Section 1
Introduction
ddwin operates this website and associated services for the benefit of adult users in Malaysia and other eligible jurisdictions. This Privacy Policy explains which personal data ddwin collects, why it is collected, the legal or legitimate basis on which it is processed, how long it is retained and the rights available to you as an individual.
By registering an account, submitting a payment, using responsible gambling tools or contacting support, you acknowledge that ddwin will process your personal data in accordance with this Policy. If you do not agree with any part of these practices, you should not use ddwin services.
This Policy should be read alongside the ddwin Terms & Conditions. In the event of a conflict between documents on a data protection matter, this Privacy Policy takes precedence. References to "you" mean the individual whose data is processed; references to "we", "us" or "ddwin" mean the operator of this platform.
Section 2
Definitions
- Personal Data — any information relating to an identified or identifiable natural person, including name, contact details, payment identifiers and device data.
- Processing — any operation performed on personal data, including collection, storage, use, disclosure, erasure or destruction.
- Data Controller — the entity that determines why and how personal data is processed; in this case, the operator of ddwin.
- Data Processor — any third party that processes personal data on behalf of ddwin under a contractual arrangement.
- Cookies — small text files placed on a user's device by a website to record session preferences, navigation and returning-user identifiers.
- KYC — Know Your Customer; the identity and document verification process applied to ddwin account holders.
- MYR — Malaysian Ringgit; the primary currency reference used throughout ddwin guidance and payment illustrations.
Section 3
Personal Data We Collect
ddwin collects personal data through direct submission, automated technical mechanisms and, where applicable, third-party identity verification providers. The categories collected are described below.
| Category |
Examples |
Collection Method |
| Identity Data |
Full name, date of birth, government-issued ID number |
Registration form; KYC document upload |
| Contact Data |
Email address, phone number, residential address in Kuala Lumpur, Penang, Johor Bahru or other Malaysian cities |
Registration form; account updates |
| Financial Data |
MYR deposit amounts, withdrawal history, e-wallet references (Touch 'n Go eWallet, GrabPay, Boost), bank identifiers (Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX) |
Payment submissions; transaction logs |
| Technical Data |
IP address, browser type, device model, operating system, session duration |
Automated server and cookie collection |
| Usage Data |
Pages visited, game sessions, sports markets viewed, bonus claims |
Website analytics; platform activity logs |
| Support Data |
Support ticket content, chat transcripts, reported issues |
Live chat; support email submissions |
| Responsible Gambling Data |
Self-set deposit limits, session time preferences, self-exclusion requests |
Responsible play tool interactions |
ddwin does not knowingly collect full payment card numbers. Where payment credentials are submitted, they pass directly through encrypted connections to authorised payment processors.
Section 4
Data
Processing and Purposes
ddwin processes personal data only where a valid purpose applies. These purposes include creating and administering accounts, verifying that users are aged 21 or above, confirming identity, preventing fraud, processing MYR deposits and withdrawals, maintaining platform security and responding to support requests.
Transaction information may be processed to reconcile payments made through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank or Hong Leong. Where a payment is disputed, ddwin may review account records, device information and relevant communications to establish the correct transaction status.
Gameplay and sports betting records may be used to settle wagers, investigate technical incidents and identify unusual account activity. Responsible gambling data may be processed to apply deposit limits, cooling-off periods or self-exclusion controls. ddwin may also process limited usage information to improve navigation, accessibility and service reliability.
Marketing communications will be sent only where an appropriate permission or other lawful basis exists. Users may change available marketing preferences without affecting essential messages about account security, transactions, policy updates or responsible gambling controls.
Section 5
Basis for Processing
Depending on the activity concerned, ddwin processes personal data because it is necessary to perform an agreement with the user, satisfy applicable legal or compliance obligations, protect legitimate business and security interests, or act with the user's consent.
Contract-related processing includes account administration, transaction management and responding to service requests. Legitimate interests may include fraud prevention, website security, dispute management and service improvement, provided those interests do not improperly override individual rights.
Where consent is the basis for processing, it may be withdrawn through the available preference controls or by contacting ddwin support. Withdrawal does not make earlier lawful processing invalid and may not affect information that ddwin must retain for security, financial record-keeping or dispute resolution.
Section 6
Data Sharing and Service Providers
ddwin may share necessary personal data with carefully selected service providers that support identity verification, payment processing, hosting, fraud prevention, customer support, analytics and technical security. Such providers receive only the information reasonably required to perform their assigned function.
