Privacy Policy gdwon — Your Personal Data Protection

Gdwon ("Company", "We") is committed to protecting the privacy of every individual who uses our platform at gdwon.pro. This Privacy Policy is designed to give our members full clarity on how their personal data is handled, from the moment of registration through to the last day of platform use.

We understand that your trust is our most valuable asset. Every decision we make regarding member personal data management is made with your interests and safety as the top priority. We do not take this responsibility lightly.

This policy applies to all information collected through gdwon.pro, the gdwon mobile app, email communications, customer support systems, and any other channels related to gdwon services. If you have any questions after reading this policy, our support team is available via live chat 24/7.

Gdwon collects only the data genuinely necessary to provide a safe, responsible, and efficient service. We do not collect excessive or irrelevant data beyond the scope of our services. The following are the categories of data we collect:

In some cases, we also collect supporting documents such as a copy of your identity card, bank statement, or utility bill as part of our standard identity verification process. These documents are processed securely and retained only for as long as required for compliance purposes.

Every piece of data we collect has a clear and legitimate purpose. gdwon does not use your data for purposes unrelated to the services you use. Below is a detailed breakdown of how your data is used:

• Account management: To create, verify, and securely maintain your member account on the gdwon platform accurately.
• Transaction processing: To process deposits, withdrawals, and all financial transactions you carry out on our platform quickly and accurately.
• Identity verification (KYC): To meet legal compliance requirements related to anti-money laundering and minimum age verification.
• Platform security: To detect and prevent fraudulent activity, hacking, system abuse, and other security threats that could affect our members.
• Customer support: To enable the gdwon support team to assist you more effectively whenever you need help.
• Responsible gaming: To monitor gameplay patterns and identify members who may benefit from our responsible gaming support programme.
• Service communications: To send important notifications regarding your account, transactions, security updates, and policy changes that affect you.
• Platform improvements: To analyse usage patterns in aggregate in order to improve user experience, speed, and platform stability at gdwon.

Gdwon upholds strict confidentiality principles. We does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are certain situations where data sharing is necessary to ensure the platform operates correctly and securely:

• Payment gateway providers: Required financial data is shared with approved payment providers solely for processing your transactions. All such providers are bound by strict confidentiality agreements.
• Game software providers: Minimal game session data is shared with third-party game providers solely to ensure smooth gameplay and resolve disputes when they arise.
• Relevant authorities: gdwon will disclose data when required by law, court order, or a regulatory body with valid jurisdiction.
• Fraud prevention: In cases of suspected fraud or financial crime, relevant information may be shared with the appropriate investigating authorities.
• Technology providers: Cloud and technical infrastructure providers that help operate the gdwon platform are bound by strict data processing agreements.

All third parties receiving data from gdwon are required to comply with security and privacy standards equal to or higher than those we apply ourselves.

Gdwon makes serious investments in cybersecurity infrastructure to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure. The following are the key security layers we employ:

• Encryption of data in transit: All communications between your browser or app and gdwon servers are encrypted using TLS 1.3 protocol with 256-bit encryption.
• Encryption of data at rest: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using AES-256 standards.
• Two-factor authentication (2FA): gdwon members are encouraged to enable 2FA for an extra layer of protection during login and withdrawal processing.
• Continuous security monitoring: Our threat detection system operates 24 hours a day, 7 days a week to detect and respond to any suspicious activity in real time.
• Regular security audits: gdwon conducts regular penetration testing and independent security audits to identify and address any system vulnerabilities.
• Internal access controls: Access to member data within gdwon's internal systems is restricted based on the principle of least privilege — only staff who genuinely require access for their assigned duties are permitted.

Gdwon uses cookies and similar tracking technologies to enhance user experience, ensure the platform functions correctly, and analyse usage patterns in aggregate. Cookies are small text files stored on your device when you visit our website.

The types of cookies we use include:

• Essential cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collects information on how visitors use our website — such as the most frequently visited pages and error messages received — to help us improve the platform.
• Functionality cookies: Saves your preferences such as language, region, and display settings so you don't have to reconfigure them on every visit.
• Analytics cookies: Used to understand overall traffic patterns and user behaviour for the purpose of planning continuous platform improvements.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the gdwon platform.

In accordance with the Malaysia Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by gdwon. We are committed to making it easy for you to exercise these rights in a straightforward manner, free from unnecessary obstacles:

To exercise any of the above rights, contact the gdwon privacy team via live chat or our support email. We will process your request within 30 business days in accordance with Malaysia's PDPA requirements.

Gdwon retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable laws and regulations. Retention periods vary depending on the type of data and legal requirements:

• Active account data: Retained for the duration your account remains active and for a defined period following account closure for audit and compliance purposes.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysia's financial and taxation legal requirements.
• KYC documents: Retained for the period required by applicable anti-money laundering regulations, typically five (5) to seven (7) years.
• Support communication logs: Retained for two (2) years for reference, dispute resolution, and service improvement purposes.
• Technical data and security logs: Retained for twelve (12) months for fraud detection and cybersecurity forensics purposes.

Once the retention period expires, data is securely deleted using industry-standard data erasure procedures. Data that is no longer required will not be retained beyond what is necessary.

Gdwon reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, new legal requirements, or developments in the cybersecurity landscape. We are committed to giving members clear notice whenever significant changes occur.

• Minor changes that do not materially affect your privacy rights will take effect immediately upon being posted on our website with an updated date.
• Significant changes that meaningfully affect how we use your data will be communicated to you via email or in-account notification at least 14 days before taking effect.
• Continued use of the gdwon platform after any amendments take effect constitutes acceptance of the updated privacy terms.
• The latest version of this Privacy Policy is always accessible at gdwon.pro/privacy-policy, with a clear update date displayed at the top of the document.

We encourage you to review this page regularly so you are always informed of how we protect your information. Transparency is at the core of gdwon's approach to privacy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our team is ready to assist. We take every privacy enquiry seriously and are committed to providing accurate and helpful responses.

• Live Chat: The fastest method — available 24 hours a day, 7 days a week, directly from gdwon.pro
• Email: [email protected] — we aim to respond within 2 business days
• Language: Inquiries in Malay, English, or Chinese are welcome

For formal requests relating to your privacy rights — such as data access, correction, or deletion — please clearly state the type of request and include sufficient identity verification information so we can process it securely and accurately.