1. Home
  2. Privacy Policy
🔒 2way Privacy Policy — Your personal data is protected with 256-bit SSL encryption at all times 🛡️ 2way is fully compliant with Malaysia Personal Data Protection Act (PDPA 2010) ⚡ Withdrawals to Malaysian eWallets are processed within 3–5 minutes — Touch 'n Go, GrabPay, Boost 🔐 Two-factor authentication (2FA) is available for 2way account security stronger foundation 📧 Contact us at [email protected] for any enquiries relating to your data privacy 🎁 Welcome bonus of up to RM 888 — Register your 2way account today! 🔒 2way Privacy Policy — Your personal data is protected with 256-bit SSL encryption at all times 🛡️ 2way is fully compliant with Malaysia Personal Data Protection Act (PDPA 2010) ⚡ Withdrawals to Malaysian eWallets are processed within 3–5 minutes — Touch 'n Go, GrabPay, Boost 🔐 Two-factor authentication (2FA) is available for 2way account security stronger foundation 📧 Contact us at [email protected] for any enquiries relating to your data privacy 🎁 Welcome bonus of up to RM 888 — Register your 2way account today!
Official Documents – 2way Malaysia

Privacy Policy 2way – Player Personal Data Protection Malaysia

Your privacy is 2way's top priority. This document transparently explains how 2way collects, uses, stores and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices. Please read it carefully to understand your rights as a 2way member.

Last Updated: 1 January 2026
Jurisdiction: Malaysia
Encryption: 256-Bit SSL
PDPA 2010
Full compliance
256-Bit SSL
Bank-grade encryption
No Data Sales
Your data is not sold
User Rights
Access & delete data

Privacy Commitment 2way to You

Six core principles that shape 2way's approach to protecting the personal data of Malaysian players

Limited & Purpose-Driven Data Collection
2way only collects personal data that is strictly necessary to operate the platform's services — nothing more. Every piece of information we request has a clear and legitimate purpose. We do not collect irrelevant or excessive data simply for the sake of storage.
Bank-Grade 256-Bit SSL Encryption
All data you submit to 2way — from registration details to transaction information via Touch 'n Go eWallet, GrabPay or DuitNow — is encrypted using 256-bit SSL protocol. This is the same level of security used by internationally recognised banking institutions to protect their customers' data.
No Sale or Rental of Data to Third Parties
2way has never and will never sell, rent or share members' personal data with any third party for marketing or commercial purposes without your explicit prior consent. Your data belongs to you — it is not a 2way business asset to be traded.
Malaysia PDPA 2010 Compliance
2way's Privacy Policy is fully drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means your rights as a data subject — including the rights of access, correction, and objection — are legally protected and fully recognised by 2way.
Full Control in Your Hands
You have full control over your personal data at 2way. You may request to view the data we hold, correct inaccurate information, withdraw consent for specific processing, or request deletion of your data at any time by contacting [email protected].
Marketing Communications Opt-Out
If you do not wish to receive promotional emails, notifications or marketing communications from 2way, you can unsubscribe at any time with ease — either via the "unsubscribe" link in any email or by contacting our support team. This choice will not affect your access to 2way platform services.
Contents

Important: This Privacy Policy is a binding agreement between you ("Member") and 2way Malaysia ("We", "Platform"). It describes how we collect, use, disclose and protect your personal data when you use the 2way platform. By registering for or using any 2way service, you confirm that you have read and fully understood this Privacy Policy.

1

Introduction & Scope of Privacy Policy

2way understands how important privacy is to every Malaysian player who trusts our platform. In today's digital world, personal data is an incredibly valuable asset — and we take our responsibility to safeguard it with the utmost seriousness and professionalism. This Privacy Policy was crafted not merely to fulfil legal requirements, but as a reflection of 2way's core values: transparency, integrity and genuine respect for every one of our members.

This policy applies to all personal data processing carried out by 2way Malaysia in connection with the provision of our online gaming platform services — including the official website, Android and iOS mobile apps, customer support system, promotional and bonus programmes, and all other communication channels operating under the 2way brand.

2way is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA), and this Privacy Policy is designed to give you a clear understanding of your rights as a data subject under applicable Malaysian law.

