Your privacy is our priority. This document explains in detail how Tokewin collects, uses, stores, and protects your personal information as a member of our platform.
Six core principles that guide how we protect your data
All your personal data, financial information, and transaction records on Tokewin are protected by 256-bit SSL encryption — the same security technology used by Malaysia's leading banks, including Maybank and CIMB.
Tokewin has never sold, lent or traded your personal information to any third party for marketing or commercial purposes, and will not do so without your explicit prior consent.
You have every right to access, correct or request the deletion of your personal data at any time. Tokewin provides a straightforward, free-of-charge process for exercising these rights through our customer support team.
Your data is stored on servers protected by multi-layered firewalls, strict access controls and round-the-clock security monitoring. Only specifically authorised personnel may access Tokewin members' personal data.
In the event of any security incident that may affect your data, Tokewin is committed to notifying affected members as promptly as possible and taking immediate remedial action.
Tokewin publishes this Privacy Policy in full in Bahasa Melayu so that every Malaysian player can understand their rights clearly and without misinterpretation due to language barriers.
This Privacy Policy ("Policy") describes how Tokewin ("we", "platform" or "Tokewin") through the website tokewin.best collect, use, store, disclose, and protect your personal information when you register for, use, or access any of our services. This document is written in Bahasa Melayu as the primary language for the convenience of Malaysian players and is to be read together with Terms & Conditions Tokewin. By using the Tokewin platform, you agree to the collection and use of your information as described in this Privacy Policy.
Tokewin is committed to safeguarding the privacy and personal data of every member who entrusts their information to us. We understand that personal data is a sensitive asset, and the trust you place in Tokewin to manage that data is something we do not take lightly.
This Privacy Policy applies to:
Important Note: Tokewin manages member personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We treat your privacy to the same standard as licensed financial and banking institutions in Malaysia.
Tokewin collects your personal information through several means — directly when you provide it during registration or platform use, and automatically through tracking technologies employed by our website. The categories of information we collect are as follows:
| Data Category | Examples of Information | Collection Method |
|---|---|---|
| Identity Data | Full name, identity card number, date of birth, gender | Registration & account verification |
| Contact Data | Phone number, email address, city/state of residence | Registration form |
| Financial Data | Bank account numbers, e-wallet details (DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay), transaction records | Deposit & withdrawal processing |
| Game Data | Game history, total wagers, wins and losses, game preferences | Automatically during platform use |
| Technical Data | IP address, device type, operating system, web browser, cookie information | Automatically via servers & cookies |
| Communication Data | Support chat records, emails to Tokewin, feedback & complaints | Interactions with the support team |
| Verification Documents | Copy of identity card, passport, proof of address (where required for verification) | KYC (Know Your Customer) Process |
Tokewin collects only the information that is genuinely necessary for legitimate purposes. We do not collect sensitive information such as religious beliefs, political views, or biometric data unless it is specifically required for identity verification purposes that you have consented to.
Every piece of information Tokewin collects is used for a specific, legitimate purpose. We do not use your data for anything outside the scope outlined below:
Tokewin does not use your data for third-party advertising, data sales or any commercial purpose beyond what is required to operate our platform. If you do not wish to receive promotional communications from Tokewin, you may unsubscribe at any time via the link provided in each of our promotional emails.
Tokewin does not sell, lend, or trade your personal data to third parties for profit or marketing purposes. However, there are limited situations where Tokewin needs to share your information with certain parties in order for the platform to operate effectively:
Every third party that Tokewin works with is required to sign a data protection agreement obligating them to safeguard your information to a standard equal to or higher than Tokewin's own. We take full responsibility for the selection and oversight of all third parties we engage.
Tokewin continually invests in security infrastructure to ensure your data remains protected at all times. The technical and organisational security measures we implement include:
While Tokewin takes all reasonable steps to protect your data, no online system can guarantee absolute 100% security. You also play an important role in keeping your account safe — use a strong password, never share your login details, and enable two-factor authentication from your Tokewin account settings.
Tokewin uses cookies and similar tracking technologies to enhance your experience on our platform and for internal analytics purposes. The types of cookies we use are as follows:
You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect the functionality of the Tokewin platform. For more information on how to manage cookies, refer to the help documentation of your web browser.
Tokewin retains your personal data for as long as your account remains active, and for the period required thereafter to fulfil legal obligations, resolve disputes and enforce our agreements. As a general guide:
In certain circumstances, your data may be stored or processed on servers located outside Malaysia — for example, through payment service provider systems or international game providers. In all such cases, Tokewin ensures that protection equivalent to Malaysian standards is applied through legally binding data transfer agreements.
