At HPWin, we take your privacy seriously. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you have as a Malaysian player on our platform. Please read this document carefully before using HPWin.
All personal and financial data transmitted to HPWin is protected using 256-bit SSL encryption. We apply industry-standard security protocols to your stored data at rest and in transit at all times.
HPWin does not sell, rent, or trade your personal information to third-party marketing organisations. Your data exists solely to serve your account and improve your experience on our platform.
You have the right to access, correct, export, and request deletion of your personal data at any time. HPWin will respond to all data subject requests promptly and without undue delay.
HPWin does not store full payment card numbers. Transactions via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, and other Malaysian payment channels are processed through secured, encrypted payment gateways.
We use cookies and similar tracking technologies strictly for functional, analytical, and security purposes. We do not use third-party advertising cookies. You can manage your cookie preferences at any time.
For any privacy-related enquiry, data subject request, or complaint, contact our Data Protection team at [email protected]. We acknowledge all requests and aim to resolve them within 14 business days.
HPWin ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who access or use the HPWin online gaming and sports betting platform available at hpwin.cam (the "Platform"). This Privacy Policy ("Policy") sets out in detail how HPWin collects, uses, stores, protects, and discloses personal data in the course of operating the Platform and providing services to registered players, primarily in Malaysia.
This Policy applies to all personal data collected through the Platform, including data provided during account registration, during payment transactions processed via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Boost, GrabPay, and any other accepted payment method, as well as data generated through your use of the Platform's games, betting markets, and customer support channels.
Important: This Privacy Policy should be read together with HPWin's Terms & Conditions and our Responsible Gambling Policy. By creating an account or using the Platform, you acknowledge that you have read and understood this Policy.
HPWin reserves the right to update this Policy periodically. The date of the most recent revision is displayed at the top of this page. Continued use of the Platform following any update to this Policy constitutes your acceptance of the revised terms.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably identify a living individual, directly or indirectly — including name, identification number, contact details, payment information, IP address, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, restriction, erasure, or destruction. |
| "Data Subject" | The identified or identifiable individual to whom personal data relates — in the context of this Policy, primarily registered HPWin players. |
| "Data Controller" | HPWin, as the entity that determines the purposes and means by which personal data is processed. |
| "Third Party" | Any individual, company, or organisation other than HPWin and the Data Subject, including payment processors, KYC verification providers, and analytics service providers. |
| "Cookie" | A small text file placed on a user's device by a website, used to remember preferences, manage sessions, and gather analytical data about site usage. |
HPWin collects personal data across several categories, depending on the nature of your interaction with the Platform. The categories of personal data we collect include the following:
HPWin collects personal data through the following primary methods:
HPWin processes personal data only where we have a lawful basis for doing so. The table below outlines the primary purposes of our data processing activities and the corresponding legal basis for each:
| Purpose | Legal Basis |
|---|---|
| Account registration and identity verification (KYC) | Performance of a contract; legal obligation |
| Processing deposits and withdrawals via Malaysian payment methods | Performance of a contract |
| Providing access to gaming and sports betting services | Performance of a contract |
| Anti-money laundering (AML) and fraud prevention monitoring | Legal obligation; legitimate interests |
| Responsible gambling monitoring and intervention | Legal obligation; legitimate interests |
| Customer support and complaint resolution | Performance of a contract; legitimate interests |
| Platform analytics and performance improvement | Legitimate interests |
| Platform security and fraud detection | Legitimate interests; legal obligation |
| Sending account-related communications (e.g., withdrawal confirmations) | Performance of a contract |
| Sending promotional communications (where opted in) | Consent |
HPWin does not engage in automated decision-making or profiling that produces legal or similarly significant effects on Data Subjects without a lawful basis and appropriate safeguards in place.
HPWin does not sell, rent, or trade personal data to third parties for marketing or commercial purposes under any circumstances. Personal data may, however, be shared with the following categories of recipients where strictly necessary:
Note: All third-party data processors engaged by HPWin are subject to contractual obligations that require them to process personal data only on HPWin's documented instructions and to maintain appropriate security measures. HPWin does not permit third-party processors to use your data for their own independent purposes.
HPWin retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:
Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with HPWin's data destruction procedures.
HPWin implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include, but are not limited to:
Please note: While HPWin employs stringent security measures, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying HPWin at [email protected] if you suspect any unauthorised access to your account.
