Data Protection & Privacy
vxkwin Privacy Policy
At vxkwin, protecting the personal data of our Malaysian players is a foundational responsibility — not a compliance formality. This Privacy Policy explains precisely what information we collect, how we use it, who we share it with, and the rights you hold over your own data. We encourage you to read it alongside our Terms & Conditions.
- 1.Introduction
- 2.Definitions
- 3.Data Controller
- 4.Data We Collect
- 5.Data Processing & Purpose
- 6.Legal Basis for Processing
- 7.Data Sharing & Disclosure
- 8.Cookies & Tracking
- 9.Data Retention
- 10.Security Measures
- 11.Your Rights
- 12.Minors & Age Verification
- 13.Third-Party Links
- 14.Policy Amendments
- 15.Contact Us
1 Introduction
vxkwin ("we", "us", "our", or "the Platform") operates the online casino and sports betting service accessible at https://vxkwin.cam, serving registered players across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other localities throughout the country.
This Privacy Policy describes the personal data that vxkwin collects from users of the Platform, the purposes for which that data is processed, the circumstances under which it may be disclosed to third parties, the security measures employed to protect it, and the rights available to data subjects in respect of their personal information.
vxkwin is committed to handling personal data with transparency, integrity, and in compliance with applicable data protection standards. We process only the personal information that is necessary for the legitimate operation of our services, and we do not engage in the sale, rental, or unauthorised disclosure of player data to unaffiliated commercial entities.
2 Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
- "Personal Data"
- Any information relating to an identified or identifiable natural person — including name, identification number, contact details, IP address, financial transaction records, and behavioural data — that vxkwin processes in connection with your use of the Platform.
- "Processing"
- Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transfer, and deletion, whether by automated means or otherwise.
- "Data Controller"
- The entity that determines the purposes and means of processing Personal Data. For all Personal Data collected through the Platform, vxkwin acts as the Data Controller.
- "Data Processor"
- A third party that processes Personal Data on behalf of and under the instruction of vxkwin — for example, KYC verification providers, payment processors, and customer support platform vendors.
- "Data Subject"
- The natural person to whom the Personal Data relates — in the context of the Platform, this is you, the registered Player or prospective registrant.
- "Consent"
- A freely given, specific, informed, and unambiguous indication of a data subject's agreement to the processing of their Personal Data, given by a clear affirmative act.
3 Data Controller
vxkwin is the Data Controller in respect of all Personal Data collected through the Platform at https://vxkwin.cam. As Data Controller, vxkwin determines the purposes and means of processing your Personal Data in accordance with this Privacy Policy.
Where vxkwin engages third-party service providers to process Personal Data on its behalf — including payment gateway operators, identity verification specialists, and customer support technology providers — those providers act as Data Processors under written data processing agreements that impose equivalent data protection obligations.
If you have any questions about how vxkwin processes your Personal Data, or wish to exercise any of your data subject rights, please contact our Data Protection contact point as described in Section 15 of this Policy.
4 Data We Collect
vxkwin collects Personal Data through several channels during your use of the Platform. The categories of data collected are set out in the table below:
| Category | Examples | Collection Point |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, Malaysian MyKad / passport number | Registration & KYC verification |
| Contact Data | Email address, mobile number, residential address (city, postcode) | Registration & account settings |
| Financial Data | Payment method details (Maybank2u, CIMB Clicks, Touch 'n Go eWallet, DuitNow, FPX, crypto wallet address), transaction amounts in MYR, deposit and withdrawal history | Cashier / payment processing |
| Technical Data | IP address, device type, browser type and version, operating system, session duration, time-zone | Automatic — platform access logs |
| Usage Data | Games played, wager amounts, betting history, session activity, bonus usage, responsible gambling tool interactions | Platform activity tracking |
| Communications Data | Live chat transcripts, WhatsApp message records, email correspondence with Player Support | Customer support interactions |
| Marketing Preferences | Opt-in / opt-out status for promotional emails, SMS notifications, and push notifications | Account preferences & subscription management |
5 Data Processing & Purpose
vxkwin processes your Personal Data for the following purposes:
- Account Management: To create, maintain, verify, and administer your registered Account on the Platform, including authentication and session management.
- Service Delivery: To enable you to access and use all Platform services — including casino games, sports betting markets (EPL, Liga Super Malaysia, UFC, and others), live dealer tables, and all associated features.
- Payment Processing: To facilitate deposits and withdrawals in MYR through your chosen payment method, including Maybank2u, CIMB Clicks, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and supported cryptocurrencies.
- KYC & Identity Verification: To verify your identity, confirm that you meet the minimum age requirement of 21 years, and comply with applicable anti-money laundering (AML) obligations.
- Regulatory Compliance: To comply with legal obligations applicable to vxkwin's operations, including financial crime prevention, responsible gambling monitoring, and record-keeping requirements.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and abuse of promotions or platform systems.
- Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance in Bahasa Melayu, Mandarin, and English through Live Chat, WhatsApp, and email.
- Responsible Gambling: To monitor gaming behaviour, identify indicators of problem gambling, apply self-exclusion or deposit limit settings, and fulfil our responsible gambling obligations to players.
- Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may withdraw this consent at any time.
- Platform Improvement: To analyse usage patterns, diagnose technical issues, test new features, and improve overall platform performance and user experience.
6 Legal Basis for Processing
vxkwin relies on the following legal bases to process your Personal Data:
(b) Legal Obligation: Processing required to comply with applicable laws and regulations — including KYC verification, AML record-keeping, and responsible gambling compliance.
(c) Legitimate Interests: Processing conducted on the basis of vxkwin's legitimate business interests — including fraud detection, platform security, and service improvement — where those interests are not overridden by your data protection rights.
(d) Consent: Processing based on your freely given, specific, and informed consent — including the sending of marketing communications and the processing of any sensitive personal data collected for responsible gambling assessments. You may withdraw consent at any time without affecting the lawfulness of prior processing.
7 Data Sharing & Disclosure
vxkwin does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own commercial purposes. We may disclose your Personal Data to the following categories of recipient strictly on a need-to-know basis:
- Payment Service Providers: To process deposits and withdrawals via your chosen Malaysian payment method (e.g., Maybank, CIMB, FPX gateway operators, e-wallet providers, and cryptocurrency networks). These providers receive only the financial data required to execute the specific transaction.
- Identity Verification Providers: Specialist KYC and AML compliance service providers who verify your identity documents and conduct age verification checks on our behalf.
- Game Providers: Certified third-party casino and sportsbook game providers receive limited technical session data necessary to deliver their games through the Platform. These providers do not receive your financial data or payment method details.
- Customer Support Platforms: Technology vendors that power the Live Chat and support ticketing systems used by our multilingual support team.
- Regulatory and Law Enforcement Authorities: Where vxkwin is legally required or legally permitted to disclose information — for example, in response to a valid court order, regulatory directive, or law enforcement request.
- Professional Advisers: Lawyers, accountants, and auditors acting in a professional capacity and subject to confidentiality obligations, where required for legitimate business purposes.
8 Cookies & Tracking Technologies
vxkwin uses cookies and similar tracking technologies to operate the Platform effectively, personalise your experience, and support our security and fraud prevention capabilities. The primary types of cookies we deploy are:
- Strictly Necessary Cookies: Essential to the operation of the Platform, including session authentication, load balancing, and security tokens. These cookies cannot be disabled without impairing core Platform functionality.
- Functional Cookies: Store your preferences — such as language settings, game history display, and responsible gambling tool configurations — to deliver a personalised experience on return visits.
- Analytical Cookies: Collect anonymised data about how Players navigate and use the Platform, enabling us to identify performance bottlenecks and improve the user experience. These cookies do not track personally identifiable information.
- Security Cookies: Used to detect irregular session behaviour, bot activity, and potential fraud attempts, supporting the integrity of the Platform for all users.
On your first visit to the Platform, you will be presented with a cookie consent notice that allows you to configure non-essential cookie categories. You may also update your cookie preferences at any time through your Account settings. Please note that disabling certain cookies may affect the functionality of specific Platform features.
9 Data Retention
vxkwin retains your Personal Data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention obligations imposed by applicable law or regulatory requirements.
- Account and identity data: Retained for the duration of your active Account, plus a minimum of five (5) years following Account closure to comply with AML record-keeping requirements.
- Financial transaction records: Retained for a minimum of seven (7) years in compliance with applicable financial record-keeping obligations.
- Customer support communications: Retained for three (3) years following the closure of the relevant support ticket or enquiry.
- Technical and usage logs: Typically retained for thirteen (13) months for security monitoring and platform improvement purposes, unless a longer period is required for an ongoing investigation.
- Marketing preferences and consent records: Retained for the duration of your Account and for three (3) years thereafter as evidence of consent management.
At the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with vxkwin's data disposal procedures.
10 Security Measures
vxkwin implements a multi-layered approach to personal data security, combining technical controls, organisational policies, and staff training to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction.
- Encryption: All data transmitted between your device and the Platform is protected by 256-bit SSL/TLS encryption. Sensitive data stored in our systems — including financial records and identity documents — is encrypted at rest.
- Access Controls: Access to systems holding Personal Data is restricted on a strict need-to-know basis. Multi-factor authentication is required for all administrative access to production systems.
- Payment Tokenisation: Payment method details are tokenised — the Platform does not store raw card numbers or full bank account credentials. Tokenised references are managed by certified payment processors.
- Penetration Testing: The Platform undergoes regular independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: vxkwin maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, vxkwin will notify affected individuals and relevant authorities in accordance with applicable requirements.
