winmy Privacy Policy

winmy ("winmy", "we", "us", "our") operates the online gaming platform accessible at winmy.vu (the "Platform"). This Privacy Policy describes how winmy collects, uses, stores, discloses, and protects personal data relating to individuals who access or register on the Platform ("Players", "you").

This Policy applies to all personal data processed in connection with your winmy account, including data collected at registration, during gameplay, through payment transactions, and via communications between you and winmy's support team.

By registering on the Platform or continuing to use it, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the winmy Terms & Conditions.

winmy is the data controller in respect of personal data collected through the Platform. For the purposes of this Policy, "data controller" means the entity that determines the purposes and means of processing personal data.

winmy operates under an international gaming authority licence. Players in Malaysia access the Platform subject to winmy's licensing jurisdiction and the applicable data protection obligations thereunder.

For all data-related enquiries, the designated contact is the winmy Data Protection Officer, reachable via the support email: [email protected] (not a clickable link).

winmy collects personal data in the following categories:

winmy does not collect sensitive personal data (such as biometric data or health information) unless specifically required for identity verification under applicable licensing obligations.

winmy processes personal data for the following purposes:

• Account management: to register, verify, maintain, and administer your winmy account.
• Transaction processing: to process MYR deposits, withdrawals, and bonus credits via FPX, Maybank2u, Touch 'n Go eWallet, Boost, and other accepted payment methods.
• Identity verification (KYC): to comply with anti-money laundering obligations and age verification requirements. All players must be 21 or above.
• Fraud prevention: to detect, investigate, and prevent fraudulent transactions, account abuse, and other prohibited conduct.
• Regulatory compliance: to meet winmy's obligations under its international gaming licence, including record-keeping and reporting requirements.
• Customer support: to respond to queries, handle complaints, and resolve account issues efficiently.
• Platform improvement: to analyse usage patterns and improve the winmy user experience, game offering, and payment processes.
• Marketing: to send promotional communications to Players who have opted in, and to personalise offers where consent has been provided.
• Responsible gaming: to monitor gameplay patterns for indicators of problem gambling and to enforce self-exclusion requests and account limits.

winmy processes personal data on the following legal bases:

• Contract: Processing necessary to perform the contract between you and winmy – primarily account administration and transaction processing.
• Legal Obligation: Processing required to comply with winmy's licensing obligations, AML/KYC requirements, and regulatory reporting duties.
• Legitimate Interests: Processing for fraud prevention, Platform security, and improving winmy's services, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

winmy does not sell, rent, or trade personal data to third parties for their own commercial purposes. winmy shares personal data only in the following circumstances:

• Payment processors: Banks, FPX network operators, Touch 'n Go eWallet, Boost, and other MYR payment service providers, to facilitate deposits and withdrawals.
• Identity verification providers: Licensed KYC and AML verification services used to confirm player identity and age at registration or upon request.
• Game technology providers: Certified game studios supplying slots, live casino, and other game products to the winmy Platform, to the extent necessary to deliver gameplay.
• Regulatory and law enforcement authorities: winmy will disclose data to licensing authorities, financial intelligence units, or law enforcement where required to do so by applicable law or pursuant to legal process.
• IT and infrastructure providers: Hosting, cybersecurity, and platform infrastructure providers operating under strict data processing agreements.

All third-party processors engaged by winmy are required to maintain adequate data security standards and are prohibited from using winmy player data for any purpose beyond the specific service they provide.

7.1 winmy uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device by your browser.

7.2 winmy uses the following categories of cookies:

• Essential cookies: Required for core Platform functionality, including session authentication and security. These cannot be disabled without impairing your ability to use winmy.
• Analytics cookies: Used to collect aggregated, anonymised data about how Players navigate the Platform. This helps winmy identify areas for improvement.
• Preference cookies: Store your language and display preferences to improve your winmy experience across sessions.
• Marketing cookies: Used only with your explicit consent to deliver relevant promotional content based on your gameplay interests.

7.3 You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling essential cookies will affect Platform functionality.

8.1 winmy retains personal data for as long as your account is active and for a period thereafter as required by licensing and legal obligations.

8.2 Financial and KYC records are retained for a minimum of five (5) years following account closure, in line with standard AML/CFT regulatory requirements under winmy's international gaming licence.

8.3 Marketing preference data and communication records are retained for the period of the applicable consent, plus a reasonable period to demonstrate compliance.

8.4 Technical and usage logs are retained for up to 24 months and used in aggregate form for Platform analytics thereafter.

winmy implements organisational and technical security measures appropriate to the sensitivity of the data processed. These include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and the winmy Platform
• Encrypted storage of sensitive personal and financial data at rest
• Access controls limiting data access to authorised personnel on a need-to-know basis
• Regular security audits and penetration testing of Platform infrastructure
• Incident response procedures for detecting and responding to potential data breaches

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of Players, winmy will notify the relevant regulatory authority and affected individuals in accordance with applicable legal requirements.

Subject to applicable law and winmy's legal retention obligations, you have the following rights in respect of your personal data:

• Right of Access: To request a copy of the personal data winmy holds about you.
• Right to Rectification: To request correction of inaccurate or incomplete personal data.
• Right to Erasure: To request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to legal retention obligations.
• Right to Restriction: To request that winmy restrict the processing of your data in certain circumstances.
• Right to Data Portability: To receive your data in a structured, machine-readable format where technically feasible.
• Right to Object: To object to processing based on winmy's legitimate interests, including direct marketing.
• Right to Withdraw Consent: To withdraw previously given consent for marketing or non-essential cookies at any time.

To exercise any of these rights, contact winmy's Data Protection Officer at the support email address provided in Section 14. winmy will respond within 30 days of receiving a valid request.

winmy's Platform and services are strictly intended for individuals who are 21 years of age or older. winmy does not knowingly collect or process personal data from individuals under 21. If winmy becomes aware that personal data has been collected from a person under 21, that data will be deleted and the associated account closed immediately.

If you have reason to believe that a minor has registered on the winmy Platform, please contact support at the address in Section 14 so that the matter can be investigated promptly.

12.1 As an internationally licensed platform, winmy may transfer personal data to processors located in jurisdictions outside Malaysia. Where such transfers occur, winmy ensures that appropriate safeguards are in place, including contractual data protection clauses that require recipient processors to maintain standards equivalent to those in this Policy.

12.2 winmy's game studio partners and payment processors may maintain infrastructure in various countries. Any transfer of winmy player data to such entities is governed by data processing agreements that restrict use to the specific service being provided.

winmy may update this Privacy Policy from time to time to reflect changes in Platform services, legal requirements, or data processing practices. Material updates will be notified to registered Players via the email address on file and/or through a prominent notice on the Platform prior to the change taking effect.

The "Last updated" date at the top of this Policy reflects the most recent revision. Continued use of the winmy Platform following notification of an update constitutes acceptance of the revised Policy.

For all privacy-related enquiries, data subject access requests, or complaints regarding winmy's data processing practices, please contact:

winmy is committed to resolving all privacy concerns in a timely and transparent manner. Where a concern cannot be resolved directly, you may escalate the matter to the relevant supervisory authority under winmy's licensing jurisdiction.