Updated: 1 January 2026

125win Privacy Policy – Personal Data Protection for Malaysian Members

125win is fully committed to protecting the privacy and personal data of every member. This Privacy Policy explains exactly what information we collect, how it is used, who may have access to it, and what rights you have as the owner of that data. Keeping your data secure is not merely a legal obligation for us — it is a core part of 125win's commitment to member trust.

Your data is safe with us. All 125win members' personal information is protected with 256-bit SSL encryption. We do not sell, rent, or share your data with third parties for marketing purposes.

Your rights are protected. You have the right to access, correct, download, or request deletion of your personal data at any time by contacting our team.

This policy may be updated. Members will be notified of any significant changes to this Privacy Policy via their registered email address at least 7 days before the changes take effect.

Introduction & 125win's Privacy Commitment

125win understands that privacy is more than just a word in a legal document — it is a fundamental right you carry with you when you register and use our platform. As an online betting platform serving Malaysian players, we handle a wide range of personal information every day — from the names and email addresses of new members to financial transaction records and betting histories of long-standing ones.

This Privacy Policy is written in clear, straightforward language because we believe you have the right to know exactly what happens to your information — not have it buried in legal jargon that almost no one actually understands. This document explains: what data we collect, why we need it, how it is protected, who can access it and what choices you have as the owner of that data.

By using the 125win platform — whether through the 125win.click website or any associated mobile application — you agree to the collection and use of your personal information as described in this Privacy Policy. If you disagree with any part of this policy, please discontinue use of the platform and contact us to request account closure and data deletion.

This Privacy Policy applies to all registered 125win members in Malaysia and covers all platform services, including Sports Betting, Live Casino, poker, lottery, and the VIP Rewards programme.

1 Scope and Application of This Policy

This Privacy Policy applies to all individuals who register an account with 125win, visit the 125win.click website without registering, use any service offered by 125win, or contact our customer support team through any channel.

This Policy should be read together with the Terms & Conditions 125win, which sets out the overall rules governing use of the platform. Together, these two documents form the complete agreement between you and 125win regarding the rights and responsibilities of each party.

In the event of any discrepancy between the Bahasa Malaysia version and any other version (if applicable) of this policy, the Bahasa Malaysia version shall prevail for dealings with members based in Malaysia.

2 Personal Information We Collect

125win only collects information that is genuinely necessary to provide a safe, efficient service that meets legal requirements. The following are the types of information we may collect:

2.1 Information You Provide Directly

  • Registration information: Your full name, date of birth, email address, mobile number, and preferred username
  • Identity verification documents (KYC): A copy of your MyKad or passport, the latest bank or e-wallet statement, and proof of address if required
  • Payment information: Account name and account number of the payment method used (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX account) — we do not store full credit card details on our servers
  • Communications with us: Any messages, complaints, or enquiries you submit via live chat, email, or other support channels

2.2 Information Collected Automatically

  • Platform usage data: Login records, access dates and times, games played, betting history, and transaction records
  • Device information: Device type, operating system, web browser version, IP address, and unique device identifiers
  • Location data: General location based on IP address for geographic verification of permitted regions — we do not collect precise GPS location without your consent
  • Cookie and session data: Cookie information required for platform functionality and usage analytics — see Section 6 for details

2.3 Information from Third Parties

In certain circumstances, 125win may receive information about you from our payment service providers (to verify transactions) or from recognised identity verification bodies (to meet KYC compliance requirements). Such information is used only for its specific purpose and is not retained longer than necessary.

