Rujukan Laman

How We Protect Your Information

Your account details, payment information, and gaming history stay secure on gcwin99 through bank-grade encryption and strict access controls.

Encryption on all transactionsNo third-party data salesAccess and deletion on request
gcwin99 How We Protect Your Information
CONTACT PRIVACY TEAM

Reach Our Data Protection Team

If you have questions about how we handle your data, want to update your information, or need to request a copy of what we hold, our…

Email Support Send privacy requests to our data team and receive a response within 7 working…
Live Chat Chat with our support staff during lobby hours to discuss account privacy settings, data…
Phone Line Call our privacy helpline to report data concerns or request information about what personal…
DATA SECURITY MEASURES

How We Safeguard Your Account

Your account is protected by multi-layer security: password encryption, session timeouts, two-factor verification options, and fraud-detection systems that flag unusual login patterns.

Encryption Standard

All data in transit uses AES-256 encryption. Login credentials are hashed, not stored as plain text, so even our team cannot see your original password.

Payment Tokenisation

Your Touch 'n Go, GrabPay, Boost dan FPX details are tokenised — meaning we store only a secure reference, not your actual payment account number.

Withdrawal Verification

Before any payout clears to your Touch 'n Go or GrabPay account, our team manually confirms the destination matches your registered account details on file.

Fraud Detection

Our system flags logins from new devices, unusual betting patterns, and geographic mismatches. You are notified of suspicious activity and can lock your account instantly.

Session Security

Sessions automatically expire after 30 minutes of inactivity. Multiple simultaneous logins are blocked to prevent account takeover. You can manually log out of all sessions from your account settings.

Data Deletion Rights

Request deletion of your account and associated personal data at any time. We remove gameplay records, payment history, and contact details after the retention period mandated by law.

Frequently Asked About Your Data

Your privacy questions answered. From how long we keep your records to what happens when you request a copy of your data, we explain the practical side of our privacy policy so you know exactly where your information goes.

We collect your name, email, phone number, residential address, date of birth for age verification, and payment details when you open an account. We also record your login history, device information, IP address, and gameplay activity. This data is used to verify your identity, process deposits and withdrawals, detect fraud, and comply with regulatory requirements.

After you close your account, we anonymise gameplay records immediately. Transactional data — deposits, withdrawals, payment records — is retained for seven years as required by Malaysian financial regulations. Once that period ends, all remaining personal data is securely deleted from our systems.

Yes. Email our data team or contact us via live chat with your request, and we will compile a complete record of your account information, transaction history, and gameplay logs within 14 days. The data is provided in a readable format you can download and keep.

We do not sell your personal data to marketers or advertisers. We share payment information only with our payment processors — Touch 'n Go, GrabPay, Boost dan FPX — to complete your transactions. We may share limited data with law enforcement or regulators if legally required to do so.

Your payment details are encrypted using SSL technology before they leave your device. We do not store your full card or e-wallet credentials; instead, we tokenise them — meaning we keep only a secure reference. Payment processors handle the actual transaction on their encrypted networks.

Contact our support team immediately via live chat, email, or phone. We will review your login history, freeze your account if needed, and reset your password. Our fraud team investigates unusual transactions and can reverse unauthorised withdrawals within 48 hours of your report.

You can update your email, phone number, and residential address from your account settings at any time. To delete your account and all associated data, submit a deletion request through our support team. Regulatory retention periods may apply, so some data may be retained longer than your gameplay records.