Privacy Policy — lvwin

lvwin ("we," "us," "our") is the operator of the online gaming platform at https://lvwin.win ("Platform"). This Privacy Policy ("Policy") describes the personal data we collect from users of the Platform ("you," "your"), the purposes for which that data is processed, the circumstances under which it may be shared, and the rights available to you in connection with your personal data. This Policy applies to all services, products, and features offered by lvwin, including casino games, live dealer tables, sports betting, and all associated account and payment functions.

By registering an account or continuing to use the lvwin Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform and contact us to close your account.

1. Introduction

lvwin is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only the data necessary to deliver our services, verify user identity, comply with applicable legal and licensing obligations, and improve the quality of the Platform experience for our users in Malaysia and beyond. This Policy should be read alongside the lvwin Terms & Conditions and Responsible Gaming policy, which together constitute the full framework governing your use of the Platform.

2. Data We Collect

2.1 Registration Data

When you create a lvwin account, we collect the following categories of personal data:

• Full legal name and date of birth
• Email address and mobile phone number
• Residential address (including postcode and state within Malaysia)
• Username and encrypted password
• Preferred currency (Malaysian Ringgit / MYR)

2.2 Identity Verification Data

In accordance with our international online gaming licensing obligations and applicable anti-money laundering (AML) requirements, we may collect:

• Government-issued identification documents (e.g., Malaysian MyKad, passport)
• Proof of address documents (e.g., utility bills, bank statements)
• Source of funds documentation where required by our compliance team

2.3 Financial Data

When you make deposits or request withdrawals, we collect transaction records including payment method identifiers (e.g., Touch 'n Go account references, DuitNow identifiers, bank account details for FPX), transaction amounts in MYR, timestamps, and transaction status. We do not store full payment card numbers or bank account credentials on our servers.

2.4 Gaming Activity Data

We record detailed logs of all gaming activity on the Platform, including game sessions, wager amounts, outcomes, bonus usage, and session duration. This data is used for game integrity purposes, dispute resolution, responsible gaming monitoring, and personalisation of your Platform experience.

2.5 Technical & Device Data

We automatically collect certain technical data when you access the Platform, including your IP address, device type and operating system, browser type and version, session timestamps, and referring URLs. This data is collected through server logs and, where consent is given, through cookies and similar tracking technologies.

2.6 Communications Data

If you contact lvwin customer support via live chat, email, or any other channel, we retain records of those communications including message content, timestamps, and any associated account or transaction references.

3. How We Use Your Data

lvwin processes your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your lvwin account, including authentication and security.
• Service delivery: Providing access to Gaming Services, processing deposits and withdrawals, and displaying your account balance and history.
• Identity verification & AML compliance: Verifying your identity as required by our licensing obligations and applicable financial crime prevention regulations.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and enabling responsible gaming tools including deposit limits, session timers, and self-exclusion.
• Customer support: Responding to your enquiries, resolving disputes, and administering complaints.
• Fraud prevention & security: Detecting and preventing fraudulent activity, unauthorised account access, and abuse of promotional offers.
• Legal & regulatory compliance: Meeting our obligations under applicable law, licensing requirements, and responding to lawful requests from regulatory or law enforcement authorities.
• Platform improvement: Analysing aggregated, anonymised usage data to improve Platform performance, game selection, and user experience features.
• Marketing communications: Sending you promotional offers, bonus notifications, and Platform updates where you have provided consent. You may opt out of marketing communications at any time through your account settings.

4. Legal Basis for Processing

lvwin processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the lvwin Terms & Conditions, including account management and payment processing.
• Legal obligation: Processing required to comply with applicable laws, licensing conditions, AML regulations, and lawful regulatory requests.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. Consent may be withdrawn at any time.

5. Data Sharing & Disclosure

lvwin does not sell, rent, or trade your personal data to third parties. We may share personal data in the following circumstances:

• Service providers: With carefully selected third-party service providers who assist in operating the Platform, including payment processors, identity verification providers, fraud detection services, and cloud infrastructure providers. All such providers are bound by data processing agreements requiring them to handle your data securely and only for the specified purpose.
• Game providers: With licensed game providers integrated into the lvwin lobby, to the extent necessary to deliver the gaming experience and maintain game integrity.
• Regulatory & law enforcement authorities: Where required by our licensing obligations, applicable law, court order, or lawful request from a competent regulatory or law enforcement authority.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of lvwin's assets, your personal data may be transferred to the successor entity as part of the transaction, subject to equivalent privacy protections.

6. Cookies & Tracking Technologies

lvwin uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help us deliver a functional and personalised experience. We use the following categories of cookies:

• Essential cookies: Required for the Platform to function, including session management and authentication. These cannot be disabled.
• Analytical cookies: Used to understand how users interact with the Platform (e.g., pages visited, session duration). Data collected is aggregated and anonymised where possible.
• Preference cookies: Used to remember your settings and preferences (e.g., language, display options).
• Marketing cookies: Used to deliver relevant promotional content where you have consented to receive marketing communications.

You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.

7. Data Retention

lvwin retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, licensing, and regulatory obligations. Specifically:

• Account data is retained for the duration of your active account and for a minimum of five (5) years following account closure, as required by applicable AML and licensing regulations.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Communications data is retained for two (2) years from the date of last contact unless a longer period is required for dispute resolution.
• Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter to evidence compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

8. Data Security

lvwin implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Measures include 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform, encrypted storage of sensitive data at rest, role-based access controls limiting staff access to personal data on a need-to-know basis, two-factor authentication for administrative platform access, and regular security assessments and penetration testing. While we apply rigorous security practices, no internet transmission or electronic storage method is completely secure, and lvwin cannot guarantee absolute security of data in all circumstances.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by lvwin:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You may request that we limit processing of your data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract, you may request a structured, machine-readable copy of data you have provided to us.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving a verifiable request.

10. Children & Minors

The lvwin Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered an account on the Platform, please contact us immediately at [email protected].

11. Third-Party Links

The lvwin Platform does not contain links to external third-party websites. However, our game providers and payment processors operate their own platforms and privacy practices. lvwin is not responsible for the privacy practices of third-party providers, and we encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform.

12. Policy Amendments

lvwin reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via the email address associated with their account and/or through a prominent notice on the Platform prior to the changes taking effect. The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

13. Contact & Complaints

For any questions, requests, or complaints relating to this Privacy Policy or the handling of your personal data by lvwin, please contact our Data Protection team via live chat on the Platform or in writing at [email protected]. We will acknowledge receipt within 2 business days and aim to resolve all privacy-related enquiries within 30 days.