Privacy Policy semutwinn — Malaysia Member Personal Data Protection

Information We Collect

Semutwinn collects various types of information from members to enable our services to operate safely and effectively. The categories of data collected are as follows:

How We Collect Data

Data is collected through the following channels when you interact with the Semutwinn platform:

• Account Registration: Information you provide when opening a new account at Semutwinn.
• Platform Usage: Data generated automatically when you use our services, including activity logs, wagering records, and interface interactions.
• KYC Process: Identity verification documents submitted by you to complete the account verification process.
• Financial Transactions: Information associated with every deposit and withdrawal made through your account.
• Communication: Information you share when contacting the Semutwinn support team through any channel.
• Cookies and Tracking Technologies: Technical data collected automatically through your web browser or mobile app.

How Your Data Is Used

Semutwinn uses collected data solely for legitimate and transparent purposes. We will not use your data for any purpose beyond what is stated here without first obtaining your consent:

• Provide, maintain, and improve Semutwinn platform services.
• Verify members' identity and age as a legal compliance requirement.
• Securely process deposits, withdrawals, and other financial transactions.
• Detect and prevent fraudulent activity, money laundering, and platform abuse.
• Send account-related communications such as transaction confirmations and security notices.
• Provide effective customer support and respond to enquiries.
• Fulfil applicable legal and regulatory obligations.
• Support responsible gaming programmes and identify signs of problem gambling.

Data Sharing with Third Parties

Semutwinn does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes. Your data is shared only in the following limited circumstances:

• Service Providers: Companies that help us operate the platform, including payment processing providers and gaming software providers, are all subject to strict data protection agreements.
• Legal Compliance: When required by law enforcement bodies or relevant authorities under a valid legal directive.
• Fraud Prevention: With recognised fraud prevention agencies for the purpose of identity verification and detecting suspicious activity.
• Business Transfers: In the event of a corporate restructuring, merger, or acquisition — with reasonable prior notice given to members.

All third parties who receive personal data of semutwinn members are bound by confidentiality and data protection agreements requiring them to handle such information to a security standard equal to or higher than our own.

Your Data Security

Semutwinn implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure:

• 256-bit SSL encryption for all data in transit between your device and our servers.
• At-rest encryption for sensitive information such as financial data and KYC documents.
• Strict role-based access control — only staff who require access to specific data are permitted to view it.
• Continuous 24/7 security monitoring with an active intrusion detection system.
• Periodic security audits conducted by qualified independent third parties.
• Regular cybersecurity awareness training for all Semutwinn staff.

Data Retention Period

Semutwinn retains your personal data for as long as your account is active and for the period required thereafter to fulfil legal obligations, resolve disputes, and enforce our agreements.

In general, member data is retained in accordance with the following guidelines:

• Active Account Data: Retained for the duration of active membership and for a minimum of 5 years after account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial regulatory requirements.
• KYC Documents: Retained for the period prescribed by applicable anti-money laundering legislation.
• Communication Logs: Retained for 2 years after the last communication.

Upon expiry of the retention period, data will be deleted or anonymised securely and irreversibly.

Your Rights as a Data Owner

As a data subject, you have the following rights regarding your personal data held by semutwinn. To exercise any of these rights, please contact our support team:

Cookies and Tracking Technologies

Semutwinn uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The types of cookies we use are:

• Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled.
• Functional Cookies: Save your preferences such as language and display settings to enhance ease of use.
• Analytics Cookies: Helps us understand how members use the platform so we can improve our services. This data is collected in aggregate and anonymised form.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the Semutwinn platform.

International Data Transfers

In operating our integrated services, your personal data may be processed on servers located outside Malaysia. Semutwinn ensures that any such data transfers are carried out with adequate safeguards in place:

• Data transfers only occur to countries or entities that provide a level of data protection equivalent to or higher than Malaysian legal requirements.
• All international service providers are bound by comprehensive data processing agreements.
• Secure data transfer mechanisms are used to ensure compliance with international data protection standards.

KYC & Legal Compliance

The Know Your Customer (KYC) process is a mandatory requirement that cannot be waived at Semutwinn. This is not merely an internal procedure — it is a legal obligation under Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).

Semutwinn conducts KYC in a manner that respects your privacy:

• KYC documents are stored in a secure environment with full encryption.
• Access to KYC documents is strictly limited to qualified compliance personnel only.
• Documents are not shared with third parties except where required by applicable law.
• The KYC review process is conducted with full respect for the dignity and privacy of every member.

Children's Privacy

If we discover that personal data of a minor has been collected without our knowledge, such data will be deleted immediately and the associated account will be terminated. If you believe a child's data has been collected inadvertently, please contact us right away.

Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, the semutwinn data protection team is here to help:

You may also refer to Terms and Conditions and Responsible Gaming Policy us for more information on how semutwinn manages your account and data.