Data Type Purpose of Collection Retention Period
Registration Information Account management & identity verification Throughout active account + 5 years
KYC Documents Legal compliance & age verification 5 years after account closure
Transaction Records Payment processing & financial auditing 7 years (accounting requirements)
Betting History Dispute resolution & fraud detection 5 years after the bet is settled
Communication Logs Customer support & dispute resolution 3 years after last communication
Device & IP Data Account security & fraud detection 2 years

3 How We Use Your Information

125win uses the personal information we collect solely for legitimate and necessary purposes in providing the services you use. The following are the specific purposes for which data is used:

3.1 Account Management and Services

  • Creating and managing your 125win account
  • Processing deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX
  • Verifying your identity during registration and when required for security purposes
  • Managing the VIP Rewards programme, including the calculation and crediting of weekly cashback and reload bonuses
  • Sending important notifications related to your account — deposit confirmations, withdrawal confirmations, VIP upgrades and more

3.2 Security & Fraud Prevention

  • Detecting and preventing fraud, money laundering, or other suspicious activity
  • Verifying that each account is held by a distinct individual to prevent duplicate accounts
  • Monitoring unusual activity that may indicate unauthorised access to an account
  • Meeting legal compliance obligations and the requirements of relevant regulatory bodies

3.3 Service Improvement

  • Analyses platform usage patterns in aggregate (not individually) to improve the overall user experience
  • Developing new features and products based on the real needs of Malaysian users
  • Resolving technical issues and improving platform stability

3.4 Marketing Communications

125win may use your email address to send you information about promotions, new bonuses and special offers that may interest you. You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any email we send, or through your account settings. Please note that opting out of marketing emails will not stop important account-related emails such as transaction confirmations and security notifications.

4 Data Sharing & Disclosure

125win does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. This is an absolute commitment with no exceptions.

However, there are limited situations where 125win may need to share certain information with specific parties:

4.1 Approved Service Providers

125win works with a number of third-party service providers that help us operate the platform — including payment processors for Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as cloud computing providers that store our platform data. All of these service providers are contractually bound to protect your data and use it only for the purposes we specify — they are not permitted to use your data for their own purposes.

4.2 Legal Requirements

125win may be required to disclose your personal information to the relevant authorities when:

  • Required by Malaysian law or a valid court order
  • Required by financial regulatory bodies or law enforcement agencies in the course of a legitimate investigation
  • Necessary to safeguard public safety or prevent serious crime

In all such cases, 125win will endeavour to notify you of any disclosure request unless we are legally prohibited from doing so.

4.3 Business Transfer

In the event of a company merger, acquisition, or asset transfer, members' personal data may be transferred to the successor entity. In such circumstances, 125win will ensure that the successor entity is bound by a Privacy Policy of equivalent or greater strictness than the current one, and members will be notified before any transfer takes place.

Remember: 125win will never share your account password, your full MyKad number, or your full credit card details with any party under any circumstances. If someone claims to be a 125win representative and asks for this information, please report it to us immediately.

5 Data Security & Protection Measures

125win invests seriously in the security of our data infrastructure because we understand that member trust is this platform's most valuable asset. The following are the technical and organisational security measures we have put in place:

5.1 Data Encryption

All data transmitted between your browser and 125win's servers is protected by 256-bit SSL/TLS encryption — the same industry standard used by Malaysia's major banks. Sensitive personal data stored in our databases is also encrypted at rest using AES-256 standards. This means that even if someone were to gain unauthorised access to the database, the stored information would be unreadable without the appropriate encryption key.

5.2 Access Controls

Access to members' personal data at 125win is restricted to staff who genuinely need it to carry out their responsibilities. The principle of least privilege applies — each staff member can only view data relevant to their role. All access to systems containing personal data is logged and continuously monitored.

5.3 Threat Detection

The 125win platform is equipped with an Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) that monitor network traffic around the clock. Any suspicious activity — including repeated failed login attempts, access from unusual locations, or irregular usage patterns — will automatically trigger alerts to our security team.

5.4 Your Account Security Responsibilities

While 125win enforces robust security measures on our end, the security of your account also depends on your own actions. We recommend that you:

  • Use a strong, unique password that is not used for any other account
  • Do not share your 125win account login credentials with anyone
  • Log out of your account when using a shared device
  • Contact 125win customer support immediately if you suspect any unauthorised activity on your account

6 Cookies, Trackers & Similar Technologies

Like most websites and online applications, 125win uses cookies and similar tracking technologies to keep the platform running smoothly and to provide you with a better experience.