As a Tokewin member, you have the following rights regarding your personal data. All of these rights can be exercised at no cost by contacting the Tokewin support team:
You have the right to request a copy of all personal data Tokewin holds about you. Such requests will be processed within 14 business days.
If any of your data is inaccurate or incomplete, you have the right to request that Tokewin correct it promptly and at no charge.
You may request the deletion of your personal data in certain circumstances, subject to any legal retention obligations still in force.
Under certain circumstances, you may request that Tokewin restrict the processing of your data while a dispute or review is in progress.
You have the right to receive your personal data in a machine-readable format (such as CSV or JSON) for transfer to another platform should you wish to do so.
You have the right to object to the processing of your data for specific purposes, such as marketing communications. Objections will be acted upon immediately, with no further questions asked.
The Tokewin platform is strictly for individuals aged 18 and above. Tokewin does not accept registrations from anyone under 18 and does not knowingly collect personal data from minors.
Should Tokewin discover that personal data belonging to a minor has been collected without our knowledge, we will:
If you become aware that a minor is using the Tokewin platform, please contact us immediately at support@tokewin.best. We take child protection seriously and will act swiftly on any such report.
The Tokewin platform may contain links to or integrations with third-party services, including payment service providers (DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) and game providers (Evolution Gaming, Pragmatic Play, and others).
When you access these third-party services:
Tokewin shares only the minimum necessary information with the third parties listed, and all such data sharing is carried out within the scope set out in Section 4 of this Privacy Policy.
Tokewin reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, legal requirements, or other relevant factors.
When significant changes are made to this Privacy Policy:
We encourage you to review this Privacy Policy page regularly — at least once every few months — to stay up to date on how Tokewin protects your privacy.
If you have any questions or concerns, or wish to exercise any of the rights set out in this Privacy Policy, please contact Tokewin's Data Protection Officer (DPO) through the following channels:
Tokewin is committed to handling all privacy-related enquiries and requests with care, thoroughness and within the stipulated timeframe. Your trust is an asset we take full responsibility for safeguarding.
When you register on any online platform, you are essentially entrusting some of your most sensitive information to that platform — your full name, phone number, bank account or e-wallet details, and your activity records. For an online casino like Tokewin, this information is even more sensitive given that it involves real financial transactions. That is precisely why Tokewin treats privacy protection as a core operational priority, not a footnote buried in a legal document.
Malaysia's Personal Data Protection Act 2010 (PDPA) governs how companies handle users' personal data. Tokewin fully complies with this Act, and we voluntarily hold ourselves to standards that go beyond the minimum legal requirements — because we believe Malaysian players deserve stronger protection, not just the bare minimum from a compliance standpoint.
One of the most common concerns among Malaysian players is the security of their payment information. When you make a deposit via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX through Maybank2u or CIMB Clicks, your payment details are processed through end-to-end encrypted channels. Tokewin does not store your full bank account number or card number — we retain only a reference token required to process withdrawals back to the same account. This is industry best-practice security that Tokewin implements without exception.
Regarding game data — Tokewin retains your game history and betting records for several legitimate purposes: allowing you to review your own game history, accurately processing VIP and cashback programmes, detecting suspicious patterns that may indicate fraud attempts, and meeting audit and legal compliance requirements. This data is not used to profile you for external marketing purposes or shared with advertising providers.
Tokewin also wishes to emphasise that our responsible gambling programme — including deposit limits, betting limits and self-exclusion — is designed not only to protect players' financial wellbeing, but also their privacy. Information relating to the use of these self-control tools is strictly confidential and will never be shared with any party, including family members or friends, without the explicit consent of the player concerned.
Ultimately, Tokewin wants to make clear that privacy is more than a written policy — it is a culture we have built into every aspect of our operations. From how our staff are trained to handle member information, to how our systems are designed to minimise data collection, to how we respond when a potential security incident arises — all of this reflects Tokewin's genuine commitment to the privacy of Malaysian players. Your trust in us is a responsibility we take seriously every single day.
Tokewin Terms & ConditionsYour use of the Tokewin platform is also subject to our Terms & Conditions, which contain full details on registration requirements, deposits, withdrawals, bonuses and game rules. Please read them in full before playing. Access at Terms & Conditions.
Responsible GamingTokewin provides deposit limit, betting limit, loss limit and self-exclusion tools for all members. This platform is for users aged 18 and above only. Learn more at Responsible Gaming.