Malaysia PDPA-Standard Data Protection

Tokekwin Privacy Policy – How We Protect the Personal Data of Malaysian Players

Your privacy is our priority. This document clearly and transparently explains how tokekwin collects, uses, stores, and protects your personal information in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010.

Updated: 1 January 2026
Applicable in Malaysia
PDPA 2010 Compliance
256-bit SSL
Data Encryption
PDPA 2010
Legal Compliance
No Data Selling
To Third Parties
Full Rights
Player Data Controls

Introduction & Scope of Privacy Policy

Welcome to tokekwin's Privacy Policy page. At tokekwin, we understand that your trust is our most valuable asset. That trust can only be built when you know exactly how your personal information is handled β€” honestly, transparently, and responsibly.

This Privacy Policy describes tokekwin's data protection practices regarding information collected from players who register and use the tokekwin platform in tokekwin.bio. This document applies to all players in Malaysia using our Sports Betting, Live Casino, slots, baccarat, roulette, and all other services we offer.

Tokekwin operates in compliance with Personal Data Protection Act 2010 (PDPA) Malaysia. This means we have a legal obligation to ensure that all players' personal data is processed lawfully, fairly, and transparently.

Acknowledgement of This Policy

By registering a tokekwin account or continuing to use the platform after this policy update notice is published, you agree to be bound by the Privacy Policy set out here. If you do not agree, please contact our support team to close your account.

Personal Data We Collect

Tokekwin collects only the data necessary for legitimate purposes related to platform operations and legal compliance. We do not collect data beyond what is required.

Data Categories Type of Information How We Collect Status
Identity Full name, IC number, date of birth Registration form Mandatory
Relationship Malaysian phone number, email address Registration form Mandatory
Financial Deposit method (TnG, GrabPay, DuitNow, FPX), transaction records Payment processing Mandatory
Activity Betting history, games played, login sessions Platform usage Automatic
Technical IP address, device type, browser, operating system System Log Automatic
Communications Support chat records, emails, complaints Customer interactions Optional

We not collect credit or debit card numbers directly. All payment transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks) are processed through PCI-DSS certified third-party payment gateways. Your banking information never touches tokekwin's servers.

How Tokekwin Uses Your Data

Data collected by tokekwin is used solely for legitimate purposes directly related to platform operations and compliance with Malaysian law. The following are the primary purposes for which your data is used:

  • Account management: Creating, verifying, and maintaining your player account on the tokekwin platform.
  • Transaction processing: Processing deposits, withdrawals, and all financial transactions in Malaysian Ringgit (RM) securely and accurately.
  • Identity verification (KYC): Fulfilling the requirements of Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA).
  • Fraud prevention: Detecting and preventing fraudulent activity, money laundering, and multi-account usage.
  • Customer support: Providing technical support and resolving player enquiries or complaints.
  • Marketing (with consent): Sending promotional information, bonuses, and exclusive offers to players who have consented to receive them.
  • Analysis and improvement: Understanding usage patterns to improve the tokekwin platform experience.
  • Legal compliance: Meeting legal obligations and responding to legitimate requests from Malaysian authorities.
About Marketing Communications

Tokekwin will only send you marketing communications if you have given your consent during registration or through the preference settings in your account. You may withdraw this consent at any time by updating your preferences in the account panel or by contacting our support team.

Data Sharing With Third Parties

Tokekwin does not sell, rent, or distribute players' personal data to third parties for their own marketing or commercial purposes. This is a non-negotiable commitment.

However, there are limited situations where tokekwin may need to share your data with certain parties:

  • Payment service providers: Payment gateways such as Touch 'n Go, GrabPay, DuitNow, FPX, and others require minimum information to process transactions. They maintain their own privacy policies and are bound by confidentiality agreements with tokekwin.
  • Platform technology provider: Companies providing gaming software, fraud protection systems, and technical infrastructure may access limited technical data for operational purposes.
  • Malaysian authorities: Tokekwin complies with all lawful requests from Malaysian law enforcement agencies, courts, or regulatory bodies in accordance with applicable laws.
  • Fraud prevention services: Minimal technical data (such as IP addresses) may be shared with fraud detection systems to protect all tokekwin players.

In all of the above cases, tokekwin shares only the minimum data necessary (the "data minimisation principle") and ensures that recipients are bound by equivalent data protection obligations.

Data Protection Security Measures

Tokekwin invests seriously in cybersecurity infrastructure to protect player data. The technical and organisational measures we implement include:

  • 256-bit SSL encryption: All communications between your browser and the tokekwin servers are encrypted using the latest industry-standard SSL/TLS protocols.
  • Financial data segregation: Financial transaction data is stored in a segregated environment, separate from player profile data.
  • Role-based access control: Only tokekwin staff who require access to specific data are permitted to do so, and all access is logged.
  • Regular security audits: Independent security assessments are conducted quarterly by a third-party cybersecurity firm.
  • Two-factor authentication (2FA): tokekwin's internal systems require 2FA for all administrative access to player data.
  • Secure data backup: Data is automatically backed up to a separate location with full encryption to ensure service continuity.
In the Event of a Data Breach

In the unlikely event of a data breach that may affect your rights or freedoms, tokekwin will notify you within 72 hours of becoming aware of it, in line with data protection best practices. The notice will include details on the nature of the breach, the data involved, and the actions being taken.