6.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functionality — such as maintaining your login session while you use the platform. Without these cookies, the platform will not function properly. These cookies cannot be disabled.
  • Functional Cookies: Remembering your preferences such as interface language and display settings to make the platform easier to use. These cookies can be disabled, though certain features may be affected.
  • Analytics Cookies: Helps us understand how members use the platform — which pages are visited most, time spent, and navigation paths. This data is used in aggregate and without individual identification to improve the platform. You can opt out of this analytics tracking at any time.
  • Security Cookies: Helping to detect and prevent fraudulent activity and protect your account from unauthorised access.

6.2 Managing Your Cookie Preferences

You can manage or delete cookies at any time through your web browser settings. Please note that deleting or blocking essential cookies may affect the functionality of the 125win platform and your gaming experience. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

7 Your Personal Data Rights

As the owner of your personal data, you hold several important rights that 125win respects and upholds. Below are those rights and how you can exercise them:

Right of Access

You have the right to request a copy of all personal data we hold about you. 125win will provide a copy in a readable format within 30 days of the request.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request a correction. Update it directly through your account settings or contact our support team.

Right to Deletion

You may request the deletion of your personal data when it is no longer needed, subject to any applicable legal retention obligations.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time by contacting us or through your account settings.

Data Portability Rights

You have the right to receive your personal data in a structured, machine-readable format (such as CSV or JSON) for your own use or to transfer to another platform.

Right to Restriction of Processing

In certain circumstances, you may request that 125win restrict the processing of your personal data while a dispute or correction request is being resolved.

To exercise any of the rights above, contact the 125win privacy team by email at privacy@125win.click or via live chat. We will process your request within 30 days and may require identity verification before acting on any data-related request.

8 Data Retention Period

125win retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by Malaysian law and applicable regulatory requirements. Our principle is straightforward: we do not keep data that is no longer needed.

In general, your account information will be retained for as long as your account is active and for 5 years after account closure for legal compliance purposes and resolution of any disputes that may arise. Financial transaction records are kept for 7 years in accordance with applicable accounting and tax law requirements. KYC documents are retained for 5 years after account closure.

Once the stipulated retention period has expired, your personal data will be permanently deleted or anonymised in a manner that makes it impossible to re-associate with you. The deletion process is carried out securely using methods that ensure the data cannot be recovered.

9 Protection of Children's Data

125win services are exclusively available to individuals aged 18 and above. 125win does not knowingly collect or process personal data from individuals under the age of 18. If you are a parent or guardian and discover that your underage child has registered an account with 125win, please contact us immediately at support@125win.click. We will investigate and, if confirmed, delete all related data and close the account within 48 hours.

Every account registration on 125win requires age verification based on the information provided. Identity document verification (KYC) is also conducted as an additional layer of confirmation. That said, we acknowledge that these measures are not entirely foolproof — which is why we rely on the awareness and cooperation of parents and guardians to protect children from accessing betting platforms.

10 Changes to This Privacy Policy

125win reserves the right to update this Privacy Policy at any time to reflect changes in our privacy practices, applicable legislation, or the addition of new services that require different data processing. The "Updated" date at the top of this page always reflects the latest version of this policy.

For significant changes — particularly those affecting how we use your personal data or your rights — 125win will send a notification to your registered email address at least 7 days before the changes take effect. This gives you sufficient time to review the changes and make a fully informed decision.

Continued use of the 125win platform after the effective date of any Privacy Policy changes constitutes your acceptance of and agreement to the updated policy. If you do not agree with the changes made, you may close your account and request deletion of your data before the effective date of those changes.

Keep your 125win account email address active and up to date so you never miss any important notifications about changes to this Privacy Policy or critical account security information.

11 Contact the 125win Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the 125win team is here to help. We take every privacy enquiry seriously and are committed to responding promptly and transparently.

