gdwon is committed to protecting the privacy and personal data of every player. This Policy explains exactly what we collect, why we collect it, how it is used, and the rights you hold over your own information.
Effective Date: 1 January 2026 · Version 2.0gdwon ("the Company", "we", "us", "our") operates the online gaming and sports betting platform accessible at https://gdwon.cam (the "Platform"). We are the data controller responsible for the personal information you provide to us when you register an account, make a transaction, or otherwise interact with the Platform.
This Privacy Policy ("Policy") describes in clear terms the personal data we collect, the purposes for which we process it, the parties with whom we may share it, the measures we take to keep it secure, and the rights available to you as a data subject. This Policy applies to all users of the Platform, including registered players, prospective players, and visitors to our website.
By creating an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue use of the Platform immediately.
This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.
Malaysian Players: gdwon's Platform is targeted at users located in Malaysia. We operate with particular awareness of the rights of Malaysian users and handle all personal data with care and in accordance with applicable data protection principles.
For the purposes of this Policy, the following definitions apply:
We collect Personal Data through several means: directly from you when you register or interact with the Platform; automatically when you browse or use the Platform; and from third-party service providers in connection with KYC verification and payment processing. The categories of Personal Data we collect include the following:
Minimisation Principle: gdwon collects only the Personal Data that is necessary for the purposes set out in this Policy. We do not collect Personal Data speculatively or for purposes beyond those described herein.
We process your Personal Data only for legitimate purposes that are described to you at or before the time of collection. The primary purposes for which we use your Personal Data are set out in the table below.
| Purpose | Data Categories Used |
|---|---|
| Account creation and authentication | Registration data, technical data |
| Identity and age verification (KYC) | KYC data, registration data |
| Processing deposits and withdrawals in MYR | Financial data, KYC data |
| Anti-money laundering (AML) compliance | Financial data, KYC data, usage data |
| Fraud detection and prevention | Technical data, financial data, usage data |
| Providing customer support (English, Bahasa Melayu, Mandarin) | Registration data, communications data |
| Personalising your Platform experience | Usage data, communications data |
| Sending promotional communications (where consented) | Registration data, communications data |
| Responsible gambling monitoring and intervention | Usage data, financial data, registration data |
| Platform analytics and performance improvement | Technical data, usage data |
| Compliance with applicable legal obligations | All categories as required |
We process your Personal Data under one or more of the following legal bases:
gdwon does not sell, rent, or trade your Personal Data to any third party. We may disclose your Personal Data only in the following limited circumstances:
We engage carefully selected third-party service providers acting as Data Processors to support the operation of the Platform. These providers may include identity verification services, payment processors (including operators of DuitNow, FPX, and e-wallet rails such as Touch 'n Go, Boost, and GrabPay), cloud hosting providers, customer support software providers, and analytics platforms. All Data Processors are contractually required to process Personal Data only on our instructions and to maintain appropriate security measures.
We may disclose your Personal Data to competent regulatory authorities, law enforcement agencies, or courts where we are required to do so by applicable law, court order, or regulatory direction. We will notify you of any such disclosure where we are legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's business, your Personal Data may be transferred to the successor entity. We will notify you of any such transfer and, where required, seek your consent before your Personal Data is processed under materially different terms.
Where required by our responsible gambling obligations, we may share limited account information with responsible gambling support schemes, self-exclusion registries, or regulatory bodies for the purpose of enforcing self-exclusion orders or protecting vulnerable players.
We will never sell your data. Under no circumstances does gdwon sell, lease, or otherwise monetise your Personal Data by transferring it to third parties for their own marketing or commercial purposes.
We retain your Personal Data for as long as necessary to fulfil the purposes described in this Policy, and in any event for the minimum periods required by applicable law and our regulatory obligations. The following general retention periods apply:
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures.
gdwon implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or destruction. These measures include:
Notwithstanding these measures, no method of electronic transmission or storage is entirely secure. We cannot guarantee the absolute security of your Personal Data and you transmit information to us at your own risk. You are responsible for maintaining the security of your own Account credentials. If you suspect your Account has been compromised, please contact our support team immediately.
gdwon uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that allow us to recognise you on return visits and maintain your session.
