Personal Data Protection

Privacy Policy hbowin – Your Personal Data Protection

Your privacy is our priority. This document clearly explains how hbowin collects, uses, stores, and protects your personal information as a member of our platform.

Last Updated: 1 January 2026

Hbowin's Commitment To Your Privacy

Six core principles that form the foundation of your personal data protection at hbowin

256-bit SSL Encryption

All data transmitted between your device and hbowin servers is protected with military-grade 256-bit SSL encryption. Your information cannot be intercepted by unauthorised parties.

Secure Data Storage

Your personal data is stored on servers protected by multiple layers of security, including firewalls, intrusion detection systems and encrypted daily backups.

Strict Access Control

Only authorised hbowin staff who require access for operational purposes are permitted to view your personal data — and every access is logged for audit purposes.

No Data Sales

Hbowin has never and will never sell your personal data to third parties for marketing or commercial purposes. Your data is used solely for purposes you have agreed to.

Control In Your Hands

You have the right to access, correct, delete or transfer your personal data. Contact our support team to submit any data-related requests.

Breach Notification

In the event of any security breach affecting your personal data, hbowin is committed to notifying you within 72 hours from the date the incident is detected.

Important Note: This Privacy Policy applies to all users of the hbowin platform, including the website, mobile app and all related services. By using the hbowin platform, you agree to the data collection and usage practices described here.

Introduction

Hbowin takes the protection of personal data extremely seriously. As an online entertainment platform operating in Malaysia, we understand the importance of the trust you place in us when sharing personal information during registration and use of our services.

This Privacy Policy was drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. It details the types of data we collect, why we need it, how it is used and your rights as a data subject.

We believe that transparency is the foundation of trust. We therefore strive to ensure this policy is written in plain language that all our users can easily understand, rather than a complex and difficult-to-read legal document.

Data We Collect

Hbowin collects various types of information depending on how you interact with our platform. The following are the main categories of data we collect:

Personal Identification Data:

  • Full name as stated on your MyKad or passport.
  • Identity card number (MyKad) or passport number for KYC verification purposes.
  • Date of birth to verify that you meet the minimum age requirement of 18 years.
  • Full current residential address.
  • An active mobile number and a valid email address.

Financial Data:

  • Bank account number and bank name for deposit and withdrawal processing.
  • Digital wallet details such as Touch 'n Go eWallet or Boost registered in your name.
  • Transaction records including deposits, withdrawals, claimed bonuses, and wagering history.

Technical & Usage Data:

  • Your IP address, device type, operating system and web browser version.
  • Activity log data including pages visited, access times and actions performed within the platform.
  • Geographic location information based on your IP address for security and compliance purposes.
  • Mobile app performance data including crash reports and performance logs.

We only collect data that is genuinely necessary to provide our services to you. We do not collect excessive or irrelevant information beyond what is required to operate the hbowin platform.

How We Use Your Data

Every piece of information we collect has a clear and specific purpose. hbowin uses your personal data for the following purposes:

Purpose of Use Data Type Legal Basis
Account registration & verification Identity data, KYC Contract / Legal Requirements
Deposit & withdrawal processing Financial data Contract / Legal Requirements
Fraud prevention & security Technical data, IP, activity Hbowin Legitimate Interests
Customer Support All related categories Contract
Promotional & bonus communications Email, phone number Your Consent
Legal compliance & reporting Identity data, financial Legal Obligations
Platform improvement & analytics Usage data (anonymised) Hbowin Legitimate Interests

We will not use your data for any other purpose without first obtaining your specific consent. If you do not wish to receive marketing communications from us, you may opt out at any time through your account settings or by contacting our support team.

Third-Party Data Sharing

Hbowin does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where we need to share certain information with the following parties:

  • Payment Service Providers: Transaction information that must be shared with payment processors, banks, and digital wallet providers to complete your deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
  • Game Providers: Game data required by slot, Live Casino and sports providers to deliver a seamless gaming experience. This data is limited strictly to what is necessary.
  • KYC & Identity Verification Services: Identity information shared with registered third-party identity verification service providers for anti-money laundering (AML) compliance purposes.
  • Legal Authorities: Information required by law enforcement agencies, regulatory bodies, or courts when mandated by law or court order.
  • Professional Advisors: Accountants, lawyers and auditors bound by their professional confidentiality obligations, who access only the data necessary to perform their services.