  • Privacy Email: privacy@125win.click — for data rights requests, privacy complaints, and specific enquiries about your personal data
  • General Support Email: support@125win.click — for general enquiries including questions about account security and verification
  • Live Chat: Available 24 hours a day, 7 days a week directly within the 125win platform for urgent enquiries

The 125win privacy team will respond to all personal data enquiries within 5 business days. For requests such as data access, deletion, or portability, the full process will be completed within 30 calendar days from the date the request is received.

125win's Six Core Privacy Principles

More than just a promise — these principles are reflected in every decision we make about members' personal data

End-to-End 256-Bit SSL Encryption

Every bit of data transmitted between your device and 125win's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading financial institutions such as Maybank and CIMB. Stored data is further encrypted with AES-256 at rest, meaning it remains unreadable even in the event of unauthorised access to our servers.

No Data Sales to Third Parties

125win has never and will never sell, rent, or trade members' personal data to any third party for marketing purposes. Your information is collected solely to provide the services you request — not to be used as a business commodity. This is an unconditional commitment that applies to all 500,000+ 125win members.

Minimum Collection Principle

125win only collects data that is strictly necessary to provide the services you use. We do not request irrelevant information, do not retain data longer than necessary, and do not use your data for purposes unrelated to the services you have chosen to use.

Full Control in Your Hands

You have real control over your personal data at 125win. You can access, correct, download, or request deletion of your data at any time. You can unsubscribe from marketing emails with a single click. You can close your account and request full data deletion whenever you choose — no unnecessary questions asked.

Full Transparency

The 125win Privacy Policy is written in clear, plain language — not packed with confusing legal jargon. We tell you exactly what we do with your data, why we need it and how long it is retained. No hidden terms, no undisclosed data usage.

Limited Retention & Secure Deletion

Your personal data is not stored indefinitely. 125win has a clear retention policy for each data type, and once the retention period ends, data is permanently deleted using methods that ensure it cannot be recovered. This is not merely a commitment — it is the standard operating procedure of our data security team.

125win's Data Security Layers

Your data protection does not rely on a single layer of security — it is a multi-layered system where each layer reinforces the others

Secure Server Infrastructure

125win's servers are housed in high-tier data centres with strict physical access controls, backup power systems, and protection against physical disasters.

Multi-Layered Firewall

The 125win platform is protected by layered firewalls and an intrusion prevention system that monitors and filters malicious network traffic 24 hours a day.

Regular Data Backups

125win platform data is backed up regularly to a separate location. This ensures service continuity and data recovery in the event of any unexpected incident.

Regular Security Audits

125win conducts regular security audits by independent cybersecurity experts to identify and address any vulnerabilities before they can be exploited.

Your Data Flow at 125win

Here is exactly how your personal data moves and is handled — from the moment you register to your everyday use of the platform.

1
Registration & Verification

You register with your name, email and phone number. This information is encrypted immediately and stored in a secured database. KYC is conducted to verify your age and identity.

2
Deposits & Transactions

When you deposit via Touch 'n Go, GrabPay, DuitNow, or FPX, the payment processor receives instructions from our platform. 125win retains transaction records but not your full account details.

3
Platform Usage

Every bet, casino game or lottery purchase is logged for audit purposes, dispute resolution and VIP cashback calculations. These logs are stored securely and are only accessible to authorised personnel.

4
Withdrawals & Payments

Your winnings are credited to your chosen withdrawal method. Withdrawal records are retained for a prescribed period to comply with Malaysian financial regulations.

5
Account Closure & Deletion

When you close your account, your data is retained for the minimum period required by law and then permanently deleted using secure deletion procedures.

Your Rights — Quick Summary

Here is a quick summary of your personal data rights at 125win and how to exercise them.

Request Data Access

Email privacy@125win.click — we will send you a copy of your data within 30 days.

Correct Inaccurate Data

Update directly in your account settings or contact support — changes take effect immediately.

Delete Your Data

Submit a deletion request to privacy@125win.click. Subject to minimum retention periods required by law.

