Privacy Policy

1. Introduction

1.1 winw88 is committed to protecting the privacy and personal data of every player who uses its platform. This Privacy Policy sets out the categories of personal data we collect, the purposes for which we process that data, how long we retain it, who we share it with, and the rights available to you as a data subject.

1.2 winw88 is the data controller in respect of the personal data it collects directly from players via the winw88.org platform. Where winw88 engages third-party processors to handle data on its behalf, those processors are bound by data processing agreements that require them to handle personal data in accordance with applicable data protection standards.

1.3 The winw88 platform is directed primarily at adult Malaysian players. winw88 processes personal data in accordance with applicable data protection principles and the requirements of its international gaming licence.

2. Personal Data We Collect

winw88 collects the following categories of personal data:

2.1 Registration Data. Full legal name (as on MyKad), date of birth, Malaysian mobile number, email address, and a chosen username. This data is required to create and operate your winw88 account.

2.2 Identity Verification (KYC) Data. A copy of your Malaysian National Identity Card (MyKad — front and back) and, where required, proof of address or source-of-funds documentation. KYC data is processed for age verification, identity confirmation, and anti-money laundering compliance purposes.

2.3 Financial Data. Payment method details associated with deposits and withdrawals, including e-wallet account identifiers (Touch n Go eWallet, Boost, GrabPay), bank account details (Maybank, CIMB, Hong Leong Bank, Public Bank), and any other payment method used on the platform. Full payment card numbers are not stored by winw88.

2.4 Transaction Data. Records of all deposits, withdrawals, bonus credits, wagers, game results, and account balance movements processed through your winw88 account.

2.5 Technical and Usage Data. IP address, device type and identifiers, browser type and version, operating system, session timestamps, pages visited on the winw88 platform, game titles accessed, and clickstream data.

2.6 Communications Data. Records of communications between you and winw88 support, including live chat transcripts and emails, retained for quality assurance and dispute resolution purposes.

2.7 Responsible Gaming Data. Records of any deposit limits, cooling-off periods, or self-exclusion requests applied to your winw88 account.

3. How We Use Your Personal Data

winw88 uses the personal data it collects for the following purposes:

• Account creation and management: To register, verify, and maintain your winw88 player account;
• Identity and age verification: To confirm that all winw88 account holders are at least 21 years of age and are who they claim to be;
• Transaction processing: To process deposits, withdrawals, bonus allocations, and wager settlements in MYR;
• Regulatory and AML compliance: To meet the obligations imposed by winw88's gaming licence, including transaction monitoring, suspicious activity reporting, and record keeping;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised access, and platform abuse;
• Customer support: To respond to enquiries, handle complaints, and resolve disputes raised through winw88 support channels;
• Platform improvement: To analyse usage patterns and technical data to improve the performance, reliability, and features of the winw88 platform;
• Responsible gaming: To administer and enforce deposit limits, session reminders, cooling-off periods, and self-exclusion requests, and to monitor for indicators of problem gambling;
• Legal compliance: To comply with applicable laws, court orders, and requests from competent regulatory or law enforcement authorities.

4. Legal Bases for Processing

winw88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between winw88 and the player, including account operations and transaction processing;
• Legal obligation: Processing required to comply with applicable laws and the obligations of winw88's gaming licence, including KYC, AML, and responsible gaming requirements;
• Legitimate interests: Processing carried out to protect winw88 and its players from fraud, abuse, and security threats, and to improve the platform — where such interests are not overridden by the player's fundamental rights;
• Consent: Where winw88 relies on consent as a legal basis (for example, for optional marketing communications), players may withdraw that consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

5.1 winw88 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes.

5.2 winw88 may share personal data with the following categories of recipients, strictly to the extent necessary for the purposes described in this Policy:

• Payment processors and e-wallet operators (Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Hong Leong Bank, Public Bank, and others) to process financial transactions;
• KYC and identity verification service providers engaged to assist with the verification of player identity documents;
• Gaming software and game providers whose titles are integrated into the winw88 platform, to the extent required to operate those games;
• IT infrastructure and cloud service providers engaged to host and maintain the winw88 platform;
• Regulatory authorities and law enforcement bodies where winw88 is required by law, court order, or regulatory direction to disclose personal data;
• Fraud prevention and AML service providers engaged to assist with the detection and investigation of suspicious activity.

