N2win Privacy Policy – Your Information Is Safe With Us

N2win ("we", "our platform") values the privacy of every user who uses our services. We understand that your personal information is sensitive, and we take full responsibility for ensuring it is handled in a safe, responsible and transparent manner.

This Privacy Policy describes the types of personal data we collect, why we collect it, how we use it, who may access it, and what your rights are as the data owner. This policy applies to all users of the n2win platform, including the official website, mobile apps for Android and iOS, and all related services.

N2win complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We regard compliance with privacy law not merely as an obligation, but as part of our commitment to building long-term trust with every member.

N2win collects various types of personal data depending on the nature of your interaction with our platform. In general, the data collected can be grouped into several categories:

We only collect data necessary for the stated purposes. We do not collect excessive or irrelevant data beyond the services we offer.

N2win collects your personal data through several different methods:

• Account Registration: Information you provide when creating your n2win account, such as your name, email, phone number, and date of birth.
• Identity Verification (KYC): Documents you submit for identity verification purposes to meet regulatory requirements.
• Financial Transactions: Information collected during the deposit and withdrawal process to ensure transactions are carried out securely.
• Platform Usage: Data collected automatically when you use the platform, including game records, clicks, access times, and usage patterns.
• Support Communication: The content of your conversations with the n2win support team via live chat, email, or Telegram.
• Cookies and Similar Technologies: Data collected via cookies, pixels, and other tracking technologies used to improve the user experience.

The personal data we collect is used for the following purposes, and only for those purposes:

• Account Management: To create, verify, maintain and protect your n2win account.
• Transaction Processing: To process deposits, withdrawals and any financial transactions you carry out on the platform.
• Identity Verification: To fulfil KYC requirements and anti-money laundering (AML) obligations set by regulatory authorities.
• Platform Security: To detect, prevent and investigate any fraudulent activity, hacking or platform abuse.
• Service Improvement: To analyse usage patterns and improve platform features based on user needs.
• Communication: To send important account notices, platform updates and responses to support enquiries.
• Legal Compliance: To fulfil applicable legal and regulatory obligations under Malaysian and international law.
• Marketing (with consent): To send promotional information and special offers, only where you have given explicit consent.

N2win does not sell, rent or disclose your personal data to any third party for their commercial purposes. However, in certain situations, your data may be shared with:

• Payment Service Providers: Banks and payment providers such as DuitNow, FPX, and digital wallets used to process your transactions. They are subject to their own privacy policies and confidentiality obligations.
• Game Providers: Minimum technical information required by game providers such as JILI, Pragmatic Play, and Evolution to support game functionality.
• Technology Providers: Companies that provide the technical infrastructure, cloud hosting and security services required to operate the n2win platform.
• Regulatory Body: Relevant authorities when required by law, court order, or official investigation.
• KYC Partner: Third-party identity verification service providers used to fulfill KYC requirements in a secure manner.

All third parties with whom we share data are bound by strict confidentiality agreements and are required to use that data solely for the specified purposes.

N2win employs a range of technical and organisational measures to protect your personal data from unauthorised access, loss or misuse:

• 256-bit SSL Encryption: All data transmitted between your device and n2win servers is protected by the same high-level encryption used by leading financial institutions.
• Secure Storage: Data is stored in data centers protected by strict physical and digital access controls, with regular backups to prevent data loss.
• Restricted Access: Only n2win staff who genuinely require access to your personal data to carry out their authorized duties are permitted to do so.
• Continuous Monitoring: Our security monitoring system operates around the clock to detect any unauthorised access attempts or suspicious activity.
• Regular Security Testing: Our systems undergo regular security assessments and penetration testing by independent security experts.

Data Retention Period: n2win retains your personal data for as long as your account is active or as long as necessary to fulfil legal obligations. After an account is closed, certain data may be retained for a period prescribed by applicable law — typically between 5 and 7 years — before being securely deleted.

N2win uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. There are several types of cookies we use:

• Session Cookies: Temporary cookies required to keep you logged in during an active session. These cookies are automatically deleted when you close your browser.
• Preference Cookies: Saves your preferences such as language, display theme, and other settings so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Collects anonymized information about how users interact with the platform to help us improve our services.
• Security Cookies: Helps detect and prevent fraudulent activity and unauthorized access attempts.

You can manage cookie usage through your browser settings. However, disabling certain cookies may affect the functionality of the n2win platform. Cookies required for security and core functions cannot be disabled without impacting your overall user experience.

Under the Personal Data Protection Act 2010 and relevant international standards, you have the following rights regarding your personal data held by n2win:

The n2win platform is exclusively for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their underage child has registered an account at n2win should contact us immediately.

N2win reserves the right to update or amend this Privacy Policy from time to time in line with changes in law, technological developments or changes in our business practices.

When material changes are made to this policy, we will notify you via a prominent notice on the website, in-app notification, or email to your registered address. We recommend checking this page periodically to stay informed of the latest version of our policy.

Continued use of the n2win platform after any amendments are published constitutes your acceptance of the revised policy. The "Updated" date at the top of this page indicates when the last changes were made.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how n2win handles your personal data, please contact our Data Protection Officer at:

• Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Via the chat icon on the platform (24/7)

Please include the following details in your request: full name, registered email address, type of request (access, correction, deletion, etc.) and any further details relevant to your request. This will help us process your request more quickly and accurately.

We are committed to responding to all privacy-related enquiries within 5 working days and resolve data rights requests within 30 working days.