In all of the above data sharing cases, we ensure that the relevant third parties have adequate security measures in place and use the data solely for the specified purposes.

Cookies & Tracking Technologies

The hbowin platform uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and understand aggregate platform usage patterns.

Types of Cookies We Use:

  • Essential Cookies: These cookies are required for core platform functions such as login session authentication, account security, and language preferences. The platform cannot function properly without them.
  • Performance Cookies: Collecting information about how you use the platform — most visited pages, time spent, and errors encountered — to help us improve the platform.
  • Functional Cookies: Allows the platform to remember your preferences such as display settings, preferred currency, and dismissed notifications.
  • Analytics Cookies: We use internal analytics tools to understand overall traffic and usage patterns on an anonymised basis for product development purposes.

You can manage or block cookies through your web browser settings at any time. Please note that blocking certain cookies may affect the functionality or your user experience on the hbowin platform.

Data Security

Hbowin continually invests in the latest security infrastructure to ensure your personal data remains protected at all times. Key security measures we implement include:

  • Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
  • Data encryption at rest for all sensitive data within our databases.
  • Two-factor authentication (2FA) available for all member accounts as an added layer of protection.
  • Security scanning and penetration testing conducted regularly by independent third parties.
  • 24/7 monitoring of suspicious activity and cybersecurity threats.
  • Mandatory data security training for all hbowin staff who handle personal data.
  • Tested and ready-to-execute incident response procedures in the event of any security incident.

While no system can guarantee 100% absolute security, hbowin employs the same industry-standard security practices used by leading financial institutions in Malaysia.

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by hbowin:

Right of Access

You have the right to request a copy of all personal data we hold about you at any time.

Right to Rectification

You may request that we correct any inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data, subject to applicable legal retention requirements.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing a reason.

Right to Data Portability

You may request your data in a structured, machine-readable format for transfer to another service provider.

Right to Restriction

You may request that we restrict the processing of your data in certain situations, such as during a dispute regarding data accuracy.

To submit any request relating to the rights above, please contact the hbowin support team via live chat or email. We will process your request within 30 calendar days from the date of receipt.

Data Retention & Deletion

Hbowin retains your personal data for as long as your account is active or as long as necessary to provide services to you. Specific retention periods for different data categories are as follows:

  • Identity & KYC Data: Retained for a minimum of 7 years after account closure to fulfil anti-money laundering (AML) and financial monitoring legal requirements.
  • Financial Transaction Records: Retained for 7 years in accordance with Malaysia's applicable tax and financial legal requirements.
  • Log & Technical Data: Retained for 12 months for security, fraud detection and technical troubleshooting purposes.
  • Customer Support Communications: Retained for 3 years to allow follow-up on any previously reported issues.
  • Marketing Data (with consent): Retained until you withdraw your consent or close your account.

Upon expiry of the applicable retention period, your data will be permanently deleted or anonymised from our systems.

Child Protection

The hbowin platform is restricted to individuals aged 18 and above only. We do not knowingly collect or process personal data of minors under any circumstances.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate action to delete that information from our systems and close the associated account.

If you believe your child or any minor has registered an account at hbowin, please contact our support team immediately so that appropriate action can be taken.

Amendments to the Privacy Policy

Hbowin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we handle personal data.

Whenever a significant amendment is made, we will:

  • Updating the "Last Updated" date at the top of this document.
  • Displaying a notice on the hbowin platform home page for a minimum of 14 days.
  • Sending notifications via your registered email for amendments that materially affect your rights.

Continued use of the hbowin platform after amendments take effect constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how hbowin handles your personal data, our privacy team is ready to assist.

  • Live Chat: Available 24 hours a day, 7 days a week — the fastest way to get immediate assistance.
  • Privacy Email: [email protected] (response within 48 working hours)
  • General Support Email: [email protected]

For enquiries related to responsible gaming or how to protect your account, please visit the Responsible Gaming us. For other frequently asked questions, you may also refer to the FAQ us.

If you are not satisfied with our response to your privacy complaint, you have the right to contact the Department of Personal Data Protection Malaysia or the relevant regulatory authority in your country for further assistance.

A Platform You Can Trust

Your Data Is Safe With hbowin

We are fully committed to protecting your privacy. Join over 500,000 Malaysia members who have trusted hbowin as a safe, fair and responsible online entertainment platform.

Bahasa Melayu