5.3 All third-party processors engaged by winw88 are bound by contractual obligations to process personal data only on winw88's instructions and to implement appropriate technical and organisational security measures.

6. International Data Transfers

6.1 The winw88 platform and its service providers may process personal data in jurisdictions outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to that applicable in Malaysia, winw88 ensures that appropriate safeguards are in place, such as contractual data transfer agreements, before the transfer occurs.

6.2 Players may request further information about the safeguards applied to international transfers of their personal data by contacting winw88 support.

7. Data Retention

7.1 winw88 retains personal data for as long as your account remains active and for such further period as is required to comply with applicable legal, regulatory, and licensing obligations.

7.2 KYC identity verification documents and transaction records are retained for a minimum of five (5) years from the date of account closure or the date of the last transaction, whichever is later, in accordance with applicable anti-money laundering legislation.

7.3 Communications records and support interaction logs are retained for a minimum of three (3) years to facilitate dispute resolution.

7.4 Where personal data is no longer required for any lawful purpose, winw88 will securely delete or anonymise that data.

8. Cookies & Tracking Technologies

8.1 winw88 uses cookies and similar technologies on the winw88.org platform to:

• Maintain your authenticated session and keep you logged in to your winw88 account during a session;
• Remember preferences such as language and display settings;
• Measure platform performance, page load times, and error rates using first-party analytics;
• Detect and prevent fraudulent or abusive activity.

8.2 winw88 does not deploy cross-site tracking cookies or share behavioural data with advertising networks.

8.3 You can manage or disable non-essential cookies through your browser settings. Please note that disabling session cookies will prevent you from remaining logged in to your winw88 account during a browsing session.

9. Security Measures

9.1 winw88 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, loss, or destruction, including:

• 256-bit SSL/TLS encryption on all data transmissions between player devices and winw88 servers;
• Encryption of personal and financial data at rest in winw88's data storage systems;
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their role;
• Regular security assessments and penetration testing of the winw88 platform;
• Staff training on data handling and security obligations.

9.2 Despite these measures, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their winw88 account and to contact support immediately if they suspect unauthorised account activity.

10. Your Rights

As a data subject, you have the following rights in relation to the personal data held about you by winw88:

• Right of access: To request a copy of the personal data winw88 holds about you;
• Right of rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data, subject to winw88's legal and regulatory retention obligations;
• Right to restriction: To request that winw88 restrict the processing of your personal data in certain circumstances;
• Right to object: To object to processing carried out on the basis of winw88's legitimate interests;
• Right to data portability: To receive a machine-readable copy of the personal data you have provided to winw88, where processing is carried out by automated means.

To exercise any of the above rights, please contact winw88 support via live chat or at [email protected]. winw88 will respond to verified requests within 30 days.

11. Children's Privacy

11.1 winw88 does not knowingly collect personal data from individuals under the age of 21. The platform is strictly intended for adults of legal gambling age.

11.2 If winw88 becomes aware that personal data has been collected from an individual under 21, such data will be deleted immediately and the associated account will be closed without refund of deposited funds in accordance with the winw88 Terms & Conditions.

11.3 If you believe that a minor has registered an account on the winw88 platform, please contact support immediately at [email protected].

12. Third-Party Links

The winw88 platform may contain references to third-party services or integrations (such as payment processors and game providers). winw88 is not responsible for the privacy practices of those third parties. Players should review the privacy policies of any third-party service they interact with directly.

13. Amendments to This Policy

13.1 winw88 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or winw88's data processing practices.

13.2 Material changes to this Policy will be communicated to registered players via the email address or mobile number on their winw88 account prior to the effective date of the change. Continued use of the winw88 platform after notification constitutes acceptance of the revised Policy.

13.3 The "Last updated" date at the top of this page will be revised each time the Policy is amended.

14. Contact Us

For questions, requests, or concerns relating to this Privacy Policy or winw88's data processing practices, please contact us through the following channels:

• Live Chat: Available 24/7 via the winw88 platform — the fastest route for urgent queries
• Email: [email protected] — for written data subject requests and formal privacy enquiries

Please include your registered username and a clear description of your request in all correspondence to allow winw88 to handle your query promptly and accurately.