Purpose-Led Collection
hpwinn collects personal data for defined operational, security, payment, compliance, and customer support purposes.
This Privacy Policy explains how hpwinn collects, uses, stores, discloses, and protects personal data when Malaysian players visit our website, create an account, make MYR transactions, or use our casino and sports betting services.
Last updated: 1 January 2026hpwinn applies practical privacy and security controls throughout the account journey, from identity verification and GrabPay deposits to withdrawals and responsible gambling support.
hpwinn collects personal data for defined operational, security, payment, compliance, and customer support purposes.
Access to player records is restricted according to role, business need, and appropriate confidentiality obligations.
Payment information for FPX, DuitNow, GrabPay, Touch 'n Go eWallet, Boost, and local banks is handled with appropriate safeguards.
Players may request access, correction, or other eligible action concerning personal data held by hpwinn.
This Privacy Policy should be read together with the hpwinn Terms & Conditions. It is written in English for Malaysian users and is informed by recognised data protection principles, including transparency, proportionality, security, and the standards reflected in Malaysia's Personal Data Protection Act 2010 where applicable.
This Privacy Policy applies to personal data processed by hpwinn through https://hpwinn.cam, its mobile-optimised interface, player support channels, casino games, live dealer services, instant games, promotions, and sports betting markets. It applies when you browse hpwinn, register an account, verify your identity, deposit or withdraw MYR, place a wager, contact support, or use a responsible gambling control.
By using hpwinn, you acknowledge that your personal data may be processed as described in this Privacy Policy. Where consent is the appropriate basis for a specific activity, hpwinn will seek that consent in a clear manner. You may decline optional processing, although certain information is necessary for account security, legal compliance, payment processing, and delivery of requested services.
hpwinn collects information that you provide directly and information generated through your use of the platform. The exact data depends on the services you use and the verification required for your account.
hpwinn does not ask players to disclose more information than is reasonably required for the relevant purpose. Players should not send unnecessary sensitive documents through general support messages.
hpwinn obtains personal data when you complete account fields, upload verification documents, make a payment, claim a promotion, place bets, adjust account controls, or communicate with support. Data may also be created automatically when hpwinn records a login, device session, transaction, game result, fraud alert, or website preference.
Limited information may be received from payment providers and financial institutions used by Malaysian players, including GrabPay, Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, and FPX. hpwinn may also receive verification results from service providers that assist with identity, age, fraud, sanctions, or payment checks. Such information is used only where relevant to the service, security, or compliance purpose.
hpwinn may process personal data for the following purposes:
hpwinn relies on the basis appropriate to each activity, which may include performance of the service requested by the player, compliance with an applicable obligation, legitimate operational and security interests, or consent where required.
hpwinn processes payment-related data to fund player accounts and return eligible withdrawals. When you use GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, or a supported digital asset, the relevant payment provider may process information under its own privacy practices.
hpwinn generally receives transaction references, status information, payment method details, and the account information needed to reconcile a payment. Full card credentials or online banking passwords should never be provided to hpwinn support. Players are responsible for ensuring that deposits originate from a payment account held in their own name.
hpwinn uses cookies and similar storage technologies to maintain secure sessions, remember language and display preferences, support login functionality, prevent fraud, understand website performance, and improve the player experience. Essential cookies are required for core functions such as authentication, security, and account navigation.
Optional technologies may be used to measure how visitors move through hpwinn or to remember non-essential preferences. Browser settings can be used to block or delete cookies, but disabling essential cookies may prevent account login, payments, games, or other parts of hpwinn from working correctly.
hpwinn does not sell personal data. Information may be disclosed to carefully selected providers that perform services for hpwinn, including payment processing, hosting, cybersecurity, identity verification, fraud prevention, game delivery, technical support, communication, analytics, and professional advice.