Cookies & Tracking Technologies

The tokekwin platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Cookies are small text files stored on your device.

You can manage or delete cookies through your browser settings at any time. Please note that removing essential cookies may affect certain functions of the tokekwin platform, such as staying logged in.

Your Rights as a tokekwin Player

As a data subject under Malaysia's PDPA 2010 and data protection best practices, you have the following rights regarding your personal data held by tokekwin:

πŸ”
Right of Access

Requesting a copy of the personal data we hold about you. We will provide a report within 14 business days.

✏️
Right to Rectification

Requesting the correction of inaccurate or outdated data. Updates can be made directly in the account panel or through support.

πŸ—‘οΈ
Right to Erasure

Requesting deletion of your personal data, subject to retention obligations prescribed by Malaysian law.

🚫
Right to Object

Object to the processing of your data for direct marketing purposes. You may unsubscribe at any time.

πŸ“¦
Right to Portability

Requesting your data in a structured, machine-readable format for transfer to another platform if needed.

⏸️
Right to Restrict Processing

Requesting the restriction of your data processing in certain situations, such as when the accuracy of the data is in dispute.

To exercise any of the above rights, contact tokekwin's Data Protection Officer by email at privacy@tokekwin.bio. We will verify your identity before processing any data-related request.

Data Retention Period

Tokekwin retains your personal data only for as long as necessary for the purposes stated in this policy, or as required under applicable Malaysian law.

  • Active account data: Retained for as long as your account remains active on the tokekwin platform.
  • Financial transaction data: Retained for 7 years after the transaction date, in accordance with the Companies Act 2016 and Malaysia's financial reporting requirements.
  • KYC data (identity verification): Retained for 6 years after the business relationship ends, in accordance with Malaysia's AMLATFPUAA.
  • Customer support records: Retained for 3 years for reference and dispute resolution purposes.
  • Technical logs (IP, activity): Retained for 12 months for security and fraud detection purposes.

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to any specific individual.

Account Closure

When you close your tokekwin account, personal data not subject to legal retention obligations will be deleted within 30 days. Data that must be retained by law will be kept in a restricted state and accessed solely for compliance purposes.

Links to Third-Party Sites

The tokekwin platform may contain references or links to third-party websites in certain contexts, such as payment provider information. Tokekwin is not responsible for the content, privacy policies, or security practices of any third-party website.

We recommend reading the privacy policy of any third-party website you visit via links on our platform. Tokekwin has no control over, and is not responsible for, the data collection or use practices of those websites.

Changes to This Privacy Policy

Tokekwin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, business requirements, or updates to Malaysia's data protection laws.

When we make significant changes, we will:

  • Updating the "Last Updated" date at the top of this page.
  • Displaying an in-platform pop-up notification during your next login session.
  • Sending an email notification to your registered email address for changes that materially affect your rights.

Your continued use of the tokekwin platform after any changes are published will be considered your acceptance of the updated policy. Please review this page periodically to stay informed on how we protect your privacy.

Contact Our Data Protection Officer

If you have any questions, concerns, or complaints about how tokekwin handles your personal data, please do not hesitate to contact us. We are committed to addressing every enquiry seriously and within a reasonable timeframe.

Privacy Email
privacy@tokekwin.bio
Response within 48 working hours
Live Support
support@tokekwin.bio
24/7 in-platform live chat

You may also file an official complaint regarding data protection with Department of Personal Data Protection (JPDP) Malaysia if you believe your rights under PDPA 2010 have been violated.

Response Time

Tokekwin is committed to responding to all privacy-related enquiries within 5 business days. For complex requests such as data access or deletion applications, processing may take up to 14 business days.

Our Privacy Commitment

Why Malaysia Players Trust Tokekwin With Their Data

Privacy protection is more than a document β€” it is how we do business every day.

No Sale of Data to Advertisers

Tokekwin has never and will never sell or share player profiles with third-party advertising or marketing companies. Your information belongs to you.

Malaysia PDPA 2010 Compliance

All of tokekwin's data management practices are designed in accordance with Malaysia's Personal Data Protection Act 2010 β€” our country's primary data protection legislation.

Unsubscribe Anytime

You can opt out of any marketing communications from tokekwin at any time β€” no questions asked, no complicated process. One click is all it takes.

No Automated Processing Affecting Your Rights

Tokekwin does not make decisions that materially affect you based solely on automated processing β€” a human reviewer is always involved in the review process.

Data Stored in Malaysia

Tokekwin player personal data is stored on servers located within the Southeast Asian region and is not transferred overseas without equivalent protections in place.

Annual Independent Privacy Audit

Tokekwin's data protection practices are independently assessed by a third party each year to ensure ongoing compliance and to identify potential vulnerabilities.

Your Data Is Safe With Us

Register with Tokekwin – A Platform That Respects Your Privacy

Tokekwin doesn't just offer the best Sports Betting and online casino experience in Malaysia β€” we also safeguard your personal data and privacy at all times.

256-bit SSL protected data PDPA 2010 Compliance No data sold to third parties 24/7 BM Support
Bahasa Melayu