Privacy Policy 20w50 – We Safeguard Your Data as If It Were Our Own

01Introduction & Our Privacy Commitment

This Privacy Policy document sets out in detail how 20w50 ("we", "platform") collect, use, store, protect, and in certain limited circumstances, share your personal information ("data") as a player and user of our platform. This Policy applies to all users who access or use the 20w50 website, mobile platform, and all related services.

We understand that you are entrusting us with sensitive personal information when you register and play at 20w50 — from your full name and identity card number, to your eWallet account details and financial transaction history. This trust is something we do not take lightly. Every decision we make regarding data management goes through a careful deliberation process guided by one fundamental question: "Is this truly in the best interest of protecting our Malaysian players' privacy?"

20w50 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection requirements in the jurisdictions where we operate. By using the 20w50 platform, you consent to the collection and use of your data as described in this Privacy Policy. If you do not agree with any aspect of this policy, please do not use our platform.

02Personal Data We Collect

20w50 collects various types of personal data depending on how you interact with our platform. Below is a detailed breakdown of the data categories we collect:

We do not collect sensitive personal data such as health information, biometric data beyond what is required for identity verification, or political and religious affiliations. 20w50 only collects the minimum data directly relevant to providing you with our online casino platform services.

03How Your Data Is Used

20w50 uses personal data we collect solely for legitimate and transparent purposes. Below is a full list of the purposes for which your data is used:

• Account management: To create, verify, and manage your 20w50 account, including the identity verification (KYC) process required by compliance obligations.
• Service provision: To enable you to play games, make deposits, withdraw winnings, and use all features of the 20w50 platform smoothly.
• Payment processing: To process deposit and withdrawal transactions via Malaysian eWallets and other payment methods of your choice.
• Security & fraud prevention: To detect and prevent fraudulent activity, money laundering, multiple account ownership, and other security threats.
• Customer support: To provide effective technical assistance and customer service whenever you contact the 20w50 support team.
• Service communications: To send you important notifications regarding your account, changes to our terms, and critical security updates.
• Responsible gaming: To monitor gameplay patterns in order to identify signs of problem gambling and provide appropriate support in line with our responsible gaming policy.
• Legal compliance: To comply with reporting and audit requirements mandated by relevant authorities and our licensing bodies.
• Platform improvements: To analyse usage patterns in aggregated, anonymised form for the purpose of improving user experience and the quality of 20w50's services.

If 20w50 intends to use your data for purposes not stated above — for example, for additional marketing purposes or sharing with new partners — we will first seek your explicit consent. You have the right to decline without any negative impact on your existing account services.

04Data Protection & Security

Protecting your personal data is our highest technical priority 20w50. We continuously invest in the latest security infrastructure and uphold the best industry standards to ensure your data is always protected against unauthorised access, loss, or misuse.

Key technical security measures we have implemented include:

• 256-bit SSL Encryption for all data transmitted between your device and 20w50's servers — the same standard used by Malaysia's leading banking institutions.
• Encrypted password storage using strong hashing algorithms — your password is never stored in plain text in any of our systems.
• Two-factor authentication (2FA) is available on all accounts as an added layer of security, which you can enable in your account settings.
• 24/7 security monitoring by our automated systems and IT security team, who continuously monitor for any suspicious activity or unauthorised access attempts.
• Regular security audits by independent third parties who test 20w50's systems against the latest security threats.
• Strict internal access controls – only 20w50 staff with a legitimate operational need may access your personal data, and all such access is logged and monitored.

While we take all reasonable steps to protect your data, no digital security system can be guaranteed to be 100% secure. In the event of a security breach involving your data, 20w50 is committed to notifying you promptly in accordance with applicable legal requirements, and to taking appropriate remedial action.

05Data Sharing With Third Parties

20w50 does not sell, rent, or share your personal data with third parties for their own marketing purposes. This is a fundamental principle we have never compromised on. However, in the course of operating our platform, there are limited situations where we need to share your data with certain parties:

• Payment service providers: Required transaction information is shared with Malaysian eWallet providers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) and banks within the FPX network solely for the purpose of processing your financial transactions.
• Technology service providers: Companies that provide 20w50 with technical infrastructure, cloud services, and operational support may have limited access to certain data within the scope of their service contracts, and all such parties are bound by strict confidentiality agreements.
• Game providers: Session data required for gameplay is shared with our licensed game providers for technical operational purposes only.
• Authorities and law enforcement bodies: 20w50 will disclose data where required by a court order, directive from a relevant Malaysian authority, or reporting obligations under applicable anti-money laundering legislation.
• Fraud investigation: In cases where there are strong grounds to suspect fraudulent activity or financial crime, 20w50 may share relevant information with the appropriate authorities.

