Tokekwin
Privacy Policy

Tokekwin collects personal data through several channels in the course of providing our Services to Malaysian players and other users. The categories of data we collect include:

We do not collect or store full payment card numbers. Where payment processing involves sensitive financial data, it is handled exclusively by our PCI-DS compliant payment partners, including Malaysian e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay) and banking partners facilitating DuitNow and FPX transactions.

Tokekwin processes your personal data for the following specific purposes. We do not use your data for any purpose not described in this Policy without first obtaining your explicit consent or where otherwise required by law.

• Account Management: To create, maintain, and administer your tokekwin account, including authentication and account security.
• Identity & Age Verification (KYC): To verify that you are aged 21 or above and are the legitimate owner of the payment methods associated with your account. This is a regulatory and responsible gambling obligation.
• Payment Processing: To facilitate MYR deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and other supported Malaysian payment channels.
• Service Delivery: To provide access to our full range of games and betting markets, including slots, live casino, table games, Liga Super Malaysia betting, EPL, UFC, and other sports markets.
• Responsible Gambling Compliance: To monitor account activity for indicators of problem gambling, enforce self-imposed limits, and apply cooling-off or self-exclusion periods where requested or required.
• Fraud Prevention & AML: To detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes, in accordance with our anti-money laundering obligations.
• Customer Support: To respond to your queries, resolve complaints, and maintain records of support interactions.
• Marketing & Promotions: To send you information about relevant bonuses, promotions, and platform updates, where you have opted in to receive such communications. You may withdraw marketing consent at any time.
• Platform Improvement: To analyse usage patterns and technical performance data to improve the functionality and user experience of the platform.
• Legal Compliance: To meet our obligations under applicable international licensing, anti-money laundering, and data protection regulations.

Tokekwin processes your personal data under one or more of the following recognised legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you entered into upon registration, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws, licensing conditions, AML regulations, and lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing conducted in pursuit of tokekwin's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Tokekwin does not sell your personal data to third parties. We share personal data only in the following circumstances and with the following categories of recipients:

• Payment Service Providers: Malaysian e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), banking partners facilitating DuitNow and FPX transfers (Maybank, CIMB, Public Bank, RHB, Hong Leong), and cryptocurrency processing partners — solely to the extent necessary to process your financial transactions.
• Identity Verification Providers: Third-party KYC and AML screening services used to verify your identity, age, and payment method ownership before processing withdrawals.
• Game Content Providers: Licensed game studios and aggregators whose titles are offered on the tokekwin platform. These providers may receive anonymised or pseudonymised session data for game integrity and RNG auditing purposes.
• Regulatory Authorities: Applicable licensing and regulatory bodies as required under our operating licence and international AML frameworks.
• Law Enforcement: Where required by a valid legal order, court directive, or law enforcement request under applicable law.
• Professional Advisors: Legal counsel, auditors, and compliance consultants operating under binding confidentiality obligations.

Tokekwin retains your personal data for as long as is necessary to fulfil the purposes outlined in this Policy, including to satisfy legal, regulatory, accounting, and reporting obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

Tokekwin uses cookies and similar tracking technologies to support the operation, security, and performance of our platform. By continuing to use the tokekwin platform, you consent to the use of cookies as described in this section.

The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the operation of the platform. These include session authentication tokens, security cookies, and load-balancing identifiers. The platform cannot function without these cookies and they cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language settings, last visited game category, and display preferences. These improve your experience but are not essential to core platform operation.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the platform — including page visit counts, session duration, and navigation paths — to help us improve platform performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, identify suspicious login patterns, and support our responsible gambling monitoring obligations.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the tokekwin platform. We do not use third-party advertising or behavioural tracking cookies.

Tokekwin implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the tokekwin platform is encrypted in transit using industry-standard SSL/TLS protocols. This applies to all account activity, payment transactions, and support communications.
• Data Encryption at Rest: Sensitive personal data stored on our servers is encrypted at rest. KYC documents and financial records are subject to enhanced encryption standards.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal systems require multi-factor authentication for all staff accessing player data environments.
• Two-Factor Authentication (2FA): All tokekwin player accounts support 2FA. We strongly recommend enabling 2FA to add an additional layer of protection to your account.
• Security Monitoring: Our platform is monitored continuously for suspicious activity, intrusion attempts, and anomalous access patterns.
• Penetration Testing: We conduct regular security assessments and penetration tests on our infrastructure to identify and remediate vulnerabilities proactively.

As an internationally operated platform, tokekwin may transfer your personal data to servers and service providers located outside of Malaysia. Such transfers may occur in connection with payment processing, KYC verification, cloud infrastructure hosting, and game content delivery.

Where personal data is transferred internationally, tokekwin takes appropriate measures to ensure that such transfers are protected by adequate safeguards, including contractual data processing agreements incorporating internationally recognised standard contractual clauses, or transfers to jurisdictions that provide an adequate level of data protection.

Malaysian payment data processed through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX channels is handled by Malaysian-licensed payment service providers subject to Bank Negara Malaysia's payment system regulations, and this data does not leave Malaysia in an identifiable form.

Subject to applicable law and certain legal exceptions, you hold the following rights in relation to your personal data held by tokekwin. To exercise any of these rights, please contact us using the details in Section 15 of this Policy.

We will respond to all verified data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

Tokekwin is strictly an adult platform. We do not knowingly collect or process personal data belonging to individuals under the age of 21 years. Registration and use of the platform is prohibited for persons under 21, and age verification is conducted as part of the KYC process prior to the first withdrawal.

If we become aware that personal data has been collected from a person under the age of 21 without appropriate consent or through misrepresentation, we will take immediate steps to delete that data, close the associated account, and return any remaining balance to the payment method used for deposit, subject to verification.

The tokekwin platform integrates with a number of third-party service providers to deliver its full range of services. Where such integrations involve the processing of your personal data, we ensure that appropriate data processing agreements are in place.

Key third-party categories and their data processing roles include:

• Malaysian Payment Providers: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks process transaction data required to complete your deposit and withdrawal requests. These providers operate under their own privacy policies and are regulated by Bank Negara Malaysia.
• KYC & AML Verification Services: Specialised identity verification platforms that process your submitted identity documents to confirm your age and identity. These providers are bound by contractual data protection obligations.
• Cloud Infrastructure Providers: Server and data hosting providers that store platform data under contractual data processing agreements incorporating appropriate security and privacy safeguards.
• Game Studios & Aggregators: Licensed game content providers whose titles are featured on the platform. These providers may receive anonymised session identifiers for RNG audit and game integrity purposes only.

Tokekwin is not responsible for the privacy practices of third-party services that operate independently of our platform. We recommend reviewing the privacy policies of any third-party service you interact with directly.

Tokekwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed prominently at the top of this page.

Where amendments are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide notice to registered Players via the email address associated with their account, no less than seven (7) calendar days before the changes take effect.

Your continued use of the tokekwin platform following the effective date of any amended Policy constitutes your acknowledgement of, and agreement to, the updated terms. If you do not accept the amended Policy, you must cease using the platform and may request account closure by contacting our support team.

For all privacy-related enquiries, data rights requests, or concerns regarding how tokekwin handles your personal data, please contact our support team using the details below. We are committed to responding to all verified data enquiries within 30 calendar days.

When submitting a data rights request, please include your registered account email address, the nature of your request, and any relevant account reference information to allow us to process your request efficiently.