Rujukan Laman

Privacy Policy — How We Handle Your Information

When you open an account with 2winapp, we collect and protect data needed to run your wallet, verify withdrawals and keep your sessions secure.

Account verificationWallet securitySession trackingCookie useWithdrawal checks
2winapp Privacy Policy — How We Handle Your Information
PRIVACY CONTACT

Get in Touch About Your Data

If you want to see what personal information we hold, request a correction, ask us to delete your account data, or lodge a complaint about how we handle privacy, reach out through live chat or email. Our team is available to explain your rights, walk you through the data-access request process and confirm timelines for deletion or export. Response time is typically within three business days for straightforward requests.

Team online

Live chat

Open the chat widget in your account dashboard and select Privacy Inquiry from the dropdown. Our agents will ask you to verify your identity with your registered email and date of birth, then guide you through access, correction or deletion requests. Average response time during Malaysia business hours is under five minutes.

Email support

Send your request to our privacy team at the contact address shown in your account settings. Include your registered email, account username and a clear description of what you need — data export, correction or full deletion. We reply within two business days with next steps or the information you requested.

Account settings

Log in and head to Settings, then Privacy Controls. You can download a copy of your transaction history, update your marketing preferences, revoke cookie consent or submit a deletion request directly from that screen. Exports are generated within one hour and emailed as an encrypted ZIP file.

HOW WE PROTECT

Security Measures and Data Retention

We encrypt personal data both in storage and during transmission using industry-standard protocols. Access to customer records is limited to authorised staff who need it for account verification, payment processing or fraud…

Encryption

All personal data at rest is encrypted using AES-256. Data in transit between your browser and our servers travels over TLS 1.3 connections. Payment details such as card numbers or e-wallet tokens are tokenised by the payment processor and never stored in plain text on our systems.

Access control

Only employees with a legitimate business need — customer support, compliance, finance — can view account records. Every access attempt is logged and reviewed quarterly. Two-factor authentication is mandatory for internal tools, and role permissions are revoked immediately when staff leave the company.

Cookie policy

We use essential cookies to keep you logged in and remember your language preference. Analytics cookies track which game lobbies you visit so we can improve navigation. Marketing cookies serve personalised banners when you return. You can disable non-essential cookies in your browser or through the cookie banner on your first visit.

Data retention

Account profile data remains active until you close your account. Transaction logs are archived for seven years to comply with financial record-keeping laws. Marketing consent records are kept until you unsubscribe. Once retention periods expire or you request deletion, we anonymise identifiers and remove personal details from backups.

Third-party sharing

We share transaction data with payment providers like Touch 'n Go, GrabPay, Boost and FPX to process deposits and withdrawals. Regulators may request records under legal obligation. We do not sell data to advertisers or data brokers. Any third party with access signs a data-processing agreement that enforces the same privacy standards we follow.

Your rights

You can request a copy of your data, ask us to correct errors, withdraw marketing consent, restrict processing or delete your account entirely. Where local law grants these rights, we honour them within the timelines set by regulation. To exercise any right, contact us through live chat or email with proof of identity.

Common Questions About Data and Privacy

Below are answers to the questions we hear most often about how we collect, use and protect your information. If your question is not covered, reach out through live chat or email and our team will reply within one business day.

We ask for your full name, email address, phone number, date of birth and residential address during registration. This helps us verify your identity, prevent fraud and comply with anti-money-laundering rules. Payment method details are collected when you make your first deposit.

We share transaction records with payment processors like Touch 'n Go, GrabPay, Boost and FPX to complete deposits and withdrawals. Regulators may request data under legal obligation. We do not sell personal information to advertisers or marketing companies. Every third party signs a data-processing agreement.

Your profile and preferences remain active as long as your account is open. Transaction logs are archived for seven years to meet financial record-keeping requirements. Marketing consent records are kept until you unsubscribe. Once retention periods expire or you request deletion, we anonymise or remove your data.

Yes. Log in to your account, go to Settings and select Privacy Controls. Click Request Data Export and we will generate an encrypted file containing your profile, transaction history and marketing preferences. The file is emailed to your registered address within one hour.

You can submit a deletion request through the Privacy Controls section in your account settings or by contacting live chat. We will close your account and anonymise personal identifiers within thirty days unless a legal hold applies. Transaction records required by law remain archived but are stripped of your name and contact details.

We set essential cookies for login sessions and language preferences. Analytics cookies track which lobbies you visit to improve site navigation. Marketing cookies personalise banners based on your activity. You can disable non-essential cookies through the cookie banner when you first visit or in your browser settings.

Click the unsubscribe link at the bottom of any marketing email or log in to your account, go to Settings and turn off email notifications under Privacy Controls. Changes take effect immediately and you will stop receiving promotional messages within twenty-four hours.