Datowin Privacy Policy – Your Personal Data Protection

1Introduction

Welcome to the datowin Privacy Policy. This document is an agreement between you ("Member", "User", "you") and datowin ("we", "Platform") outlining our practices regarding personal data protection.

We understand that trust is the foundation of our relationship with you. When you entrust us with your personal information, we do not take that responsibility lightly. Every data-related decision is made with your interests and safety as the top priority.

This privacy policy applies to all Datowin services including the official website, Android mobile app, webapp and all interactions between you and our platform. It should be read together with Terms and Conditions us.

2Information We Collect

Datowin collects your personal information through several means depending on how you interact with our platform. The following are the main categories of data we collect:

Information You Provide Directly:

• Full name as shown on your identity document.
• Email address and mobile phone number.
• Date of birth for age verification.
• Current residential address.
• Account username and password.
• KYC documents including copies of your ID and bank statements.
• Payment method information such as bank account numbers and e-wallet details.

Information Collected Automatically:

• IP address and device information (type, model, operating system).
• Browser log data including access times and pages visited.
• Transaction records, wagering history and gaming activity.
• Country or city-level location data based on IP.
• Session cookies and user preference cookies.

3How We Use Your Data

Every piece of data we collect has a clear purpose. We do not retain data without a concrete reason. Below is a summary table of data usage purposes:

We also use your data to fulfil legal obligations such as reporting to authorities on anti-money laundering (AML) and counter-terrorism financing (CFT), as well as to carry out the Know Your Customer (KYC) process required by industry regulations.

4Legal Basis for Processing

Datowin processes your personal data on the basis of one or more of the following legal grounds, in line with recognised data protection principles:

• Contract Performance: Processing is necessary to fulfil the service agreement between you and datowin — including account management, payment processing, and the delivery of gaming services.
• Legal Obligation: We are legally required to maintain financial transaction records, conduct AML checks, and report suspicious activity to the relevant authorities.
• Legitimate Interest: We process certain data for platform security, fraud prevention, and service improvement purposes that directly benefit you as a user.
• Consent: For marketing communications and non-essential cookies, we will request your explicit consent. You may withdraw consent at any time.

5Data Sharing with Third Parties

Datowin does not sell, rent or trade your personal data to any party for commercial purposes. However, there are limited situations where we need to share your data:

Trusted Service Providers:

• Payment gateway providers to process financial transactions.
• Identity verification service providers for the KYC process.
• Cloud service providers that store your data to strict security standards.
• Game software providers that require limited access to session data to ensure fair play.

All these third-party providers are bound by strict data protection agreements and are only permitted to use your data for the specified purposes.

Legal Requirement:

• Disclosure to law enforcement authorities when required by court order or applicable legislation.
• Reporting suspicious transactions to the Financial Intelligence Unit (FIAU) or equivalent body as required under AML regulations.
• Information sharing with relevant gambling industry regulatory bodies.

6Data Storage & Security

Your data security is our highest priority. datowin continuously invests in cutting-edge security infrastructure to ensure your personal data is always protected.

Technical Security Measures:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• At-rest data encryption using AES-256 for all stored data.
• Role-based access control — only staff who need it can access your data.
• 24/7 security monitoring with a real-time intrusion detection system.
• Regular security testing by independent third parties (penetration testing).
• Two-factor authentication (2FA) is available for all member accounts.

Organisational Security Measures:

• All staff who handle personal data undergo comprehensive data protection training.
• Strict internal control policies with regular access log auditing.
• A detailed security incident response plan to address any potential data breach.

7Cookies & Tracking Technologies

Datowin uses cookies and similar tracking technologies to ensure smooth platform functionality and to enhance your overall experience.

Types of Cookies Used:

• Essential Cookies: Required for core platform functions such as login, session management and security. Cannot be disabled.
• Performance Cookies: Collecting information about how you use the platform to help us identify issues and improve performance. Data is collected anonymously.
• Functional Cookies: Saving your preferences such as language, text size, and interface settings so you do not need to reconfigure them each time.
• Marketing Cookies: Used only with your consent to display relevant promotions and offers based on your usage habits on our platform.

You can manage cookies at any time through your browser settings. However, disabling essential cookies may affect core platform functionality. Cookie settings can also be managed in your account section.

8Your Personal Data Rights

As a datowin member and as an individual whose personal data we process, you hold the following rights, which we fully respect:

• Right of Access: You have the right to request a copy of all personal data we hold about you.
• Right to Rectification: If your data is inaccurate or incomplete, you have the right to request a correction.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data ("right to be forgotten").
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Portability: You have the right to receive your data in a machine-readable format for transfer to another service provider.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances while a dispute is being resolved.

9Children's Data

The datowin platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of individuals under 18 years of age.

Should we discover that a child's personal data has been collected without parental or guardian knowledge, we will immediately take the following steps:

• Closing the affected account immediately.
• Deleting all related personal data from our systems.
• Reporting the incident to the relevant authorities if required.

If you believe a minor has registered on our platform, please contact our support team immediately so we can take the appropriate action.

10International Data Transfers

In the course of our operations, your personal data may be transferred to and stored on servers located outside your country of origin. All international data transfers are carried out with adequate safeguards:

• We only use cloud providers and services that comply with internationally recognised data protection standards.
• All data transfers are covered by comprehensive data processing agreements (DPAs) with standard protection clauses.
• We ensure an equivalent level of protection consistent with this privacy policy, regardless of where the data is physically stored.

11Changes to This Privacy Policy

Datowin reserves the right to update this privacy policy from time to time to reflect changes in our practices, legal requirements or improvements to our services.

When significant changes occur, we will:

• Displaying a clear notice on the platform's home page for at least 7 days before the changes take effect.
• Sending a notification to the email address registered to your account.
• Updating the "Last Updated" date at the top of this document.

Your continued use of the datowin platform after the effective date of any changes constitutes your acceptance of the updated privacy policy.

12Contact Us

If you have any questions, concerns or requests regarding this privacy policy or how we handle your personal data, our data protection team is ready to assist.

• Live Chat: Available directly on the datowin platform, 24 hours a day, 7 days a week — the fastest way to get a response.
• Email: Send your enquiry to [email protected] — we will respond within 1 business day.