Payment providers may process transaction identifiers, account-holder names and payment status information. Identity verification providers may examine identification documents and authenticity indicators. Hosting and security providers may process IP addresses, device details and server logs to maintain service availability and detect suspicious activity.
ddwin requires processors to protect personal data, observe confidentiality obligations and avoid using information for unrelated purposes. Personal data may also be disclosed where reasonably necessary to comply with a lawful request, establish or defend a legal claim, investigate fraud, protect users or enforce the ddwin Terms & Conditions.
ddwin does not sell personal data to data brokers or unrelated advertising businesses. Aggregated or anonymised information that no longer identifies an individual may be used for statistical analysis and service planning.
Section 7
International Data Transfers
Some technical, verification or payment providers may operate infrastructure outside Malaysia. As a result, personal data may be stored or processed in another jurisdiction whose data protection rules differ from those applying in Malaysia.
Where an international transfer occurs, ddwin uses reasonable contractual, organisational and technical safeguards appropriate to the information and transfer risk. These measures may include data processing agreements, access restrictions, encryption and assessments of the receiving provider's security practices.
A transfer does not permit a service provider to use ddwin user information for its own unrelated marketing. Access remains limited to the services the provider has been engaged to perform.
Section 8
Cookies and Similar Technologies
ddwin may use essential cookies to maintain secure sessions, remember privacy choices, support account authentication and preserve selected preferences. Without these technologies, some account and security functions may not operate correctly.
Analytics technologies may collect information about page visits, navigation paths, approximate location, browser type and device performance. This information helps ddwin identify broken pages, slow loading times and areas where Malaysian users may require clearer guidance.
Browser settings can usually block or remove cookies. However, disabling essential cookies may interrupt login, account verification or transaction-related functions. Cookie choices do not prevent ddwin from retaining server records required for security, fraud prevention or compliance.
Section 9
Data Security
ddwin applies proportionate technical and organisational controls intended to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. Controls may include encryption in transit, access management, activity monitoring, secure backups and separation of operational responsibilities.
Access to personal data is limited to authorised personnel and service providers with a genuine operational need. Security events are assessed according to their nature, likely impact and the sensitivity of the affected information. Where notification is required, ddwin will provide relevant information through an appropriate communication channel.
Users also play an important role in security. Choose a unique password, keep one-time codes private and sign out when using a shared device. ddwin support will never ask for a complete password or instruct a user to disclose a one-time verification code.
Section 10
Data Retention and Deletion
ddwin retains personal data only for as long as reasonably required for the purpose for which it was collected, including account administration, transaction reconciliation, security, responsible gambling controls, dispute handling and applicable record-keeping obligations.
Retention periods differ by data category. Support records may be kept for a shorter period than verified identity or financial transaction records. Information associated with self-exclusion may be retained after account closure where necessary to maintain the exclusion and prevent an excluded person from opening another account.
When information is no longer required, ddwin will delete it, anonymise it or securely isolate it until deletion is technically completed. A request to close an account does not always require immediate deletion of every record where continued retention is justified by security, legal or regulatory considerations.
Section 11
Your Privacy Rights
Subject to applicable requirements and reasonable identity verification, a user may ask ddwin to provide information about personal data held, correct inaccurate information, complete incomplete records, restrict certain processing or delete information that is no longer required.
Users may also object to particular processing based on legitimate interests, withdraw consent where consent is relied upon and request available information in a commonly usable format where appropriate. Some requests may be limited where disclosure would affect another person's privacy, compromise security or conflict with a valid retention obligation.
To protect account holders, ddwin may request sufficient information to confirm the identity of the person making a privacy request. Requests should identify the relevant account and explain the action sought. Never send a password, complete bank credential or one-time code with a privacy request.
Section 12
Age Restriction and Children's Privacy
ddwin is intended only for adults aged 21 and above. The platform does not knowingly permit children or persons below the applicable minimum age to register, gamble or submit payment information.
If ddwin identifies an underage account, access may be suspended while age and identity are investigated. Personal data will then be handled in accordance with applicable obligations, security requirements and the need to prevent further underage access.
A parent or guardian who reasonably believes that a person under 21 has provided personal information to ddwin should contact website support with enough detail for the matter to be reviewed. Sensitive identity documents should not be sent unless specifically requested through an appropriate secure process.
Section 13
Policy Changes
ddwin may update this Privacy Policy to reflect changes in services, payment methods, security practices, technology or applicable data protection requirements. Revised wording will be published on this page.
Where a change materially affects how personal data is used, ddwin may provide an additional notice through the website or an available account communication channel. Continued use of ddwin after an update does not remove any privacy rights that apply under relevant law.
Section 14
Contact Us
Questions, correction requests and other privacy enquiries may be directed to ddwin website support. Include a concise explanation of the request and the account details needed to locate the relevant records. Additional verification may be required before personal information is disclosed or changed.