Introduction
cashweep ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who accesses or uses the cashweep platform available at cashweep.cam. This Privacy Policy ("Policy") describes how we collect, use, store, share and safeguard personal information in connection with your registration, account management, gameplay activity and general use of our services.
This Policy applies to all registered players, prospective players and visitors to the cashweep website, including users accessing the platform from locations across Malaysia such as Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru and elsewhere. By creating an account, interacting with platform features or continuing to browse cashweep.cam after this Policy has been published, you acknowledge that you have read and understood its terms.
This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference. If you do not agree to this Policy, you must cease using the cashweep platform and contact our support team to request account closure.
Scope: This Policy covers data collected through the cashweep website and any associated mobile-optimised interface. It does not govern the data practices of third-party payment providers such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX. Please review each provider's own privacy documentation before initiating a transaction.
Definitions
The following terms carry the meanings assigned to them throughout this Policy unless the context requires otherwise.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information and behavioural data. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, organisation, storage, retrieval, use, disclosure, transmission, deletion or destruction. |
| "Data Controller" | cashweep, as the entity that determines the purposes and means of Processing Personal Data collected through the Platform. |
| "Data Subject" | Any identified or identifiable natural person whose Personal Data is Processed by cashweep — primarily registered players and site visitors. |
| "Third-party Processor" | Any external entity that Processes Personal Data on behalf of cashweep under a contractual arrangement, including payment service providers, identity verification services and technical hosting partners. |
| "Cookies" | Small text files placed on a device by the cashweep platform for the purposes of session management, performance analytics and personalisation. |
| "KYC" | Know Your Customer — the identity verification process through which cashweep confirms a player's identity, age and eligibility. |
Data We Collect
cashweep collects Personal Data from players and visitors through several channels. The categories of data we may collect are set out below. We limit collection to information that is necessary for the identified purposes described in Section 4.
3.1 Registration data
When you create a cashweep account, we collect the information you provide directly, which may include:
- Full legal name as it appears on a government-issued identity document
- Date of birth (used to verify 21+ age eligibility)
- Residential address, including city, postcode and state within Malaysia
- Email address and mobile phone number
- Username and encrypted account credentials
- Preferred currency (MYR/RM) and language preference
3.2 Identity verification (KYC) data
To comply with applicable verification obligations, we may collect:
- Copies of government-issued identity documents (e.g., Malaysian MyKad or passport)
- Proof of residential address (e.g., recent utility bill or bank statement)
- Source of funds documentation where required by applicable standards
- Photographs or selfie images submitted for identity confirmation
3.3 Transaction and payment data
When you make a deposit or withdrawal through cashweep, we process transaction-level records. We do not store full banking credentials. Payment data collected may include:
- Transaction reference numbers and timestamps
- Payment method type (e.g., FPX, DuitNow, Touch 'n Go eWallet, GrabPay)
- Transaction amounts in MYR
- Account balance history and bonus credit records
3.4 Usage and behavioural data
Through automated means, we collect information about how you interact with the Platform:
- Pages viewed, features accessed and session duration
- Game categories explored, wagers placed and sports markets reviewed
- Device type, operating system, browser version and screen resolution
- IP address and approximate geolocation at the time of access
- Referring URL and exit page data
Sensitive data: cashweep does not knowingly collect sensitive personal data categories (such as racial or ethnic origin, health data or religious beliefs) unless expressly required for a specific regulatory compliance purpose, and only with appropriate safeguards in place.
Data Processing
cashweep processes Personal Data for the following identified purposes. Each purpose is supported by an appropriate legal basis as described in Section 5.
| Purpose | Data categories used | Legal basis |
|---|---|---|
| Account registration and management | Registration data, contact details | Contract performance |
| Identity and age verification (KYC) | KYC documents, photographs | Legal obligation |
| Payment processing and transaction records | Transaction data, payment method type | Contract performance |
| Fraud prevention and security monitoring | Usage data, IP address, transaction data | Legitimate interest |
| Responsible gambling monitoring and tools | Behavioural data, session data, account history | Legal obligation / Legitimate interest |
| Customer support and dispute resolution | All categories as relevant to the enquiry | Contract performance / Legal obligation |
| Platform analytics and improvement | Usage and behavioural data (aggregated/anonymised) | Legitimate interest |
| Promotional communications (where consented) | Contact details, account tier, preference data | Consent |
Legal Basis for Processing
cashweep processes Personal Data on the following legal bases in accordance with applicable data protection principles:
- Contract performance: Processing is necessary to perform the contract between cashweep and the registered player, including account management, gameplay facilitation and payment administration.
