This document clearly sets out how BigWin collects, uses, stores, and protects your personal data. Privacy is not merely a legal obligation to us — it is a core commitment we uphold for every player.
Important Note: This Privacy Policy describes BigWin's data collection and handling practices. By using our platform, you agree to the terms set out here. If you have any questions about how your data is used, please contact us at support@bigwin.express at any time.
BigWin takes the privacy of every Malaysian player on our platform seriously. This Privacy Policy clearly outlines the types of data we collect, the purposes for which it is used, how we protect it, and your rights as a user with respect to your personal data.
This policy is written in plain, easy-to-understand language — not confusing technical jargon. BigWin believes that players who understand how their data is managed are players who feel more comfortable and confident using our platform.
BigWin only collects data that is genuinely necessary to provide a safe, fair, and fully functional service. We do not collect excessive or irrelevant data beyond what is needed to operate the platform.
Data you provide during registration, identity verification, and platform use includes your full name, Malaysian phone number, encrypted password, payment method details (Touch 'n Go eWallet, GrabPay, DuitNow, FPX) and identity verification documents where required for KYC.
| Data Type | Example | Primary Purpose |
|---|---|---|
| Identity Data | Name, phone number, date of birth | Account verification & KYC |
| Contact Data | Phone number, email address (if provided) | Communications & support |
| Financial Data | Payment methods, transaction records | Processing deposits & withdrawals |
| Activity Data | Betting history, sport preferences, login records | Experience improvement & security |
| Technical Data | IP address, device type, browser | Security & fraud detection |
| Location Data | Country or state (from IP) | Regional regulatory compliance |
Data collected is used solely for legitimate purposes directly related to the provision of BigWin services. We do not use your data for purposes you would not expect or have not consented to.
BigWin does not use your data to make automated decisions that significantly affect you without human review. Any action taken against an account is investigated by our team before being carried out.
BigWin does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is an absolute commitment with no exceptions.
However, there are limited situations where BigWin needs to share certain data with specific parties in order for the platform to function:
To process your transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, only the minimum required transaction information is shared with the relevant provider. These providers are bound by strict digital payment security standards and are not permitted to use your data for any other purpose.
Protecting player data is an active investment BigWin makes, not merely a passive obligation. We employ multiple layers of security to ensure your data is always protected against unauthorised access, loss or misuse.
All data transmitted between your device and BigWin's servers is encrypted using 256-bit SSL — the same standard used by Malaysia's major banking institutions such as Maybank and CIMB.
Your password is never stored in plain text. BigWin uses the robust Bcrypt hashing algorithm, meaning that even in the event of a database breach, your password cannot be read.
A real-time threat monitoring system operates around the clock to detect suspicious activity, intrusion attempts, and security anomalies before they become problems.
Only BigWin employees who require access to specific data in order to perform their duties are permitted to do so. All access is logged and regularly audited to ensure there is no misuse.
Data is regularly backed up to separate secure locations to ensure service continuity and data recovery in the event of an unexpected incident.
BigWin conducts regular internal and external security audits to identify potential vulnerabilities and ensure systems are always updated with the latest security patches.
BigWin uses cookies and similar technologies to ensure the platform functions properly and to deliver a better experience. This section clearly explains the types of cookies used and their purposes.
| Cookie Types | Purpose | Duration | Status |
|---|---|---|---|
| Session Cookies | Keeps you logged in while you are using the platform | Until logout | |
| Security Cookies | Preventing CSRF attacks and ensuring secure sessions | 1 day | |
| Preference Cookies | Saves your language preferences, favourite sports and display settings | 90 days | |
| Performance Cookies | Measuring page load speed and identifying technical issues | 30 days | |
| Analytics Cookies | Understands how players use the platform so we can make improvements | 12 months |
BigWin retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by law. When data is no longer needed, it is securely deleted or anonymised.
BigWin respects your rights over your personal data. You may exercise the following rights at any time by contacting us at support@bigwin.express:
You have the right to request a copy of all personal data BigWin holds about you. We will provide this in a readable format within 30 days of your request.
If your data is inaccurate or out of date, you have the right to request an immediate correction. Contact BigWin support with the correct details and we will update your records accordingly.
You may request the deletion of your personal data, subject to our legal obligations. Data required for regulatory compliance (such as financial records) may need to be retained for a prescribed period.
You may request that BigWin restrict how your data is used in certain situations — for example, while you are disputing the accuracy of your data or while an investigation is in progress.
You have the right to receive your personal data in a structured, machine-readable format for the purpose of transferring it to another platform, should you wish to do so.
You may object to the processing of your data for specific purposes. BigWin will cease such processing unless there are legitimate grounds or legal obligations that override your objection.
