Introduction
SimbaWin ("we", "us", "the Platform", or "SimbaWin") is committed to protecting the privacy and personal data of all individuals who access, register on, or otherwise interact with the SimbaWin online casino and sports betting platform, accessible at https://simbawin.cam. This Privacy Policy ("the Policy") sets out in detail how SimbaWin collects, processes, uses, stores, shares, and protects personal data in accordance with applicable data protection principles.
This Policy applies to all users of the SimbaWin Platform, including registered Players, visitors to the website who have not yet registered, and individuals who contact us through our Customer Support channels. It should be read in conjunction with our Terms and Conditions and our Responsible Gambling Policy, both of which govern your use of the SimbaWin Platform and are incorporated herein by reference.
By registering an Account on SimbaWin or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform.
Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:
- "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, location data, or any combination of data points that could identify you as an individual.
- "Processing" — any operation performed on personal data, whether automated or manual, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
- "Data Controller" — SimbaWin, the entity that determines the purposes and means of processing personal data collected through the Platform.
- "Data Processor" — any third party engaged by SimbaWin to process personal data on SimbaWin's behalf, including payment service providers, identity verification services, and hosting infrastructure providers.
- "Consent" — a freely given, specific, informed, and unambiguous indication of agreement by which you indicate acceptance of the processing of your personal data for a stated purpose.
- "KYC" — Know Your Customer; the identity and age verification process used by SimbaWin to confirm Player details and comply with anti-money laundering obligations.
- "Cookie" — a small text file stored on your device by the SimbaWin Platform for the purposes of session management, analytics, and personalisation.
Personal Data We Collect
SimbaWin collects personal data across several categories depending on the nature of your interaction with the Platform. The categories of data we collect are set out in the table below:
| Category | Examples of Data Collected |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad or passport number, photograph (for KYC verification). |
| Contact Data | Email address, Malaysian mobile number, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam). |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay, DuitNow), FPX transaction references, deposit and withdrawal history, account balance. |
| Account Data | Username, hashed password, account registration date, VIP tier status, promotional eligibility, responsible gambling settings. |
| Transaction Data | Details of deposits, withdrawals, bets placed, games played, bet settlement records, bonus transactions, and MYR account balance movements. |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, session timestamps, and referring URL. |
| Usage Data | Pages visited, games accessed, sports betting markets viewed (e.g., EPL, Liga Super Malaysia, UFC), session duration, click-path behaviour. |
| Communications Data | Content of live chat transcripts, support email correspondence, and any voluntary feedback submitted to SimbaWin. |
How We Collect Your Data
SimbaWin collects personal data through the following primary channels:
- Direct Submission: Data you provide when creating an Account, completing KYC verification, making a deposit or withdrawal, contacting Customer Support, or responding to promotional communications.
- Automated Collection: Technical and usage data collected automatically when you access the SimbaWin Platform via cookies, server logs, analytics tags, and similar tracking technologies. This data is collected on an ongoing basis throughout your session.
- Third-Party Sources: Where permitted by applicable law, SimbaWin may receive data about you from identity verification providers, payment processors, fraud detection services, credit reference agencies, and regulatory databases for the purpose of fulfilling KYC and AML obligations.
- Payment Service Providers: When you deposit or withdraw funds using Malaysian payment channels such as Maybank2u, CIMB Clicks, DuitNow, FPX, Touch 'n Go eWallet, Boost, or GrabPay, your payment provider may share limited transaction confirmation data with SimbaWin to facilitate account crediting.
Data Processing & Legal Basis
SimbaWin processes your personal data only where a valid legal basis exists for doing so. The primary legal bases under which we process your data are as follows:
- Contractual Necessity: Processing is necessary to perform our contractual obligations to you under the SimbaWin Terms and Conditions — including account registration, processing deposits and withdrawals in MYR, settling bets, and administering your Account.
- Legal Obligation: Processing is required for SimbaWin to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) verification, age verification (21+ requirement), and financial record-keeping obligations.
