W1nwin Privacy Policy – Malaysia Personal Data Protection

w1nwin ("we", "Platform") is committed to protecting the privacy and personal data of all users on our platform. This Privacy Policy sets out transparently how we collect, store, use, and safeguard your personal information when you use our website, services, and applications w1nwin.

This policy is established in accordance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia and reflects industry best practices in data protection. By registering for or using the w1nwin, you consent to the collection and use of your data as described in this Privacy Policy.

We understand that your trust is our most valuable asset. When you deposit funds via Touch 'n Go, GrabPay, DuitNow, or FPX on our platform, or when you share personal information during the registration process, you are entrusting us with sensitive details. We do not take that responsibility lightly.

w1nwin collects personal data only where necessary to provide platform services to you. The data we collect falls into several categories:

Identity & Account Data:

Financial & Transaction Data:

Technical & Usage Data:

w1nwin uses your personal data only for legitimate and necessary purposes. Below is a full list of how your data is used:

• Account Management: Creating and maintaining your account, verifying your identity at login, and processing password reset or account recovery requests.
• Payment Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and FPX; as well as processing winning withdrawals to your Malaysian bank account.
• KYC & Anti-Money Laundering Compliance: Conducting identity checks required under Malaysian law, including MyKad verification and large transaction reporting obligations in accordance with the Anti-Money Laundering Act.
• Platform Security: Detecting and preventing fraud, account misuse, duplicate accounts, and activities that violate the platform's Terms & Conditions.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance via live chat, email, or other support channels.
• Platform Improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve platform design, speed, and the overall user experience.
• Service Communications: Sending important account-related notifications — such as deposit confirmations, successful withdrawal alerts, password changes, and platform policy updates.
• Marketing Communications: Sending information about promotions, new bonuses, and exclusive offers — only if you have given consent to receive such communications.
• Responsible Gambling: Monitoring gameplay patterns to identify early signs of problem gambling and reaching out to users who may need support, in line with our commitment to Responsible Gaming.

w1nwin does not sell, rent, or trade your personal data to any third party. However, there are limited circumstances where we need to share certain information with specific parties in order for our services to function:

• Payment Processors: Transaction information shared with Malaysia's local payment service providers — including Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX operators — to facilitate deposit and withdrawal processing. These processors are bound by their own confidentiality agreements and compliance standards.
• Game Provider: Minimum session data shared with game software providers such as Microgaming, Pragmatic Play, Evolution Gaming, and others to ensure games function correctly and betting records are accurately maintained.
• Identity Verification Services: Identity information shared with approved third-party KYC service providers for identity verification purposes as required under Malaysian law.
• Legal Authorities: Information that Malaysian law, a court order, or a directive from a legitimate regulatory body requires us to disclose. In such cases, we disclose only the minimum information necessary.
• Auditors & Professional Consultants: Information that must be shared with audit firms, lawyers, or security consultants who are bound by strict professional confidentiality obligations.

w1nwin implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or unintended disclosure:

• Encryption in Transit: All communication between your browser and our servers w1nwin protected with TLS 1.3 protocol and 256-bit SSL certificates. Your financial transaction data cannot be intercepted in transit.
• Encryption at Rest: Sensitive data such as identity information and financial details is stored in encrypted form on our servers. Even in the event of a physical breach of our infrastructure, the data cannot be read without the encryption key.
• Strict Access Controls: Only staff w1nwin with a legitimate business need who have passed background checks may access users' personal data. All access is logged and audited on a regular basis.
• Two-Factor Authentication: Our internal systems require multi-factor authentication for access to databases containing sensitive user information.
• Continuous Monitoring: Our infrastructure is monitored 24 hours a day, 7 days a week to detect suspicious activity, intrusion attempts, or system anomalies that may indicate a security threat.
• Regular Security Testing: w1nwin conducts regular penetration testing and security audits by independent cybersecurity firms to identify and address vulnerabilities before they can be exploited.

w1nwin uses cookies and similar tracking technologies to keep the platform running smoothly and to understand how users interact with it. The types of cookies we use are as follows:

• Essential Cookies (Required): These cookies are required for the platform's core functionality — including maintaining your login session, saving your language preference, and ensuring security features work correctly. They cannot be disabled as they are critical to platform operation.
• Performance & Analytics Cookies: Used to gather aggregated information on how users interact with the platform — most frequently visited pages, time spent, and navigation flows. This data helps us improve platform design and performance. It does not identify you personally.
• Functional Cookies: Saving your preferences such as display settings, preferred language, and customised game parameters so you do not have to reconfigure them each time you log in.
• Session Cookies: Temporary cookies that are automatically deleted when you close your web browser. These are used to manage your active session on the platform.

