Kerangwin is committed to protecting the personal data of every player on our platform. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you hold as a data subject. Please read it carefully before using our services.
This Privacy Policy ("Policy") is issued by Kerangwin ("the Company", "We", "Us", "Our") and applies to all personal data processed in connection with the Kerangwin online gaming platform accessible at kerangwin.cam, including all associated web pages, mobile interfaces, account management tools, and customer support channels (collectively, "the Platform" or "Services").
Kerangwin takes its obligations as a data processor seriously. We collect and process personal data only for clearly defined, lawful purposes, retain it only for as long as necessary, and implement robust technical and organisational measures to protect it from unauthorised access, loss, or misuse.
By registering an account, accessing the Platform, or using any of our Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must cease all use of the Platform and may request account closure in accordance with our Terms & Conditions.
Malaysian Users: Kerangwin processes personal data of users located in Malaysia in accordance with applicable international data protection standards. Malaysian users retain all rights described in Section 11 of this Policy. Where Malaysian law imposes additional or different obligations regarding personal data, Kerangwin will endeavour to comply with those obligations to the extent reasonably practicable.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, identification number, email address, financial account details, IP address, and device identifiers. |
| Data Controller | Kerangwin, as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| Data Processor | Any third-party service provider that processes personal data on behalf of Kerangwin under a written data processing agreement. |
| Data Subject | The natural person (i.e., registered player or visitor) to whom the personal data relates. |
| Processing | Any operation performed on personal data, including collection, recording, storage, use, transmission, disclosure, or deletion. |
| KYC | Know Your Customer — the identity and age verification process required of all players before withdrawals are processed. |
| Cookies | Small text files stored on a user's device by a web browser to retain session information, preferences, and analytical data. |
Kerangwin collects personal data across several categories, depending on the nature of your interaction with the Platform. The following table summarises the categories of data we collect and examples within each category:
| Data Category | Examples | Collected When |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID number | Registration & KYC verification |
| Contact Data | Email address, phone number | Registration & support interactions |
| Financial Data | Bank account details, e-wallet account identifiers (e.g., Touch 'n Go, DuitNow), transaction history, deposit and withdrawal records | Deposits, withdrawals & KYC |
| Gaming Activity Data | Wager history, game session logs, bet amounts, game outcomes, win/loss records, bonus usage | All platform usage |
| Technical Data | IP address, device type, browser type and version, operating system, session duration, pages visited | All platform usage (automatic) |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Preference Data | Marketing communication preferences, responsible gambling tool settings, language and display preferences | Account settings & profile updates |
We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health information) except where expressly required for responsible gambling assessments conducted at the player's voluntary request.
Kerangwin collects personal data through the following channels and mechanisms:
Kerangwin processes your personal data for the following specific, documented purposes. We do not process personal data for any purpose incompatible with those listed below without first obtaining your explicit consent or establishing a separate lawful basis:
Kerangwin relies on the following legal bases for processing personal data, consistent with applicable international data protection frameworks:
Kerangwin does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:
All third-party service providers engaged by Kerangwin to process personal data are required to enter into a data processing agreement that prohibits them from using your personal data for any purpose other than the specific service they are providing to us.
Kerangwin uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and support security functions. The following categories of cookies are used:
You may manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the Platform. Kerangwin does not use cookies to deliver third-party advertising or to track your activity across third-party websites.
Kerangwin retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any overriding legal or regulatory retention obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | Legal & regulatory obligation |
| Financial Transaction Records | 7 years from transaction date | AML & financial record-keeping obligation |
| KYC Documents | Duration of account + 5 years post-closure | Regulatory compliance |
| Gaming Activity Logs | 3 years from session date | Dispute resolution & responsible gambling monitoring |
| Customer Support Records | 3 years from last interaction | Legitimate interest (dispute resolution) |
| Marketing Preferences | Until consent is withdrawn | Consent |
| Technical & Session Data | 13 months from collection | Platform analytics & security |
Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised such that it can no longer be linked to an identifiable individual.
