Legowin is committed to protecting your personal data. This Policy explains what we collect, why we collect it, how we use it, and the rights you hold over your information.
Privacy at a Glance
These cards summarise our core data practices. The full legal text follows below. The summary does not replace the complete Policy.
Name, contact details, date of birth, payment information, device data, and usage logs — collected only to operate and improve the Legowin platform for you.
Account management, KYC verification, fraud prevention, customer support, regulatory compliance, and platform personalisation — never for sale to third parties.
Strictly limited to payment processors, identity verification providers, and regulatory authorities — only where necessary and under confidentiality obligations.
256-bit SSL encryption, access controls, secure data storage, and regular security audits safeguard all personal information held by Legowin.
You may access, correct, port, restrict, or request deletion of your data at any time. Contact our support team to exercise any of these rights.
Account data is retained for the duration of the relationship and for a minimum period thereafter as required by applicable regulatory obligations.
This Privacy Policy ("Policy") sets out how Legowin ("we", "us", "our", or "the Company") collects, uses, stores, processes, and protects the personal data of individuals ("you", "the User", or "the Player") who access or use the Legowin online gaming platform available at legowin.cam (the "Platform").
Legowin is committed to protecting your privacy and handling your personal data with transparency and care. This Policy is designed to clearly explain what data we collect, the purposes for which it is processed, the lawful bases upon which we rely, and the rights you hold in relation to your personal information.
By registering an account on, or accessing, the Platform, you acknowledge that you have read and understood this Policy and agree to the collection and use of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform generally.
For the purposes of this Policy, the following terms carry the meanings ascribed below:
When you register an account, make a deposit or withdrawal, contact support, or otherwise interact with the Platform, you may provide the following categories of personal data:
When you access the Platform, we may automatically collect certain technical and behavioural data, including:
We may receive personal data about you from third parties in limited circumstances, including from identity verification agencies engaged to support our KYC process, payment service providers confirming transaction details, and fraud prevention services providing risk intelligence.
| Data Category | Examples | Source |
|---|---|---|
| Identity Data | Name, DOB, MyKad number | You / KYC providers |
| Contact Data | Email, phone, address | You |
| Financial Data | Bank details, e-wallet IDs, crypto wallets | You / payment processors |
| Transaction Data | Deposits, withdrawals, wagers, wins | Platform automatically |
| Technical Data | IP address, device ID, browser type | Platform automatically |
| Usage Data | Games played, session duration, features used | Platform automatically |
| Communications Data | Support chat logs, email correspondence | You |
Legowin processes your personal data for the following purposes:
Legowin processes your personal data under the following lawful bases:
Legowin does not sell, rent, or trade your personal data to any third party. Your data is shared only in the following limited and controlled circumstances:
Cookies are small data files placed on your device when you visit the Platform. They enable the Platform to recognise your device on return visits, maintain your session, remember your preferences, and collect usage analytics.
You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform — in particular, disabling strictly necessary cookies will prevent you from logging in or using core features.
Legowin retains personal data only for as long as necessary to fulfil the purposes described in this Policy, subject to any longer retention periods required by applicable law or regulation.
| Data Type | Retention Period | Basis |
|---|---|---|
| Account & identity data | Duration of account + 5 years post-closure | Regulatory / AML obligation |
| Transaction records | Minimum 5 years from transaction date | Regulatory / financial compliance |
| KYC documents | 5 years post account closure | Anti-money laundering requirements |
| Support communications | 3 years from last interaction | Dispute resolution / legitimate interest |
| Marketing consent records | Until withdrawal of consent + 2 years | Consent compliance |
| Technical / usage logs | 12 months from collection | Security / fraud prevention |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gambling obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.
Legowin implements a multi-layered approach to data security, comprising technical, organisational, and procedural controls designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.