2

Types of Personal Data Collected

2way collects personal data from you in several ways — directly when you register and use the platform, automatically through standard tracking technologies, and in some cases from legitimate third-party sources. The categories of data we collect are as follows:

Data Category Example Information How We Collect
Identity Data Full name, MyKad number, date of birth, gender Account registration & KYC
Contact Data Malaysian phone number, email address, state of residence Registration form
Financial Data EWallet account numbers (Touch 'n Go, GrabPay, Boost), banking information Deposit & withdrawal process
Game Data Betting records, game history, wins and losses In-platform activity
Technical Data IP address, device type, operating system, browser version Automatically during use
Cookie Data Language preferences, login sessions, game settings Cookies & local storage
Communication Data Live chat transcripts, support emails, feedback Customer support interactions

2way does not directly collect credit or debit card numbers. All financial transactions are processed through third-party payment providers that comply with PCI DSS security standards — including Malaysian eWallet providers such as Touch 'n Go, GrabPay and Boost.

3

Purpose of Personal Data Processing

2way processes your personal data only for legitimate, pre-stated purposes. We do not use your data for any other purpose without prior notice and your consent. The primary purposes of processing are as follows:

  • Account Management: Creating, verifying and managing your member account on the 2way platform, including the KYC (Know Your Customer) procedures required by law.
  • Service Provision: Enables you to access and use all 2way games and services — from slots such as Golden Dragon and Dancing Lion, to live casino, live sports including EPL and Liga Super Malaysia, and e-sports.
  • Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, and CIMB Clicks, as well as handling winnings withdrawals swiftly and securely.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, duplicate accounts, and other unlawful conduct that could harm the 2way platform or other players.
  • Customer Support: Processing and responding to enquiries, complaints, and support requests submitted via live chat or email at [email protected].
  • Marketing Communications: Sending you information about 2way promotions, bonuses, special offers and new features that may interest you — subject to the communication preferences you have set.
  • Responsible Gaming: Monitoring gaming patterns to identify potential issues related to excessive play and providing appropriate support in accordance with 2way's responsible gaming programme.
  • Legal Compliance: Meeting the compliance and reporting obligations required under applicable Malaysian laws, including PDPA 2010 and anti-money laundering (AML) regulations.
  • Platform Improvement: Analysing aggregated and anonymised usage data to understand how players interact with the 2way platform and to make relevant improvements.
4

Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), 2way processes your personal data on the following valid legal bases:

  • Consent: For most data processing, we rely on the explicit consent you provide when registering for a 2way account and agreeing to these Terms & Conditions and Privacy Policy. You may withdraw your consent at any time for specific purposes.
  • Contract Performance: The processing required to provide 2way's services to you — including account management, transaction processing and access to games — is necessary for the performance of the agreement between you and 2way.
  • Legal Obligation: Certain data processing is required to fulfil 2way's legal obligations in Malaysia, including KYC requirements, transaction reporting and compliance with anti-money laundering regulations.
  • Legitimate Interests: In certain circumstances, 2way processes data on the basis of legitimate business interests — such as preventing fraud, ensuring platform security and conducting business analytics — provided these interests do not override your privacy rights.
5

Sharing Data with Third Parties

2way does not sell or rent members' personal data to any party. However, in the course of operating the platform, 2way may share your personal data with a limited number of third-party categories as set out below, and only to the extent necessary:

  • Payment Service Providers: eWallet and banking service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and Malaysian banks (solely for the purpose of processing deposit and withdrawal transactions).
  • Game Providers: Game providers partnering with 2way may receive certain gameplay data necessary to deliver and manage your gaming experience. This data is used exclusively for game operations purposes.
  • Technology Service Providers: Companies providing 2way's technical infrastructure — including cloud computing, cybersecurity and analytics — may have access to certain data within the scope of their responsibilities. All such providers are bound by strict confidentiality agreements.
  • Law Enforcement Authorities: 2way will disclose personal data to Malaysian authorities (including the police, courts or regulatory bodies) when required by law or a valid court order.
  • Fraud Prevention Body: In cases involving suspected fraudulent activity or money laundering, relevant data may be shared with the appropriate authorities or industry bodies for investigation and prevention purposes.

Our Commitment: 2way never shares members' personal data for third-party marketing purposes or for any commercial activity unrelated to 2way's services. Every third party that receives 2way member data is contractually bound to maintain the confidentiality and security of that data.

