Bobawin Privacy Policy and Player Data Protection

1. Introduction and Scope

Bobawin respects the privacy of Malaysian players and recognises that account, identity, financial, and gaming information can be sensitive. This Privacy Policy covers data processed through the bobawin website, casino and sports betting functions, live chat, customer support, verification procedures, and payment-related activity.

By accessing bobawin or providing personal information, you acknowledge the practices described in this policy. Where consent is required for a specific activity, bobawin may request it separately. Refusing optional processing will not affect unrelated services, although refusing information required for verification, security, or a transaction may prevent bobawin from providing that function.

Definitions

“Personal data” means information relating to an identified or reasonably identifiable person. “Processing” includes collecting, recording, organising, using, storing, disclosing, correcting, and deleting information. “Player” means an eligible individual who browses or uses bobawin.

2. Information Bobawin Collects

Bobawin may collect information that you provide directly, information produced when you use the platform, and information received from payment, verification, security, or service providers. The exact information depends on how you interact with bobawin.

• Account details: full name, date of birth, username, password record, email address, residential address, and account preferences.
• Identity information: MyKad, passport, driving licence, proof of address, selfie, age confirmation, and verification results.
• Payment information: transaction references, account-holder name, masked bank or card details, eWallet information, deposit history, withdrawal history, and payment status.
• Gaming information: stakes, results, odds, casino activity, bonus use, account balance changes, responsible gambling limits, and self-exclusion records.
• Technical information: IP address, device type, browser, operating system, language, login time, security events, and approximate location inferred from technical data.
• Communications: live chat records, support requests, complaints, feedback, submitted files, and correspondence with bobawin.

Bobawin asks players to provide accurate information and to avoid sending unnecessary sensitive material. Full passwords, one-time security codes, or unrelated personal documents should never be included in ordinary support messages.

3. How Information Is Collected

Bobawin collects information when you browse the website, register or update an account, submit verification documents, deposit or withdraw MYR, use Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, bank transfer, cards, or another displayed payment method, place a wager, claim a promotion, set a limit, or contact support.

Some technical information is collected automatically through server logs, browser storage, security tools, and similar technologies. Bobawin may also receive limited information from Maybank, CIMB, Public Bank, Hong Leong, payment processors, identity verification services, fraud prevention providers, or game and sports data services where necessary to complete a request or protect the platform.

4. Purposes of Data Processing

Bobawin may process personal data for the following legitimate operational purposes:

• creating, maintaining, authenticating, and securing a bobawin account;
• confirming identity, age, address, payment ownership, and account eligibility;
• processing MYR deposits, withdrawals, reversals, refunds, and transaction queries;
• recording and settling casino games, slots, live dealer sessions, football bets, EPL markets, Liga Super Malaysia selections, UFC events, and other available wagers;
• administering bonuses, wagering requirements, cashback, VIP status, and promotional eligibility;
• detecting fraud, account sharing, duplicate registrations, money laundering risk, payment abuse, technical exploitation, and unauthorised access;
• providing customer support, resolving complaints, and maintaining service records;
• applying deposit limits, cooling-off periods, self-exclusion, and responsible gambling monitoring;
• improving bobawin usability, stability, performance, and mobile compatibility; and
• meeting legal, regulatory, audit, dispute, and record-keeping requirements where applicable.

5. Legal and Operational Grounds

Depending on the context and applicable law, bobawin may process information because it is necessary to provide a requested service, perform an agreement, comply with a legal obligation, protect legitimate business and security interests, establish or defend a claim, protect a person's vital interests, or act with consent.

Bobawin balances its legitimate interests against the rights and reasonable expectations of players. Examples include preventing fraud, maintaining platform security, investigating disputed transactions, improving service reliability, and identifying signs of harmful gambling. Where bobawin relies on consent, that consent may generally be withdrawn for future processing, subject to any continuing legal or operational requirement.

6. Identity Verification and Sensitive Documents

Bobawin may request a Malaysian MyKad, passport, driving licence, utility bill, bank statement, payment evidence, or selfie to confirm identity, age, address, and account ownership. Verification reduces underage access, identity theft, unauthorised withdrawals, duplicate accounts, and financial crime risk.

Bobawin limits access to verification documents to authorised personnel and relevant service providers with an operational need. Players should upload documents only through the secure channel specified by bobawin. Documents must not be sent through unsecured group chats or shared with anyone who cannot demonstrate a legitimate connection to the verification process.

