sgmwin Privacy Policy for Malaysian Users

1 Introduction

sgmwin respects the privacy of visitors and users. This Privacy Policy describes the standards applied to personal data associated with the sgmwin website, user enquiries and any account-related functionality that may be made available. It should be read together with the sgmwin Terms & Conditions.

By accessing sgmwin or voluntarily providing personal information, you acknowledge that the data may be handled as described in this policy. Where consent is legally required for a specific activity, sgmwin will seek that consent separately. Merely visiting an informational page does not mean that every data category listed below is automatically collected.

2 Scope and Definitions

This Privacy Policy applies to personal data processed through sgmwin. “Personal data” means information that identifies an individual directly or indirectly. “Processing” includes collecting, recording, organising, storing, reviewing, using, disclosing, correcting and deleting information.

References to “you” or “user” mean an individual who visits or interacts with sgmwin. References to “service provider” mean a party that performs a defined function for sgmwin, such as hosting, security monitoring, identity verification, customer support or transaction processing.

3 Personal Data We May Collect

The information processed by sgmwin depends on how a user interacts with the service. A visitor reading an article about EPL markets or Touch 'n Go eWallet deposits may provide considerably less information than a user requesting account verification or payment assistance.

sgmwin does not seek to collect information that is unrelated to a stated operational, legal or security purpose. Users should provide only the documentation specifically requested through an authorised sgmwin process.

4 Sources of Personal Data

sgmwin may receive personal data from the following sources:

• Directly from users when they create an account, set a limit, request help, submit verification material or communicate with sgmwin.
• Automatically from devices when browsers and security systems record standard technical information needed to deliver and protect the website.
• From authorised payment services when a transaction is initiated through FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay or an available digital-asset route.
• From verification and security providers where sgmwin uses a specialist to confirm identity, age, device risk or transaction legitimacy.
• From lawful public or regulatory sources where a review is necessary to meet applicable compliance, fraud-prevention or dispute-management obligations.

5 How sgmwin Uses Personal Data

sgmwin may use personal data to provide and maintain website functions, respond to enquiries, authenticate users, investigate security incidents and administer any available account service. Information may also be used to confirm that a person is at least 21 years old.

Where payment features are offered, sgmwin may process limited transaction details to reconcile MYR deposits and withdrawals, investigate delayed payments and confirm that a payment method belongs to the relevant user. sgmwin may also use data to detect duplicate accounts, suspicious bonus activity, unauthorised access, money-laundering indicators or other misuse.

Technical data may be reviewed to improve page performance for users accessing sgmwin on common Android, iPhone and desktop devices. Aggregated information may help identify which guides are useful, such as content concerning online casino games, live football, Liga Super Malaysia or Malaysian payment methods. Aggregated reporting should not identify an individual user.

6 Grounds for Processing

Depending on the circumstances, sgmwin may process personal data on one or more of the following grounds:

• Processing is necessary to provide a requested service or perform an agreement with the user.
• Processing is required to meet an applicable legal, compliance, record-keeping or regulatory obligation.
• Processing supports a legitimate interest, including website security, fraud prevention, service improvement and the defence of legal claims, where that interest is not overridden by user rights.
• The user has provided valid consent for a specific optional activity, such as selected communications or non-essential cookies.
• Processing is reasonably necessary to protect a person’s vital interests or respond to a serious security concern.

Where sgmwin relies on consent, a user may withdraw that consent for future processing. Withdrawal does not make earlier lawful processing invalid and may not apply where another lawful ground requires continued retention.

7 Disclosure and Data Sharing

sgmwin does not treat personal information as a product for unrestricted sale. Information may be disclosed only where there is a defined operational, security or legal reason. Recipients may include hosting providers, customer-support platforms, payment processors, identity-verification services, security specialists, professional advisers and competent authorities.

Service providers are expected to process information only for authorised purposes and to apply appropriate confidentiality and security controls. sgmwin may also disclose information where reasonably necessary to investigate fraud, enforce the Terms & Conditions, protect users or respond to a valid legal request.

If the ownership or structure of sgmwin changes, relevant records may be transferred as part of a legitimate business reorganisation, subject to confidentiality protections and applicable privacy requirements.

8 Payment and Financial Information

Malaysian users may recognise payment options such as FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost and GrabPay. Where any such method is available, the relevant bank, e-wallet operator or payment processor may independently process transaction information under its own privacy practices.

sgmwin may retain a masked account identifier, payment method, MYR amount, date, reference number and transaction status. sgmwin should not require a user’s complete banking password, PIN or one-time security code. Cryptocurrency users should never disclose a private key or recovery phrase to sgmwin support.

Payment records may be retained to handle reconciliation, chargebacks, complaints, fraud investigations and record-keeping requirements. Availability and limits can differ by account and should be checked before a transaction is authorised.

9 Cookies and Technical Analytics

Cookies are small data files placed on a browser or device. sgmwin may use essential cookies for navigation, security, session continuity and preference storage. These technologies help maintain reliable access and detect unusual activity.

Where optional analytics are used, sgmwin may measure page visits, device categories, general interaction patterns and performance errors. Optional technologies should be subject to available consent controls where legally required. Blocking essential cookies may prevent parts of sgmwin from operating correctly, while optional cookies may generally be declined without blocking core informational pages.

10 Data Retention

sgmwin retains personal data only for as long as reasonably necessary for the purpose for which it was collected. Retention periods may differ according to the type of data, account status, transaction history, security needs and applicable legal requirements.

For example, a general support enquiry may require a shorter retention period than an account-verification record or a payment dispute. Some records may remain after account closure where sgmwin must prevent duplicate registrations, honour self-exclusion, resolve a complaint, defend a legal claim or meet record-keeping obligations.

When continued retention is no longer necessary, sgmwin may securely delete, anonymise or place the information beyond routine operational use.

11 Data Security

sgmwin applies proportionate safeguards intended to protect personal data against unauthorised access, alteration, accidental loss and improper disclosure. Measures may include encrypted connections, access restrictions, credential controls, security logging, system updates and staff confidentiality requirements.

No online service can guarantee absolute security. Users also have an important role: use a unique password, enable additional authentication where available, avoid shared devices for sensitive transactions and verify that messages genuinely relate to sgmwin before providing information.

If sgmwin identifies a personal-data incident, the issue will be assessed and contained. Affected users or relevant authorities may be notified where required by applicable law and where notification would not compromise an authorised investigation.

12 International Data Transfers

Some infrastructure or specialist service providers may operate outside Malaysia. Consequently, personal data processed for sgmwin may be stored or accessed in another jurisdiction whose privacy laws differ from Malaysian requirements.

Where an international transfer occurs, sgmwin seeks to use appropriate contractual, organisational or technical safeguards. The purpose is to preserve a level of protection consistent with this Privacy Policy and the requirements applicable to the relevant processing activity.

13 User Privacy Rights

Subject to applicable law, identity verification and legitimate exemptions, a user may request information about the personal data held by sgmwin. A request should clearly explain the right being exercised and include enough information for sgmwin to identify the relevant records without exposing another person’s data.

sgmwin may ask for reasonable proof of identity before acting on a request. This protects users from unauthorised disclosure. Some requests may be limited where compliance would expose another person’s information, undermine fraud controls or conflict with a legal obligation.

14 Age Restriction and Responsible Play

sgmwin is intended for adults aged 21 and above only. sgmwin does not knowingly seek personal data from children or permit underage participation in casino-style gambling. Age and identity checks may be carried out where account or transaction functionality is available.

If sgmwin learns that information has been provided by an underage person, appropriate steps may be taken to restrict the relevant access and delete or retain the information as required for safeguarding, fraud prevention or legal purposes.

Responsible-play records, including deposit limits, cooling-off periods and self-exclusion status, may need to be retained even after an account is closed. This limited retention helps sgmwin respect a user’s restriction and prevent accidental or deliberate re-registration during an exclusion period.

15 Changes to This Privacy Policy

sgmwin may revise this Privacy Policy to reflect operational changes, new security practices, updated service features or applicable legal requirements. The revised policy will display a new effective date.

Where a change materially affects how existing personal data is used, sgmwin may provide an additional notice through an appropriate website or account channel. Users are encouraged to review this page periodically to remain informed about current privacy practices.

16 Contact Us