Your privacy matters deeply to us. This Privacy Policy explains exactly what personal data 22win collects, how we use it, who we may share it with, and how you can exercise your rights over your own information.
Our Privacy Commitments
These six commitments summarise the privacy principles that guide how 22win handles your personal information. The full legally binding policy text follows below.
22win collects only the personal data strictly necessary to operate your account, process transactions, verify your identity, and meet our regulatory obligations. We do not collect data speculatively or for purposes unrelated to your use of the Platform.
All personal data transmitted between your device and the 22win Platform is protected by 256-bit SSL/TLS encryption. Data stored on our servers is encrypted at rest using industry-standard cryptographic protocols, minimising exposure in the event of a security incident.
22win does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Data shared with third parties is limited strictly to service providers that operate under binding data processing agreements on our behalf.
You have the right to access, correct, port, restrict, and request deletion of your personal data at any time. Requests are processed promptly by our data protection team. We will never make access to the Platform conditional on you waiving your data rights.
Data collected for one specific purpose — such as payment processing — will not be repurposed for an unrelated use without your explicit consent. Every data processing activity at 22win is documented with a defined legal basis and a clear purpose.
Personal data is retained only for as long as required to fulfil the purpose for which it was collected, or as mandated by applicable law. Once the retention period expires, data is securely deleted or anonymised so it can no longer be traced to you as an individual.
This Privacy Policy (the "Policy") describes how 22win (referred to herein as "22win", "we", "us", or "our") collects, processes, stores, shares, and protects the personal data of individuals (referred to as "you", "the User", or "the Player") who access or use the 22win online gaming platform available at https://22win.casa (the "Platform").
22win is committed to protecting the privacy and personal data of all users in accordance with applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia and other relevant regulatory frameworks. By registering an account, accessing the Platform, or submitting personal information to us in any form, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, each of which is incorporated by reference.
For the purpose of this Policy, the following definitions apply:
22win collects the following categories of personal data depending on your interaction with the Platform:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, gender, copy of MyKad or passport | Account registration, KYC compliance, age verification |
| Contact Data | Email address, phone number, residential address | Account communications, support, transaction notifications |
| Financial Data | Payment method details (e.g., Touch 'n Go, Boost, bank account number), deposit and withdrawal history | Payment processing, anti-fraud monitoring, regulatory reporting |
| Technical Data | IP address, device type, browser type, operating system, session tokens | Platform security, fraud prevention, performance optimisation |
| Usage Data | Pages visited, games played, bets placed, session duration, feature interactions | Platform improvement, responsible gambling monitoring, personalisation |
| Communications Data | Live chat transcripts, support email content, feedback submitted | Customer support quality, dispute resolution, compliance records |
We do not collect special categories of sensitive personal data (such as racial or ethnic origin, health data, or biometric data) except where this is strictly required to fulfil a legal obligation — for example, where KYC documentation incidentally reveals such information.
22win collects personal data through the following channels:
22win processes personal data only where a lawful basis exists for doing so. The legal bases on which we rely are:
Personal data collected by 22win is used for the following purposes:
22win does not sell or trade your personal data. We may share your data with third parties only in the following circumstances:
We engage third-party service providers — including payment processors, KYC verification providers, fraud prevention platforms, IT infrastructure operators, and customer support tools — who process data on our behalf under binding data processing agreements. These providers are prohibited from using your data for any purpose other than the specific service they provide to 22win.
We may disclose personal data to regulatory authorities, law enforcement agencies, courts, or other government bodies where we are legally required or authorised to do so — for example, in connection with AML obligations, court orders, or a regulatory investigation.
In the event of a merger, acquisition, corporate restructuring, or sale of assets involving 22win, personal data held by the Platform may be transferred to the relevant successor entity, subject to the same protections described in this Policy.
The 22win Platform uses cookies and similar tracking technologies to ensure core functionality, maintain session security, and improve Platform performance. The categories of cookies we use are:
You may manage non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of specific Platform features. 22win does not use advertising or cross-site tracking cookies.
22win implements comprehensive technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security framework includes:
While 22win takes all reasonable precautions to protect your data, no security system is entirely impenetrable. We encourage you to use a strong, unique password for your 22win account and to enable MFA where available.
22win retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention principles apply:
At the end of each applicable retention period, personal data is securely deleted or rendered permanently anonymous using industry-standard data sanitisation procedures.
Under applicable data protection law, including the Malaysian Personal Data Protection Act 2010, you have the following rights in relation to your personal data held by 22win:
Request a copy of the personal data we hold about you and information about how it is being processed.
Request correction of inaccurate or incomplete personal data held about you.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Request that we limit how we process your data in certain circumstances, such as while a data accuracy dispute is being resolved.
Receive a copy of your personal data in a structured, machine-readable format where technically feasible and legally permitted.
Withdraw consent for marketing communications or other consent-based processing at any time, without affecting the lawfulness of prior processing.
To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) days.
The 22win Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. If you are under 21, you are not permitted to access or use the Platform, and you must not submit any personal data to us.
If 22win becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe their child has submitted personal data to 22win are encouraged to contact us immediately at [email protected].
The 22win Platform does not contain links to external third-party websites for commercial or marketing purposes. Where references are made to third-party services — such as payment providers like Touch 'n Go eWallet, Boost, GrabPay, Maybank, or CIMB — these are referenced solely for the purpose of describing available Platform functionality. 22win is not responsible for the privacy practices or content of any third-party service provider's own websites or applications.
22win reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Where a material change is made, we will provide notice via a prominent notice on the Platform and, where feasible, by email to your registered address.
The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform following any amendment constitutes your acceptance of the updated Policy. We recommend reviewing this Policy periodically.
If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which 22win processes your personal data, please contact our Data Protection team through the following channels:
Data Protection Email: [email protected] (Subject: Privacy / Data Rights Request)
Live Chat: Available 24/7 on the Platform — request to speak with a Data Protection team member
Response Commitment: Acknowledgement within 5 business days; full response within 30 days
Our data protection team is equipped to handle all data rights requests, data breach notifications, and general privacy enquiries. We treat all privacy communications with the highest level of care and confidentiality.
Our support team is available around the clock to assist with any privacy concerns, data requests, or account queries. Visit our FAQ for quick answers or head to the homepage to explore the full 22win experience.
🔞 21+ only. Please read our Responsible Gambling policy before playing. Gambling can be addictive — play responsibly.