Unsubscribe from Marketing Emails

Click "unsubscribe" in any of our marketing emails or update your preferences in your account's communication settings.

Download Your Data

Request a data export in CSV or JSON format by emailing privacy@125win.click. Processed within 30 days.

Contact the 125win Privacy Team

Have a question about your data privacy? We're here to help — in English, 24 hours a day

Privacy Email

For data access requests, deletion, data portability and privacy-related complaints specifically.

privacy@125win.click
Live Chat 24/7

For urgent privacy or account security enquiries — response in under one minute.

Available 24 hours
General Support Email

For general enquiries about your account, security and 125win platform services.

support@125win.click
FAQ

You may already find the answer to your question in our comprehensive FAQ page.

Visit the FAQ Page
Privacy Policy & Terms and Conditions — Complementary Documents

This Privacy Policy should be read together with Terms & Conditions 125win. Together, these two documents form the complete agreement between you and 125win. For information on responsible gaming and the self-control tools we provide, please visit the Responsible Gaming us.

Privacy & Responsible Gaming — Two Core Commitments of 125win

Like privacy, our commitment to responsible gaming is not just talk — it is reflected in the way we build the platform

Confidential Gaming Data

Your betting history and game records are confidential information accessible only to you and authorised 125win staff. They cannot be disclosed without a valid court order.

Personal Deposit Limit

Your deposit limit settings are personal information that only you can change. 125win cannot increase your deposit limit without your explicit consent.

Confidential Self-Exclusion

Self-exclusion requests are treated as sensitive personal information and handled with complete confidentiality. They will not be disclosed to any other party without your consent.

18+ Only

Protecting children's data is a top priority. 125win uses KYC verification to ensure all members are aged 18 and above before they are permitted to use the platform's services.

Frequently Asked Questions — 125win Privacy Policy

The most frequently asked questions from members about privacy and data protection at 125win

No. 125win has never sold, rented, or traded members' personal data to any third party for marketing or advertising purposes, and never will. The information you provide is collected solely to deliver the 125win services you use — including account management, payment processing via Touch 'n Go, GrabPay, and DuitNow, and the VIP Rewards programme. This is an absolute commitment with no exceptions.

To request a copy of your personal data, send an email to privacy@125win.click with the subject line "Data Access Request" and include your account number and username. We may require additional identity verification before processing your request to ensure data security. Once your identity is confirmed, we will send a copy of your data in a readable format (CSV or PDF) within 30 calendar days. No fee is charged for the first data access request in any calendar year.

When you close your 125win account, your personal data is not deleted immediately as there are legal retention obligations we must comply with. Account information and KYC documents are retained for 5 years after closure, while financial transaction records are kept for 7 years in accordance with accounting requirements. Once these minimum retention periods have elapsed, all your data will be permanently deleted using secure deletion procedures that ensure the data cannot be recovered. You will receive written confirmation once the deletion process is complete, if requested.

No. 125win only uses cookies within the 125win.click domain itself — we do not use cross-site tracking cookies that follow your activity on other websites unrelated to 125win. The cookies we use are essential cookies for platform functionality, functional cookies to remember your preferences, analytics cookies to understand how the platform is used (in aggregate, without identifying individuals), and security cookies to protect your account. You can manage these cookies through your browser settings.

When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, the transaction is processed through a secure payment gateway that complies with PCI-DSS (Payment Card Industry Data Security Standard). 125win only receives a success or failure confirmation for each transaction — we do not store your full account number, password or e-wallet or bank account PIN on our servers. The only information we retain is the payment method name, account holder name and transaction amount, for record-keeping and payment dispute resolution purposes.

Play with Peace of Mind — Your Data Is Safe at 125win

With 256-bit SSL encryption, a strict no data-selling policy and full control in your hands, you can enjoy Live Casino, Malaysian Super League Sports Betting, poker and lottery on 125win with complete confidence. Register for free today.

Bahasa Melayu