Kerangwin implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
While Kerangwin takes all reasonable steps to protect your personal data, no digital transmission or storage system is entirely immune from risk. We strongly encourage all users to use strong, unique passwords and to enable 2FA on their accounts.
As a data subject, you hold the following rights in respect of your personal data processed by Kerangwin. These rights may be subject to certain limitations under applicable law, particularly where processing is carried out to comply with legal obligations or to protect the rights of others.
Request a copy of the personal data we hold about you, along with information about how it is processed.
Request correction of inaccurate or incomplete personal data held about you.
Request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to legal retention obligations.
Request that we restrict processing of your personal data in certain circumstances, such as while an accuracy dispute is resolved.
Request a machine-readable copy of personal data you have provided to us, for transfer to another service provider where technically feasible.
Object to processing based on legitimate interests or for direct marketing purposes. Marketing objections will always be honoured immediately.
Withdraw any previously given consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
Lodge a complaint with the relevant supervisory authority in your jurisdiction if you believe your data rights have not been honoured.
To exercise any of the above rights, please contact our Data Protection team at the address provided in Section 15 of this Policy. We will respond to all verifiable requests within 30 calendar days. In cases of complexity or volume, we may extend this period by a further 30 days and will notify you accordingly.
As an internationally operated platform, Kerangwin may transfer personal data to third-party service providers and group companies located in countries outside Malaysia. Such transfers may occur in connection with payment processing, KYC verification, cloud hosting, fraud detection, and customer support infrastructure.
Where personal data is transferred internationally, Kerangwin takes appropriate steps to ensure that such transfers are subject to equivalent data protection safeguards, including contractual obligations on data recipients through standard contractual clauses or equivalent mechanisms recognised under applicable data protection frameworks.
You may request further information about the specific safeguards applied to international transfers of your personal data by contacting us at the details set out in Section 15.
The Kerangwin Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect or process personal data from any individual under the age of 21.
Age verification is conducted as a mandatory component of the KYC process for all accounts prior to withdrawal processing. Where we become aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, void any associated balance, and permanently delete all personal data associated with that account in accordance with our data retention obligations.
Parents and guardians who believe that a minor has registered an account on the Platform are urged to contact our support team immediately. We will investigate and act on all such reports as a matter of urgency.
Kerangwin reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will provide reasonable advance notice by posting a prominent update notice on the Platform and, where applicable, by notifying registered users via email to the address associated with their Account.
The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure under the terms of our Terms & Conditions.
We recommend reviewing this Privacy Policy periodically to remain informed of how we handle your personal data. Archived versions of this Policy are available upon request.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection team through the following channel:
Data Protection & Privacy Enquiries: support kerangwin.cam
Please include "Privacy Request" in the subject line of your correspondence, along with your registered account username. We will acknowledge receipt within 3 business days and respond substantively within 30 calendar days.
If your query relates specifically to responsible gambling tools, self-exclusion, or deposit limits, please also visit our Responsible Gambling page for direct access to those features and relevant support resources.
Six core commitments that underpin our approach to data privacy — in plain language, without the legal jargon.
Your personal data is not a product. Kerangwin does not sell, rent, or trade your information to advertisers, data brokers, or any third party for commercial gain. Full stop.
Every piece of data transmitted between your device and Kerangwin's servers is protected by 256-bit SSL encryption — the same standard used by major international banks.
You hold clear rights to access, correct, delete, and export your personal data. Submit a request through our support team and we will respond within 30 days.
We retain personal data strictly in accordance with the retention periods set out in this Policy, driven by legal obligations and operational necessity — not commercial convenience.
We send promotional communications only to players who have explicitly opted in. You can withdraw marketing consent at any time via your account settings — no questions asked.
Every third-party provider that handles your data — from KYC verifiers to payment processors — operates under a written data processing agreement restricting them to stated purposes only.
Have questions about how your data is handled? Our support team is available 24/7 to address any privacy concern. For players aged 21 and above only.