7. Payments and Financial Information

Bobawin records transaction details needed to reconcile deposits and withdrawals, respond to payment enquiries, identify suspicious activity, and maintain accurate account balances. Bobawin may receive confirmation data from eWallets, banks, card networks, cryptocurrency services, or payment processors without receiving every detail held by those providers.

Payment providers operate under their own privacy and security practices. Bobawin shares only information reasonably required to initiate, verify, investigate, or complete a transaction. Players should verify that the name and details on a payment method are accurate before submitting a request.

8. Cookies and Similar Technologies

Bobawin may use essential browser storage, cookies, session identifiers, and comparable technologies to keep players signed in, remember settings, maintain security, detect suspicious sessions, understand website performance, and improve navigation.

Some technologies are necessary for core bobawin functions and cannot be disabled without affecting account access or platform operation. Browser controls may allow players to remove or block certain stored information, but doing so can cause login, payment, game display, or preference features to work incorrectly.

9. Responsible Gambling Information

Bobawin may process deposit patterns, session duration, losses, failed limit changes, repeated payment activity, communications, cooling-off requests, and self-exclusion records to support responsible gambling measures. This processing can help bobawin identify indicators that may justify a reminder, account interaction, restriction, or safer gambling review.

Responsible gambling information is treated carefully because it may reveal sensitive circumstances. Bobawin uses it to operate safety tools, honour exclusions, assess risk, and respond to welfare concerns. Bobawin is for players aged 21 and above only and does not knowingly permit underage casino or betting activity.

10. Sharing Personal Information

Bobawin does not sell personal data. Bobawin may share limited information with service providers where necessary to operate the platform. These recipients may include hosting and security providers, payment processors, banks, eWallet services, identity verification providers, game technology services, sports data services, customer support tools, auditors, and professional advisers.

Bobawin may also disclose information where required by applicable law, a valid legal process, a competent authority, fraud prevention requirements, or the need to protect players, bobawin, or other persons. Providers are expected to process information only for authorised purposes and apply appropriate confidentiality and security safeguards.

11. International Data Processing

Some bobawin technology or service providers may process information from locations outside Malaysia. Data protection standards may differ between jurisdictions. Where cross-border processing occurs, bobawin takes reasonable steps to require contractual, technical, and organisational protections appropriate to the information and the service involved.

A cross-border transfer does not permit a recipient to use bobawin player data for unrelated purposes. Access remains limited to what is reasonably necessary to deliver the authorised service, maintain security, or satisfy an applicable obligation.

12. Data Security

Bobawin uses layered safeguards designed to protect information against accidental loss, unauthorised access, misuse, alteration, and improper disclosure. Measures may include encrypted connections, restricted access, account authentication, activity monitoring, system logging, security reviews, network controls, backups, and staff confidentiality requirements.

No internet system can guarantee absolute security. Players also have an important role in protecting bobawin accounts. Use a unique password, secure your mobile device, sign out on shared equipment, avoid public Wi-Fi for sensitive transactions, and report unfamiliar activity promptly.

13. Data Retention

Bobawin retains personal data only for as long as reasonably required for the purpose for which it was collected and for applicable security, dispute, fraud prevention, financial, responsible gambling, and record-keeping needs. Different categories may have different retention periods.

Closing a bobawin account does not always result in immediate deletion. Transaction records, verification results, exclusion records, complaints, and security logs may need to remain available for a defined period. When information is no longer required, bobawin may securely delete, anonymise, or place it beyond ordinary operational use.

14. Children and Underage Users

Bobawin services are strictly limited to people aged 21 and above. Bobawin does not knowingly collect information from a child for gambling participation. Anyone who believes a person under 21 has provided information or accessed an account should notify bobawin support promptly.

Bobawin may request age evidence and restrict an account while a review takes place. Where underage activity is confirmed, bobawin may close the account and handle relevant personal data and transactions in accordance with applicable requirements.

15. Automated Security and Risk Assessment

Bobawin may use automated tools to identify unusual logins, rapid transaction patterns, duplicate registrations, suspected bonus abuse, payment risk, or signs of harmful gambling. These tools assist human review and help bobawin prioritise potential security or player-protection concerns.

A player may contact bobawin if an automated or risk-based restriction appears incorrect. Bobawin may request identity or transaction information before completing a manual review. Security methods cannot be disclosed where doing so would make fraud or platform abuse easier.

16. Policy Updates

Bobawin may update this Privacy Policy when its services, technology, payment methods, security controls, data practices, or applicable requirements change. The effective date at the top of this page identifies the current version.

Material changes may be communicated through an account notice or another appropriate bobawin channel. Continued use after an update means the revised policy will apply to subsequent processing, subject to any consent or notice requirement imposed by applicable law.