Last Updated: 1 January 2026 | Effective Immediately Upon Publication
01 Introduction
hariwin88 ("we", "us", "our", "Platform") is committed to protecting the privacy and personal data of all individuals who access or use the hariwin88 platform at hariwin88.cam (the "Site") and any related services, features, or communications (collectively, the "Services"). This Privacy Policy ("Policy") sets out in detail the nature of the personal data we collect, the lawful bases upon which we process that data, the purposes for which it is used, and the rights available to you as a data subject.
hariwin88 operates an online casino and sports betting platform serving users in Malaysia, with all transactions conducted in Malaysian Ringgit (MYR). The personal data we handle relates primarily to account registration, identity verification, payment processing, and platform security.
By accessing the Site or using the Services, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of your agreement with hariwin88.
hariwin88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data is used solely to operate the platform, process transactions, and maintain account security.
02 Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:
- "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, identification number, payment details, and device identifiers.
- "Processing" — any operation performed on personal data, whether by automated means or otherwise, including collection, storage, use, disclosure, erasure, or destruction.
- "Data Controller" — hariwin88, which determines the purposes and means of processing personal data collected through the platform.
- "Data Processor" — a third party that processes personal data on behalf of hariwin88 in accordance with documented instructions.
- "User" / "You" — any registered or prospective account holder accessing the hariwin88 platform.
- "KYC" — Know Your Customer, the identity and document verification process required before withdrawal processing or as otherwise directed.
- "Cookies" — small data files stored on your device by the Site for purposes including session management, analytics, and user preference retention.
- "MYR" / "RM" — Malaysian Ringgit, the primary transaction currency of the platform.
03 Data We Collect
hariwin88 collects the following categories of personal data depending on the nature of your interaction with the platform:
3.1 Registration & Identity Data
- Full legal name
- Date of birth (required to verify the minimum age of 21 years)
- Email address and contact number
- Residential address
- Username and encrypted account credentials
3.2 Identity Verification (KYC) Data
- Copy of government-issued photo identification (Malaysian MyKad, passport, or equivalent)
- Proof of residential address (utility bill, bank statement dated within 90 days)
- Selfie photograph for liveness verification where required
- Payment method ownership documentation (e.g., screenshot of e-wallet registration details)
3.3 Financial & Transaction Data
- Deposit and withdrawal amounts, timestamps, and reference numbers
- Payment method identifiers (e.g., registered mobile number linked to Touch 'n Go eWallet, Boost, or GrabPay; bank account last four digits for Maybank2u, CIMB Clicks, or Public Bank; DuitNow / FPX transaction references; USDT wallet addresses)
- Account balance history and bonus credit/debit records
3.4 Technical & Device Data
- IP address and approximate geolocation derived therefrom
- Browser type, version, and operating system
- Device identifiers and screen resolution
- Session duration, pages visited, and click-path data
3.5 Communications Data
- Live chat transcripts and support ticket content
- Email correspondence with the support team
- Feedback and survey responses where voluntarily submitted
| Data Category |
Examples |
When Collected |
| Identity Data |
Name, DOB, email |
Registration |
| KYC Documents |
MyKad, passport, selfie |
First withdrawal / on request |
| Financial Data |
Transaction history, payment method IDs |
Each deposit / withdrawal |
| Technical Data |
IP address, browser, device ID |
Every platform visit |
| Communications |
Support chat, email |
When contacting support |
04 How We Collect Data
hariwin88 collects personal data through the following means:
- Direct Input: Information you provide when registering an account, completing KYC, submitting a deposit or withdrawal request, or contacting support.
- Automated Technologies: Cookies, web beacons, session logs, and analytics tools that record your interaction with the Site.
- Payment Processors: Transaction confirmation data received from Malaysian payment partners including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and cryptocurrency networks.
- Third-Party Verification Providers: Identity verification results from KYC service providers engaged to validate documentation and confirm identity.
- Fraud Prevention Services: Risk signals and device fingerprint data from fraud-detection partners used to protect the platform and all users.
05 Data Processing & Legal Basis
hariwin88 processes personal data only where a lawful basis exists. The applicable legal bases are as follows:
- Contractual Necessity: Processing required to create and maintain your account, process deposits and withdrawals, and deliver the Services you have requested.
- Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, age verification requirements, and financial record-keeping mandates.
- Legitimate Interests: Processing carried out for fraud prevention, platform security, technical maintenance, and improvement of Services, where such interests are not overridden by your rights and freedoms.
- Consent: Where required by law, we will seek your explicit consent before processing data for marketing communications or non-essential cookies. You may withdraw consent at any time by contacting us.
Where processing is based on consent, withdrawal of that consent will not affect the lawfulness of processing carried out prior to the withdrawal.
06 How We Use Your Data
Personal data collected by hariwin88 is used exclusively for the following purposes:
- Creating, verifying, and administering your player account
- Processing MYR deposits and withdrawals via supported Malaysian payment methods
- Conducting KYC identity verification prior to withdrawal processing
- Detecting, preventing, and investigating fraud, money laundering, and account abuse
- Providing customer support via live chat, email, and other channels
- Administering bonus and promotional programmes
- Enforcing the responsible gambling tools you have activated, including deposit limits and self-exclusion
- Complying with legal and regulatory obligations, including data retention requirements
- Improving platform performance, user experience, and game offering based on aggregated usage analytics
- Sending transactional communications such as deposit confirmations, withdrawal updates, and account security alerts
hariwin88 does not use your personal data for automated decision-making that produces significant legal effects without human oversight, except where required to comply with fraud-prevention obligations.