You can manage or delete cookies at any time through your web browser settings. However, disabling essential cookies may affect platform functionality and cause certain features to not work properly.

Under Personal Data Protection Act 2010 (PDPA) Malaysia, you have the following rights regarding your personal data held by w1nwin:

To exercise any of the above rights, please contact our Data Protection Officer (DPO) at privacy@w1nwin.net or via our 24-hour live chat. Please state the right you wish to exercise and provide sufficient identifying information for us to verify your identity before processing the request.

w1nwin only retains your personal data for as long as necessary for the purpose it was collected, or for as long as required under applicable Malaysian law.

• Active Account Data: Retained for the duration your account remains active and for 7 years after account closure, in line with financial record-keeping requirements under Malaysian law.
• Financial Transaction Records: Retained for a minimum of 7 years in line with the requirements of the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Security Logs: Retained for 2 years for security investigation and audit purposes.
• Customer Support Communication Data: Retained for 3 years following the final resolution of a case, for reference and team training purposes.
• Aggregated Analytics Data: Anonymised and aggregated usage data may be retained indefinitely, as it no longer contains any personally identifiable information.

Once the relevant retention period has ended, your data will be securely deleted using methods that ensure it cannot be recovered.

w1nwin is an adult entertainment platform intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

Should we discover that personal data belonging to a minor has been collected inadvertently, we will take immediate steps to delete that data and close the associated account. Any winnings generated by an account belonging to a minor will not be paid out.

w1nwin may send you marketing communications about promotions, new bonuses, exclusive offers, and platform updates — but only if you have given your consent to receive such communications during registration or through your account settings.

Types of communications we send:

• Notifications about new bonuses and promotions such as Hari Raya, Chinese New Year, and National Day offers.
• Notifications about new games added to the platform — the latest slots from Pragmatic Play, new live casino titles from Evolution, and more.
• Weekly summary of your account activity and available bonuses.
• Notifications about tournaments and special events on the platform w1nwin.

You may opt out of all marketing communications at any time through the following methods:

• Click the "Unsubscribe" link found at the bottom of every marketing email we send.
• Go to the Notification Settings section in your account and turn off the marketing communications option.
• Contact our support team via 24-hour live chat and request to be removed from our marketing list.

In the course of its operations, w1nwin may need to transfer your personal data to servers or business partners operating outside Malaysia — for example, game software providers headquartered in other countries or international cloud infrastructure providers.

When such a data transfer occurs, w1nwin ensuring that:

• The recipient country or entity maintains a level of data protection that is equivalent to or stricter than Malaysia's.
• Legally binding data protection agreements are signed with all data recipients outside Malaysia.
• Transfers involve only the minimum data necessary for the stated service purpose.
• Additional technical measures such as data encryption in transit are applied to all cross-border transfers.

You may request further details about the specific safeguards applied to particular data transfers by contacting our DPO at privacy@w1nwin.net.

w1nwin reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. All changes will be published on this page along with the updated revision date.

For significant changes — such as changes to how we use sensitive data or changes to your rights — we will:

• Sending a notification to your registered email address at least 14 days before the changes take effect.
• Displaying a prominent notice on our platform's main page during the period leading up to the changes.
• In certain cases, seeking your fresh consent before continuing to process your data under the updated terms.

w1nwin has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with Malaysia's PDPA and handling all privacy-related inquiries from our users.

For any enquiries, rights requests, or complaints relating to this Privacy Policy, you may contact our DPO via:

• DPO Email: privacy@w1nwin.net — for formal inquiries regarding your personal data
• General Support Email: support@w1nwin.net — for general privacy-related enquiries
• Live Chat: Available in-platform 24 hours a day for immediate inquiries

We are committed to responding to all privacy-related enquiries within 5 business days. For formal requests relating to PDPA rights (such as data access or deletion), the process will be completed within 21 business days in accordance with legal requirements.