- Legal obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including identity verification, anti-money laundering obligations and responsible gambling regulations.
- Legitimate interests: Processing is necessary for the legitimate interests of cashweep, including fraud detection, platform security, product development and abuse prevention, provided such interests are not overridden by the rights and freedoms of the Data Subject.
- Consent: Where processing is based on consent — primarily for marketing and promotional communications — cashweep will obtain a clear, specific and freely given consent signal. Consent may be withdrawn at any time by contacting our support team without affecting the lawfulness of prior processing.
Data Sharing
cashweep does not sell Personal Data to third parties. We may share Personal Data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
- Payment service providers: Personal Data necessary to process MYR deposits and withdrawals is shared with relevant licensed payment providers, including FPX network participants, DuitNow, and e-wallet operators such as Touch 'n Go eWallet, Boost and GrabPay.
- Identity verification partners: KYC documentation may be shared with contracted identity verification service providers operating under binding data processing agreements with appropriate security standards.
- Technical infrastructure providers: Hosting, cloud storage and platform infrastructure partners may have access to Personal Data in the course of providing technical services, subject to contractual data protection obligations.
- Regulatory and law enforcement authorities: cashweep will disclose Personal Data to competent regulatory bodies, law enforcement agencies or courts where required to do so by applicable law, court order or legitimate regulatory instruction.
- Professional advisers: Legal, audit and compliance professionals engaged by cashweep may access Personal Data as necessary for their professional services, subject to applicable confidentiality obligations.
All Third-party Processors engaged by cashweep are required to handle Personal Data in accordance with applicable data protection standards and to implement appropriate technical and organisational security measures.
Cookies & Tracking Technologies
cashweep uses cookies and similar tracking technologies to support platform functionality, analyse usage patterns and improve the overall player experience. The categories of cookies we use include:
| Cookie type | Purpose | Duration |
|---|---|---|
| Strictly necessary | Session management, authentication, security token maintenance. Cannot be disabled without impairing core platform functions. | Session |
| Functional | Remembering language preference, display settings and account layout choices between sessions. | Up to 12 months |
| Analytics | Aggregated and anonymised data on pages visited, session duration and feature usage to support platform improvement decisions. | Up to 24 months |
| Preference | Storing responsible gambling tool settings, deposit limit preferences and notification choices. | Up to 12 months |
You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the availability of platform features. cashweep does not use third-party advertising cookies or cross-site tracking networks.
Data Retention
cashweep retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following indicative retention periods apply:
- Active account data: Retained for the duration of the active account relationship and for a minimum period thereafter as required by applicable regulatory standards.
- KYC and identity documents: Retained for a minimum of five (5) years following account closure or the last transaction, in accordance with applicable anti-money laundering record-keeping obligations.
- Transaction records: Retained for a minimum of five (5) years to support financial reporting, regulatory compliance and dispute resolution requirements.
- Support and communication records: Retained for a minimum of three (3) years following the resolution of the relevant support interaction.
- Analytics data: Aggregated and anonymised analytics data may be retained indefinitely as it does not constitute Personal Data following anonymisation.
Upon expiry of applicable retention periods, Personal Data will be securely deleted or irreversibly anonymised in accordance with cashweep's internal data lifecycle procedures.
Data Security
cashweep implements a layered set of technical and organisational security measures designed to protect Personal Data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:
- Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the cashweep Platform.
- Encrypted storage of account credentials — passwords are hashed using industry-standard algorithms and are never stored in plain text.
- Role-based access controls limiting internal access to Personal Data to authorised personnel with a documented business need.
- Regular internal security reviews and vulnerability assessments of platform infrastructure.
- Session timeout controls and device-level authentication prompts to reduce the risk of unauthorised account access.
