Privacy Policy

This Privacy Policy ("Policy") is issued by 125win ("125win", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at https://125win.cam. This Policy describes how we collect, use, disclose, retain, and protect the personal data of all individuals who register, visit, or interact with our platform (collectively, "Users", "Players", or "you").

125win is committed to protecting the privacy and personal information of all Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. Our data practices are designed to meet applicable data protection standards while enabling us to deliver a fast, secure, and personalised betting experience.

By accessing or using the 125win platform — including registering an account, making a deposit, placing a wager, or contacting our support team — you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, please do not use the platform.

The following terms carry specific meanings throughout this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, including name, email address, mobile number, financial account details, device identifiers, and IP addresses.
• "Processing" means any operation performed on personal data, including collection, recording, storage, alteration, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means 125win, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third-party service provider that processes personal data on behalf of 125win under a contractual data processing agreement.
• "Cookies" means small text files placed on your device by the 125win platform to store session state, preferences, and analytics data.
• "KYC" means Know Your Customer — the identity and age verification process required before a player may withdraw funds from their 125win account.

The categories of personal data that 125win may collect and process are set out in the table below. Collection of each category is limited to what is necessary for the stated purpose.

125win collects personal data through the following channels:

Data provided directly by you when you register an account, complete KYC verification, make a deposit, submit a withdrawal request, contact our support team, or respond to surveys or promotional communications.

Technical and behavioural data collected automatically as you browse and interact with the 125win platform — including via cookies, server logs, analytics tags, and session monitoring tools. See Section 9 for full details on our cookie practices.

Identity and payment verification data received from our certified KYC and anti-money laundering (AML) screening partners. Transaction data received from payment processors including Malaysian payment rails such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank. Data received from fraud detection service providers.

125win processes your personal data for the following clearly defined purposes:

• Account Administration: Creating, maintaining, securing, and where necessary closing your 125win account, including all communications related to account status.
• Identity Verification: Conducting KYC checks to confirm age eligibility (21+ requirement), identity, and source of funds where required under applicable compliance frameworks.
• Payment Processing: Executing deposit and withdrawal transactions across supported Malaysian payment methods in Malaysian Ringgit (MYR).
• Fraud Prevention & Security: Detecting and preventing unauthorised access, multi-accounting, collusion, money laundering, and other fraudulent or abusive platform activity.
• Responsible Gambling: Monitoring player activity to identify indicators of problem gambling behaviour and to enforce player-requested deposit limits, session limits, and self-exclusion arrangements.
• Platform Improvement: Analysing aggregated behavioural data to improve navigation, game selection, performance, and the overall 125win user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receiving such communications. Opt-out is available at any time via account settings or by contacting our support team.
• Legal & Regulatory Compliance: Fulfilling obligations under applicable anti-money laundering regulations, financial crime prevention frameworks, and any lawful requests from competent authorities.

125win processes your personal data on the following legal grounds, depending on the specific purpose:

• Contractual Necessity: Processing required to fulfil our obligations to you under the 125win Terms & Conditions — including account management, payment execution, and game delivery.
• Legitimate Interests: Processing for purposes including fraud prevention, platform security, responsible gambling monitoring, and internal analytics — where our interests do not override your privacy rights.
• Legal Obligation: Processing required to comply with applicable laws, regulatory directions, court orders, or law enforcement requests.
• Consent: Processing for direct marketing communications and the use of non-essential cookies, where you have provided explicit opt-in consent. You may withdraw this consent at any time.

125win does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment Processors: Transaction data shared with certified payment service providers including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency processing partners, strictly for the purpose of executing authorised transactions.
• KYC & AML Partners: Identity document data shared with certified identity verification and anti-money laundering screening providers for the purpose of regulatory compliance.
• Fraud & Security Vendors: Technical and behavioural data shared with security service providers for the purpose of detecting and preventing fraud, cheating, and unauthorised platform access.
• Legal Authorities: Personal data disclosed to law enforcement agencies, regulatory bodies, or courts where we are legally obligated to do so — including in connection with anti-money laundering, financial crime investigations, or court orders.
• Corporate Transactions: In the event of a merger, acquisition, or asset sale, personal data may be transferred to the acquiring entity subject to the same protections described in this Policy.

125win retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulatory obligations. The following indicative retention periods apply:

• Account & Identity Data: Retained for the duration of the active account relationship plus a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in compliance with applicable financial record-keeping obligations.
• Support Communications: Retained for three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Technical & Behavioural Data: Aggregated analytics data retained indefinitely in anonymised form; raw session logs retained for up to twelve (12) months.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to any individual.

The 125win platform uses cookies and similar tracking technologies to deliver a functional and personalised experience. The following categories of cookies are deployed:

• Strictly Necessary Cookies: Essential for the platform to function — including session authentication, CSRF protection, and load balancing. These cannot be disabled without impairing core functionality.
• Functional Cookies: Used to remember your preferences such as language settings, game history, and notification preferences across sessions.
• Analytics Cookies: Used to collect aggregated data on how players navigate the platform — page views, session duration, game engagement — to help us improve the 125win experience.

Subject to applicable law, you hold the following rights with respect to your personal data processed by 125win. To exercise any of these rights, please contact our support team using the details in Section 14.

• Right of Access: You may request a copy of the personal data we hold about you at any time. We will respond within 30 calendar days of a verified request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Certain corrections may require re-submission of KYC documents.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction: You may request that we limit the processing of your data in specific circumstances — for example, while a rectification request is being resolved.
• Right to Data Portability: Where processing is based on consent or contract, you may request a structured, machine-readable export of your personal data.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing communications. Opt-out of marketing emails is available via the unsubscribe link in any promotional email or through your Account settings.

All rights requests are fulfilled free of charge for the first request within any 12-month period. Requests that are manifestly unfounded or excessive may attract a reasonable administrative fee or may be declined in accordance with applicable law, in which case we will provide written reasons.

125win is strictly an adult platform. The minimum age to register and use any feature of the 125win platform is 21 years. We do not knowingly collect or process personal data from any individual under this age.

If we become aware that personal data has been collected from an individual under the age of 21, we will immediately deactivate the relevant account, void any associated transactions, and permanently delete the data in question. If you are a parent or guardian and believe your child may have registered on our platform, please contact us immediately using the details in Section 14.

125win implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your browser and the 125win platform is encrypted using industry-standard transport layer security protocols.
• Encrypted Data Storage: Sensitive personal and financial data stored at rest is encrypted using AES-256 or equivalent standards in access-controlled server environments.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis with role-based access controls, audit logging, and multi-factor authentication for all system administrators.
• Regular Security Audits: Daily automated security scans and periodic independent penetration testing are conducted to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no digital system is entirely immune from risk. 125win cannot guarantee absolute security of data transmitted over the internet and will not be liable for unauthorised access resulting from factors outside our reasonable control, including breaches caused by the User's own failure to maintain account credential security.

125win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, the platform's features, applicable laws, or regulatory guidance. The date of the most recent revision is displayed at the top of this page.

Where amendments are material — meaning they substantially change how we collect, use, or share your personal data — we will notify registered players via the email address associated with their account at least 14 calendar days before the changes take effect. A notice will also be displayed prominently on the platform during this period.

Continued use of the 125win platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the amended Policy, you may close your account and withdraw your remaining balance in accordance with our Terms & Conditions.

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by 125win, please contact our Data Protection team through the following channel:

For questions relating to account management, responsible gambling tools, or self-exclusion, please visit our Responsible Gambling page or contact our support team directly via live chat.