- Legitimate Interests: Processing is necessary for the legitimate interests of SimbaWin, including fraud prevention, platform security, responsible gambling monitoring, and improving our services — provided such interests are not overridden by your fundamental privacy rights.
- Consent: For certain processing activities — such as sending you marketing communications or setting non-essential cookies — SimbaWin will request your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.
How We Use Your Personal Data
SimbaWin uses the personal data we collect for the following purposes:
- Account Management: Creating, maintaining, verifying, and administering your SimbaWin Player Account, including processing deposits, withdrawals, and bonus claims.
- KYC & Compliance: Verifying your identity, age (21+), and source of funds to comply with applicable anti-money laundering regulations and responsible gambling obligations.
- Transaction Processing: Facilitating deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Boost, GrabPay, and supported cryptocurrencies (BTC, ETH, USDT, LTC).
- Fraud Prevention & Security: Detecting and preventing fraudulent activity, account compromise, money laundering, bonus abuse, and other Prohibited Activities as defined in our Terms and Conditions.
- Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance through our 24/7 live chat and email support channels.
- Responsible Gambling: Monitoring Player activity patterns to identify potential problem gambling behaviour and facilitating access to self-exclusion, deposit limits, and cooling-off period tools.
- Platform Improvement: Analysing aggregate usage data to identify technical issues, improve game performance, optimise the user interface, and enhance the overall SimbaWin experience.
- Marketing & Promotions: With your consent, sending you information about SimbaWin promotions, bonus offers, VIP tier updates, and other relevant communications. You may opt out at any time.
Data Sharing & Disclosure
SimbaWin does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your personal data with third parties only in the circumstances described below, and strictly on a need-to-know basis:
- Payment Service Providers: We share necessary financial and identity data with payment processors — including Malaysian e-wallet operators (Touch 'n Go, Boost, GrabPay), DuitNow, FPX-participating banks, and cryptocurrency networks — solely to process your transactions.
- Identity Verification Services: KYC and AML compliance requires us to share identity documents and related data with licensed identity verification and fraud screening service providers.
- Technology & Hosting Providers: SimbaWin uses third-party cloud infrastructure, hosting, and software providers to operate the Platform. These providers process data on our behalf under contractual data processing agreements and are prohibited from using your data for any other purpose.
- Regulatory & Law Enforcement Authorities: SimbaWin will disclose personal data to relevant regulatory bodies, law enforcement agencies, or courts when legally required to do so, or where disclosure is necessary to protect the safety and security of our users or the public.
- Professional Advisors: In limited circumstances, SimbaWin may share personal data with legal, accounting, or auditing professionals under strict confidentiality obligations where necessary to protect our legal rights or fulfil our business obligations.
Data Retention
SimbaWin retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including the satisfaction of legal, regulatory, and contractual obligations. Our standard retention periods are as follows:
- Active Account Data: Retained for the full duration of your Account's active status on the Platform.
- Transaction Records: Financial transaction records, including deposits, withdrawals, and betting history, are retained for a minimum of seven (7) years from the date of the transaction, in compliance with applicable financial record-keeping regulations.
- KYC Documentation: Identity verification documents are retained for a minimum of five (5) years following Account closure or the date of the last transaction, as required by anti-money laundering obligations.
- Customer Support Records: Live chat transcripts and support email correspondence are retained for a minimum of two (2) years from the date of the interaction.
- Marketing Data: Data used for marketing purposes is retained until you withdraw your consent or for a maximum of three (3) years from your last active engagement with a marketing communication, whichever occurs first.
Upon expiry of the relevant retention period, personal data will be securely deleted or anonymised in a manner that prevents recovery or re-identification.
Data Security
SimbaWin implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. These measures include, but are not limited to:
- 256-bit TLS/SSL Encryption: All data transmitted between your device and the SimbaWin Platform is encrypted using industry-standard 256-bit Transport Layer Security (TLS) encryption, the same standard employed by major financial institutions in Malaysia and globally.
