Privacy Policy gdwon – Our Commitment to Protecting Your Data

This Privacy Policy is published by gdwon and applies to all users of the gdwon.win platform, including website visitors, registered members and any individuals who interact with our services across various channels including the website, mobile app and customer support channels.

As a platform operating for the Malaysian market, gdwon is committed to ensuring all personal data handling practices comply with Personal Data Protection Act 2010 (PDPA) and the regulations made under it. We also adhere to international data protection standards to ensure your information remains secure at all times.

This policy defines:

• The types of personal data we collect and how it is collected
• The purpose of data use and the legal basis for processing
• Who can access your data and under what circumstances
• The security measures we implement to protect your data
• Your rights regarding your personal data and how to exercise them

Gdwon collects your personal data through several transparent and responsible methods. You are always informed about data collection at the relevant point of collection.

Directly from you:

• New account registration form on the gdwon platform
• The KYC verification process — including identity document uploads
• Processing deposits and withdrawals through multiple payment methods
• Communications with the customer support team via live chat or email
• Participation in promotions, lucky draws, or customer satisfaction surveys
• Profile and account setting updates made by you

Automatically upon use of the platform:

• Server log data — including IP address, access time and pages visited
• Device data — including device model, operating system and web browser version
• Cookie data and similar tracking technologies to enhance the user experience
• App performance and error data that helps us identify and resolve technical issues

From authorised third parties:

• Identity verification service providers for KYC purposes
• Payment processors to verify financial transactions
• Fraud prevention service providers partnering with gdwon

Gdwon uses your personal data solely for legitimate, clearly stated purposes. We do not use your data for unrelated purposes without obtaining your consent first.

• Account management — To create, verify, manage, and secure your gdwon account.
• Transaction processing — To securely process deposits, withdrawals, and fund management within your account.
• KYC & AML Compliance — To verify your identity and ensure compliance with applicable anti-money laundering regulations.
• Customer Support — To respond to enquiries, resolve complaints, and provide technical assistance to you.
• Platform security — To detect, investigate, and prevent fraud, abuse, and illegal activity on the gdwon platform.
• Product improvement — To analyze usage patterns in order to improve platform features, user experience, and game offerings.
• Marketing communications — To send relevant promotional information and exclusive offers, subject to your communication preferences.
• Legal compliance — To fulfil legal obligations, regulations, and directives from authorities with enforcement powers.

Every processing of personal data carried out by gdwon is based on at least one valid legal ground under Malaysia's PDPA. These grounds are as follows:

• Consent — You provide explicit consent during registration and may withdraw consent at any time for non-mandatory processing.
• Contract performance — Processing is necessary to fulfil the service agreement between you and gdwon, such as transaction processing and account management.
• Legal obligation — Processing is necessary to comply with legal obligations imposed on gdwon, including KYC and AML requirements.
• Legitimate interest — Processing is carried out based on gdwon's legitimate interests, such as fraud prevention, platform security, and service improvement, provided these interests do not override your fundamental rights and freedoms.

Gdwon does not sell or rent your personal data to any party. However, in the course of operating the platform, we share data with certain parties in the following situations:

• Service providers — Companies that assist us in providing services such as payment processors, KYC verification service providers, cloud computing service providers, and gaming software suppliers. All such providers are bound by strict data confidentiality agreements.
• Regulatory authorities — gdwon will disclose required data to the relevant authorities when required to do so by law, court order, or directive from the relevant regulatory body.
• Fraud prevention — Required information may be shared with recognized fraud prevention agencies to protect the platform and members from illegal activity.
• Business transfer — In the event of a merger, acquisition, or business asset transfer, member data may be transferred to the receiving entity provided equivalent privacy protections are maintained.

Gdwon continuously invests in security infrastructure to ensure your personal data is always protected. The technical and organizational measures we implement include:

• 256-bit SSL Encryption — All data transmitted between your browser and gdwon's servers is protected with industry-grade encryption.
• Data encryption at rest — Sensitive data stored in our databases is encrypted using AES-256 encryption algorithms.
• Two-factor authentication (2FA) — Members are encouraged to enable 2FA for an additional layer of security on their accounts.
• 24/7 Monitoring — Our security team monitors platform activity around the clock to promptly detect any suspicious activity.
• Regular penetration testing — gdwon undergoes regular third-party security audits to identify and address system vulnerabilities.
• Internal access controls — Access to members' personal data within gdwon's internal systems is restricted to staff who require it, with strict role-based access controls in place.

The gdwon.win website uses cookies and similar tracking technologies to enhance your browsing experience and ensure the platform functions properly.

Types of cookies we use:

• Essential Cookies — Required for core platform functions such as login session verification and security preferences. These cookies cannot be disabled.
• User Preference Cookies — To store settings such as display language, theme, and other personal preferences to enhance your experience.
• Analytics Cookies — To collect anonymized usage data to help us understand how users interact with the platform and improve it.
• Session Cookies — Temporary cookies that are automatically deleted when you close your web browser.

You can manage cookie settings through your web browser or via the cookie settings panel available on the gdwon platform. However, disabling essential cookies may affect certain platform functions.

As a data subject, you have the following rights under the Malaysia PDPA, which gdwon is committed to respecting and facilitating:

To exercise any of the above rights, submit a request to the gdwon data protection team via email at [email protected]. All valid requests will be processed within 14 business days.

In certain operational cases, your personal data may be transferred outside Malaysia — for example, to cloud computing servers or technical service providers operating in other countries.

When such transfers occur, gdwon ensures:

• The recipient country provides a level of data protection equivalent to or higher than Malaysia.
• PDPA-compliant data transfer agreements are signed with all recipient parties.
• Additional protective measures such as end-to-end encryption are implemented for sensitive data transfers.
• You will be notified of any significant cross-border data transfers through updates to this privacy policy.

If you have any questions, concerns, or complaints regarding how gdwon handles your personal data, or if you wish to exercise any of the data rights outlined in this policy, please contact us through the following channels:

• Data Protection Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 directly on the gdwon.win platform

The gdwon Data Protection Officer (DPO) team will take every enquiry seriously and provide a response within 5 business days for general enquiries and 14 business days for formal data rights requests.

If you are not satisfied with our response, you have the right to file a complaint with Personal Data Protection Department under the Ministry of Communications and Digital Malaysia.