07 Data Sharing & Disclosure
hariwin88 does not sell or rent personal data to third parties. We may share data with the following categories of recipients only to the extent necessary for the purposes identified in this Policy:
- Payment Service Providers: Malaysian payment processors including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX operators, Maybank2u, CIMB Clicks, Public Bank online banking, and cryptocurrency network operators — solely to facilitate your requested transactions.
- KYC & Identity Verification Providers: Third-party verification services engaged to validate identity documents, confirm age, and conduct liveness checks.
- Fraud Prevention & Security Partners: Services used to detect and prevent account abuse, bonus fraud, and money laundering activity.
- IT Infrastructure & Cloud Service Providers: Hosting, database, and technical infrastructure partners operating under data processing agreements with hariwin88.
- Legal & Regulatory Authorities: Where required by applicable law, court order, or instruction from a competent regulatory authority, personal data may be disclosed to law enforcement or government bodies.
- Professional Advisers: Lawyers, auditors, and compliance consultants bound by professional confidentiality obligations.
All third-party recipients are contractually required to process personal data only as instructed by hariwin88 and to implement appropriate technical and organisational security measures.
08 Data Retention
hariwin88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and reporting obligations. The following general retention guidelines apply:
- Active Account Data: Retained for the duration of your account relationship with hariwin88.
- Transaction Records: Financial and transaction data is retained for a minimum of five (5) years from the date of transaction, in accordance with anti-money laundering record-keeping requirements.
- KYC Documents: Identity documents are retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
- Support Communications: Customer support records are retained for up to three (3) years from the date of the interaction.
- Technical Logs: Session and access logs are retained for up to twelve (12) months for security and fraud investigation purposes.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where deletion is not immediately possible due to technical constraints, data is isolated from active processing until deletion can be completed.
09 Data Security
hariwin88 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- TLS/SSL encryption for all data transmitted between your device and the hariwin88 platform
- Encryption of sensitive data at rest, including payment credentials and identity documents
- Role-based access controls restricting employee access to personal data on a need-to-know basis
- Two-factor authentication for staff accessing administrative systems
- Regular security assessments, penetration testing, and vulnerability monitoring
- Incident response procedures for detecting, assessing, and reporting data breaches
Notwithstanding these measures, no method of electronic transmission or storage is entirely secure. hariwin88 cannot guarantee absolute security but commits to maintaining industry-standard protections and to notifying affected users promptly in the event of a material data breach affecting their personal data.
You can strengthen your account security by enabling two-factor authentication, using a strong unique password, and never sharing your login credentials with any third party.
10 Cookies & Tracking Technologies
The hariwin88 platform uses cookies and similar tracking technologies to operate the Site effectively and to improve your experience. Cookies are small text files stored on your device when you visit the Site.
Types of Cookies Used
- Strictly Necessary Cookies: Required for the platform to function correctly, including session management, login authentication, and security features. These cannot be disabled.
- Performance & Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Site — pages visited, session duration, error reports — to help us improve platform performance.
- Functional Cookies: Remember your preferences such as language selection, display settings, and last-used payment methods to personalise your experience.
- Security Cookies: Used to detect and prevent fraudulent activity, including repeated failed login attempts and unusual session behaviour.
You may configure your browser to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies will impair platform functionality and may prevent you from logging in or completing transactions.
11 Your Rights
Subject to applicable law and the limitations that arise from our legal obligations (including AML and KYC retention requirements), you have the following rights in relation to your personal data held by hariwin88:
- Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is being processed.
- Right to Rectification: You may request correction of any inaccurate or incomplete personal data. For changes to registered account details, contact our support team directly.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
- Right to Restrict Processing: You may request that we limit processing of your data in certain circumstances, for example where you contest the accuracy of the data or object to our processing.
- Right to Data Portability: Where technically feasible and legally applicable, you may request that your personal data be provided to you in a structured, machine-readable format.
- Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests, including profiling for marketing purposes.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of the above rights, contact us at [email protected] (plain text — not a clickable link) or via the 24/7 live chat. We will respond to all valid requests within thirty (30) days of receipt. We may request proof of identity before processing your request.
12 Minors & Age Policy
The hariwin88 platform is strictly for persons aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. Age verification is conducted as part of the account registration and KYC process, and accounts found to be held by underage individuals will be immediately closed and any funds returned to the verified payment method where legally permissible.
If you have reason to believe that a minor has registered an account or provided personal data to hariwin88, please contact us immediately at [email protected] (plain text only) so that we may take prompt action.
13 International Data Transfers
Some of hariwin88's service providers and infrastructure partners may be located in countries outside Malaysia. Where personal data is transferred to such countries, hariwin88 ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent data transfer mechanisms — to protect the data to a standard consistent with this Policy.
By using the platform and providing personal data to hariwin88, you acknowledge and consent to the transfer of your data to and from such countries where necessary for the delivery of Services, subject to the protections described in this Policy.
14 Policy Amendments
hariwin88 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made — for example, changes to the categories of data collected, the purposes of processing, or your rights — we will provide reasonable advance notice via the platform or by email to your registered address.
The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Continued use of the platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically.
15 Contact Us
For all privacy-related enquiries, data access requests, or complaints regarding hariwin88's handling of your personal data, please contact us through the following channels:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24/7 on the platform
- Response Time: We aim to respond to all privacy-related requests within 30 calendar days
If you are not satisfied with our response to your data-related request or complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction.
For platform-related questions unrelated to privacy, please visit our FAQ. For responsible gambling tools and support, visit our Responsible Gambling page.