- Password Hashing: User passwords are stored exclusively as irreversible cryptographic hashes. SimbaWin staff do not have access to your plain-text password and cannot recover it — only a secure reset process is available.
- Access Controls: Internal access to personal data is strictly limited on a role-based, need-to-know basis. Staff who handle personal data are subject to confidentiality obligations and regular data protection training.
- Intrusion Detection and Monitoring: SimbaWin's infrastructure is monitored continuously for unusual access patterns, suspicious activity, and attempted breaches. Security incidents are investigated and escalated in accordance with our internal incident response protocols.
- Secure Data Centres: Platform data is hosted in accredited, ISO-certified data centres with physical security controls, redundant infrastructure, and regular third-party penetration testing.
Your Rights as a Data Subject
Subject to applicable data protection law, you have the following rights in respect of the personal data SimbaWin holds about you. To exercise any of these rights, please contact our Customer Support team using the details in Section 14 below.
- Right of Access: You have the right to request a copy of the personal data SimbaWin holds about you, together with information about how and why it is being processed. Requests will be responded to within 30 days.
- Right to Rectification: If any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct it without undue delay.
- Right to Erasure ("Right to be Forgotten"): You may request that SimbaWin delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations (for example, the 7-year financial records requirement described in Section 8).
- Right to Restrict Processing: In certain circumstances, you may request that SimbaWin limits the processing of your personal data — for example, where you contest the accuracy of the data or have objected to processing pending verification of our legitimate interests.
- Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes, including profiling for marketing. You may also object to processing based on legitimate interests, subject to SimbaWin demonstrating compelling grounds that override your rights.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place prior to withdrawal.
Minors & Age Policy
The SimbaWin Platform is strictly intended for use by adults aged 21 years and above. SimbaWin does not knowingly collect, process, or retain the personal data of any person under the age of 21. Age verification is a mandatory component of our KYC process, and no Player Account will be fully activated without confirmation that the account holder meets the minimum age requirement.
In the event that SimbaWin discovers or has reasonable grounds to believe that personal data belonging to a person under the age of 21 has been submitted to the Platform — whether through misrepresentation or otherwise — SimbaWin will immediately:
- Suspend the relevant Account and freeze any associated balance pending investigation;
- Delete or anonymise all personal data associated with the underage individual to the extent permitted by applicable legal obligations;
- Refund any net deposits to the original payment source after deducting any applicable investigation or processing costs, as permitted by law.
If you believe that a minor has accessed or registered on the SimbaWin Platform, please contact our Customer Support team immediately at the contact details provided in Section 14.
Amendments to This Privacy Policy
SimbaWin reserves the right to update, amend, or revise this Privacy Policy at any time. The updated Policy will be published on this page with a revised effective date. Where changes are material — for example, changes that affect the legal basis of processing or introduce new categories of personal data — SimbaWin will make reasonable efforts to notify registered Players via email or an in-Platform notification.
Your continued use of the SimbaWin Platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. You are encouraged to review this Policy periodically. All prior versions of this Policy are superseded in their entirety by the most current version published on this page.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy, including requests to exercise your data subject rights as described in Section 11, please contact the SimbaWin Data Protection and Customer Support team using the following details. Our team is available 24 hours a day, 7 days a week.
- Live Chat: Available on every page of the SimbaWin Platform. This is the fastest channel — average response time is under 3 minutes.
- Email: [email protected] — for privacy-related enquiries, please include "Privacy Request" in your subject line. All email responses to data subject requests will be sent within 30 calendar days.
- Subject Access Requests: Please state clearly in your message that you are making a Subject Access Request (SAR) and provide sufficient information for us to identify your Account. We may need to verify your identity before processing the request.
For concerns relating to responsible gambling tools, self-exclusion, or problem gambling support, please visit our Responsible Gambling page or contact Customer Support directly.