1. Introduction & Scope of Privacy Policy
This Privacy Policy ("Policy") is published by pastiwin99 ("we", "the platform", or "pastiwin99") and sets out our practices for collecting, using, storing, disclosing, and protecting the personal data of users ("you" or "member") who access pastiwin99.best and all related services.
Pastiwin99 takes our responsibility to every member's privacy seriously. We recognise that personal data is a trust you place in us, and we do not take that trust lightly. This policy is designed to provide full transparency on how your data is managed at pastiwin99, so you can make informed decisions about your use of our platform.
This Policy applies to all pastiwin99 users, including website visitors, registered users, active members, and former members whose data is still retained in accordance with legal or legitimate business requirements. By using any part of the pastiwin99 platform, you agree to the practices described in this Policy.
Important Note: This Privacy Policy forms part of Terms & Conditions pastiwin99 and should be read together with that document. In the event of any conflict between the two, this Privacy Policy shall prevail on matters relating to personal data.
2. Types of Personal Data We Collect
Pastiwin99 collects several categories of personal data depending on how you interact with our platform. Below is a detailed explanation of the types of data we may collect:
2.1 Data You Provide Directly
- Registration Data: Full name, Malaysian phone number, email address, date of birth, and password (stored as an unreadable hash)
- Identity Verification Data (KYC): MyKad or passport copy, bank statements, proof of residential address in Malaysia
- Financial Data: Payment method details (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, ShopeePay), bank account numbers for withdrawals, deposit and withdrawal transaction records in Malaysian Ringgit (RM)
- Communications: Live chat conversation history with pastiwin99 support, emails sent to us, feedback and complaints
2.2 Automatically Collected Data
- Technical Data: IP address, browser type and version, operating system, screen resolution, time zone
- Usage Data: Pages visited, games played, session duration, clicks, and navigation within the pastiwin99 platform
- Device Data: Unique device identifier, smartphone model, mobile operating system version
- Log Data: Server access logs, login and logout timestamps, account activity history
2.3 Game Data
Pastiwin99 maintains a full record of your gaming activity, including your betting history for football, badminton, cricket, slots, baccarat, roulette, and other games; game outcomes; bet amounts and winnings in MYR; and your bonus and promotion usage history. This data is necessary for resolving disputes, meeting legal requirements, and providing you with a better overall experience.
| Data Category |
Example |
Primary Purpose |
| Identity Data |
Name, MyKad, date of birth |
KYC, age verification, security |
| Contact Details |
Phone number, email |
Communications, 2FA verification |
| Financial Data |
EWallet details, MYR records |
Deposit & withdrawal processing |
| Technical Data |
IP address, device, browser |
Security, fraud detection |
| Gaming Data |
Betting history, winnings |
Dispute resolution, compliance |
| Communications Data |
Live chat logs, support emails |
Service quality, issue resolution |
3. How pastiwin99 Uses Your Data
Pastiwin99 uses the personal data collected for the following purposes:
3.1 Service Operations
- Creating and managing your pastiwin99 account
- Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay
- Processing withdrawal of winnings in MYR to your eWallet or Malaysian bank account
- Operating Sports Betting, casino games, slots, and all other services
- Crediting and managing bonuses and promotions
3.2 Identity Verification & Security
- Verifying your age (18 and above) and identity in accordance with KYC requirements
- Detecting and preventing fraud, money laundering, and unlawful activity
- Monitoring your account for suspicious activity and keeping your account secure
- Verifying that you are not on the responsible gambling self-exclusion list
3.3 Communications & Support
- Sending important notifications related to your account, transactions, and security
- Providing 24/7 customer support via live chat and email
- Responding to enquiries, complaints, and requests from pastiwin99 members
3.4 Platform Improvements
- Analysing usage patterns to improve our interface and overall user experience
- Identifying popular games and those that require improvement
- Optimising the pastiwin99 platform experience for users in Malaysia
3.5 Legal Compliance
- Complying with applicable laws and regulations in Malaysia
- Maintaining records required for audit and accountability purposes
- Cooperating with authorities when required by law
4. Legal Basis for Data Processing
Pastiwin99 processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA):
- Consent: By registering an account and agreeing to this Privacy Policy, you give pastiwin99 consent to process your data for the purposes stated herein.
- Contract Performance: Data processing is necessary to fulfil the contractual obligations between you and pastiwin99, including the processing of deposits, withdrawals, and game transactions.
- Legitimate Interests: pastiwin99 has a legitimate interest in processing data for platform security, fraud prevention, and service improvement.
- Legal Obligation: Certain data processing is mandatory under Malaysian law, including KYC and anti-money laundering (AML) requirements.
5. Data Sharing & Disclosure
Pastiwin99 does not sell or rent your personal data to any third party for marketing purposes. However, we may share your data with the following parties in limited circumstances:
5.1 Service Providers
Pastiwin99 shares only the minimum necessary data with third-party service providers that help us operate the platform, including:
- Gaming providers (Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Playtech) – to operate gaming sessions
- Payment providers – to process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay
- IT infrastructure and cybersecurity provider
- KYC and identity verification service providers
All of these service providers are bound by strict confidentiality agreements and are permitted to use your data only for the specified purposes.
5.2 Legal Requirements
Pastiwin99 may disclose your data to Malaysian government authorities or regulatory bodies where required by law, court order, or valid legal process. In each such case, pastiwin99 will disclose only the minimum information necessary and, where permitted by law, will notify you of the disclosure.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of pastiwin99 assets, your personal data may be transferred to the new entity. You will be notified before your data is transferred and becomes subject to a different privacy policy.