06Cookies & Tracking Technologies

20w50 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit a website. Below are the types of cookies we use and their purposes:

• Essential Cookies: Required for core platform functions such as login, active game sessions, and security. These cookies cannot be disabled without fundamentally affecting platform functionality.
• Preference Cookies: Saves your personal preferences such as language, display settings, and game preferences so you do not have to reconfigure them each time you log in to 20w50.
• Analytics Cookies: Helps us understand how players use the platform in order to improve the overall user experience. Analytics data is collected in aggregate and anonymised form.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and ensure the security of your login sessions.

You can manage and delete cookies at any time through your web browser settings. However, disabling essential cookies may affect your ability to use certain key features of the platform 20w50 seamlessly. We encourage you to review your browser's privacy settings periodically to ensure you are comfortable with the cookies currently active.

07Cross-Border Data Transfers

In operating an online casino platform that demands world-class technical infrastructure, your data may be processed or stored on servers located outside Malaysia. 20w50 ensuring that any such data transfers are subject to adequate safeguards equivalent to or exceeding the requirements of Malaysia's PDPA.

We only engage internationally accredited infrastructure service providers with recognised security certifications and a proven strong privacy track record. All such service providers are bound by strict data processing agreements that require them to protect your data to the standards we set — which are equal to or higher than Malaysian legal requirements.

If you would like to know more about the countries or regions where your data may be processed, please contact our Privacy Officer at [email protected] and we will provide more detailed information based on your specific needs.

08Data Retention & Deletion

20w50 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable law. The following are general guidelines for data retention periods:

• Active account data: Retained for the duration your account remains active with 20w50, plus a defined post-closure retention period.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysia's financial reporting and anti-money laundering legal requirements.
• Identity verification records (KYC): Retained for a minimum of 6 years after the business relationship ends, in accordance with legal compliance requirements.
• Customer support communication data: Retained for 3 years for reference and dispute resolution purposes.
• Aggregated analytics data: Fully anonymised data may be retained for a longer period for the purposes of operational analysis and platform improvement.

Once the stipulated retention period has expired or upon receipt of a valid data deletion request, 20w50 will securely delete or anonymise your data using methods that ensure it cannot be recovered or reused.

09Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the privacy policy of 20w50, you hold the following important rights with respect to your personal data. We are committed to respecting and facilitating the exercise of these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you at any time. We will provide access within 30 days of receiving a valid request.
• Right to Rectification: If you find that the data we hold is inaccurate or incomplete, you have the right to request a correction. We will update your data within 14 days.
• Right to Erasure: Under certain circumstances provided for by law, you have the right to request the deletion of your personal data. Such requests are subject to mandatory legal retention requirements.
• Right to Restriction of Processing: You may request that we restrict how we process your data under certain circumstances, such as when you are disputing the accuracy of your data or objecting to its processing.
• Data Portability Right: You have the right to receive the personal data you have provided to us in a machine-readable format, and to transfer it to another service provider if you wish.
• Right to Object: You have the right to object to the processing of your personal data for certain purposes, including direct marketing.

To exercise any of the above rights, please contact our Privacy Officer by email [email protected] or via 24/7 Live Chat within the platform. We may need to verify your identity before processing any data-related requests to ensure the security of your account.

10Children's Privacy Protection

Platform 20w50 is strictly for adult users aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18. This is a non-negotiable policy and forms part of our commitment to responsible gaming.

Should we discover that personal data belonging to a minor has been collected without our knowledge, we will take immediate steps to delete that data from all our systems and close the account in question. Parents or guardians who believe their child may have registered an account at 20w50 are encouraged to contact us immediately at [email protected] so that appropriate action can be taken without delay.

We employ multiple age verification methods, including identity card checks during the KYC process, to prevent underage registration. If you become aware of any individual below the age of majority using the 20w50 platform, please report it to us immediately.

11Privacy Policy Amendment

20w50 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or developments in security technology. We are committed to keeping you informed of any material changes.

When material changes are made to this Privacy Policy, we will notify you by email to your registered address and display a prominent notice on the main page of the platform 20w50 no less than 14 days before the changes take effect. Your continued use of the platform after the effective date of any changes will be deemed as your acceptance of the revised policy.

We encourage you to review this Privacy Policy periodically to ensure you are always up to date on how 20w50 protects your data. The "Last Updated" date displayed at the top of this page will always reflect the most current version of the policy in effect.

12Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how 20w50 managing your personal data, our privacy team is here to help. We take every privacy enquiry seriously and are committed to providing a transparent and helpful response within a reasonable timeframe:

• Privacy Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the 20w50 platform
• Target Response Time: 3 business days for general privacy enquiries; 30 days for formal data rights requests
• Language of Service: Bahasa Malaysia and English

If you are not satisfied with the response you receive from the privacy team 20w50, you have the right to escalate your complaint to the Department of Personal Data Protection Malaysia or the relevant privacy enforcement authority in your jurisdiction. We will cooperate fully with any investigation conducted by the relevant authorities.