Privacy Policy

This Privacy Policy ("Policy") describes how ElangWin ("we", "us", "the Operator", "the Platform") collects, uses, discloses, retains, and protects the personal data of users ("you", "the User", "the Player") who access or use the services available at elangwin.cam ("the Website"). ElangWin operates as an online casino, sports betting, and gaming platform and processes personal data in connection with its services as a data controller.

This Policy applies to all data processing activities carried out by ElangWin in connection with the Website, including the registration process, account management, payment processing, identity verification (KYC), customer support, and any promotional or marketing communications. It should be read alongside our Terms & Conditions, which govern the contractual relationship between you and ElangWin.

By registering an account on ElangWin, accessing the platform, or submitting your personal data to us in any form, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should not use our services.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, identification number, location data, email address, financial information, or any combination of data that could identify a specific individual.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing personal data; in this context, ElangWin.
• "Data Processor" — A third party that processes personal data on behalf of the Data Controller under a binding contractual arrangement.
• "KYC" — Know Your Customer; the identity and age verification process required before certain account actions are permitted.
• "Consent" — A freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their personal data for a stated purpose.
• "Third Party" — Any natural or legal person other than ElangWin and the User.

ElangWin acts as the Data Controller in respect of all personal data processed through the platform. As Data Controller, ElangWin determines the lawful basis for processing, the purposes for which data is used, the retention periods applied, and the parties to whom data may be disclosed. Where ElangWin engages third-party service providers to process data on its behalf, those providers act as Data Processors and are bound by data processing agreements that restrict their use of your data to the specific purposes for which they are engaged.

All data-related inquiries, subject access requests, and complaints should be directed to ElangWin's designated data protection contact, details of which are provided in Section 16 of this Policy.

ElangWin collects the following categories of personal data in connection with the operation of the platform:

4.1 Identity Data

• Full legal name as it appears on a government-issued identity document.
• Date of birth (for age verification — players must be 21 years or older).
• Nationality and country of residence.
• Government-issued identification document details (Malaysian MyKad, Passport, or Driver's Licence number and expiry date).
• Facial image data where submitted as part of KYC selfie verification.

4.2 Contact Data

• Email address.
• Mobile telephone number.
• Residential address (for users who provide proof of address during KYC, such as a utility bill or bank statement issued in Malaysia — whether from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere).

4.3 Financial Data

• Payment method details (name on account, masked account or e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect).
• Transaction history including deposit amounts, withdrawal amounts, and dates.
• Account balance records.

4.4 Account Activity Data

• Login timestamps, IP addresses, and device identifiers.
• Betting and gaming activity including stakes placed, games accessed, and outcomes.
• Bonus and promotion utilisation records.
• Responsible gambling tool settings (deposit limits, self-exclusion records).

4.5 Technical Data

• Browser type and version, operating system, device type.
• Cookie data and session identifiers (see Section 9).
• Referring URLs and navigation paths within the platform.

4.6 Communications Data

• Records of live chat, email, or other support interactions.
• Responses to surveys or feedback requests.

Personal data is collected through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact support, or respond to a survey.
• Automatically — through your use of the platform, including login activity, game play, and browsing behaviour, recorded via server logs, cookies, and analytics tools.
• From third parties — from payment processors and e-wallet providers (such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, and CIMB) where necessary to verify transaction details; from identity verification service providers engaged to support KYC; from fraud detection and anti-money-laundering screening services.

ElangWin relies on one or more of the following lawful bases for each category of data processing activity:

Your personal data is used exclusively for the following purposes:

• Account operation — creating and maintaining your ElangWin account, processing deposits and withdrawals in MYR, and enabling access to games and betting markets.
• Identity verification — confirming your identity, age (21+), and source of funds as required by the Operator's licensing obligations.
• Financial crime prevention — screening transactions against sanctions lists, detecting unusual account activity consistent with money laundering or fraud, and fulfilling any reporting obligations that arise.
• Responsible gambling — monitoring gameplay patterns to identify potential indicators of problem gambling, enforcing deposit and loss limits set by the player, managing self-exclusion records, and ensuring age restrictions are maintained.
• Customer support — investigating and resolving account queries, transaction disputes, and complaints received via live chat or email.
• Platform improvement — analysing aggregated and anonymised usage data to improve user experience, game performance, and platform reliability.
• Legal and regulatory compliance — retaining records as required by our international gaming licence and responding to lawful requests from regulatory or law enforcement authorities.
• Communications — sending account-related notifications (transaction confirmations, security alerts, KYC requests) and, where you have provided consent, promotional communications about bonuses and platform updates.