While cashweep takes its data security obligations seriously, no online system can guarantee absolute security. Players are strongly encouraged to use strong, unique passwords, enable available account security features and report any suspected unauthorised access to our support team promptly. Never share your account credentials, one-time PINs or banking security codes with any person.
Data breach notification: In the event of a Personal Data breach that is likely to result in a risk to the rights and freedoms of Data Subjects, cashweep will take prompt remedial action and notify affected individuals and relevant authorities as required under applicable data protection standards.
Protection of Minors
cashweep is strictly intended for players aged 21 years and above. We do not knowingly collect, store or process Personal Data from individuals under the age of 21. Age verification is a mandatory step in the cashweep account registration and KYC process.
If cashweep becomes aware that Personal Data has been collected from an individual who is under 21 years of age, that data will be deleted promptly and the associated account will be permanently closed. Any funds deposited by an underage individual will be handled in accordance with applicable regulatory requirements.
If you have reason to believe that a minor has registered an account or submitted Personal Data to cashweep, please contact our support team immediately at the address provided in Section 14.
User Rights
As a Data Subject, you hold a number of rights in relation to Personal Data that cashweep holds about you. These rights are exercisable subject to applicable legal limitations and verification of your identity before any action is taken.
Right of Access
Request confirmation of whether cashweep holds Personal Data about you, and obtain a copy of that data along with supplementary processing information.
Right to Rectification
Request correction of inaccurate or incomplete Personal Data that cashweep holds about you without undue delay.
Right to Erasure
Request deletion of Personal Data in certain circumstances, subject to overriding legal or regulatory retention obligations — for example, KYC records that must be retained for five years.
Right to Restriction
Request that cashweep restricts the Processing of your Personal Data while a dispute regarding accuracy or lawfulness is being resolved.
Right to Portability
Receive Personal Data you have provided to cashweep in a structured, commonly used and machine-readable format where processing is based on consent or contract.
Right to Object
Object to Processing of your Personal Data carried out on the basis of legitimate interests, including objections to direct marketing communications at any time.
Right to Withdraw Consent
Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
Right to Lodge a Complaint
Lodge a complaint with the relevant supervisory authority if you believe cashweep has processed your Personal Data in a manner inconsistent with applicable data protection requirements.
To exercise any of the rights listed above, please contact us using the details provided in Section 14. cashweep will respond to verified requests within thirty (30) days. Where a request is complex or involves a large volume of data, an extension of up to an additional sixty (60) days may apply, and you will be notified accordingly.
Cross-border Data Transfers
cashweep's operational infrastructure may involve the transfer of Personal Data to, or storage of Personal Data in, jurisdictions outside Malaysia in connection with third-party service providers. Where such transfers occur, cashweep takes steps to ensure that appropriate safeguards are in place to protect Personal Data to a standard consistent with applicable data protection principles, including:
- Executing data processing agreements with Third-party Processors that include binding contractual obligations regarding data security, purpose limitation and data subject rights.
- Limiting transfers to service providers operating in jurisdictions with recognised adequate data protection frameworks, or ensuring equivalent contractual protections are in place where an adequacy determination does not apply.
- Conducting due diligence reviews of third-party data handling practices prior to engagement.
Policy Amendments
cashweep reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, data processing practices or platform functionality. The "Last updated" date at the top of this page reflects the most recent revision.
Where material changes are made to this Policy, cashweep will endeavour to provide reasonable notice through a prominent notice on the Platform or a communication to your registered account email address. Your continued use of the cashweep platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the revised terms.
If you do not agree with material changes to this Policy, you should cease using the Platform and contact our support team to discuss account closure and the handling of your Personal Data. We will process any such request in accordance with applicable data protection standards and our Terms & Conditions.
Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data by cashweep, please contact our data team using the following details:
Email: [email protected] (plain text — not a clickable link)
cashweep aims to acknowledge all privacy-related enquiries within two (2) business days and to provide a substantive response within thirty (30) calendar days. Where a request requires identity verification before it can be actioned, we will inform you promptly of the steps required to confirm your identity.
For responsible gambling enquiries, self-exclusion requests or deposit limit adjustments, please visit our dedicated Responsible Gambling page. For general account and platform questions, our FAQ page addresses many common topics in plain English.