Privacy Policy S1Win — Personal Data Protection for Malaysian Players

S1win collects various types of information when you register and use our platform. This collection is done transparently and solely for the purposes stated in this policy.

Data collected is used solely for the purposes stated below. S1win will not use your information for any other purpose without your consent:

• Identity verification: To verify that each account is owned by a legitimate individual and to meet KYC requirements for legal compliance.
• Transaction processing: To facilitate deposits, withdrawals, and any financial transactions made through the s1win platform.
• Customer support: To handle enquiries, complaints, and assistance requests submitted to our support team.
• Platform enhancement: To analyse usage patterns in order to improve the user experience, introduce new features, and enhance platform performance.
• Marketing communications: To send information about promotions, offers, and platform updates — only if you have consented to receive such communications.
• Legal compliance: To fulfil legal obligations, assist approved investigations, and prevent illegal activities such as money laundering.
• Fraud prevention: To detect and prevent unauthorised access, multi-account usage, and other suspicious activities that could compromise platform security.

All data processing is carried out on a lawful basis — whether to fulfil a service contract with you, comply with legal obligations, or based on legitimate interests in operating the business safely and responsibly.

S1win understands that your trust is our most valuable asset. We do not sell, rent, or disclose your personal data to third parties except in the following circumstances:

• Certified service providers: We share necessary information with third-party service providers such as payment processors, game software providers, and cloud services. All such parties are bound by strict confidentiality agreements.
• Legal requirements: S1win will disclose information when required by court order, direction from a competent authority, or applicable law.
• Rights protection: In cases where disclosure is required to protect the rights, property, or safety of s1win, our members, or the public.
• Business transfers: If s1win is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction, with equivalent privacy protections maintained.

The s1win platform uses cookies and similar technologies to enhance your experience. Cookies are small text files stored on your device when you visit our website.

There are several types of cookies we use:

• Essential cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
• Performance cookies: Helps us understand how users interact with the platform so we can make improvements. All data is collected anonymously.
• Functionality cookies: Saves your preferences such as language settings and display options for a smoother return experience.
• Analytics cookies: Used to analyse platform traffic and usage patterns for internal service improvement purposes.

You can manage or disable cookies through your browser settings at any time. However, disabling essential cookies may affect platform functionality.

S1win retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following are our retention period guidelines:

• Active account data: Retained for the duration your account is active and for several years after account closure for legal compliance and audit purposes.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with applicable financial compliance and tax law requirements.
• Communication logs: Support correspondence records are retained for three (3) years for dispute resolution purposes.
• Technical data and server logs: Retained for a maximum of 90 days before automatic deletion, unless required for an ongoing security investigation.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered.

S1win continuously invests in security infrastructure to ensure your data is always protected. Our security measures include:

• End-to-end encryption: All data in transit is protected by TLS 1.3 with 256-bit SSL encryption. Sensitive data at rest is also encrypted using the AES-256 algorithm.
• Two-factor authentication (2FA): Members can enable two-factor authentication for an extra layer of protection during login.
• Continuous monitoring: Our systems are monitored 24/7 to detect any suspicious activity or unauthorised access attempts.
• Internal access controls: Only s1win staff granted specific authorisation may access members' personal data, and only to the extent necessary to carry out their duties.
• Penetration testing: Security audits and penetration testing are conducted regularly by independent security specialists.

While we take all reasonable precautions, no security system is entirely foolproof. We encourage you to also play your part in protecting your account by using a strong password and never sharing your login credentials with anyone.

As a user of the s1win platform, you have the following rights regarding your personal data. We are committed to making it easy for you to exercise these rights:

The s1win platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data has been inadvertently collected from a minor, we will take immediate steps to delete that information and close the associated account. Parents or guardians who find that their child has registered on the s1win platform are encouraged to contact our support team immediately.

S1win reserves the right to amend this privacy policy from time to time to reflect changes in business practices, legal requirements, or technological developments. Any material amendments will be communicated to members via in-platform notifications or email at least 14 days before taking effect.

The latest effective date is always displayed at the top of this document. We encourage you to review this privacy policy periodically so you remain informed about how your information is managed. Continued use of the s1win platform after the effective date of any amendment constitutes acceptance of the updated policy.

If you have any questions, concerns, or wish to exercise any of your rights regarding your personal data, the s1win privacy team is here to help. We are committed to responding to all privacy-related enquiries within three (3) business days.

For more formal complaints or if you are unsatisfied with our response, you have the right to submit a complaint to the relevant data protection authority in your jurisdiction.