6

Data Retention & Security Measures

2way implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction:

  • 256-bit SSL Encryption: All data transmitted between your device and 2way's servers is encrypted using Transport Layer Security (TLS) with 256-bit keys — the same standard used by financial institutions worldwide.
  • Secure Data Storage: Personal data is stored on servers protected by strict access controls, firewalls, intrusion detection systems and round-the-clock security monitoring.
  • Internal Access Controls: Only 2way staff with a legitimate business need are granted access to members' personal data. All access is logged and monitored on a regular basis.
  • Two-Factor Authentication (2FA): 2way offers 2FA for member accounts as an additional layer of security. We encourage all members to enable this feature to keep their accounts protected.
  • Regular Security Audits: 2way's security infrastructure undergoes regular security audits conducted by independent experts to identify and address any potential vulnerabilities.

Data Retention Period

2way retains your personal data for as long as your account remains active or as long as necessary to provide services to you. Upon account closure, 2way will:

  • Retaining financial and gaming transaction records for 7 years after account closure, as required by Malaysian tax and financial laws.
  • Deleting or anonymising other personal data not required for compliance purposes within 30 days after the account closure request has been processed.
  • Retaining data related to any ongoing fraud investigation or legal case until the investigation or case is fully resolved.
7

Cookies & Tracking Technologies

The 2way platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform operates smoothly. The following types of cookies are used:

  • Essential Cookies (Required): Required for core platform functionality — including maintaining your login session, saving game settings and ensuring transactions are processed correctly. These cookies cannot be disabled as they are critical to the operation of the 2way platform.
  • Performance & Analytics Cookies: Used to understand how members use the 2way platform — which pages are visited most frequently, time spent in each section, and general navigation patterns. This data is used in aggregated and anonymised form for platform improvements.
  • Functional Cookies: Storing your personal preferences — such as language selection, display theme, and game settings — to deliver a more personalised experience each time you log in.
  • Local Storage: The 2way mobile app may use your device's local storage to save data required for better app performance — such as caching game images or configuration data.

You can manage your cookie preferences through your web browser settings. Please note, however, that disabling essential cookies may affect your ability to use certain features of the 2way platform properly.

8

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by 2way. All rights may be exercised by contacting [email protected]:

Your Rights Under PDPA 2010

As a 2way member, you have six important rights regarding your personal data, all of which we fully respect

Right of Access
You have the right to request a copy of the personal data 2way holds about you. 2way will provide this information within 21 days of receiving your request, subject to appropriate identity verification.
Right to Rectification
If you find that any personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request a correction. 2way will process correction requests within a reasonable timeframe following verification.
Right to Erasure
You have the right to request the deletion of your personal data when it is no longer required for the original processing purpose, or when you withdraw your consent — subject to any applicable statutory record-keeping obligations.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receiving your objection, 2way will immediately cease processing your data for that purpose.
Right to Data Portability
In certain circumstances, you have the right to receive the personal data you have provided to 2way in a machine-readable format, for the purpose of transferring it to another service provider of your choosing.
Right to Withdraw Consent
Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing carried out prior to the withdrawal.

To exercise any of the above rights, contact us at [email protected] with the subject line "Data Privacy Rights Request". 2way will process your request within 21 working days.

9

Protection of Children's Data

The 2way platform is strictly for individuals aged 21 and above. 2way does not knowingly collect or process personal data from individuals under the age of 21. If you believe that a minor has registered a 2way account or provided us with their personal data, please contact us immediately at [email protected] so that we can take prompt action to delete the data and close the account.

Protection of Minors: 2way takes the protection of children and young people very seriously. If you are a parent or guardian concerned about a potential underage use of our online gaming platform, please contact us for appropriate guidance and support.

10

Privacy Policy Amendments

2way reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements or industry developments. When material amendments are made:

  • The "Last Updated" date at the top of this page will be revised to reflect the date of the latest amendment.
  • Active members will be notified via in-app notification or email to their registered address at least 7 days before an amendment takes effect for material changes.
  • Minor amendments that do not materially affect your rights may be made without specific notice.

Continued use of the 2way platform after the effective date of any amendment constitutes full acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your personal data.

11

Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how 2way handles your personal data, we are here to listen and assist. Our data privacy team can be reached via:

  • Email: [email protected] (include "Data Privacy Enquiry" in the email subject line for faster processing)
  • Live Chat: Available on the 2way platform 24 hours a day, 7 days a week
  • Response Time: 2way is committed to responding to all privacy-related enquiries within 5 business days

If you are dissatisfied with how 2way has handled your privacy enquiry or complaint, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the competent authority under the Personal Data Protection Act 2010.

