Winmy Login Privacy Policy – Malaysian Player Data Protection

1. Introduction

Winmy login ("we", "Platform") values the privacy of all our users and players in Malaysia. This privacy policy clearly and transparently explains how winmy login collects, processes, stores, uses, and protects your personal data when you use our platform.

This winmy login privacy policy applies to all services we offer, including our online casino platform, Sports Betting on the Malaysia Super League and EPL, lottery, Table Games, Live Casino, and all interactions via our website, mobile app, and customer support channels.

By registering for or using the winmy login platform, you agree to the data collection and usage practices described in this privacy policy. If you do not agree with any part of this policy, please contact us or consider discontinuing use of winmy login services.

2. Data Collected

Winmy login collects several categories of personal data depending on how you interact with our platform. Below are the full details of the data we may collect:

2.1 Data You Provide Directly

• Registration information: Full name, identity card number (MyKad), date of birth, email address, mobile phone number
• Account information: Username, password (stored in encrypted hash form), security questions
• KYC verification documents: Copies of identity documents, bank statements, utility bills for identity verification purposes
• Payment information: eWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow details, FPX bank account details (Maybank2u, CIMB Clicks) — full card numbers are never stored on our servers
• Communications: Any messages you send to our support team via live chat, email, or enquiry form

2.2 Automatically Collected Data

• Technical data: IP address, browser type, operating system, screen resolution, device language
• Usage data: Pages visited, session time and duration, games played, bets placed, win and loss records
• Device data: Unique device identifier, device model, application version (if using the mobile app)
• Approximate location data: Geographic region based on IP address — we do not collect precise GPS location data without your consent

2.3 Data from Third-Party Sources

In certain circumstances, winmy login may receive your personal data from legitimate third-party sources such as identity verification service providers, fraud prevention agencies and payment service providers for transaction verification purposes.

3. How We Use Your Data

Winmy login uses collected personal data solely for legitimate, clearly stated purposes. The following are the primary ways your data is used:

4. Legal Basis for Data Processing

Winmy login processes your personal data on one or more lawful bases under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contract performance: Processing required to provide the winmy login services you have registered for, including deposits, withdrawals and account management
• Legal obligation: Processing required to comply with applicable laws and regulations in Malaysia, including anti-money laundering (AML) requirements and identity verification
• Legitimate interest: Processing required for winmy login's legitimate business interests, such as preventing fraud, ensuring platform security and improving our services — provided these interests do not override your fundamental privacy rights
• Consent: For direct marketing and promotional communications — you may withdraw this consent at any time by contacting us

5. Sharing with Third Parties

Winmy login does not sell or trade players' personal data. However, in the limited circumstances outlined below, we may share your data with trusted third parties:

5.1 Service Providers

We share necessary data with service providers that help us operate the winmy login platform, including payment service providers (Touch 'n Go, GrabPay, DuitNow, FPX), identity verification providers, cloud infrastructure providers and customer support services. All providers are bound by strict confidentiality agreements and may only use your data for purposes we direct.

5.2 Regulatory Authorities

Winmy login will disclose personal data to the relevant Malaysian authorities when required by law, court order, or valid legal process. This includes cooperation with investigations into financial crime, money laundering, or fraudulent activity.

5.3 Game Providers

To allow you to play games provided by third-party game developers on the winmy login platform, limited data such as player identifiers and betting records may be shared with those game providers strictly for technical and fair game audit purposes.

6. Cookies & Tracking Technologies

Winmy login uses cookies and similar tracking technologies to enhance the user experience, maintain platform security and understand how players interact with our services.

6.1 Types of Cookies We Use

• Essential cookies: Required for core platform functionality — without these, winmy login will not operate properly. These cookies cannot be disabled.
• Functional cookies: Remembering your preferences such as language, display settings, and login status to make your experience on the platform more convenient.
• Analytics cookies: Collects anonymised usage data to help us understand and improve the performance of the winmy login platform.
• Security cookies: Used to detect and prevent fraudulent activity, automated bots, and unauthorised account access.

6.2 Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the winmy login platform. For guidance on managing cookies in popular browsers such as Chrome, Firefox, or Safari, please refer to the respective browser's help documentation.

7. Data Security

Winmy login invests seriously in the security of our data infrastructure. The technical and organisational security measures we have in place include:

• 256-bit SSL/TLS encryption for all data in transit between your device and winmy login's servers
• Encryption of sensitive data at rest using AES-256 standards
• Strict role-based access control (RBAC) — only authorised personnel may access specific data
• 24/7 security monitoring and an active intrusion detection system (IDS)
• Regular penetration testing conducted by independent security experts
• Regularly tested data backup and recovery procedures
• Two-factor authentication (2FA) mandatory for all internal administrative access

While winmy login takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. We encourage you to take proactive measures to safeguard your account as well, including using a strong password and keeping your login credentials confidential.

8. Data Retention Period

Winmy login retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required under applicable Malaysian law.

• Active account data: Retained for as long as your account is active and for the required period following account closure
• Financial transaction records: Retained for a minimum of 7 years as required by Malaysian financial and tax legislation
• KYC documents: Retained for a minimum of 5 years after the business relationship ends, as required under Malaysia's AML laws
• Support communication logs: Retained for 2 years for reference and quality control purposes
• Log and security data: Retained for 90 days for security and digital forensics purposes

Once the specified retention period has elapsed, your personal data will be securely deleted or anonymised in a manner that cannot be re-identified.

9. Your Rights

As a winmy login player in Malaysia, you have the following rights regarding your personal data under PDPA 2010:

To exercise any of the rights above, please contact the winmy login privacy team by email at privacy@winmylogin.com or via our platform's live chat. We will respond within 21 business days from the date your request is received.

10. International Data Transfers

In the course of operating winmy login services, your personal data may be transferred to or stored on servers located outside Malaysia. Any such transfer is only carried out where an adequate level of data protection is guaranteed through the following mechanisms:

• Data processing agreements that comply with recognised international standards
• Use of standard contractual clauses approved by data protection authorities
• Transfers to countries or regions recognised as providing an adequate level of data protection

11. Amendments to the Privacy Policy

Winmy login reserves the right to update or amend this privacy policy from time to time to reflect changes in our practices, legal requirements, or service improvements. All amendments will be published on this page along with an updated effective date.

For significant and material amendments, winmy login will notify you via an in-platform notification or the email address registered to your account at least 14 days before the changes take effect. Continued use of the winmy login platform after the effective date constitutes acceptance of the revised privacy policy.

The latest update date of this winmy login privacy policy is: 1 January 2026.

12. Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights in relation to this winmy login privacy policy, please contact us through the following channels: