Data Protection Documents

Iwang Privacy Policy – Malaysia User Data Protection

Your privacy is not merely a legal obligation for us — it is a core commitment iwang makes to every user. This document clearly and honestly explains how we handle your information.

Updated: January 2026 256-bit SSL Encryption No Data Sales

Iwang's Six Core Privacy Commitments

Before you read this full policy, here are the core principles that guide how iwang handles your data.

Industry-Grade Encryption

All data transmitted between your device and iwang servers is protected by 256-bit SSL encryption — the same standard used by global banking institutions to safeguard financial information.

Your Data Is Never Sold

Iwang has never and will never sell, rent, or exchange your personal information to any third party for marketing or commercial purposes. Your data belongs to you, not to us as a business asset.

Full Control in Your Hands

You have the right to access, correct, and request deletion of your personal data at any time. We provide a clear and straightforward process for managing your privacy preferences.

Secure Data Storage

All personal information is stored on servers protected by strict access controls. Only specifically authorised personnel may access user data, and only for the purposes required.

Minimum Data Collection

We only collect information that is strictly necessary to provide our services to you. No excess data is collected just "just in case" — every detail we request has a clear purpose.

Immediate Breach Notification

In the event of a security breach affecting your data, iwang will notify you within 72 hours via your registered email, along with the steps taken to protect your account.


1 Introduction & Scope of Privacy Policy

This Privacy Policy is published by iwang ("We", "Platform") and applies to all users who access or use the iwang platform services via iwang.vu or our mobile app.

This document clearly outlines the types of information we collect, the purpose of collection, how we protect it, and your rights regarding that personal data. We take an open approach to this because we believe you deserve to know exactly what happens with your information.

This policy complies with applicable data protection laws in Malaysia, including the Personal Data Protection Act 2010 (PDPA). By using the iwang platform, you agree to the terms of this Privacy Policy.

Important Note

This Privacy Policy should be read together with Terms and Conditions the iwang platform. Both documents together form the complete agreement between you and iwang.

2 Types of Information We Collect

Iwang collects personal information in several different circumstances. Below are the main categories of information we collect and the reasons for collecting them:

Account Registration Information:

  • Full name as shown on your identification card
  • Active email address
  • Malaysia phone number
  • Date of birth (for 18+ age verification)
  • Username and password (stored in irreversible hashed form)

Identity Verification Information (KYC):

  • MyKad or passport copy
  • Proof of address (utility bill or bank statement not older than 3 months)
  • In certain cases, a selfie with your ID for additional verification

Financial Information:

  • Bank account details for withdrawal processing
  • Deposit and withdrawal transaction records
  • Registered digital wallet information (Touch 'n Go, GrabPay, Boost)

Automatically Collected Usage Data:

  • Your device's IP address
  • Device type and operating system version
  • Gaming activity history and session logs
  • Browser cookie and session data

We do not store credit or debit card information directly. All payments are processed through licensed payment providers that comply with PCI-DSS standards.

3 How We Use Your Information

Every piece of information we collect is used for a specific and lawful purpose. Below is a concise table showing the relationship between data types and their intended uses:

Purpose of Use Types of Data Used Consent Required?
Account management & login Name, email, password Registration
Deposit & withdrawal processing Bank details, KYC Contract
Fraud prevention & security IP, activity logs, KYC Legitimate Interests
Age verification Date of birth, MyKad Legal Obligations
Customer support communications Email, name, account history Contract
Platform usage analytics Anonymised usage data Legitimate Interests
Marketing and promotions Email, game preferences Explicit Consent

4 Data Sharing with Third Parties

Iwang does not sell or commercialise your personal data. However, there are limited situations where we need to share information with trusted third parties for platform operational purposes:

  • Payment Providers: Required financial information is shared with licensed payment providers (FPX, local banks, digital wallet operators) solely to process your transactions.
  • Game Providers: Usernames and game records are shared with our game providers to allow you to play and claim your wins correctly.
  • KYC Services: Identity verification documents are shared with certified KYC service providers to process your identity verification.
  • Legal Requirement: We may need to disclose information to authorities if required by law or a valid court order.

All third parties working with iwang user data are bound by strict data protection agreements and are not permitted to use that information for any purpose beyond what is specified.

5 Cookies & Tracking Technologies

The iwang platform uses cookies and similar tracking technologies to enhance your user experience. Below are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled without affecting platform usability.
  • Performance Cookies: Collects anonymized data on how users interact with the platform to help us improve the overall experience.
  • Preference Cookies: Saves your preferences such as language, theme, and display settings so you don't have to reset them every time you log in.

You can manage your cookie settings through your browser at any time. Please note that disabling certain cookies may affect some platform functionality.

No Cross-Site Tracking

Iwang does not use third-party tracking pixels or advertising networks to track your activity outside of our platform.

6 Your Personal Data Security

We implement comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or accidental destruction.

  • Encryption in Transit: All communications between your device and iwang servers are encrypted using TLS 1.3 / 256-bit SSL.
  • Encryption at Rest: Sensitive data such as banking information and KYC documents are stored in encrypted form on protected servers.
  • Strict Access Controls: Only authorised staff with a strict need-to-know basis may access user data.
  • Regular Security Audits: Our platform undergoes regular security testing and vulnerability assessments conducted by independent third parties.
  • 24/7 Monitoring: Automated monitoring systems are always active to detect any suspicious activity and respond promptly.

7 Data Retention Period

Iwang retains your personal data for as long as it is needed for the purposes stated in this policy, or for as long as your account remains active. Once those purposes are no longer relevant, your data will be securely deleted or anonymised.

  • Active Account Data: Retained for as long as your account remains active on the platform.
  • Financial Records: Retained for 7 years from the transaction date in accordance with Malaysian legal requirements.
  • KYC Documents: Retained for 5 years after account closure, or longer if required by law.
  • Activity Logs: Retained for 12 months for security and dispute resolution purposes.
  • Marketing Data: Deleted within 30 days of you withdrawing consent.

8 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding your personal data held by iwang:

Right to Access

You have the right to receive a copy of all personal information we hold about you.

Right to Rectification

You may request correction of any inaccurate or incomplete information in your account.

Right to Erasure

You may request deletion of your personal data, subject to applicable legal obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Portability

You may request a copy of your data in a machine-readable format for transfer to another service.

Right to Restriction

In certain circumstances, you may request that we restrict the processing of your personal data.

To exercise any of the above rights, contact the iwang customer support team via live chat within the platform. We will process your request within 30 business days and notify you of the outcome.

9 Children's Data

The iwang platform is exclusively for individuals aged 18 and above. We do not knowingly collect any personal information from children under the age of 18.

If you believe a minor has registered an account on our platform, please contact our customer support immediately. We will take action to verify and close the account, and delete all associated data as promptly as possible.

Parents and guardians who suspect a child in their care is using this platform are asked to contact our support team immediately. We will provide full cooperation in such cases.

10 Amendments to This Privacy Policy

Iwang reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or changes to the services we offer.

  • The "Updated" date at the top of this page will always reflect the latest version.
  • For significant amendments, we will send a notification to all registered members via email at least 14 days before the effective date.
  • Continued use of the platform after the amendment effective date is considered acceptance of the updated terms.
  • If you disagree with any amendments, you have the right to close your account before the effective date.

We recommend checking this page periodically to ensure you are always using the latest version of this policy.

11 How to Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how iwang handles your personal data, please contact us through the following channels:

  • Live Chat: Available 24/7 within the iwang platform — the fastest way to get an immediate response.
  • Privacy Email: [email protected] — for written enquiries and official requests relating to personal data.
  • Response Time: We are committed to responding to all privacy-related inquiries within 3 business days.

If you are unsatisfied with our response and believe your privacy rights have been violated, you have the right to file a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body.

Effective Date

This Privacy Policy is effective from 1 January 2026 and supersedes all previous versions.


Your Data Is Safe With Us. Ready to Join?

Your privacy and security are our top priority. Register with confidence and enjoy a safe, transparent, and enjoyable experience alongside more than 500,000 iwang members.

Already have an account? Login here

Bahasa Melayu