Our security measures include, but are not limited to:
In connection with the delivery of the Platform and the engagement of certain service providers (including KYC verification platforms and fraud prevention services), your personal data may be transferred to and processed in jurisdictions outside Malaysia. Where such transfers occur, Legowin takes appropriate measures to ensure that your personal data receives a level of protection equivalent to that provided under applicable data protection principles.
Such measures may include the execution of appropriate data transfer agreements with the receiving party incorporating standard contractual protections, or reliance on the recipient's adherence to recognised international data protection frameworks.
By using the Platform, you consent to the transfer of your personal data to jurisdictions outside Malaysia as described in this Section, subject always to the protections described herein.
Subject to applicable law, you hold the following rights in relation to your personal data processed by Legowin. To exercise any of these rights, please contact our support team using the details in Section 15.
Request a copy of the personal data Legowin holds about you.
Request correction of inaccurate or incomplete personal data.
Request deletion of your data where there is no lawful basis for continued retention.
Request that we limit the processing of your data in specified circumstances.
Request your data in a structured, machine-readable format for transfer to another service.
Object to processing based on legitimate interests, including direct marketing at any time.
Withdraw consent for processing at any time, where consent is the lawful basis relied upon.
Lodge a complaint with Legowin's data compliance team or a competent supervisory authority.
We will respond to all verifiable data rights requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 30 days, subject to notifying you of the extension and the reasons for it. We may require identity verification before processing any request to protect against unauthorised disclosure.
The Legowin Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Registration on the Platform requires confirmation of minimum age eligibility, and KYC verification is used to validate this representation.
If we discover or have reason to believe that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data, and take such further steps as may be required under applicable law.
The Platform does not contain links to external third-party websites. However, the payment services and identity verification tools integrated into the Platform are operated by independent third-party service providers. Your interactions with those providers' interfaces — for example, completing a bank login through FPX, or authenticating a Touch 'n Go eWallet transaction — are governed by their respective privacy policies and terms of service.
Legowin is not responsible for the privacy practices or content of any third-party service provider. We recommend that you review the privacy documentation of any third-party service you interact with in connection with the Platform.
Legowin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features of the Platform. When material changes are made, we will notify registered Users by email or by displaying a prominent notice on the Platform prior to the effective date of the changes.
The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the amended Policy, you should discontinue use of the Platform and request account closure in accordance with our Terms & Conditions.
We encourage you to review this Policy periodically to stay informed of how Legowin protects your personal data.
If you have any questions, concerns, or requests regarding this Privacy Policy, your personal data, or the exercise of your data rights, please contact Legowin's data compliance team through the following channels:
We are committed to resolving all privacy-related queries promptly. Formal complaints will be acknowledged within 2 business days and resolved within 14 business days wherever possible. If you are not satisfied with our response to a complaint, you retain the right to escalate the matter to a competent data protection authority.
Privacy Commitments
Privacy is not just a legal checkbox at Legowin. It is an operational commitment that shapes how every team in the company handles your information.
Legowin will never sell, rent, or trade your personal data to advertisers, data brokers, or any unaffiliated third party. Your information stays within the Legowin ecosystem.
All data in transit between your device and our servers is encrypted using 256-bit TLS. Sensitive data at rest — including KYC documents and financial records — is encrypted in storage.
We share your data only with payment processors and KYC providers who need it to deliver their specific service — never beyond what is operationally necessary, and always under confidentiality obligations.
Access, correct, port, restrict, or delete your data at any time. Our support team handles all data rights requests within 30 days, with a personal response from a qualified team member.
We do not hold your data indefinitely. Clear retention schedules govern how long each data type is kept, after which records are securely deleted or irreversibly anonymised.
When this Policy changes in a material way, we notify you in advance — by email and/or on-platform notice — so you always know how your data is being used before any change takes effect.
Have questions about how we handle your data? Our support team is available 24/7 to help — or explore our FAQ for quick answers.
Legowin — for players aged 21 and above only. Play responsibly.