cookies will impair your ability to use the Platform and may prevent login or payment functionality from operating correctly. Instructions for managing cookies are available in the help documentation of your browser.

9. Data Retention

PedangWin retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised using industry-standard data destruction procedures. Anonymised data that can no longer be linked to any identifiable individual may be retained indefinitely for statistical and analytical purposes.

10. Data Security

PedangWin implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data exchanged between your device and PedangWin servers is encrypted using TLS 1.2 or higher with 256-bit SSL certificates;
• Encryption at Rest: Sensitive personal data stored in our databases is encrypted using AES-256 encryption standards;
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Administrative access requires multi-factor authentication and is subject to audit logging;
• Penetration Testing: The Platform undergoes regular third-party security audits and penetration testing to identify and remediate vulnerabilities;
• Intrusion Detection: Our infrastructure is monitored 24/7 by automated intrusion detection systems that alert our security team to anomalous activity in real time;
• Staff Training: All PedangWin staff who handle personal data receive mandatory data protection and security awareness training.

While PedangWin takes every reasonable precaution to protect your data, no system is entirely immune from risk. You are responsible for maintaining the confidentiality of your own account credentials and for notifying us immediately at [email protected] if you suspect unauthorised access to your account.

11. Your Rights as a Data Subject

As a user of the PedangWin platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via the details in Section 15.

• Right of Access: You have the right to request a copy of the personal data PedangWin holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.
• Right to Erasure: Subject to applicable legal and regulatory retention obligations (particularly those relating to AML compliance), you may request the deletion of your personal data. Erasure requests will be evaluated on a case-by-case basis.
• Right to Restriction: You may request that PedangWin restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding accuracy is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to request its transfer to another data controller where technically feasible.
• Right to Object: Where processing is based on legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

PedangWin will respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, of which you will be notified. There is no charge for submitting a data rights request.

12. Children & Minors

PedangWin is strictly an adult platform. The Platform is not directed at, and does not knowingly collect personal data from, any person under the age of 21. Our registration process includes mandatory date-of-birth verification and KYC checks specifically designed to prevent underage access.

If we become aware that personal data has been collected from a person under the age of 21 through misrepresentation or circumvention of our age verification controls, we will immediately suspend the relevant account, delete the associated personal data to the extent not required for legal reporting purposes, and take appropriate further action in line with our Terms & Conditions.

If you are a parent or guardian and believe that your child has registered on PedangWin without your knowledge, please contact us immediately at [email protected] so that we can investigate and act without delay.

13. Third-Party Links

The PedangWin platform may contain references to third-party services such as payment gateways (e.g., DuitNow, FPX) and game provider interfaces. Once you navigate away from the PedangWin domain, this Privacy Policy no longer applies. PedangWin has no control over, and accepts no responsibility for, the privacy practices or content of any third-party platforms.

We strongly encourage you to review the privacy policies of any third-party services you interact with in connection with your PedangWin account, particularly your chosen payment provider.

14. Updates to This Privacy Policy

PedangWin reserves the right to revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, the updated policy will be published on this page with a revised effective date. For significant changes, we may also notify registered Players via email or an in-platform notification.

Your continued use of the PedangWin platform following the publication of a revised Privacy Policy constitutes your acknowledgement and acceptance of those changes. We recommend reviewing this page periodically to remain informed of how we protect your data.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way PedangWin handles your personal data, please reach out to our dedicated privacy support team through the following channel:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the in-platform chat widget
• Response Time: Within 24 hours for email; typically under 3 minutes for live chat

For data rights requests — including access, rectification, erasure, or portability — please include your full name, registered email address, and a clear description of your request. We will acknowledge receipt within 3 business days and aim to fully resolve the request within 30 days.

For responsible gambling support, self-exclusion requests, or deposit limit adjustments, please visit our Responsible Gambling page for dedicated tools and resources.