Privacy Policy

This Privacy Policy ("Policy") describes how SGCWin ("the Company", "we", "us", "our"), operator of the online gambling and sports betting platform atsgcwin.click ("the Platform"), collects, uses, stores, discloses, and protects the personal data of its users ("Player", "you", "your").

SGCWin is designed to serve adult players in Malaysia and operates in compliance with applicable data protection obligations. We process your personal data only to the extent necessary for the legitimate and lawful purposes described in this Policy. We do not sell, rent, or trade your personal information to third parties for commercial marketing purposes.

By registering an Account on the Platform, depositing funds, or otherwise accessing our services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with this Policy, you should not use the Platform.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

SGCWin collects the following categories of Personal Data in the course of providing its services:

SGCWin collects Personal Data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or update your account preferences.
• Automatically via the Platform — Technical Data and Usage Data are collected automatically by our servers and analytics systems when you access the Platform, regardless of whether you are logged in.
• From payment service providers — When you transact via Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or cryptocurrency networks, we receive transaction confirmation data from the respective payment processor.
• From identity verification services — Where we engage third-party KYC verification providers to assist with age and identity checks, those providers return a verification outcome and relevant data flags to SGCWin.
• From fraud prevention and AML screening tools — Automated systems may cross-reference your data against sanctions lists and adverse media databases as part of our anti-money laundering obligations.
• Via cookies and tracking technologies — As detailed in Clause 10 of this Policy.

SGCWin processes your Personal Data for the following specific purposes:

SGCWin relies on the following legal bases for processing your Personal Data, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to at registration — including account management, payment processing, and gameplay services.
• Legal obligation: Processing required to comply with applicable law, including KYC obligations, AML reporting duties, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing carried out for SGCWin's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, and Platform performance analytics.
• Consent: Processing based on your freely given, specific, and informed consent — principally for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

SGCWin does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share your data only in the limited circumstances described below:

• Payment service providers: Data shared with Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency network processors solely for the purpose of executing your financial transactions.
• KYC and identity verification providers: Identity documents and verification data shared with contracted third-party KYC providers operating under binding data processing agreements with SGCWin.
• Licensed game studios and platform technology providers: Gameplay session data necessary for game delivery, RNG certification, and game integrity monitoring, shared under contractual confidentiality obligations.
• Fraud prevention and AML service providers: Data shared with automated screening systems for sanctions list checks, adverse media monitoring, and suspicious transaction reporting.
• Regulatory and law enforcement authorities: Data disclosed in response to lawful requests, court orders, or to fulfil mandatory AML reporting obligations. SGCWin will notify affected Players of such disclosures where legally permitted to do so.
• Professional advisors: Legal, audit, and compliance advisors bound by professional confidentiality obligations.
• Corporate restructuring: In the event of a merger, acquisition, or asset sale involving SGCWin, your data may be transferred to the acquiring entity subject to equivalent privacy protections.

Some of SGCWin's service providers and technology infrastructure are located outside Malaysia. Where your Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection, SGCWin ensures that appropriate safeguards are in place, including:

• Contractual data protection clauses binding the recipient to obligations equivalent to those in this Policy
• Technical and organisational security measures including encryption in transit and at rest
• Access controls limiting recipient use of the data to the specific contracted purpose

By using the Platform, you consent to the transfer of your Personal Data to the extent required to deliver the services you have requested, subject to the safeguards described above.

SGCWin retains your Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as general guide:

Following expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Data retained solely for legal compliance purposes will not be used for any other processing activity.

SGCWin uses cookies and similar tracking technologies to operate the Platform, maintain your session state, and analyse usage patterns. The following types of cookies are in use:

• Strictly necessary cookies: Required for the Platform to function. These enable session management, login persistence, and security token validation. They cannot be disabled without rendering the Platform non-functional.
• Functional cookies: Store your Platform preferences such as language, display settings, and last-visited game category to improve your experience on return visits.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the Platform, which pages they visit, and where sessions begin and end. This data is used to improve Platform performance and content.
• Security cookies: Used to detect and prevent fraudulent account access, bot activity, and session hijacking attempts.

SGCWin does not use third-party advertising or behavioural tracking cookies. You may adjust your cookie preferences through your browser settings, though disabling strictly necessary cookies will impair Platform functionality.

SGCWin applies technical and organisational security measures appropriate to the sensitivity of the data we process. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption at rest for all stored KYC documents, financial records, and Account Data
• Password hashing using industry-standard one-way algorithms — we do not store your password in readable form
• Two-factor authentication (2FA) available on all Accounts and mandatory for high-value withdrawal requests
• Role-based access controls limiting employee access to Personal Data to the minimum required for their specific function
• Regular security audits and penetration testing conducted by independent third parties
• Incident response procedures covering detection, containment, and notification in the event of a data breach

You hold the following rights in respect of your Personal Data held by SGCWin. To exercise any of these rights, contact us at [email protected] with your full name, registered Account email address, and a clear description of your request. We will respond within 30 calendar days.

Please note that some rights may be limited or unavailable where SGCWin is required to retain or process your data to comply with a legal obligation or to establish, exercise, or defend a legal claim.

The SGCWin Platform is strictly restricted to individuals aged21 years and above. We do not knowingly collect Personal Data from persons under this age. Age verification is a mandatory step in the KYC process and must be completed before withdrawals are processed.

If SGCWin becomes aware that an Account has been opened by a person under 21 years of age, or that Personal Data has been collected from such a person, we will immediately close the Account, retain records as required for regulatory purposes, and securely delete all other associated Personal Data. Any funds deposited will be handled in accordance with applicable law and our responsible gambling obligations.

If you are a parent or guardian and believe a minor has accessed or registered on the Platform, please contact us immediately at [email protected] and we will treat the matter with the highest priority.

The SGCWin Platform may reference or integrate with third-party services such as payment gateways (Maybank, Touch 'n Go eWallet, DuitNow, etc.) and game content providers. These third parties operate under their own privacy policies, over which SGCWin has no control.

When you interact with a payment provider's interface as part of a deposit or withdrawal on the Platform, the relevant provider's privacy practices govern the data exchanged during that transaction. SGCWin recommends reviewing the privacy policies of any third-party services you interact with. SGCWin is not responsible for the data practices of third-party providers.

SGCWin reserves the right to update or amend this Privacy Policy at any time. Material changes — those that affect your rights or how data is processed in a significant way — will be communicated to you via a Platform notice or account notification at least 7 days before the changes take effect.

The effective date of the current version is displayed at the top of this page. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not accept the amended Policy, you should close your Account before the effective date by contacting [email protected].

The most current version of this Privacy Policy is always accessible at sgcwin.click/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the SGCWin Data Protection team through the following channel. All privacy-related correspondence is handled with strict confidentiality.

Where you have submitted a data rights request and remain unsatisfied with our response, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction.