HappyWin Privacy Policy

HappyWin ("we", "us", "our", "the Company") is committed to protecting and respecting the privacy of every individual who interacts with our platform at https://happywin.cam. This Privacy Policy ("Policy") sets out in detail the manner in which HappyWin collects, processes, stores, shares, and protects personal data provided by or generated through Members and site visitors ("you", "your", "the Data Subject").

This Policy applies to all personal data processed by HappyWin in connection with your use of the platform, including but not limited to data collected during account registration, identity verification (KYC), financial transactions, customer support interactions, and platform usage analytics.

By registering an account, making a deposit, or otherwise using the HappyWin platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must not use the platform.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person ("Data Subject"), including but not limited to name, identification number, contact details, financial information, IP address, and device identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, whether by automated means or otherwise, including collection, recording, storage, adaptation, use, disclosure, or erasure.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, HappyWin is the Data Controller.
• "Data Processor" means any third party that processes Personal Data on behalf of and under the instructions of the Data Controller.
• "Consent" means any freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data.
• "KYC Data" means identity and address verification documents submitted by a Member in fulfilment of Know Your Customer obligations, including government-issued identification and proof of address.
• "Cookie" means a small text file placed on a user's device by a website to enable the website to recognise the device on subsequent visits and store certain user preferences.

HappyWin acts as the Data Controller in respect of all Personal Data collected through the platform. The Company operates the happywin.cam domain and associated services under an international gaming licence issued in the Curaçao jurisdiction.

As Data Controller, HappyWin is responsible for ensuring that all Personal Data is collected and processed in accordance with applicable data protection principles, including: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability.

For all data-related enquiries, including requests to exercise your rights under this Policy, you may contact the HappyWin Data Protection team at [email protected] with the subject line "Data Privacy Request". We aim to respond to all substantive requests within thirty (30) calendar days of receipt.

HappyWin collects Personal Data from a number of sources and in a variety of categories. The table below sets out the main categories of data collected, the source of that data, and the context in which it arises:

HappyWin does not collect or process any special categories of Personal Data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data) beyond what is strictly necessary for identity verification purposes as required by our licensing obligations.

HappyWin processes Personal Data for the following defined purposes only. Data is never processed for any purpose that is incompatible with those listed below:

• Account Creation and Management: To register and administer Member Accounts, including authenticating login sessions, managing account preferences, and maintaining accurate member records.
• Identity Verification (KYC): To verify the identity, age, and residential address of Members as required by our international gaming licence and anti-money-laundering compliance obligations. This applies to all Members in Malaysia and all other operating territories.
• Financial Transaction Processing: To process deposits and withdrawals via supported payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels.
• Platform Operation and Service Delivery: To provide access to games, sports betting markets, live casino tables, and all other platform features; to maintain platform stability; and to diagnose and resolve technical issues.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gambling: To apply deposit limits, self-exclusion measures, and session reminders as requested by Members or required by our responsible gambling policy.
• Customer Support: To respond to and resolve Member enquiries, complaints, and disputes submitted through live chat, email, or other support channels.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to Members who have opted in to receive such communications. Members may opt out at any time.
• Analytics and Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform features, game selection, and the overall Member experience.
• Legal and Regulatory Compliance: To comply with applicable laws, regulatory requirements, licensing conditions, and lawful requests from competent authorities.

HappyWin relies on the following legal bases for processing your Personal Data, depending on the purpose and category of data involved:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and HappyWin (as set out in our Terms & Conditions), including account management, payment processing, and service delivery.
• Consent: Where you have given explicit consent to a specific processing activity — most notably in relation to marketing communications and non-essential cookies — we process data on the basis of that consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Legal Obligation: Processing is necessary to comply with legal obligations to which HappyWin is subject, including KYC obligations under our Curaçao licence, anti-money-laundering record-keeping requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing is necessary for the purposes of HappyWin's legitimate interests — including fraud prevention, platform security, and service analytics — where those interests are not overridden by your fundamental rights and freedoms.

HappyWin does not sell, rent, or trade your Personal Data to third-party marketers, data brokers, or any other commercial entities. Personal Data may, however, be shared with the following categories of third parties under strictly controlled conditions:

• Payment Service Providers: When you make a deposit or withdrawal using a supported payment method (such as Touch 'n Go eWallet, Boost, Maybank, CIMB, or a cryptocurrency network), necessary transaction data is shared with the relevant payment processor solely for the purpose of completing the transaction.
• KYC and Identity Verification Partners: We may use third-party identity verification services to assist with processing KYC documentation. These service providers act as Data Processors under contract with HappyWin and are prohibited from using your data for any independent purpose.
• Gaming Software Providers: In order to deliver games on the platform, certain technical session data (such as player ID and session tokens) is shared with licensed game providers. No unnecessary personal identifiers are transmitted in this context.
• Fraud Prevention and Anti-Money-Laundering Services: We may share data with specialist compliance and fraud detection services to screen transactions and player activity against sanctions lists and fraud indicators as part of our AML programme.
• Legal and Regulatory Authorities: HappyWin may disclose Personal Data to law enforcement agencies, regulators, courts, or other competent authorities where required to do so by applicable law, court order, or regulatory instruction.
• Professional Advisers: We may share data on a need-to-know basis with our lawyers, accountants, auditors, and insurers for the purposes of obtaining professional advice and managing business operations.

