Privacy Policy

This Privacy Policy ("Policy") describes how 125wins ("125wins", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://125wins.cam (the "Platform"), collects, processes, stores, and protects the personal data of its users ("Player", "you", "your").

We are committed to handling your personal data with the highest standards of transparency, integrity, and security. This Policy has been prepared in accordance with applicable data protection principles and is intended to give you a clear and honest account of our data practices.

By registering an account on the 125wins Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue your use of the Platform and contact our support team to close your account.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means 125wins, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of 125wins under a contractual arrangement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of your Personal Data.
• "KYC" (Know Your Customer) means the identity and age verification process required under our responsible gambling and anti-money laundering obligations.
• "Cookies" means small data files placed on your device by the Platform for the purposes of session management, preference storage, and analytics.

125wins collects the following categories of personal data in connection with your use of the Platform:

We do not intentionally collect special category data (such as health information, racial or ethnic origin, religious beliefs, or political opinions) and request that you refrain from submitting such information through the Platform.

125wins collects your personal data through the following channels:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and analytics tools.
• Payment Processors: Confirmation and reference data received from payment service providers including DuitNow, FPX, Touch 'n Go eWallet, Boost, and card networks when you conduct transactions.
• Third-Party Verification Services: Identity and age verification data obtained from authorised KYC service providers in connection with our regulatory obligations.
• Fraud Detection Services: Risk signals and device fingerprinting data from fraud prevention tools used to protect the security and integrity of the Platform.

125wins processes your personal data for the following specific and legitimate purposes:

• Account Management: To register, authenticate, and manage your 125wins account, including processing login credentials and maintaining account security.
• Identity Verification (KYC): To verify your identity and confirm that you meet the minimum age requirement of 21 years, and to comply with our anti-money laundering (AML) obligations.
• Transaction Processing: To process MYR deposits and withdrawals through your selected payment methods (DuitNow, FPX, Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, Visa/Mastercard, or cryptocurrency).
• Service Delivery: To provide access to games, betting markets, sports results (including Liga Super Malaysia, EPL, and UFC), and all other Platform features.
• Customer Support: To respond to your queries, resolve disputes, and manage complaints submitted through our live chat or email support channels.
• Responsible Gambling: To identify problematic gambling patterns, enforce self-exclusion requests, apply deposit limits, and comply with our responsible gambling obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account abuse, money laundering, and other prohibited conduct.
• Legal Compliance: To comply with applicable laws, regulations, and licensing requirements, including responding to lawful requests from regulatory or law enforcement authorities.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and platform updates via email or SMS. You may withdraw consent at any time.
• Platform Improvement: To analyse usage patterns and Platform performance in order to improve the user experience, fix technical issues, and develop new features.

125wins processes your personal data on the following legal bases, which vary depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration — including account creation, transaction processing, and game provision.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML requirements, age verification, and regulatory reporting obligations.
• Legitimate Interests: Processing carried out for our legitimate business interests, including fraud prevention, platform security, and internal analytics — provided such interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your freely given, informed consent — specifically for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

125wins does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your personal data with the following categories of recipient only to the extent strictly necessary for the purposes described in this Policy:

• Payment Service Providers: Including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Connect, Visa, Mastercard, and cryptocurrency processing services — for the purpose of facilitating your transactions.
• KYC and Identity Verification Providers: Authorised third-party verification services used to confirm your identity and age in compliance with our regulatory obligations.
• Fraud Prevention and Security Services: Providers of fraud detection, risk assessment, and cybersecurity tools engaged to protect the Platform and its players.
• IT and Hosting Providers: Cloud infrastructure and hosting service providers who process data on our behalf under strict data processing agreements.
• Customer Support Tools: Live chat and ticketing system providers used to facilitate communication between you and our support team.
• Legal and Regulatory Authorities: Where required by law, court order, or lawful request from a relevant regulatory or law enforcement authority, we may disclose your personal data to the relevant body.

All third-party data processors engaged by 125wins are subject to contractual obligations that require them to process personal data only on our documented instructions and to implement appropriate security measures.

125wins retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations.