You may control or disable non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies via their settings menus. Note that disabling cookies may affect certain Platform features. For detailed instructions, refer to the help documentation of your specific browser.
You hold the following rights with respect to your Personal Data held by gdwon. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request" and include your registered username to assist us in verifying your identity.
We will respond to all Data Rights Requests within thirty (30) calendar days of receipt. Where a request is complex or we have received a high volume of requests, we may extend this period by a further sixty (60) days, subject to notifying you within the initial thirty-day period.
Note: The right to erasure does not apply where we are required to retain Personal Data by applicable law or regulation, including AML and KYC obligations. In such cases, we will inform you of the applicable retention period and the legal basis preventing erasure.
The Platform is strictly prohibited to persons under the age of twenty-one (21). We do not knowingly collect Personal Data from any person under the age of 21. Age verification is performed as part of the KYC process for all registered players.
If we become aware that we have inadvertently collected Personal Data from a person under the age of 21, we will take immediate steps to delete that data, close the associated Account, and refund any deposited funds in accordance with our underage gaming procedure.
Parents or guardians who believe their child has accessed or registered on the Platform should contact our support team immediately at [email protected].
21+ Strict Policy: gdwon enforces a zero-tolerance policy on underage access. Any account found to belong to a person under 21 will be closed immediately and all associated data handled in accordance with this Policy.
The Platform serves users primarily located in Malaysia. Some of our third-party service providers (including cloud hosting and KYC verification partners) may be located outside Malaysia, which may result in your Personal Data being transferred to and stored in jurisdictions outside your country of residence.
Where we transfer Personal Data internationally, we take appropriate safeguards to ensure that such transfers are conducted in a manner consistent with applicable data protection requirements, including:
By using the Platform, you acknowledge and agree that your Personal Data may be transferred and processed outside Malaysia as described in this clause.
The Platform may contain references to third-party payment processors and services (such as Maybank, CIMB, Public Bank, and e-wallet providers) in the context of processing your transactions. While we select our payment partners carefully, each third-party provider operates under its own privacy policy and data practices.
This Policy applies solely to Personal Data collected and processed by gdwon through the Platform. gdwon is not responsible for the privacy practices of third-party payment providers or any other external services you access in connection with your use of the Platform. We encourage you to review the privacy policies of any third-party services you use.
We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable legal requirements, or the services we provide. Where changes are material — meaning they alter how your Personal Data is collected, used, or shared in a way that may affect your rights — we will provide at least fourteen (14) calendar days' advance notice via email to your registered address and/or a prominent notice on the Platform before the updated Policy takes effect.
Minor clarifications, typographical corrections, and non-material amendments may be made without advance notice, provided the substance of the Policy is not altered. The version number and effective date at the top of this page will always reflect the current version.
Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree to an amendment, you must cease using the Platform and contact us to request Account closure.
The current version of this Policy is always accessible at https://gdwon.cam/privacy-policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by gdwon, please contact our support team through the following channels:
Support is available in English, Bahasa Melayu, and Mandarin. We aim to acknowledge all privacy-related email enquiries within 48 hours and provide a substantive response within 30 calendar days, as required for formal Data Rights Requests.
Escalation: If you are not satisfied with our response to a data-related complaint, you may escalate the matter to the applicable supervisory authority or data protection regulator under your local jurisdiction's data protection law.
Six principles that define how gdwon handles your personal data — every day, for every player.
Your personal information is never sold, rented, or traded to any third party for their own commercial purposes — full stop, no exceptions.
Every data transmission between your device and the Platform is encrypted with 256-bit SSL. Your data rests in encrypted, access-controlled storage.
We collect only the Personal Data necessary to operate your Account and meet our regulatory obligations — nothing speculative, nothing redundant.
You can request access to, correction of, portability of, or deletion of your Personal Data at any time by contacting our support team — with a guaranteed response timeline.
Every category of Personal Data we collect is mapped to a specific, disclosed processing purpose. We do not process your data for undisclosed or secondary purposes.
Data is retained only for as long as required by law or our stated purposes. Upon expiry, it is securely deleted or anonymised — not kept indefinitely.
Our support team can answer any privacy question in English, Bahasa Melayu, or Mandarin — 24 hours a day, seven days a week. Or visit our FAQ for quick answers.