Providers are given only the information reasonably required for their role and are expected to apply suitable security and confidentiality measures. hpwinn may also disclose information where reasonably necessary to establish or defend legal claims, investigate suspected unlawful conduct, protect player safety, enforce the Terms & Conditions, or respond to a valid request from a competent authority.
If the hpwinn business or relevant assets are reorganised, merged, or transferred, personal data may form part of that transaction subject to appropriate confidentiality and data protection arrangements.
Some hpwinn service providers, game studios, infrastructure operators, or support systems may process data outside Malaysia. Privacy and security rules in another location may differ from those available in Malaysia.
Where an international transfer occurs, hpwinn takes reasonable steps to use providers that maintain appropriate contractual, organisational, and technical safeguards. hpwinn also seeks to limit transferred information to what is required for the relevant service. Players may contact hpwinn for general information about the safeguards associated with their personal data.
hpwinn uses layered administrative, technical, and organisational controls designed to protect data from unauthorised access, alteration, disclosure, loss, or destruction. Measures may include encryption in transit, access restrictions, authentication controls, monitoring, audit records, secure development practices, and incident response procedures.
No online system can guarantee absolute security. Players must use a strong, unique password, protect their devices, avoid sharing one-time codes, and sign out when using a shared device. You should notify hpwinn promptly if you suspect account misuse, an unfamiliar transaction, or disclosure of your login credentials.
hpwinn will assess suspected data incidents and take appropriate containment, investigation, remediation, and notification steps where required by applicable standards or obligations.
hpwinn retains personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy. Retention periods vary according to the type of record, account status, payment history, dispute risk, security requirements, responsible gambling controls, and any applicable legal or compliance obligation.
Closing an account does not always result in immediate deletion. hpwinn may need to preserve identity, transaction, self-exclusion, fraud prevention, complaint, or audit records after closure. When information is no longer required, hpwinn will take reasonable steps to delete, anonymise, or securely isolate it.
Subject to applicable requirements and lawful exceptions, you may ask hpwinn to provide access to personal data associated with your account, correct inaccurate or incomplete information, explain certain processing, or consider a request to restrict, object to, or delete eligible information.
hpwinn may request sufficient information to confirm your identity before acting on a privacy request. This protects account records from unauthorised disclosure. A request may be limited or refused where retaining or processing the information is necessary for payment records, fraud prevention, self-exclusion enforcement, legal claims, security, or another legitimate requirement. hpwinn will explain the reason where appropriate.
If processing depends on consent, you may withdraw that consent for future activity. Withdrawal does not affect processing already carried out lawfully and may not apply to essential account, safety, or compliance functions.
hpwinn is strictly for players aged 21 and above. The platform is not intended for children or anyone below the permitted age. hpwinn may request identity and age documentation and may suspend an account where verification is incomplete or indicates underage access.
Personal data connected with deposit limits, cooling-off periods, risk indicators, support conversations, and self-exclusion may be processed to promote responsible gambling and enforce player protections. These records may need to be retained after account closure so that hpwinn can continue to honour an exclusion request and reduce the risk of a new account being opened in breach of that restriction.
More information about available controls is provided on the Responsible Gambling page.
hpwinn may update this Privacy Policy to reflect changes in services, technology, security practices, operational requirements, or applicable standards. The revised version will be published on this page with an updated effective date.
Where a change materially affects how hpwinn handles personal data, reasonable steps may be taken to highlight the update. Players should review this page periodically. Continued use of hpwinn after an update means that the revised notice has been made available to you; it does not replace consent where fresh consent is specifically required.
Questions about this Privacy Policy, hpwinn data practices, or a privacy rights request may be directed to the hpwinn support team. To protect your account, do not include passwords, one-time codes, or unnecessary banking credentials in your message.
hpwinn may ask you to confirm your identity before discussing account-specific records. Please provide your registered username and a clear description of your request, but never send your account password.
Read the platform terms before using casino games, live football markets, or MYR payment services. hpwinn is available only to players aged 21 and above.