BigWim Privacy Policy – Malaysia Member Personal Data Protection

1 Introduction

BigWim Entertainment Limited ("BigWim", "we") values the privacy of every member who uses our platform. This Privacy Policy explains transparently and clearly how we collect, store, use, and protect your personal information when you register, log in, or use any service provided at bigwim.co.

This policy applies to all users of the BigWim Platform regardless of the device used — whether via desktop web browser, Android, or iOS smartphone. It also covers all interactions with the BigWim customer support team via live chat, email, or Telegram.

BigWim complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all relevant data protection regulations. This compliance is not merely a legal requirement — it is a core value we uphold as a platform that respects our members' trust.

2 Information We Collect

BigWim only collects data that is genuinely necessary to provide a safe, fair, and efficient service. The data we collect falls into three main categories:

A. Information You Provide Directly

• Full name as stated on your official identification document.
• Date of birth for age verification purposes.
• Email address and mobile phone number.
• Bank account details and digital wallet information for financial transaction purposes.
• Copies of KYC documents (MyKad, passport) submitted during account verification.
• Records of communications with the bigwim customer support team.

B. Information Collected Automatically

• IP address and general geolocation information (country/region).
• The type of web browser, operating system, and device used.
• Session logs including login time, logout time, and session duration.
• Gaming activity records including bets placed and game results.
• Complete records of deposit and withdrawal transactions.
• Cookie data and device identifiers for security and personalisation purposes.

C. Information from Third Parties

• Feedback from payment service providers regarding transaction status.
• Identity verification information from relevant verification bodies (where applicable).
• AML (anti-money laundering) screening data from recognised compliance databases.

3 How We Use Your Data

Every piece of information we collect is used for a specific and legitimate purpose. Below is a summary of our data usage purposes:

BigWim will not use your data for purposes other than those stated above without first obtaining your consent. In particular, we will not use your gameplay data in any way that could discriminate against you in other services.

4 Data Sharing and Disclosure

BigWim does not sell, rent, or share your personal information with any third party for commercial purposes. However, there are limited situations where your data may be shared with certain parties:

• Trusted Service Providers: Payment processors (such as banks and digital wallet providers), cloud infrastructure providers, and identity verification services — all subject to strict confidentiality agreements.
• Legal Compliance: When required by authorities with legitimate jurisdiction, such as the police, courts, or financial regulatory bodies.
• Fraud Prevention: Limited sharing with industry bodies or fraud prevention agencies to detect and stop illegal activity.
• Business Transfers: In the event of a merger, acquisition, or asset sale — data will be transferred with the same protection guarantees maintained.

5 Data Security

BigWim continually invests in security infrastructure to ensure your data is protected at every stage — during transmission, processing, and storage.

The technical security measures we implement include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
• Encryption of stored data for all sensitive information, including bank account details.
• Role-based access control (RBAC) — bigwim employees can only access data relevant to their role.
• 24/7 security monitoring with automated intrusion detection systems.
• Periodic security audits conducted by independent third parties.
• Two-factor authentication (2FA) for member account login.
• Encrypted data backups at geographically separate data centres.

While we take all reasonable measures to protect your data, no system can be guaranteed 100% secure against cyber threats. You also play an important role in keeping your account safe — never share your password, always use a strong password, and enable 2FA in your bigwim account settings.

6 Cookie Usage Policy

BigWim uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored in your web browser when you visit bigwim.co.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login session verification and security. Cannot be disabled.
• Preference Cookies: Saves your preferences such as language, theme, and display settings for future sessions.
• Analytics Cookies: Helps us understand platform usage patterns to make meaningful improvements (data is collected in aggregate and is not personalized).
• Security Cookies: Detects unusual login activity and helps prevent unauthorized access.

7 Data Retention and Deletion

BigWim only retains your personal data for as long as it is needed for the stated purposes, or for as long as required by applicable law. The following are general retention period guidelines:

• Active account data: For as long as your account is active and for 12 months after account closure.
• Financial and transaction records: Minimum 7 years from the transaction date in accordance with Malaysia's accounting legislation.
• KYC documents: Minimum 5 years after the business relationship ends, in accordance with AMLA requirements.
• Security and access logs: 90 days for general logs; up to 3 years for logs related to security incidents.
• Support communication records: 2 years from the date of the last interaction.

Once the retention period expires or data is no longer required, bigwim will securely delete or anonymise that data in accordance with established procedures.

8 Your Rights Regarding Personal Data

As a bigwim user and individual whose personal data we process, you have the following rights under Malaysia's PDPA and bigwim's internal policies:

To exercise any of the above rights, contact the bigwim privacy team via live chat in your account or email [email protected]. We will respond within the required timeframe.

9 Children's Data Protection

The bigwim platform is not designed for or targeted at individuals under the age of 18. We do not knowingly collect any personal data from children or minors.

If we discover that data from an individual under 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. If you believe we hold data relating to a minor, please contact us immediately through bigwim's support channels.

10 Cross-Border Data Transfers

In the course of its operations, BigWim may transfer your personal data to servers located outside Malaysia, particularly for backup storage and cloud infrastructure processing. All such cross-border data transfers are carried out with safeguards that meet or exceed the standards required by Malaysia's PDPA.

BigWim only uses cloud infrastructure providers that are certified and compliant with international security standards such as ISO 27001 and SOC 2. All contracts with these providers include strict data protection clauses to ensure your data remains protected whether in transit or stored at overseas locations.

11 Amendments to This Privacy Policy

BigWim reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, technology used, legal requirements, or other relevant developments.

When material changes are made, we will notify you via:

• In-account notification on bigwim when you next log in.
• Email to the address registered with your account.
• Notification banner displayed on the bigwim.co homepage.

The "Updated" date at the top of this page always reflects when this Privacy Policy was last revised. Continued use of the Platform after any amendment takes effect constitutes acceptance of the latest version of this Privacy Policy.

12 How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how bigwim handles your personal data, we encourage you to reach out through the following channels:

• Live Chat: Available 24/7 within your bigwim account — the fastest way to get a response.
• Privacy Email: [email protected] — for more detailed privacy enquiries or data rights requests.
• Telegram: Through bigwim's official support channel on Telegram.

Our team will endeavor to respond to all privacy-related inquiries within 5 business days. For formal requests such as data access or deletion, a longer processing period may be required as stated in Section 8 above.