TupaiWin Privacy Policy

1Introduction and Scope

This Privacy Policy applies to personal information processed through the TupaiWin website, player accounts, casino and sports betting services, payment functions, promotions, customer support channels, security systems, and responsible gambling tools. It applies whether you access TupaiWin from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or another location.

By using TupaiWin, you acknowledge that personal data may be processed as described in this policy. Some information is required to provide the requested service or maintain a secure account. If you do not provide required details, TupaiWin may be unable to open an account, verify your age, process an MYR transaction, resolve a complaint, or permit continued access.

This policy should be read together with the Terms & Conditions and the Responsible Gambling information. TupaiWin is strictly for players aged 21 and above and does not knowingly permit underage gambling.

2Definitions

For the purposes of this Privacy Policy:

• “Personal data” means information relating to an identified or reasonably identifiable individual.
• “Processing” includes collecting, recording, organising, storing, reviewing, using, sharing, restricting, deleting, or otherwise handling personal data.
• “KYC data” means identity, age, address, payment ownership, and related verification information.
• “Usage data” means technical and behavioural information generated when a person visits or uses TupaiWin.
• “User” or “you” means a visitor, registered player, or person who communicates with TupaiWin.

3Personal Information We Collect

The information collected by TupaiWin depends on how you use the platform. It may include information supplied directly by you, details created through account activity, and information received from payment, verification, security, or technical service providers.

4How Information Is Collected

TupaiWin collects information when you register, complete KYC, update account details, use responsible gambling controls, deposit through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, or another supported method, request a withdrawal, place a casino or sports wager, accept a promotion, or contact support.

Information may also be generated automatically when you visit or use TupaiWin. This includes login events, browser information, page interactions, game sessions, transaction timestamps, and security alerts. Relevant information may be received from payment processors, identity-verification services, game systems, fraud-prevention providers, and banks where necessary to confirm a transaction or protect an account.

TupaiWin does not ask users to send passwords, complete card details, or unredacted identity documents through unsecured messaging services. KYC documents should be submitted only through the designated secure process.

5How TupaiWin Uses Personal Data

TupaiWin may process personal information to:

• create, maintain, authenticate, and secure player accounts;
• confirm that a player is aged 21 or above and verify identity;
• process deposits, withdrawals, refunds, and payment investigations;
• provide slots, live casino, football betting, Liga Super Malaysia, EPL, UFC, and other available services;
• calculate balances, settle wagers, administer promotions, and manage VIP benefits;
• detect multiple accounts, collusion, automated play, fraud, money laundering indicators, or account takeover;
• respond to support requests, complaints, transaction queries, and technical issues;
• apply deposit limits, cool-off periods, self-exclusion, and other responsible gambling controls;
• analyse service performance, correct errors, and improve usability; and
• meet applicable contractual, security, record-keeping, and legal obligations.

TupaiWin seeks to use information proportionately and for purposes connected with the service, user expectations, account security, or legitimate operational requirements.

6Basis for Processing

Depending on the nature of the activity and applicable requirements, processing may be necessary to perform the agreement with you, comply with legal or regulatory obligations, protect vital or security interests, pursue legitimate business interests, or act with your consent.

Legitimate interests may include preventing fraud, securing TupaiWin systems, managing complaints, improving service reliability, protecting payment integrity, and identifying potentially harmful gambling patterns. Where consent is relied upon, you may withdraw it for future processing, although withdrawal does not invalidate processing already carried out and does not affect processing required on another basis.

7Sharing and Disclosure

TupaiWin does not sell personal information. Data may be shared with carefully selected recipients where reasonably necessary to operate or protect the service. These recipients may include:

• payment processors, e-wallet providers, and financial institutions handling deposits or withdrawals;
• identity-verification, KYC, fraud-prevention, cybersecurity, and account-authentication providers;
• game platform, sports data, hosting, cloud, analytics, and technical-support providers;
• professional advisers, auditors, insurers, and dispute-resolution specialists; and
• public authorities or other parties where disclosure is required, permitted, or reasonably necessary to address fraud, legal claims, or safety concerns.

Service providers are expected to process relevant information only for authorised purposes and to apply suitable security measures. TupaiWin seeks to limit disclosure to the information needed for the recipient's defined role.

8Payments and Financial Information

When you use Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong, or another method, transaction details may be exchanged with the relevant payment provider. TupaiWin may receive a transaction reference, payer name, masked account details, status, amount, currency, and fraud-screening result.

TupaiWin uses payment information to credit deposits, process withdrawals, verify ownership, reconcile MYR balances, investigate failed transactions, and manage chargebacks or disputes. A provider may process information under its own privacy terms. TupaiWin does not control the independent privacy practices of a user's bank or e-wallet provider.