11 Your Rights
As a data subject, you hold a range of rights in respect of your Personal Data held by vxkwin. These rights are described below. To exercise any of these rights, please contact vxkwin's Player Support team as described in Section 15.
vxkwin will respond to all valid data subject requests within thirty (30) calendar days of receipt, subject to any extensions permitted by applicable law where the request is complex or numerous.
12 Minors & Age Verification
The vxkwin Platform is strictly intended for individuals aged 21 years and above. vxkwin does not knowingly collect Personal Data from individuals under the age of 21 and does not permit persons under this age to register an Account or access any gaming services.
vxkwin employs automated age verification checks at the point of registration, and KYC verification processes are designed to confirm that each Account holder meets the minimum age requirement. Where vxkwin discovers — through KYC, automated detection, or any other means — that an Account is held by a person under the age of 21, the Account will be immediately suspended, all wagering activity will be reversed, and deposited funds will be returned to the originating payment method following completion of the applicable compliance review.
Parents and guardians who believe that a minor may have accessed vxkwin without authorisation are encouraged to contact our Player Support team immediately at the contact details provided in Section 15.
13 Third-Party Links
The vxkwin Platform may contain references to third-party game providers, payment networks, or services whose privacy practices are governed by their own separate privacy policies. This Privacy Policy applies solely to Personal Data collected and processed by vxkwin through the Platform at https://vxkwin.cam.
vxkwin does not accept responsibility or liability for the privacy practices of third-party service providers. We encourage you to review the privacy policies of any third-party services you engage with in connection with your use of the Platform — particularly payment processors and e-wallet providers such as Touch 'n Go eWallet, Boost, GrabPay, and DuitNow.
14 Policy Amendments
vxkwin reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform services. The "Last Updated" date displayed at the top of this page indicates when the most recent revisions were made.
Where amendments to this Policy are material — meaning they significantly affect the manner in which we process your Personal Data or the rights you hold — vxkwin will provide advance notice to registered Players via email or through a prominent notice on the Platform prior to the revised Policy taking effect.
Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you should cease use of the Platform and contact Player Support to discuss the closure of your Account.
15 Contact Us
For any questions, concerns, or formal requests relating to this Privacy Policy or your Personal Data, please contact vxkwin using the following channels. All privacy-related enquiries are handled by our Player Support team, who will escalate data protection matters to the appropriate internal contact point.
WhatsApp Support: Available 24/7. Access contact details through your Account dashboard following login.
Email (plain text — not a clickable link): [email protected]
Response Time: vxkwin acknowledges all written privacy enquiries within 24 hours and aims to provide a substantive response to data subject rights requests within 30 calendar days.
Postal / Formal Data Rights Requests: Where you wish to submit a formal written data subject rights request (access, rectification, erasure, restriction, portability, or objection), please submit your request in writing via email to the address above, clearly marked "Data Subject Rights Request". Please include your full name, registered Account email address, and a description of the right you wish to exercise. vxkwin may request proof of identity before processing rights requests.
Data Subject Rights
Your Rights Over Your Personal Data
vxkwin recognises the following data subject rights. To exercise any of these rights, contact our Player Support team — we will respond within 30 days.
Request a copy of the Personal Data vxkwin holds about you, together with information on how and why it is being processed.
Request correction of any inaccurate or incomplete Personal Data held about you on the Platform.
Request deletion of your Personal Data where it is no longer necessary for the purposes collected, subject to overriding legal obligations.
Request that vxkwin restricts processing of your Personal Data while a dispute about its accuracy or lawfulness is being resolved.
Receive a copy of Personal Data you provided to vxkwin in a structured, machine-readable format, where processing is based on consent or contract.
Object to processing of your Personal Data for direct marketing purposes or on the basis of legitimate interests where your interests override ours.
Privacy Commitments
How vxkwin Protects Your Privacy
Every byte of data exchanged between your device and the vxkwin Platform — from login credentials to payment details — is protected by 256-bit SSL encryption. Your data in transit is never exposed in plain text.
vxkwin has never sold, and will never sell, your Personal Data to third-party advertisers or data brokers. Your information is used solely to provide you with Platform services, comply with legal obligations, and protect the Platform's security.
vxkwin never stores raw banking credentials or full payment card details. All payment method data — whether Maybank2u, Touch 'n Go eWallet, DuitNow, or cryptocurrency wallet addresses — is tokenised and managed by certified processors.
You retain full control over marketing communication preferences, cookie settings, and responsible gambling tool configurations — all adjustable directly from your Account settings without contacting support.
vxkwin publishes defined retention periods for each category of Personal Data. Data is held no longer than legally required, and deletion procedures are documented and applied consistently when retention periods expire.
In the event of a data security incident affecting your Personal Data, vxkwin's incident response procedures include prompt notification to affected Players and relevant authorities, in line with applicable data protection standards.
Questions or Concerns?
We're Here to Help — 24/7
If you have any questions about this Privacy Policy, want to exercise your data rights, or simply want to learn more about how vxkwin protects Malaysian players — our multilingual support team is available around the clock.