• Active Account Data: Retained for the duration of your account's active status on the Platform.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years from the date of each transaction to satisfy accounting and regulatory requirements.
• Customer Support Records: Communication records are retained for a period of three (3) years following the resolution of the relevant support interaction.
• Self-Exclusion Records: Records of self-exclusion requests are retained indefinitely to prevent re-registration by excluded individuals.
• Marketing Preference Records: Consent and opt-out records are retained for as long as they remain relevant and for a period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with our internal data lifecycle procedures.

125wins implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes, but is not limited to:

• SSL 256-bit encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive personal and financial data at rest using industry-standard encryption protocols.
• Two-factor authentication (2FA) available for all player accounts to prevent unauthorised access.
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits and penetration testing conducted by independent third-party specialists.
• Firewalls, intrusion detection systems, and real-time monitoring of the Platform for suspicious activity.
• Staff training on data protection obligations and information security best practices.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 125wins will notify affected individuals as required by applicable law.

The 125wins Platform uses cookies and similar tracking technologies to enhance your user experience, maintain session security, and collect analytical data about Platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management, authentication, and security. These cookies cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as language settings, and to personalise your experience on the Platform.
• Analytical Cookies: Used to collect aggregated, anonymised data about how players use the Platform — including page views, session durations, and navigation paths — to help us improve our services.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats.

You may control the use of non-essential cookies through your browser's cookie settings. Please note that disabling certain cookies may affect the functionality of the Platform. 125wins does not use third-party advertising or retargeting cookies.

Subject to applicable data protection law and certain statutory exceptions, you have the following rights in relation to your personal data held by 125wins:

To exercise any of these rights, please contact our Data Protection team at [email protected]. We will respond to all valid requests within thirty (30) days. In complex cases, this period may be extended by a further two months, in which case we will notify you of the extension.

Please note that certain rights may be limited or unavailable where we are required to retain or continue processing data to comply with our legal obligations — for example, KYC records that must be retained under anti-money laundering regulations.

The 125wins Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or retain the personal data of individuals under the age of 21.

As part of our KYC verification process, all players are required to provide documentary proof of age before any withdrawal can be processed. Accounts found to be registered by individuals under the age of 21 will be immediately suspended and all personal data associated with such accounts will be handled in accordance with applicable law.

If you believe that a person under the age of 21 has registered on the 125wins Platform or has provided us with personal data without appropriate authorisation, please contact us immediately at [email protected] so that we can take appropriate action.

In connection with the operation of the 125wins Platform, your personal data may be transferred to, stored in, or processed in countries outside of Malaysia. Such transfers may occur where our third-party service providers — including cloud hosting, KYC verification, and fraud detection providers — maintain servers or operations in other jurisdictions.

Where personal data is transferred internationally, 125wins ensures that appropriate safeguards are in place to protect your data. These safeguards may include:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those applicable in the country of transfer.
• Data processing agreements that bind third-party processors to confidentiality and security obligations.
• Technical and organisational security measures applied to all data at rest and in transit, regardless of jurisdiction.

By using the 125wins Platform, you acknowledge and consent to such international transfers of your personal data in accordance with the safeguards described above.

125wins reserves the right to amend this Privacy Policy at any time in response to changes in applicable law, our business operations, or data processing practices. Where changes are material, we will notify you by displaying a prominent notice on the Platform or by sending an email to your registered address at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Policy periodically to remain informed of how we protect your personal data. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 125wins, please contact us through any of the following channels:

• Data Protection Enquiries (Email): [email protected] — please include "Privacy Policy Enquiry" in the subject line, along with your registered username and account ID to assist us in responding efficiently.
• Live Chat Support: Available 24/7 directly on the 125wins Platform. For privacy-related matters, our support agents will escalate your request to the appropriate team within one business day.
• Support Hours: Monday to Sunday, 8:00 am – 12:00 am Malaysian Standard Time (MYT / UTC+8). Peak-hour support is fully staffed to handle player enquiries from Kuala Lumpur, Penang, Johor Bahru, and across Malaysia.

We are committed to acknowledging all privacy-related requests within 48 hours and providing a substantive response within 30 calendar days of receipt. For complex requests, we will communicate any necessary extension of this timeline to you in advance.