9Cookies and Similar Technologies

TupaiWin may use cookies, local storage, session identifiers, and similar technologies to keep users signed in, remember essential preferences, support navigation, measure performance, detect suspicious activity, and maintain secure transactions. Some technologies are necessary for the website and account functions to operate.

Browser settings may allow you to block or delete cookies. Restricting necessary cookies may prevent login, interrupt a game session, disable preferences, or affect deposits and withdrawals. Where consent is required for non-essential technologies, suitable choices may be presented before those technologies are used.

10Data Security

TupaiWin applies administrative, technical, and organisational safeguards designed to protect personal information against accidental loss, misuse, alteration, unauthorised access, or disclosure. Measures may include encryption in transit, access controls, authentication, monitoring, secure development practices, staff confidentiality requirements, and incident-response procedures.

No online environment can be guaranteed completely secure. Users must protect their password, device, email account, and authentication details. You should use a unique password, avoid shared devices for financial activity, log out after each session, and notify TupaiWin promptly if you suspect unauthorised access.

11Data Retention

TupaiWin retains personal data for as long as reasonably necessary to provide services, maintain transaction records, resolve complaints, prevent fraud, administer self-exclusion, defend legal claims, and satisfy applicable record-keeping requirements. Different categories may have different retention periods.

Closing an account does not always result in immediate deletion. Transaction records, KYC results, responsible gambling restrictions, security logs, and complaint correspondence may need to be retained after closure. When information is no longer required, TupaiWin may delete it, anonymise it, or securely restrict further use.

12International Data Processing

Some service providers supporting TupaiWin may process information outside Malaysia. Where personal data is transferred internationally, TupaiWin seeks to use providers and arrangements that include appropriate confidentiality, security, and data-protection safeguards in light of the information involved.

International processing may be necessary for cloud hosting, game delivery, payment verification, cybersecurity, customer support, or technical operations. TupaiWin limits such transfers to purposes described in this policy.

13Marketing and Personalisation

TupaiWin may use account preferences, promotion history, game interests, and engagement information to select relevant content or offers where permitted. Promotional messages may concern casino games, sports markets, bonuses, VIP rewards, or platform updates.

You may request that optional direct marketing stop. This does not prevent necessary service communications concerning security, account verification, deposits, withdrawals, changes to terms, responsible gambling measures, or complaint outcomes. Self-excluded players should not receive promotional gambling messages during the applicable exclusion period.

14Responsible Gambling Data

TupaiWin may review deposit frequency, wagering patterns, session duration, changes in stakes, failed payments, contact history, and use of account limits to support responsible gambling measures. This information may help identify unusual behaviour or signs that a player could benefit from an interaction, limit, cool-off period, or self-exclusion.

Responsible gambling information is handled with particular care and used to protect players and maintain effective restrictions. A record of self-exclusion may be retained after account closure to reduce the risk of a restricted user opening another TupaiWin account. More information is available on the Responsible Gambling page.

15Underage Users

TupaiWin is strictly for individuals aged 21 and above. The platform does not knowingly offer gambling services to minors. Age and identity verification may be required during registration, before a withdrawal, or at any point where account information requires review.

If TupaiWin reasonably believes that an account belongs to an underage person, access may be suspended while the matter is investigated. Parents and guardians should protect devices, payment credentials, and identity documents from unauthorised use.

16Your Privacy Rights

Subject to applicable requirements and necessary identity verification, you may request access to certain personal data held by TupaiWin, ask for inaccurate information to be corrected, object to or restrict certain processing, withdraw relevant consent, or request deletion where retention is not required.

A request may be limited where disclosure would affect another person's rights, compromise security, reveal confidential anti-fraud methods, interfere with a legal obligation, or require deletion of records that TupaiWin must retain. TupaiWin may ask for information sufficient to verify that the requester is the account holder.

Privacy requests should include your registered username, the type of request, and enough detail to identify the relevant information. Do not include your password, PIN, or full financial credentials.

17Changes to This Privacy Policy

TupaiWin may update this Privacy Policy when services, payment methods, security measures, legal requirements, or processing practices change. The effective date at the top of the policy indicates when the current version applies.

Material changes may be communicated through the website or appropriate account channels. You should review this page periodically to understand how TupaiWin handles personal information.

18Contact Us

Questions, correction requests, privacy concerns, and data-rights requests may be directed to TupaiWin support. Email addresses are displayed as plain text for your security:

Privacy and support email: [email protected]
Support availability: 24 hours a day, 7 days a week
Time zone: Malaysian Standard Time, MYT (UTC+8)

TupaiWin may request reasonable identity verification before discussing account-specific information or responding to a personal-data request.