PRIVACY POLICY

Privacy Policy ecwin – Your Data Security Is Our Priority

Ecwin takes the protection of your personal information seriously. This document clearly explains how we collect, use, store, and protect your data as a user of our platform in Malaysia.

Last Updated: 1 January 2026

256-bit SSL

All data encrypted

Integrated KYC

Secure identity verification

No Data Sales

Your data is never sold

PDPA Compliance

Compliant with Malaysian law

ecwin's Commitment: We never sell, rent, or disclose your personal information to any third party for marketing purposes without your explicit consent. Your privacy is our responsibility.

1. Introduction

Ecwin (also known as ecwin.pro) is an online entertainment platform that operates and provides services to users in Malaysia and the Southeast Asian region. We fully understand the importance of privacy in this digital age, and we are committed to ensuring your personal information remains safe and protected at all times.

This Privacy Policy is prepared in accordance with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. It details the types of information we collect, the purposes for collection, how it is stored, who has access to it, and your rights as the data owner.

By using the ecwin platform, you consent to the practices described in this Privacy Policy. If you disagree with any part of this policy, please stop using the platform and contact us so we can assist you in closing your account properly.

2. Information We Collect

Ecwin collects various types of information to ensure our services operate correctly, securely, and in compliance with legal requirements. The following are the categories of information we collect:

2.1 Information You Provide Directly

  • Registration Information: Full name, date of birth, email address, mobile number, and password (stored in encrypted form).
  • Identity Verification (KYC): A copy of your national ID or passport, a selfie, bank statement, and any other supporting documents required for account verification.
  • Financial Information: Bank account number, account holder name, and payment method details used for deposits and withdrawals.
  • Communications: Any messages, inquiries, or feedback you send to our customer support team.

2.2 Information Collected Automatically

  • Device Data: Device type, operating system, phone model, and unique device identifier.
  • Connection Data: IP address, geographic location (city/state level), Internet Service Provider (ISP), and connection timestamps.
  • Usage Data: Records of gaming activity, betting history, session duration, games played, and platform usage patterns.
  • Cookie Data: Information stored via cookies and similar tracking technologies for the purposes described in Section 6.
Data Category Example Information Primary Purpose
Identity Name, IC, date of birth Account verification & KYC
Contact Email address, phone number Communication & security
Financial Bank account details, transaction records Payment processing
Technical IP, device type, OS Security & fraud prevention
Usage Gaming history, active sessions Service improvement

3. How We Use Your Data

Every piece of information we collect is used for a specific and legitimate purpose. ecwin does not use your data for any purpose outside the scope stated below:

  • Account Operations: Creating and managing your account, processing logins, and ensuring secure access to the platform.
  • Transaction Processing: Processing deposits, withdrawals, and any other financial transactions you carry out on the ecwin platform.
  • Identity Verification: Conducting mandatory KYC processes to ensure all users are verified individuals who meet the minimum age requirement.
  • Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse by monitoring unusual usage patterns.
  • Customer Support: Responding to inquiries, resolving complaints, and providing technical assistance to users.
  • Platform Improvement: Analyzing aggregated usage data (without identifying individuals) to improve features, performance, and user experience.
  • Legal Compliance: Fulfilling legal obligations, including reporting requirements to the relevant authorities where mandated by Malaysian law.
  • Service Communications: Sending important notices related to your account, changes to terms, or security updates via email or in-platform notifications.
Marketing: ecwin will only send you marketing communications if you have given explicit consent during registration or through your account settings. You may withdraw this consent at any time via your profile settings.

4. Sharing Information with Third Parties

Ecwin does not sell, rent, or trade your personal information to any third party for profit. However, in the course of operating the platform, there are limited situations where your information may be shared:

4.1 Trusted Service Providers

Ecwin works with carefully selected third-party service providers, including payment processing providers, identity verification platforms, cloud service providers, and analytics providers. All these third parties are bound by strict confidentiality agreements and are only permitted to process your data in accordance with ecwin's instructions.

4.2 Legal Requirements

Ecwin may disclose your personal information when required by a court order, regulatory directive, or valid legal obligation in Malaysia or the relevant jurisdiction. In such situations, we will endeavour to notify you in advance where permitted by law.

4.3 Protection of ecwin's Rights

Information may be shared when ecwin needs to protect the rights, property, or safety of the platform, its staff, and other users from suspected fraudulent or criminal activity.

No Cross-Border Data Transfer Without Protection: If your data needs to be transferred to servers outside Malaysia, ecwin ensures an equivalent or higher level of protection is applied through appropriate data processing agreements.

5. Data Encryption & Security

Ecwin invests seriously in security infrastructure to ensure your data is always protected from unauthorised access, loss, or misuse. The following are the security layers we employ:

  • 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and ecwin's servers is encrypted using the latest SSL/TLS protocols, ensuring no one can intercept or read that data in transit.
  • Data-at-Rest Encryption: Sensitive information such as passwords and financial details is stored in encrypted format on our servers using the latest industry-standard encryption algorithms.
  • Two-Factor Authentication (2FA): ecwin supports and encourages the use of 2FA to add an extra layer of security to your account.
  • 24/7 Monitoring: The ecwin security team monitors platform activity around the clock to promptly detect any threats or suspicious activity.
  • Regular Security Audits: ecwin's systems and infrastructure undergo periodic independent security audits to identify and address any potential vulnerabilities.
  • Internal Access Control: Access to user data at ecwin is strictly limited to staff who require it to perform their duties, subject to rigorous oversight and detailed access logging.