Documents About 2way

Also read other important documents that complement the member protection framework for 2way Malaysia

2way Terms & Conditions
A binding agreement governing your use of the 2way platform — covering account terms, deposits, withdrawals, bonuses and game rules. Read Terms & Conditions →
Responsible Gaming
Self-control tools, deposit limits, self-exclusion options and support resources to help you play responsibly on the 2way platform. Find Out More →
About 2way Malaysia
Learn about the history, mission and core values of 2way as a trusted online entertainment platform built specifically for Malaysian players. Discover 2way →
Frequently Asked Questions (FAQ)
Answers to the most frequently asked questions about accounts, deposits, withdrawals, bonuses and how to play at 2way Malaysia. View FAQ →

FAQ – 2way Privacy Policy

Answers to the most frequently asked questions about how 2way manages your data privacy

No, 2way does not sell or share members' personal data with any other company or platform for marketing or commercial purposes. The only circumstances in which your data may be shared are with service providers who assist us in operating the platform — such as Malaysian eWallet providers (Touch 'n Go, GrabPay, Boost) to process your transactions, or technical infrastructure providers required for the platform to function. All such parties are bound by strict confidentiality agreements and may only use your data for specifically defined purposes. In addition, 2way may be required to disclose data to Malaysian authorities where mandated by law or a valid court order. In all other circumstances, your data remains entirely within 2way's control.

To request a copy of your personal data, send an email to [email protected] with the subject line "Personal Data Access Request" from the email address registered to your 2way account. In your email, include your full name, registered Malaysian phone number, and a brief description of the data you are requesting. 2way will first verify your identity before processing the request, then provide the requested information within 21 days of the verified request date. Data will be delivered in a readable format via secure email. No fee is charged for the first access request within any 12-month period. Repeated requests submitted within a short period may be subject to a reasonable processing fee.

When your 2way account is closed — whether at your own request or for other reasons — 2way will handle your data in accordance with its established retention policy. Financial and gaming transaction records will be retained for 7 years as required under Malaysian financial and tax law. This is a legal obligation that cannot be waived. Other personal data not required for compliance purposes — such as game preferences and cookie data — will be deleted or anonymised within 30 days of the account closure being processed. If an account is closed due to a fraud investigation or legal case, the relevant data may be retained until the investigation or case is fully resolved, regardless of how long that may take.

2way uses gameplay records and usage behaviour data for specific purposes designed to protect both you and the platform. Within the responsible gaming programme, 2way's systems analyse playing patterns to identify members who may be showing signs of excessive play — not to penalise or exploit, but to provide timely support and intervention. For security and fraud prevention purposes, automated systems may detect suspicious transaction patterns or behaviour and trigger additional reviews. Significant decisions affecting your account — such as suspension or closure — will always involve a review by trained 2way staff and will never rely solely on automated systems. You have the right to request an explanation for any decision that affects your account.

The security of your financial information is 2way's highest priority. Firstly, 2way does not store credit or debit card numbers directly in our systems — all card transactions are processed through a third-party payment gateway that complies with PCI DSS standards. For Malaysian eWallets such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and DuitNow, only the account identification information required to process transactions is stored — not your eWallet password or PIN. All communications between the 2way platform and payment providers are encrypted using 256-bit SSL protocol. Furthermore, 2way employs tokenisation to replace sensitive financial data with meaningless tokens in internal systems, rendering that data useless even in the unlikely event of a breach. Two-factor authentication (2FA) is also available to add an extra layer of protection to your 2way account.
Your Data is Safe with 2way
Ready to Play with Confidence at 2way Malaysia?

Join over 500,000 active members who have trusted 2way with their personal and financial data. Register today, claim a bonus of up to RM 888, and enjoy a safe, fair and secure gaming experience.

Register for Free Now Log In
256-Bit SSL
PDPA 2010 Compliant
No Data Sales
Bonus Up to RM 888

Responsible Gaming: All games on 2way are for entertainment purposes only. Always set your spending limits and never wager money you cannot afford to lose. If gaming begins to affect your daily life, please visit the Responsible Gaming us for the help and support you need.

Bahasa Melayu