HPWin uses cookies and similar technologies (collectively "Cookies") to operate the Platform effectively and to improve the Player experience. The following categories of Cookies are used:
| Cookie Type | Purpose | Required? |
|---|---|---|
| Essential / Session | Maintain your logged-in session, remember language and display preferences, and enable core Platform functionality such as the betting slip and account wallet. | Yes — cannot be disabled |
| Security | Detect and prevent fraudulent activity, bot access, and session hijacking. Used alongside device fingerprinting for account security purposes. | Yes — cannot be disabled |
| Analytics | Collect anonymised data on page views, navigation patterns, and feature usage to help HPWin improve Platform performance and user experience. | Optional — can be disabled |
| Responsible Gambling | Track session duration to support responsible gambling session time limit features and reality check notifications. | Yes — cannot be disabled |
HPWin does not use third-party advertising cookies or behavioural advertising tracking technologies. You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies will impair or prevent your ability to log in and use core Platform features.
HPWin's primary Platform infrastructure is hosted in data centres serving the Asia-Pacific region. In certain circumstances, personal data may be transferred to and processed in countries outside Malaysia — for example, where HPWin engages cloud infrastructure or analytics service providers with servers located in other jurisdictions.
Where personal data is transferred internationally, HPWin ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that afforded in Malaysia. These safeguards may include data processing agreements incorporating standard contractual clauses, or reliance on transfers to jurisdictions that provide an adequate level of data protection as recognised by applicable authorities.
Players who wish to obtain further information regarding international transfer mechanisms used by HPWin may submit a request to [email protected].
As a Data Subject, you have a range of rights in relation to the personal data HPWin holds about you. These rights are summarised below. To exercise any of these rights, please contact HPWin's Data Protection team at [email protected]. HPWin will acknowledge your request and respond within 14 business days.
You may request a copy of the personal data HPWin holds about you, along with information on how it is being used and shared.
You may request correction of any personal data that is inaccurate, incomplete, or out of date. You can also update many account details directly via Account Settings.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to HPWin's legal retention obligations.
You may request that HPWin restrict the processing of your personal data in certain circumstances, such as during a period in which the accuracy of your data is contested.
You may request a machine-readable copy of personal data you have provided to HPWin, where technically feasible, to transfer to another service provider.
You may object to HPWin's processing of your personal data where that processing is based on legitimate interests, including objection to receipt of marketing communications.
To exercise any of the above rights: Contact HPWin's Data Protection team in writing at [email protected] with the subject line "Data Subject Request". Please include your full name, registered email address, and a clear description of the right you wish to exercise. Identity verification may be required before HPWin processes your request.
The HPWin Platform is strictly intended for use by individuals aged 21 years and above. HPWin does not knowingly collect, process, or retain personal data from persons under the age of 21. Age verification is conducted as part of the account registration and KYC process.
If HPWin becomes aware that personal data has been collected from a person under the age of 21 without parental consent verification, we will immediately suspend the relevant account, void all associated wagers, and delete or anonymise the personal data collected, subject to any applicable legal retention obligations. Deposited funds will be returned to the verified payment source where possible.
If you believe that HPWin may hold personal data relating to a person under the age of 21, please contact us immediately at [email protected]. We take all such reports seriously and will act promptly upon receipt of credible information.
HPWin reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or business operations. The most current version of this Policy will always be available on this page, with the date of last revision clearly indicated at the top.
Where amendments are material in nature — for example, a change to the categories of personal data collected or a new category of third-party data sharing — HPWin will endeavour to notify registered Players via their registered email address at least 14 days prior to the changes taking effect, where practicable.
Your continued use of the HPWin Platform following the effective date of any amendment to this Policy constitutes your acknowledgement and acceptance of the revised terms. If you do not agree to the revised Policy, you must cease using the Platform and request account closure.
For all privacy-related enquiries, data subject access requests, complaints, or requests to exercise your data rights, please contact HPWin using the details below. Our Data Protection team handles all requests confidentially and with priority.
HPWin uses bank-grade encryption, never sells your data, and gives you full control over your personal information at all times. Join over 850,000 Malaysian players who trust HPWin. For players aged 21 and above only.
Questions about your data? Contact us at [email protected] — response within 14 business days.