6. Cookies & Tracking Technologies

Ecwin uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

  • Essential Cookies: These cookies are required for core platform functions such as maintaining your login session and security. Without them, the platform cannot function properly.
  • Performance Cookies: Helps us understand how users interact with the platform, including the most visited pages and time spent, for improvement purposes.
  • Functional Cookies: Saving your preferences such as language and currency settings for a more personalized experience.
  • Security Cookies: Used to detect and prevent fraudulent activity and to ensure every session is legitimate and secure.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the ecwin platform.

7. Your Rights as a User

As an ecwin user, you have certain rights regarding the personal information we hold about you. ecwin is committed to respecting and facilitating your exercise of these rights:

Right to Access

You have the right to request a copy of the personal information we hold about you. Requests will be processed within 14 business days.

Right to Rectification

If your information is inaccurate or incomplete, you may request a correction through your account settings or by contacting our support team.

Right to Erasure

You may request deletion of your personal data, subject to any applicable legal record-keeping obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, with no negative consequences.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another platform if you wish.

Right to Restriction of Processing

In certain circumstances, you may ask us to restrict the processing of your data while any issues are being resolved.

To exercise any of the above rights, please contact us at [email protected] stating the right you wish to exercise and your account information. We will process your request within a reasonable timeframe and notify you of the action taken.

8. Data Retention & Deletion

Ecwin retains your personal information for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required by Malaysian law.

  • Active Account Data: Retained for the duration your account is active and for a defined period after account closure for legal compliance purposes.
  • Financial Transaction Records: Retained for a minimum of seven years in compliance with Malaysia's accounting and anti-money laundering legal requirements.
  • Security Logs: Retained for as long as necessary for fraud investigation and prevention purposes.
  • Communication Data: Customer support conversation records are retained for two years after the last interaction.

Once the retention period has expired and there is no legal obligation to retain the data, ecwin will securely delete or anonymise it using methods that ensure it cannot be recovered.

9. Protection of Underage Users

The ecwin platform is exclusively for users aged 18 and above. ecwin does not intentionally collect any personal information from individuals under the age of 18. Should we discover that information from an underage user has been collected without our knowledge, we will promptly delete that information and close the account in question.

If you are a parent or guardian and believe your underage child has registered on our platform, please contact us immediately at [email protected] and we will address this promptly and with full attention.

10. Changes to This Privacy Policy

Ecwin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any significant changes will be communicated to you via a clear notice on the platform or through your registered email.

The "Last Updated" date shown at the top of this document will always reflect the date of the most recent amendment. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

  • Privacy Email: [email protected]
  • General Support Email: [email protected]
  • Live Chat: Available 24/7 on the ecwin platform
  • Response Time: We are committed to responding to all privacy-related inquiries within 3 business days
Complaints: If you are not satisfied with our response to your privacy inquiry, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant authority.

Why Your Data Is Safe with ecwin

Six layers of protection to keep your personal information secure at all times

Bank-Level Encryption

All your personal and financial data is encrypted using the same 256-bit SSL technology used by leading banking institutions. No one can read your data during transmission.

Integrated & Secure KYC

Ecwin's identity verification process uses an advanced and secure KYC system. Your documents are processed in a fully encrypted environment and are never disclosed to unrelated parties.

Zero Data Sale Policy

Ecwin firmly upholds the principle of not selling user data. Your information belongs entirely to you — we only use it for the clearly stated operational purposes of the platform.

24/7 Threat Monitoring

The ecwin cybersecurity team monitors the platform around the clock to detect any unauthorized access attempts, suspicious activity, or security threats before they impact users.

Malaysia PDPA Compliance

All of ecwin's data handling practices are designed to comply with Malaysia's Personal Data Protection Act 2010, ensuring your rights as a user are always protected under a valid legal framework.

Strict Access Control

Internal access to user data is restricted to staff who genuinely need it, backed by an audit log system that records every access. No staff member can access your data without a clear record being created.

FAQ

The most frequently asked questions by Malaysian users regarding ecwin's Privacy Policy.

Still have questions? Contact us at [email protected] or via live chat on the platform.

ecwin does not sell or share your personal information with third parties for marketing purposes. Data sharing only occurs with trusted service providers who assist us in operating the platform (such as payment processors and KYC systems), and they are bound by strict confidentiality agreements. Disclosure may also occur if required by Malaysian law.

Retention periods vary by data type. Active account data is retained for as long as your account remains active. Financial transaction records are kept for a minimum of seven years in accordance with Malaysian law. Security logs are retained as required for investigation purposes, while support communication records are kept for two years. After these periods, data is securely deleted.

You can request a copy of your personal data by emailing [email protected] with "Data Access Request" in the subject line. Include your account number and full name for identity verification. ecwin will process your request within 14 business days and deliver the required information through a secure channel.

Yes, you have the right to request deletion of your personal data. However, such requests are subject to legal record-keeping obligations — for example, financial transaction records must be retained for a minimum of seven years under Malaysian law. Data not subject to such obligations will be securely deleted within a reasonable timeframe after your request is received and verified.

When you close your ecwin account, your personal data is not deleted immediately due to legal record-keeping obligations that must be fulfilled. However, your data will no longer be used for any marketing activities or active operations. Once the mandatory retention period expires, all your data will be permanently deleted or anonymised.
🔒

Play with Peace of Mind — Your Data is Always Protected

Ecwin protects all your personal information with bank-grade encryption technology. Register today and enjoy a safe, fair, and transparent online entertainment experience alongside over 100,000 members across Malaysia.

Minimum age 18+. Play responsibly. Responsible Gaming

Bahasa Melayu