happywin Privacy Policy

1. Who We Are

happywin ("happywin", "we", "us", "our") is the operator of the online casino and sports betting platform accessible at happywin.lat and its associated subdomains and mobile interfaces. happywin operates under international gaming authority frameworks and is committed to handling all personal data in accordance with applicable data protection obligations.

For the purposes of this Privacy Policy, happywin is the data controller in respect of the personal data of registered players and website visitors. Questions, requests, or complaints relating to this Privacy Policy may be directed to the happywin data protection contact as specified in Section 13.

2. Data We Collect

happywin collects personal data in the following categories:

happywin does not collect sensitive personal data (such as health data, religious beliefs, or political opinions) except where a player voluntarily discloses such information in a responsible gaming context — for example, when requesting self-exclusion and providing context about a gambling-related health concern. Such data is treated with the highest level of confidentiality and is used solely for the player protection purpose for which it was shared.

3. How We Use Your Data

happywin processes your personal data for the following purposes:

• Account creation and management: To register your happywin account, verify your identity, maintain your account profile, and enable you to log in and access all platform features.
• Service delivery: To process your bets, deposits, and withdrawals; to credit winnings to your account; to provide live casino, sportsbook, and slots services; and to deliver customer support.
• KYC and fraud prevention: To verify your age (21+ requirement), confirm your identity, comply with Know Your Customer obligations under the gaming authority framework, detect and prevent fraud, money laundering, and other prohibited activities.
• Responsible gaming: To administer deposit limits, loss limits, session time limits, cooling-off periods, and self-exclusion requests; to monitor account activity for indicators of problem gambling and take appropriate action in accordance with our responsible gaming obligations.
• Legal compliance: To comply with applicable laws, regulatory requirements, and obligations under the international gaming authority framework under which happywin operates, including record-keeping and reporting obligations.
• Platform security: To detect and respond to unauthorised account access, abuse, or technical attacks on the happywin platform.
• Marketing communications: Where you have provided consent or where we have a legitimate interest, to send you information about happywin promotions, bonuses, and new features. You may opt out at any time through your account settings.
• Platform improvement: To analyse aggregated usage data to improve the happywin platform, personalise your experience, and develop new features.

4. Legal Basis for Processing

happywin processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the Terms & Conditions you accepted when registering a happywin account, including delivering gaming services, processing payments, and managing your account.
• Legal obligation: Processing required to comply with applicable regulatory obligations, including KYC verification, anti-money laundering checks, and responsible gaming record-keeping.
• Legitimate interests: Processing for fraud detection, platform security, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: For marketing communications and non-essential cookies, where we rely on your opt-in consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing & Third Parties

happywin does not sell your personal data to third parties. We share your personal data only in the following circumstances and only to the extent strictly necessary:

• Payment processors: Your financial data is shared with the payment service providers that process your transactions — including Touch n Go eWallet, Boost, and Malaysian banking partners (Maybank, CIMB, Public Bank) — solely for transaction processing purposes.
• Game providers: Technical identifiers (not full identity data) may be shared with licensed game studios to facilitate game session management and RNG certification auditing.
• KYC verification services: Identity documents provided for age and identity verification may be processed by accredited third-party KYC service providers engaged by happywin, subject to confidentiality obligations equivalent to those in this Policy.
• Regulatory authorities: Where required by law or under the terms of the international gaming authority framework, happywin may be required to disclose personal data to regulatory bodies or law enforcement agencies.
• IT service providers: Infrastructure, hosting, and cybersecurity service providers who support the operation of the happywin platform, subject to data processing agreements that restrict use of your data to platform support purposes only.

All third parties engaged by happywin who process personal data on our behalf are bound by contractual obligations to protect that data and to process it only for the specified purpose. happywin remains responsible for ensuring those obligations are maintained.

6. Cookies & Tracking Technologies

happywin uses cookies and similar technologies on happywin.lat for the following purposes:

• Essential cookies: Required for the happywin platform to function — including session management, login state, and security tokens. These cannot be disabled without affecting your ability to use the platform.
• Functional cookies: Store your preferences such as language settings and responsible gaming limit displays to personalise your happywin experience.
• Analytics cookies: Collect aggregated, anonymised data about how visitors interact with the happywin platform to help us improve performance and usability. No individual player is identifiable from analytics data.
• Marketing cookies: Used only where you have provided explicit consent to receive personalised promotional communications. You may withdraw this consent at any time.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the happywin platform. Your consent to non-essential cookies is requested on your first visit to happywin.lat.

7. Data Retention

happywin retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and transaction data: Retained for a minimum of 5 years from the date of your last transaction, in accordance with anti-money laundering record-keeping requirements.
• KYC verification documents: Retained for a minimum of 5 years from account closure or the conclusion of any investigation, whichever is later.
• Support communications: Retained for 2 years from the date of the relevant interaction, unless retained longer in connection with a dispute or legal matter.
• Marketing preference records: Retained for the duration of your happywin account plus 1 year following closure, to demonstrate consent compliance.

After applicable retention periods expire, personal data is securely deleted or anonymised.

8. Data Security

happywin implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and happywin.lat.
• Hashed and salted storage of password credentials — happywin employees cannot read your password.
• Two-factor authentication available for all happywin player accounts.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of the happywin platform.
• Incident response procedures for the identification, containment, and notification of data security incidents.

While happywin takes all reasonable steps to protect your data, no digital system is immune to all threats. You are responsible for maintaining the security of your own login credentials and for notifying happywin immediately if you suspect any unauthorised access to your account.

9. Your Rights

Subject to applicable data protection laws, you have the following rights in respect of your personal data held by happywin:

• Right of access: To request a copy of the personal data happywin holds about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to restriction: To request that happywin restrict processing of your data in certain circumstances.
• Right to data portability: To receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object: To object to processing of your personal data for direct marketing purposes. You may also object to other processing based on legitimate interests, subject to happywin's overriding legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent, to withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, contact the happywin data protection team at the address in Section 13. happywin will respond to verified requests within 30 days. Identity verification will be required before processing access or erasure requests.

10. Children & Minors

The happywin platform is strictly for adults aged 21 years and above. happywin does not knowingly collect personal data from persons under the age of 21. Age verification is mandatory during the registration process and may be repeated at any time through KYC documentation requests.

If happywin discovers or is informed that personal data has been collected from a person under 21, that account will be immediately closed, all associated data will be deleted (except where retention is required for regulatory purposes), and any funds deposited will be returned. If you are a parent or guardian and believe your minor child has registered a happywin account, contact our support team immediately.

11. International Data Transfers

happywin's primary data infrastructure is operated under the international gaming authority framework. Some personal data may be processed by service providers located outside Malaysia. Where such transfers occur, happywin ensures that appropriate safeguards are in place — including contractual protections equivalent to those required under applicable data protection standards — before any transfer of personal data outside the country where it was collected.

12. Changes to This Policy

happywin may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. The effective date at the top of this page indicates when the current version was last published. Where changes are material, happywin will notify registered players by email or in-platform notification prior to the changes taking effect. Your continued use of the happywin platform after a Privacy Policy update constitutes acceptance of the revised Policy.

13. Contact & Data Enquiries

For all privacy-related questions, data subject access requests, or complaints regarding the handling of your personal data by happywin, please contact the support team via the 24/7 live chat on the happywin platform. For written enquiries, use the registered contact address: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line and provide sufficient information for us to verify your identity and understand your request.

happywin is committed to resolving all privacy enquiries promptly. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority or the gaming regulatory authority under whose framework happywin operates.