Privacy Policy — GWKTogel

1 Introduction

GWKTogel ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all users ("Player", "you", "your") who access and use our online gambling services. This Privacy Policy describes the types of personal data we collect, the purposes for which it is processed, the parties with whom it may be shared, and the measures we take to keep it secure.

This policy applies to all data collected through the GWKTogel website at gwktogel.cam, including all associated features, services, communications, and account interactions. It applies equally regardless of the device or browser used to access the platform.

GWKTogel operates under international online gaming licensing. Our data processing practices are designed to meet the requirements of our licensing jurisdiction and international data protection standards. We do not operate under Malaysian domestic privacy law as our primary regulatory framework, although we respect the principles of the Personal Data Protection Act 2010 (Malaysia) where applicable to our Malaysian users.

2 Definitions

3 Personal Data We Collect

GWKTogel collects the following categories of personal data in connection with account registration, platform use, and legal compliance obligations:

We do not collect sensitive categories of personal data (such as health information, ethnic origin, or political views) except where directly relevant to responsible gambling assessments and voluntarily disclosed by the Player.

4 How We Collect Your Data

GWKTogel collects personal data through the following channels:

4.1 Direct Collection

Data you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion. This includes all information entered into forms, chat interfaces, or document upload tools on the platform.

4.2 Automated Collection

Technical and behavioural data collected automatically through the platform's systems when you browse, log in, or play — including IP address, device identifiers, session data, and cookie-based tracking. Please refer to Section 9 for full details on our cookie usage.

4.3 Third-Party Sources

In certain circumstances, we may receive additional data about you from third-party sources, including:

• Identity verification and KYC service providers who validate your documentation.
• Payment processors (such as DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay) who confirm transaction status and payment account ownership.
• Fraud detection and AML screening providers who flag accounts or transactions against risk databases.
• Publicly available sources such as sanctions lists and politically exposed persons (PEP) databases as required by our licensing obligations.

5 Legal Basis for Processing

GWKTogel processes your personal data on one or more of the following legal bases:

• Contractual necessity — processing required to perform the contract between you and GWKTogel, including account management, payment processing, and bonus administration.
• Legal obligation — processing required to comply with applicable legal and regulatory requirements, including anti-money-laundering (AML) laws, Know Your Customer (KYC) obligations, and international licensing conditions.
• Legitimate interests — processing necessary for GWKTogel's legitimate business interests, including fraud prevention, platform security, customer service quality assurance, and responsible gambling monitoring, where these interests are not overridden by your rights and interests.
• Consent — where you have given specific consent for a particular processing activity, such as receiving promotional communications. Consent may be withdrawn at any time by contacting support.

6 How We Use Your Personal Data

GWKTogel uses your personal data for the following specific purposes:

6.1 Account Management

To create, maintain, verify, and administer your player account, including processing registration details, enabling login, and managing account preferences and security settings.

6.2 Payment Processing

To process deposits and withdrawals in Malaysian Ringgit (MYR) via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels. Financial data is used to verify that payment accounts belong to the registered Player and to maintain accurate transaction records.

6.3 Identity Verification (KYC)

To verify your identity and age as required by our international licensing obligations. This involves processing identity documents, facial verification images, and proof-of-address documentation. KYC verification is mandatory for all withdrawal requests.

6.4 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent transactions, account misuse, money laundering, multi-accounting, and other prohibited activities. Technical data including IP addresses, device fingerprints, and session information is routinely analysed for anomalous patterns.

6.5 Responsible Gambling

To monitor betting patterns and account behaviour for indicators of problem gambling, and to administer responsible gambling tools (deposit limits, session reminders, self-exclusion) that Players activate through their account settings.

6.6 Customer Support

To respond to your inquiries, resolve complaints, process account requests, and maintain records of support interactions for quality assurance and compliance purposes.

6.7 Platform Personalisation

To personalise your experience on GWKTogel — including recommended games, relevant promotions, and interface preferences — based on your play history and stated preferences.

6.8 Legal & Regulatory Compliance

To fulfil obligations under applicable laws, regulations, and our international licensing conditions, including record-keeping, reporting, and cooperation with regulatory investigations where lawfully required.

7 Data Sharing & Disclosure

GWKTogel does not sell, rent, or commercially transfer your personal data to any third party. We share personal data only in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process personal data on our behalf under strict contractual obligations. Categories of such providers include:

• Payment processors and e-wallet operators (DuitNow, FPX network, Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, cryptocurrency network operators).
• Identity verification and KYC service providers.
• Fraud detection and AML screening platforms.
• Cloud hosting and infrastructure providers.
• Customer support software providers.

