Privacy Policy Win1Win – Member Personal Data Protection

This Privacy Policy explains how win1win collects, uses, stores, and protects your personal information when you use the win1win.onl platform. We understand that trust is the foundation of our relationship with every member, and we do not take this responsibility lightly.

As an online gaming platform operating in Malaysia, win1win fully complies with the Personal Data Protection Act 2010 (PDPA) and all applicable related regulations. Every data collection and processing activity we carry out has a clear, lawful, and thoroughly documented purpose.

We encourage you to read this Privacy Policy carefully. If you have any questions about how we handle your data, the win1win customer support team is always ready to assist through the official communication channels available on the platform.

Win1win collects personal information from members through various interaction points on the platform. This data collection is necessary to ensure a smooth, secure, and satisfying gaming experience for every member.

Information provided directly by you:

• Full name as it appears on your official identification document.
• An active and reachable email address.
• A Malaysian mobile number registered in your name.
• Date of birth for age verification as required by law.
• National identification number (MyKad) or passport for the KYC process.
• Bank account or e-wallet details for financial transaction purposes.
• Residential address for identity verification purposes.

Information collected automatically:

• The IP address of the device used to access the platform.
• Your device's web browser type and operating system.
• Gaming session data including login times, games played, and transactions.
• Communication records with the win1win customer support team.

Personal information we collect is used responsibly and limited to legitimate purposes. Win1win will not use your data for any other purpose without first obtaining your additional consent.

Win1win takes an extremely cautious approach to sharing members' personal data. As a fundamental rule, we do not share, sell, or disclose your personal information to outside parties without your consent, except in the following limited circumstances:

• Service Providers: Technical and operational partners that assist win1win in delivering its services, such as payment processors, KYC verification providers, and customer support platforms. All partners are bound by strict confidentiality agreements.
• Legal Requirements: win1win will disclose required information if ordered to do so by a court, regulatory body, or authority with valid legal jurisdiction under Malaysian law.
• Fraud Prevention: In cases of suspected fraud or serious illegal activity, win1win may share relevant information with the appropriate authorities or industry bodies for investigation purposes.
• Business Transfers: In the event of a merger, acquisition, or transfer of win1win assets, member data may be transferred to a successor entity that will be bound by an equally stringent privacy policy.

Win1win uses cookies and similar tracking technologies to enhance the user experience on the platform. Cookies are small files stored on your device that allow the platform to remember your preferences and sessions.

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saves your preferences such as language, display settings, and game preferences for a more personalised experience.
• Analytics Cookies: Helps win1win understand how members use the platform for improvement purposes. Analytics data is collected in aggregate and cannot be traced back to any specific individual.
• Security Cookies: Used to detect suspicious activity and protect member accounts from unauthorised access.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect specific features of the win1win platform.

Win1win continually invests in security infrastructure to ensure members' personal data is always protected to the highest standard. Our security measures cover technical, physical, and procedural aspects.

• 256-bit SSL/TLS encryption for all data transmitted between users and win1win servers.
• Member passwords are stored in hashed form using the latest cryptographic algorithms — no one at win1win can ever view your password in its original form.
• An intrusion detection system (IDS) that continuously monitors network traffic to identify cyber threats.
• Strict access controls based on the need-to-know principle for internal staff who handle member data.
• Regular independent security audits to identify and patch vulnerabilities before they can be exploited.
• Regular data backups and a disaster recovery plan to ensure service continuity and data protection.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and win1win's internal policies, you have the following rights regarding your personal data. win1win is committed to respecting and facilitating the exercise of these rights.

Win1win does not retain your personal data longer than necessary for the stated purposes or as required by law. Data retention periods are determined based on the data category and relevant operational and legal requirements.

• Active Account Data: Retained for the duration your account remains active and for a specified period after account closure for compliance purposes.
• Financial Transaction Records: Retained for a minimum of seven years in accordance with Malaysia's financial and tax legal requirements.
• KYC Documents: Retained in accordance with the minimum requirements set by the relevant regulatory body for anti-money laundering compliance.
• System Logs: Platform security and activity logs are retained for a defined period for digital forensic purposes when required.

Once the applicable retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

Win1win is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect any personal information from minors. Our platform has age verification mechanisms designed to prevent registration by underage individuals.

The win1win platform may contain links or integrations with third-party services such as payment processors and identity verification providers. The win1win Privacy Policy applies solely to the win1win.onl platform.

• win1win is not responsible for the privacy practices of third-party platforms or websites that you may access through integrations within our services.
• All third-party service providers working with win1win are selected based on their security and privacy standards, and are bound by strict data protection agreements.
• We encourage you to read the privacy policy of any third-party service you use in the context of the win1win platform.

Win1win reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform service expansions. Any material updates will be communicated to members through appropriate channels.

• Members will be notified of any significant changes to this policy via in-platform notifications or their registered email.
• The "Last Updated" date at the top of this page will always reflect the latest version of the privacy policy in effect.
• Continued use of the win1win platform after policy changes take effect constitutes your acceptance of the updated policy terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or how win1win handles your personal data, please contact our privacy team through the following channels:

• Email: [email protected]
• Live Chat: Available on the win1win platform at all times.
• Response time: We aim to respond to all privacy enquiries within 3 business days.