legowin Privacy Policy

Last Updated: 1 January 2026

1. Who We Are

legowin ("we", "us", "our") operates the online gaming and sportsbook platform accessible at legowin.lat. We provide casino games, slots, live dealer tables, virtual sports, and a full sportsbook to players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and beyond.

This Privacy Policy applies to all users of the legowin website and any related services, applications, or communications. By creating an account or continuing to use our platform, you acknowledge that you have read and understood this policy.

2. Information We Collect

We collect personal information in several ways when you interact with legowin. The categories of data we may collect include:

2.1 Registration & Account Data

• Full name as per your MyKad or passport
• Date of birth (to verify you are 21 years of age or older)
• Email address and mobile number
• Residential address (state, postcode, city)
• Username and encrypted password
• Preferred language and currency (MYR)

2.2 Identity Verification (KYC) Data

• Copy of MyKad, passport, or other government-issued photo ID
• Proof of address documents (utility bills, bank statements)
• Selfie or liveness check where required by our compliance procedures

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method identifiers (e.g., Touch 'n Go eWallet account reference, FPX transaction ID, Maybank or CIMB account last four digits)
• Cryptocurrency wallet addresses where applicable (BTC, ETH, USDT, BNB)
• Bonus redemption and promotional activity history

2.4 Gaming Activity Data

• Games played, bets placed, wins and losses
• Session duration, login timestamps and logout times
• Responsible gaming limits, self-exclusion requests, and cooling-off periods

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, browser version
• Referring URL and on-site navigation path
• Cookie identifiers and session tokens

2.6 Communications Data

• Support tickets, live chat transcripts, and email correspondence
• Survey responses and feedback submitted voluntarily
• Marketing preferences and opt-in/opt-out records

3. How We Use Your Information

legowin uses the personal data we hold about you for the following purposes:

• Account creation and management — to register your legowin account, authenticate your identity, and maintain your player profile.
• Payment processing — to facilitate deposits and withdrawals via local Malaysian payment channels including Touch 'n Go eWallet, Boost, FPX, Maybank, CIMB, Public Bank, RHB, and Hong Leong Bank, as well as cryptocurrency methods.
• Regulatory compliance — to conduct KYC checks, anti-money laundering (AML) screening, fraud detection, and age verification (21+) as required under applicable international gaming regulations.
• Customer support — to respond to your enquiries, resolve disputes, and provide 24/7 multilingual assistance in English, Bahasa Melayu, and Chinese.
• Service improvement — to analyse platform usage, fix technical issues, and enhance the overall legowin gaming experience for Malaysian players.
• Responsible gaming — to monitor gaming behaviour for signs of problem gambling and to enforce any self-exclusion, deposit limits, or cooling-off periods you have requested.
• Marketing communications — to send you promotions, bonus offers, and platform news where you have opted in to receive such communications. You may unsubscribe at any time.
• Legal obligations — to comply with court orders, regulatory requests, or other lawful demands from competent authorities.

4. Legal Basis for Processing

Where data protection law requires us to identify a lawful basis for processing your personal data, we rely on the following grounds:

• Contractual necessity — processing required to provide the legowin services you have registered for, including account management and payment handling.
• Legal obligation — processing necessary for compliance with AML, KYC, age verification (21+), and other regulatory requirements under our international gaming licence.
• Legitimate interests — fraud prevention, platform security, internal analytics, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent — for optional marketing communications and for any processing of sensitive data where required. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Information

legowin does not sell your personal data. We may share information only in the following limited circumstances:

5.1 Service Providers

We engage trusted third-party vendors to support platform operations, including payment processors, identity verification providers, cloud hosting services, and customer support tools. All such vendors are bound by strict data processing agreements and are prohibited from using your data for any purpose other than delivering the agreed service to legowin.

5.2 Game Software Providers

Certain game providers may receive anonymised or pseudonymised player session data (such as stake amounts and game round IDs) solely for the purpose of game round verification and dispute resolution. No directly identifying information is shared beyond what is strictly necessary.

5.3 Regulatory & Legal Authorities

We may disclose personal data to regulators, law enforcement agencies, or other public authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of legowin, our players, or the public.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. We will notify affected players in advance and ensure that the successor entity honours this Privacy Policy.

6. Cookies & Tracking Technologies

legowin uses cookies and similar technologies to operate the platform, remember your preferences, and gather aggregate analytics. The types of cookies we use are:

• Essential cookies — required for login sessions, security tokens, and core site functionality. These cannot be disabled without breaking the service.
• Functional cookies — remember your language preference, display settings, and responsible gaming limits between sessions.
• Analytics cookies — collect anonymised data on page visits and navigation patterns to help us improve the platform. Data is aggregated and not linked to your identity.
• Marketing cookies — only placed with your explicit consent, used to attribute registrations and deposits to the correct promotional channel.

You can manage cookie settings through your browser. Please note that disabling essential cookies will prevent you from logging in to your legowin account.

7. Data Retention

We retain your personal data for as long as your legowin account is active or as required to fulfil the purposes described in this policy. Specific retention periods include:

• Account and KYC records — retained for a minimum of five (5) years following account closure, in line with AML regulatory requirements.
• Transaction records — retained for at least five (5) years from the date of each transaction.
• Customer support communications — retained for two (2) years from the date of the final correspondence.
• Marketing preferences — retained until you withdraw consent or request deletion, after which opt-out records are kept for three (3) years to demonstrate compliance.
• Technical logs — retained for up to ninety (90) days for security and debugging purposes, then automatically purged.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to any individual player.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data held by legowin:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — request deletion of your data where it is no longer necessary, subject to legal retention obligations.
• Right to restriction — ask us to pause processing of your data in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format where technically feasible.
• Right to object — object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, contact our Data Protection team at [email protected] (plain text — not a clickable link). We will respond within thirty (30) calendar days. We may need to verify your identity before processing a request.

9. International Data Transfers

legowin operates on infrastructure that may involve servers located outside Malaysia. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent mechanisms, to protect your data to at least the same standard as required under applicable Malaysian data protection principles.

10. Children & Age Restriction

legowin is strictly an adults-only platform. You must be at least 21 years of age to register and play. We do not knowingly collect personal data from anyone under 21. If we discover that a user is under the required age, the account will be suspended immediately, all funds will be returned (less any bonuses claimed), and all related data will be securely deleted.

If you believe a minor has registered on legowin, please notify us immediately at [email protected] (plain text — not a clickable link) so we can take prompt action.

11. Security Measures

legowin implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmissions
• AES-256 encryption for data stored at rest
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Multi-factor authentication for all internal administrative systems
• Regular third-party penetration testing and vulnerability assessments
• 24/7 automated intrusion detection and alert systems
• Regular staff training on data protection and security best practices

Despite these measures, no internet transmission or electronic storage is completely secure. We encourage you to use a strong unique password for your legowin account and to enable two-factor authentication where available.

12. Changes to This Policy

legowin reserves the right to update this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players by email. We encourage you to review this policy periodically. Your continued use of the legowin platform after any update constitutes your acceptance of the revised terms.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or the way legowin handles your personal data, please reach out to our Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Response time: We aim to respond to all data-related enquiries within 30 calendar days.
• Language: You may write to us in English, Bahasa Melayu, or Chinese — our support team handles all three.

You also have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction if you believe your data has been handled unlawfully.