happywin Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by happywin ("happywin", "we", "us", "our") and describes how we collect, use, store, share, and protect the personal data of individuals ("you", "Member", "User") who access or use the happywin website at happywin.one and all associated services (the "Platform").

happywin is committed to protecting the privacy and security of personal data. This Policy reflects our obligations under the Personal Data Protection Act 2010 (PDPA) of Malaysia, our international gaming authority licence requirements, and applicable anti-money laundering legislation. We take these obligations seriously and have implemented technical and organisational measures proportionate to the risks involved in operating a licensed online gaming platform.

By registering an account with happywin, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not register an account or use the Platform.

2. Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal data is the entity that operates the happywin platform under its international gaming authority licence. The platform is operated for the benefit of Malaysian users and complies with the PDPA 2010 in respect of all Malaysian residents' data.

If you have questions about how happywin processes your personal data, or wish to exercise any of your rights under this Policy, you may contact our data protection team at: [email protected]

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register an account, use the Services, or communicate with happywin, we collect personal data that you provide to us, including:

3.2 Data Collected Automatically

When you access the happywin Platform, certain technical data is collected automatically by our systems and third-party analytics services:

• Device information: device type, operating system, browser type and version;
• Usage data: pages visited, game sessions, session duration, click patterns, error reports;
• Network data: IP address, approximate geographic location (derived from IP), referring URL;
• Cookie data: session identifiers, preference cookies, analytics identifiers (see Section 9).

3.3 Data from Third Parties

happywin may receive personal data about you from the following third-party sources:

• Payment processors: transaction confirmation data, payment method verification results;
• KYC verification providers: identity verification outcomes, document authenticity results;
• Fraud prevention services: risk scoring data, device fingerprint matching results;
• Responsible gaming databases: self-exclusion registrations where applicable under licensing obligations.

4. How happywin Uses Your Personal Data

happywin processes your personal data only for specific, legitimate purposes. The primary purposes for which we use your data are set out below:

• Account Management: Creating, maintaining, and administering your happywin account; verifying your identity; processing deposits and withdrawals;
• Service Provision: Enabling access to games, live casino, sportsbook, and all other Platform features; processing bets and winnings; managing bonus claims;
• Legal Compliance: Performing KYC and AML checks; complying with our gaming licence obligations; responding to lawful requests from regulatory or law enforcement authorities;
• Fraud Prevention & Security: Detecting and preventing fraud, money laundering, collusion, and other prohibited activities; monitoring for suspicious account behaviour;
• Responsible Gaming: Monitoring for indicators of problem gambling; enforcing self-exclusion and deposit limits; fulfilling obligations to check self-exclusion databases;
• Customer Support: Responding to queries, complaints, and support requests through our live chat and email channels;
• Platform Improvement: Analysing usage data to improve the Platform's performance, user experience, and game offerings;
• Marketing Communications: Sending promotional emails, bonus offers, and platform updates to members who have opted in to receive such communications (opt-out available at any time).

5. Legal Basis for Processing

Under applicable data protection law, happywin processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — providing the gaming services, managing your account, and processing financial transactions;
• Legal Obligation: Processing required to comply with our gaming licence, AML obligations, and other applicable laws — including KYC, transaction monitoring, and regulatory reporting;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics, where these interests do not override your fundamental rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent and may withdraw it at any time.

6. Sharing Your Personal Data

happywin does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your personal data with the following categories of recipients only where necessary and proportionate:

• Payment Processors: Touch 'n Go, Boost, Maybank, CIMB, Public Bank, and cryptocurrency payment gateways, solely for the purpose of processing your financial transactions;
• KYC & Identity Verification Providers: Third-party identity verification services used to fulfil our regulatory verification obligations;
• Fraud Prevention Services: Risk intelligence providers used to detect and prevent fraudulent account activity;
• Game Providers: Licensed game studios whose games are hosted on the Platform may receive anonymised session data for technical performance purposes only;
• Regulatory & Legal Authorities: Government bodies, regulators, law enforcement, or our licensing authority, where we are legally required to disclose data;
• Professional Advisers: Legal, accounting, and audit professionals, subject to professional confidentiality obligations.