To exercise any of these rights, submit a written request to support@bigwin.express by stating the specific right you wish to exercise along with your account details. BigWin will respond within 30 working days.
The BigWin platform is strictly for users aged 18 and above. BigWin actively takes steps to prevent use of the platform by underage children and minors.
The BigWin platform may contain references or links to third-party services such as payment providers (Touch 'n Go eWallet, GrabPay, and others). This Privacy Policy applies solely to the BigWin platform.
BigWin reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. We are committed to keeping you informed of any significant changes.
If you have any questions, concerns, or requests regarding this Privacy Policy or how BigWin handles your personal data, our team is ready to help.
Send an email to support@bigwin.express with the subject line "Privacy Enquiry", along with your account number and details of your query. Our team operates 24 hours a day, 7 days a week and is ready to assist in Bahasa Melayu. We are committed to responding to all privacy enquiries within 48 working hours.
In today's increasingly digital world, a player's trust in an online platform depends not only on the quality of the games or the odds on offer — but also on the confidence that their personal information is in safe hands. BigWin fully understands this reality. That is why we invest seriously in data security infrastructure, transparent privacy policies, and responsible data handling practices — not merely because the law requires it, but because it is the right thing to do for our players.
Malaysian players who register with BigWin to bet on Malaysia Super League football, watch IPL cricket matches live, or play Baccarat in our Live Casino are required to provide certain personal information. This includes their Malaysian phone number, their chosen payment method — whether Touch 'n Go eWallet, GrabPay, DuitNow, or FPX via Maybank2u or CIMB Clicks — and their betting activity. BigWin regards the trust placed in us when players submit this information as a serious responsibility, and we do not take that role lightly.
One thing we want to make absolutely clear is our approach to payment security. When you make a deposit to BigWin using Touch 'n Go eWallet or GrabPay, the transaction does not pass directly through BigWin's servers — it is processed through the payment provider's secure channel using the same security protocols employed by Malaysia's major banks. BigWin only receives confirmation that the transaction was successful, not your eWallet account details or password. This separation layer is a key part of BigWin's security architecture.
Regarding the use of data for platform improvement, we want to be upfront about what actually happens. BigWin analyses usage patterns in aggregated, anonymised form to understand which features are most used, where players encounter friction, and how we can make the EPL football or MPL esports betting experience smoother and more enjoyable. This analysis does not involve examining individual profiles — it is about understanding overall patterns that help us make better product decisions for all BigWin users.
One aspect of data protection that players often overlook is password security. BigWin stores passwords in an encrypted format using Bcrypt — meaning that even if someone were to gain unauthorised access to our database, they would not be able to read user passwords in plain text. That said, this does not mean you should use a weak password or reuse the same one across multiple platforms. We encourage all BigWin players to use strong, unique passwords and to change them regularly for maximum security.
Finally, BigWin wants to emphasise that this Privacy Policy is not a static document written once and forgotten. We review and update it regularly to reflect the latest developments in data security best practices, changes to platform technology, and any new relevant legal requirements. When significant updates occur, we will notify our players — not simply change the text on this page without a word. This is part of BigWin's commitment to transparency, one we take very seriously.
The principles that shape how we handle the personal data of Malaysian players
BigWin only collects data that is strictly necessary to provide its services. We do not collect excessive information or data irrelevant to the platform's operations. The less data we collect, the lower the privacy risk to you.
This is BigWin's absolute commitment — we have never and will never sell, rent, or trade players' personal data to third parties for commercial or marketing purposes. Your data is not our product.
All communications between your device and BigWin's servers are protected with 256-bit SSL. Sensitive data such as passwords is additionally encrypted using an irreversible Bcrypt algorithm.
BigWin provides full access to your privacy rights — including the right to access, correct, delete, or transfer your data. Every request is handled with due care within 30 days.
Your data is not stored indefinitely. BigWin has a clear retention policy — data is deleted or anonymised once it is no longer required for the stated purposes or legal obligations.
BigWin's Privacy Policy is written in plain, easy-to-understand Bahasa Malaysia — not confusing legal jargon. We believe Malaysian players deserve to fully understand how their data is managed.
Answers to the most frequently asked questions about how BigWin protects player data
If you are not satisfied with how BigWin handles your personal data, or wish to exercise any of your privacy rights, please contact us at support@bigwin.express. Please state "Privacy Complaint" or "Data Request" in your email subject line along with your BigWin account number for faster processing. Our team is available to assist in Bahasa Malaysia 24 hours a day.
Sign up for free with BigWin and enjoy a safe, fair and transparent Sports Betting experience. Your privacy is fully protected — minimum deposit RM10 via TNG, GrabPay or DuitNow.