ElangWin does not sell your personal data. We may share your data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors and e-wallet providers — to facilitate the processing of deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Connect. These providers process payment data strictly in accordance with their own data protection obligations.
• Identity verification providers — third-party KYC service providers engaged to assist with document verification and age confirmation. All such providers are contractually bound to process data only for the specified verification purpose.
• Fraud prevention and AML screening services — data may be shared with specialist screening services to fulfil financial crime prevention obligations.
• IT infrastructure providers — hosting, cloud storage, and security service providers who process data on our behalf under data processing agreements.
• Professional advisors — lawyers, auditors, and insurers where disclosure is necessary in connection with legitimate legal, financial, or risk management activities.
• Regulatory and law enforcement authorities — where we are under a legal obligation to disclose data, or where disclosure is necessary to establish, exercise, or defend a legal claim.

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. ElangWin uses cookies and similar tracking technologies (including pixel tags and local storage objects) to enable platform functionality, maintain your session when you are logged in, and collect analytics data about how users interact with the platform.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies — required for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without impairing basic platform functionality.
• Functional Cookies — used to remember your preferences, such as your selected language or display settings.
• Analytics Cookies — used to collect aggregated data about page views, session duration, and user journeys, helping us identify areas of the platform that need improvement.
• Security Cookies — used to detect and prevent fraudulent activity, including bot detection and suspicious login pattern identification.

9.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the ElangWin platform, including the ability to maintain a logged-in session or access some features.

We retain personal data for no longer than is necessary for the purposes for which it was collected or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

Upon expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

ElangWin implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need.
• Multi-factor authentication requirements for internal system access.
• Regular third-party penetration testing and vulnerability assessments of platform infrastructure.
• Incident response procedures ensuring prompt action in the event of a suspected data breach.

Notwithstanding these measures, no internet-based system is entirely immune to security risk. In the event of a data breach that is likely to result in a high risk to your rights and interests, ElangWin will notify affected users without undue delay and take all reasonable steps to mitigate the impact.

As an internationally licensed operator, ElangWin's data processing infrastructure may involve the transfer of personal data to servers or service providers located outside Malaysia. Where such transfers occur, ElangWin ensures that appropriate safeguards are in place, including data processing agreements containing standard contractual clauses or equivalent protections consistent with internationally recognised data protection frameworks.

By using the ElangWin platform, you acknowledge and consent to the potential transfer of your personal data to jurisdictions outside Malaysia for the purposes described in this Policy.

Subject to applicable law and any overriding legal obligations on our part, you hold the following rights in respect of your personal data held by ElangWin. You may exercise any of these rights by contacting us at the details provided in Section 16.

Requests will be acknowledged within 5 business days and completed within 30 calendar days. In complex or high-volume cases, the deadline may be extended by a further 30 days, in which case you will be notified. We may request proof of identity before processing your request to ensure your data is not disclosed to an unauthorised party.

ElangWin's services are strictly for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered users. If we become aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account.

If you have reason to believe that a minor has registered an account with ElangWin, please contact our support team immediately at the address provided in Section 16.

ElangWin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or operational procedures. The "Last Updated" date at the top of this page will be revised accordingly. For material changes that affect the way we process personal data in a manner that may impact your rights, we will notify registered users via email or a prominent platform notification prior to the changes taking effect. Your continued use of the ElangWin platform following the publication of any amended Privacy Policy constitutes your acceptance of the revised terms.

To exercise any of your data rights, raise a privacy concern, request a copy of this Policy in an alternative format, or make a data-related complaint, please contact ElangWin's data protection team through the following channels:

If you are not satisfied with our response to your privacy complaint, you have the right to escalate the matter to the supervisory authority or data protection regulator applicable in your jurisdiction.