All service providers are bound by data processing agreements that prohibit use of your data for any purpose beyond the specific service they provide to GWKTogel.

7.2 Legal and Regulatory Disclosure

We may disclose personal data where required to do so by applicable law, court order, or the legitimate request of a competent regulatory or law enforcement authority. We will, where legally permissible, notify the affected Player of such a request prior to disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring involving GWKTogel, personal data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any material change to the data controller resulting from such a transaction.

8 International Data Transfers

GWKTogel operates an international platform and may transfer your personal data to, or store it in, countries outside of Malaysia. These transfers may occur in connection with the operation of our platform infrastructure, the engagement of service providers located in other countries, or compliance with our international licensing requirements.

Where personal data is transferred internationally, GWKTogel takes appropriate steps to ensure that such transfers are subject to adequate protections, including contractual safeguards that require recipient parties to protect personal data to a standard equivalent to this Privacy Policy.

9 Cookies & Tracking Technologies

GWKTogel uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

You may manage cookie preferences through your browser's built-in settings. Please note that disabling strictly necessary or security cookies may impair platform functionality or prevent login. GWKTogel does not deploy third-party advertising or tracking cookies.

10 Data Retention

GWKTogel retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal, regulatory, licensing, and anti-money-laundering obligations. Our general retention periods are as follows:

• Account and identity data: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure, as required by AML/KYC regulatory standards.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping obligations.
• Support communications: Retained for three (3) years from the date of the last interaction.
• Technical and behavioural logs: Retained for twelve (12) months on a rolling basis, then anonymised for aggregate analytics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Requests for early deletion are subject to Section 12 (Your Rights) and may be limited where retention is required by legal obligation.

11 Security Measures

GWKTogel implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Our security infrastructure includes:

• Encryption in transit: All data transmitted between your device and the GWKTogel platform is protected by TLS 1.3 (Transport Layer Security) encryption.
• Encryption at rest: Stored personal data, including identity documents and financial records, is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised personnel whose job functions require it, under a strict role-based access control (RBAC) framework.
• Two-factor authentication: Optional 2FA is available on all player accounts and is strongly recommended.
• Intrusion detection: Automated systems monitor for anomalous access patterns, brute-force attempts, and account takeover indicators in real time.
• Regular security assessments: GWKTogel conducts periodic vulnerability assessments and penetration testing on its platform infrastructure.

In the event of a personal data breach that poses a material risk to affected individuals, GWKTogel will notify affected Players and, where required, the relevant regulatory authority, without undue delay.

12 Your Data Rights

As a Player whose data is processed by GWKTogel, you are entitled to exercise the following rights at any time by contacting our support team:

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We will respond to all verified rights requests within 30 days. We may request proof of identity before processing certain requests.

13 Minors & Age Verification

If it is determined at any point that a Player is under 21 years of age, their account will be immediately suspended, all pending transactions will be frozen, and the account will be reviewed for closure in accordance with our Terms & Conditions. Any real-money deposits made by an underage player will be returned to the originating payment method following investigation.

Parents and guardians who believe a minor has registered on GWKTogel are encouraged to contact our support team immediately. We will prioritise such reports and take appropriate action without delay.

14 Third-Party Services & Links

The GWKTogel platform does not include links to external third-party websites in its navigational structure. However, payment processing interactions may redirect Players to third-party interfaces operated by payment providers such as DuitNow, FPX-network banks (Maybank, CIMB, Public Bank, Hong Leong), Touch 'n Go eWallet, Boost, and GrabPay.

GWKTogel is not responsible for the privacy practices of these external payment interfaces. We recommend reviewing the privacy policy of each payment provider before completing a transaction through their interface. Once you leave the GWKTogel platform and enter a third-party payment gateway, this Privacy Policy no longer applies.

15 Policy Amendments

GWKTogel reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or business operations. Material amendments will be communicated to Players via a notice displayed on the platform upon next login or through the registered email address.

The version number and date of last update displayed at the top of this page allow you to verify whether this Policy has changed since your last review. Continued use of the platform following an update constitutes acceptance of the revised policy. If you do not agree with the changes, you should cease using the platform and contact support to request account closure and data deletion.

16 Contact & Complaints

For any questions, concerns, or requests regarding this Privacy Policy or GWKTogel's data processing practices, please contact us through the following channels:

If you are dissatisfied with our response to a privacy-related concern, you have the right to escalate your complaint to the relevant data protection authority under your jurisdiction. GWKTogel will cooperate fully with any lawful investigation.

For matters related to responsible gambling and account self-exclusion, please visit our Responsible Gambling page, which outlines the full range of player protection tools available on GWKTogel.