Our Commitment: pastiwin99 will never sell your personal data to advertisers, data brokers, or any third party for marketing purposes. This is a non-negotiable principle at pastiwin99.
6. Data Security & Protection Measures
Pastiwin99 invests seriously in data security to ensure the personal information of all members is protected at all times. Our implemented security measures include:
6.1 Technical Security
- 256-bit SSL Encryption: All data transmitted between your browser and pastiwin99 servers is encrypted using the latest TLS protocol
- Stored Data Encryption: Sensitive data such as payment details and KYC information is stored in encrypted form within our databases
- Hashed Passwords: Your password is never stored in plain text — it is saved as a hash that cannot be reversed to recover the original password
- Two-Factor Authentication (2FA): An added layer of security through SMS verification for pastiwin99 account access
6.2 Infrastructure Security
- Multi-layered firewalls and an intrusion prevention system (IPS)
- 24-hour cybersecurity threat monitoring
- Strict access controls — only authorised pastiwin99 staff may access user data
- Periodic security audits conducted by independent third parties
- A comprehensive security incident response plan
6.3 Data Breach Response
In the event of a data breach affecting your personal data, pastiwin99 will take the following steps: immediately isolate and contain the breach, notify you via your registered email within a reasonable timeframe after the breach is detected, and report to the Personal Data Protection Commissioner of Malaysia where required under the PDPA 2010.
7. Data Retention Period
Pastiwin99 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.
- Active Account Data: Retained for the duration your account remains active on pastiwin99 and for the required period following account closure
- Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysian legal requirements for audit and tax purposes
- KYC Documents: Retained for a minimum of five (5) years after the business relationship ends, in accordance with anti-money laundering requirements
- Game Logs: Retained for a minimum of three (3) years for dispute resolution purposes
- Communication Logs: Retained for two (2) years for service quality and dispute resolution purposes
- Technical Data (access logs, IP): Retained for one (1) year for security and fraud detection purposes
Upon expiry of the relevant retention period, data will be securely deleted or anonymised so that it can no longer be linked to any specific individual.
8. Your Personal Data Rights
As a data subject under Malaysia's PDPA 2010, you have the following rights in relation to your personal data held by pastiwin99:
Right of Access
You have the right to request a copy of the personal data pastiwin99 holds about you. Requests will be processed within 21 business days.
Right to Rectification
You have the right to request a correction of any inaccurate or incomplete personal data held in your pastiwin99 account.
Right to Erasure
You may request the deletion of your personal data under certain circumstances, subject to any applicable legal retention obligations.
Right to Object
You have the right to object to the processing of your data under certain circumstances, particularly for direct marketing purposes by pastiwin99.
Right to Data Portability
You may request a copy of your data in a structured, machine-readable format for transfer to another service.
Right to Restrict Processing
Under certain circumstances, you may request that pastiwin99 restrict the processing of your data while a dispute is being resolved.
To exercise any of the above rights, please contact the pastiwin99 support team via live chat or email at support@pastiwin99.best. We will verify your identity before processing any data-related request. Please note that certain requests may be limited by applicable legal or contractual obligations.
9. Cookies & Tracking Technologies
Pastiwin99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit a website.
9.1 Types of Cookies We Use
Essential Cookies – Required for the platform to function
Analytics Cookies – Measuring platform usage
Preference Cookies – Saves your preferred settings
Security Cookies – Detecting suspicious activity
Session Cookies – Maintaining your login status
9.2 Third-Party Cookies
Pastiwin99's game providers, such as Evolution Gaming, Pragmatic Play, and others, may use their own cookies when you play their games on our platform. These cookies are governed by the respective provider's privacy policy. pastiwin99 has no control over these third-party cookies.
9.3 Managing Cookies
You can manage and delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of some parts of the pastiwin99 platform. Essential cookies cannot be turned off as they are required for the platform to function properly.
10. Children's Privacy & Protection of Young People
Pastiwin99 strictly prohibits the use of our platform by individuals under the age of 18. We do not knowingly collect personal data from minors. All pastiwin99 account registration processes require valid age verification.
If pastiwin99 discovers that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the account in question. Parents or guardians who find that their child has registered an account on pastiwin99 may contact us promptly at support@pastiwin99.best to request account closure and data deletion.
11. Amendments to the Privacy Policy
Pastiwin99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or platform improvements. Members will be notified of material changes via their registered email or in-platform notifications on pastiwin99 at least 14 days before the changes take effect.
The date this Policy was last updated is displayed at the top of this document. We encourage you to review this Privacy Policy periodically to stay informed about how pastiwin99 protects your personal data. Your continued use of our platform after any amendments take effect will be considered your acceptance of the updated Policy.
12. Contact pastiwin99 for Privacy Enquiries
If you have any questions, concerns, or requests regarding this Privacy Policy or how pastiwin99 handles your personal data, please reach out to us through the following channels:
- Privacy Email: support@pastiwin99.best (please state "Privacy Inquiry" in the email subject line)
- Live Chat: Available 24/7 directly within the pastiwin99 platform
- Frequently Asked Questions: pastiwin99 FAQ Page for general enquiries
Our data protection team will review your request and respond within 14 business days. For more complex requests, this period may be extended, and you will be notified accordingly.
If you are dissatisfied with how pastiwin99 has handled your data request, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the available official channels.