All third parties with whom happywin shares personal data are contractually required to process that data only for the specified purpose, in accordance with applicable data protection law, and with appropriate security measures in place.

7. International Data Transfers

As an international gaming platform, some of your personal data may be processed in countries outside Malaysia. Where such transfers occur, happywin ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that afforded under the PDPA 2010. Safeguards may include contractual protections, adequacy assessments, and data processing agreements with receiving parties.

By using the happywin Platform, you acknowledge that your data may be transferred to and processed in jurisdictions outside Malaysia. We take all reasonable steps to ensure such transfers are conducted lawfully and securely.

8. Data Retention

happywin retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

• Account and transaction data: Retained for a minimum of five (5) years from account closure, in accordance with AML record-keeping requirements;
• KYC documentation: Retained for a minimum of five (5) years from account closure or the date of the last transaction, whichever is later;
• Communication records: Support and email correspondence retained for three (3) years from the date of the communication;
• Technical and usage logs: Retained for up to twelve (12) months for fraud detection and platform performance purposes;
• Marketing data: Retained until you withdraw consent or unsubscribe, plus thirty (30) days for processing.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with happywin's data lifecycle management procedures.

9. Cookies and Tracking Technologies

9.1 What Cookies We Use

The happywin Platform uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help the Platform recognise you, remember your preferences, and improve your experience. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional Cookies: Store your preferences such as language, display settings, and login remember-me selections.
• Analytics Cookies: Collect aggregated, anonymised data about how members use the Platform, helping us identify and fix usability issues.
• Marketing Cookies: Track visits across sessions to help us deliver relevant promotional content to members who have opted into marketing communications. These require your consent.

9.2 Managing Cookies

You can manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. Analytics and marketing cookies can be opted out of via the cookie preference centre accessible from the Platform footer.

10. Your Rights Under the PDPA

As a data subject under the Personal Data Protection Act 2010 (Malaysia), and as recognised by international data protection best practice, you have the following rights in relation to your personal data held by happywin:

To exercise any of these rights, contact the happywin data protection team at [email protected]. We will respond to all verified requests within thirty (30) days. Some requests may be subject to identity verification before processing.

11. Security Measures

happywin implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and happywin servers;
• AES-256 encryption for personal data and financial records stored at rest;
• Multi-factor authentication requirements for access to internal systems containing member data;
• Role-based access controls ensuring staff access only the data necessary for their function;
• Regular penetration testing and vulnerability assessments of Platform infrastructure;
• Automated monitoring and alerting systems for suspicious access patterns;
• Staff data protection training and confidentiality obligations as a condition of employment.

While happywin takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. We encourage all members to use strong, unique passwords for their happywin accounts and to enable two-factor authentication through the account security settings.

12. Children's Privacy

The happywin Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account closed. If you have reason to believe that a minor has registered an account with happywin, please contact us at [email protected] immediately.

13. Changes to This Privacy Policy

happywin reserves the right to update or amend this Privacy Policy at any time. Material changes to the Policy will be communicated to registered members via email to the registered address with a minimum of fourteen (14) days' notice prior to the changes taking effect. The updated Policy will also be published on this page with a revised "Last Updated" date.

Your continued use of the happywin Platform following notification of a Policy amendment constitutes acceptance of the revised terms. If you do not agree to any changes, you may close your account before the changes take effect.

14. Contact & Data Protection Enquiries

For all enquiries regarding this Privacy Policy, to exercise your data subject rights, or to report a data protection concern, please contact the happywin data protection team through the following channels:

• Email: [email protected] (subject line: "Privacy / Data Protection")
• Live Chat: 24/7 via your happywin account dashboard
• Response Commitment: All data protection requests acknowledged within 48 hours; substantive response within 30 days

Malaysian members who believe their data protection rights have been infringed may also lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia. happywin encourages members to contact us first so we may resolve any concern directly.