HappyWin retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and licensing obligations. The following indicative retention periods apply:

• Active Account Data: Retained for the duration of the Member's Account and for a minimum period of five (5) years following Account closure, in accordance with anti-money-laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of Account closure or the date on which the Member's last transaction was processed, whichever is later.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction for AML compliance purposes.
• Customer Support Records: Retained for three (3) years from the date of the most recent support interaction, unless the interaction relates to a dispute or legal claim, in which case records are retained for the duration of the relevant limitation period.
• Marketing Consent Records: Retained for three (3) years from the date of last consent or opt-out.
• Technical and Usage Logs: Retained for twelve (12) months from the date of generation, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that ensures it can no longer be associated with an identifiable individual.

HappyWin implements a comprehensive set of technical and organisational security measures designed to protect Personal Data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures include:

• End-to-end 256-bit SSL/TLS encryption for all data transmitted between Member devices and the HappyWin platform.
• Encrypted storage of all sensitive Personal Data, including KYC documents and payment credentials, within access-controlled server environments.
• Role-based access controls ensuring that Personal Data is accessible only to personnel who require access for legitimate operational purposes.
• Regular security audits, penetration testing, and vulnerability assessments conducted by internal and external security teams.
• Two-factor authentication (2FA) available to all Members and mandatory for privileged system access by HappyWin personnel.
• Incident response procedures governing the identification, containment, assessment, and notification of any Personal Data breach.

Notwithstanding the above measures, no system of data transmission or storage can be guaranteed to be completely secure. HappyWin cannot warrant the absolute security of any data transmitted to or from the platform. Members are encouraged to use strong, unique passwords and to enable 2FA on their Accounts.

In the event of a material Personal Data breach that is likely to result in a risk to the rights and freedoms of affected individuals, HappyWin will notify affected Members and relevant authorities as required by our licensing obligations and applicable data protection standards, without undue delay.

HappyWin uses cookies and similar tracking technologies (including session tokens and local storage) to operate and improve the platform. The following categories of cookies are used:

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies through the settings or preferences menu. Please note that disabling certain cookie categories may affect the functionality of the HappyWin platform. By continuing to use the platform after being informed of our cookie practices, you consent to the placement of non-essential cookies as described above.

As a Data Subject, you hold a number of rights in relation to your Personal Data held by HappyWin. These rights are summarised below. To exercise any of these rights, please submit a written request to [email protected] with "Data Privacy Request" in the subject line. We will respond within thirty (30) calendar days of receiving a valid request, and we may ask you to verify your identity before processing the request.

Please note that some rights are not absolute and are subject to qualifications. In particular, the right to erasure does not override HappyWin's legal obligation to retain certain data for a minimum of five years under anti-money-laundering regulations. We will always explain any limitations that apply when responding to your request.

HappyWin strictly prohibits participation by individuals under the age of twenty-one (21) years. The platform does not knowingly collect Personal Data from persons below this age. Minimum age compliance is enforced through our KYC verification process, which requires all Members to submit valid government-issued identity documentation before withdrawals are processed.

If HappyWin becomes aware that it has inadvertently collected Personal Data from a person under the age of 21, the relevant Account will be closed immediately, the data will be deleted to the extent permitted by our legal retention obligations, and the matter may be escalated to relevant authorities.

If you are a parent or guardian and have reason to believe that a minor under your care has accessed or registered on HappyWin, please contact us immediately at [email protected].

HappyWin operates under an international gaming licence and its infrastructure may involve the storage and processing of data on servers located in jurisdictions outside Malaysia, including within the Curaçao jurisdiction and data centres operated by our hosting providers.

When Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that available in your home jurisdiction, HappyWin implements appropriate safeguards to ensure that your data remains protected. These safeguards include contractual arrangements with data processors and hosting providers that impose equivalent data protection standards.

By using the HappyWin platform, Malaysian Members consent to the transfer of their Personal Data to HappyWin's servers and authorised processors operating in such jurisdictions, subject to the protections described in this Policy.

HappyWin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform functionality. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

Where changes are material in nature — meaning they significantly affect how your data is collected, used, or shared — we will endeavour to notify active Members via their registered email address or through an in-platform notification prior to the changes taking effect.

Your continued use of the HappyWin platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should cease using the platform and may request Account closure in accordance with the Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the HappyWin Data Protection team using the details below. All communications regarding data privacy matters should include "Data Privacy Request" in the subject line to ensure prompt handling by the appropriate team.