Privacy Policy Glowin88 – Malaysian Player Data Protection

Glowin88 is an online betting platform operating exclusively for Malaysian players. We understand that player trust depends not only on a safe and enjoyable betting experience, but also on how we handle your personal information with full integrity and transparency.

This Privacy Policy explains in detail how Glowin88 collects, stores, uses, and protects your personal data when you use our website at glowin88.my, our mobile app, or any of the services we provide. This document also outlines your rights as a player and how to exercise them.

Privacy Policy Glowin88 drafted in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia, which is the principal law governing the collection and use of personal data in Malaysia. We take these obligations seriously and are committed to complying with all applicable legal provisions.

If you have any questions or concerns about how Glowin88 handles your personal data, you may contact our Privacy Officer at any time by email at privacy@glowin88.my.

Glowin88 only collects personal data that is strictly necessary to deliver high-quality services to Malaysian players. We do not collect excessive or irrelevant data. The following are the categories of data we collect:

2.1 Data You Provide Directly

2.2 Automatically Collected Data

When you browse the website or use the Glowin88, we automatically collect certain technical information needed to keep the platform running smoothly and securely:

• Device data: Device type, operating system, phone model (e.g. Samsung Galaxy, iPhone)
• Network data: IP address, internet connection type, Malaysia internet service provider (ISP) name
• Browsing data: Pages visited, session duration, clicks, and navigation patterns within the platform
• Location data: Approximate location based on IP address (solely to verify that you are accessing from Malaysia)
• Cookie data: Session cookies, preference cookies, and analytics cookies (see Section 6)

2.3 Data from Third-Party Sources

In certain situations, Glowin88 may receive information about you from trusted sources, such as identity verification providers licensed in Malaysia or payment service providers like DuitNow and FPX. This data is used solely to verify your identity and comply with anti-money laundering (AML) requirements.

Glowin88 uses your personal data on lawful grounds under Malaysia's PDPA. Each use of data has a clear purpose and will not extend beyond what is stated below:

• Service Provision: To process account registration, verify your identity, handle deposits via Touch 'n Go, GrabPay, DuitNow, FPX and other Malaysian payment methods, and process your winnings withdrawals.
• Security & Fraud: To detect and prevent fraudulent activity, money laundering, and unauthorised access to accounts Glowin88 you.
• Legal Compliance: To comply with legal obligations under the PDPA, AML requirements, and directives from the relevant Malaysian authorities.
• Platform Improvements: To analyse usage patterns and improve the player experience on Glowin88, including slot game recommendations, Sports Betting tips, and relevant promotions.
• Communications: To send you important account notifications, transaction confirmations, bonus information, and policy updates.
• Responsible Gambling: To monitor betting patterns and identify players who may need assistance or support related to responsible gambling.
• Marketing (with consent): To send you promotional offers, bonus information, and content relevant to your betting interests — only where you have given explicit consent.

Glowin88 takes a highly cautious approach to data sharing. We does not sell players' personal data to anyone. However, there are limited circumstances where we need to share data with trusted third parties:

All third parties with whom we share data are bound by strict data protection agreements and are only permitted to use your data for the specified purposes. They are not permitted to use the data Glowin88 for their own purposes.

Glowin88 implements a range of robust technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

5.1 Technical Security

• 256-bit SSL/TLS Encryption for all data transmitted between your device and our servers
• Data-at-rest encryption (AES-256) for all personal data stored in our databases
• Passwords are hashed using the bcrypt algorithm — meaning even employees Glowin88 cannot view your original password
• Two-factor authentication (2FA) available to all player accounts as an additional layer of protection
• Firewall and intrusion detection systems (IDS) active 24/7
• Vulnerability scanning and periodic penetration testing by independent security experts

5.2 Organisational Security

• Access to player data is restricted to staff who genuinely require it to carry out their duties (principle of least privilege)
• All staff Glowin88 who handle personal data are required to sign a confidentiality agreement
• Data protection training and cybersecurity awareness sessions are conducted regularly for all staff
• A comprehensive data incident response procedure is in place to manage any data breach swiftly.

Glowin88 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage or delete cookies at any time through your browser settings. However, disabling essential cookies may affect the functionality of the platform Glowin88.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a player Glowin88 have the following rights regarding your personal data:

To exercise any of the above rights, please contact the Privacy Officer Glowin88 via email at privacy@glowin88.my. We will process your request within 30 calendar days from the date of receipt.

Glowin88 retains your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by Malaysian law:

• Active account data: Throughout the period your account remains active at Glowin88
• Financial transaction data: Minimum 7 years after the transaction (Malaysia tax & AML legal requirements)
• Identity verification (KYC) data: Minimum 5 years after account closure
• Support communication logs: 3 years from the date of last communication
• Analytics cookie data: Maximum 2 years
• Closed account data: 5 years after account closure, then securely disposed of

Once the retention period has ended, Glowin88 will securely erase or destroy your data using industry-recognised methods, ensuring it cannot be recovered or accessed by any party.

Platform Glowin88 may contain links to third-party websites or services for players' convenience. This Privacy Policy applies only to the Glowin88 only and does not cover the privacy practices of external websites.

Glowin88 is not responsible for the content, privacy policies, or security practices of any third-party websites accessed through links on our platform. We encourage you to read the privacy policy of every website you visit.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Glowin88 handles your personal data, please contact our Privacy Officer:

• Privacy Email: privacy@glowin88.my
• General Support Email: support@glowin88.my
• Response Time: Within 3–5 business days for privacy-related enquiries
• Support Language: Bahasa Melayu & English
• Operating Hours: 24 hours a day, 7 days a week

You may also reach Malaysia's Personal Data Protection Commissioner if you believe that Glowin88 does not comply with the PDPA in handling your personal data. Further information about this regulatory body is available on the official website of Malaysia's Ministry of Communications and Digital.

We are committed to handling every complaint seriously and transparently, and to taking appropriate corrective action within a reasonable timeframe.