Privacy Policy Winmy Login —
Our Commitment to Protecting Your Data

1Information We Collect

When you register and use the platform winmy login, we collect certain categories of personal information to enable us to deliver our services safely and effectively. This information is collected directly from you or automatically through your use of the platform.

Information you provide directly:

• Full name as shown on a valid identity document (MyKad or passport).
• Active email address and mobile phone number.
• Date of birth for age verification purposes.
• Bank account or digital wallet details for processing deposits and withdrawals.
• KYC documents such as a copy of your MyKad, bank statement, or utility bill for identity verification.

Automatically collected information:

• Device IP address and general location data (country and region).
• Device type, operating system, and web browser used.
• Game activity history and in-platform transaction records.
• Access log data including login timestamps and dates.
• Cookie and session token information.

2How We Use Your Data

winmy login uses your personal information solely for legitimate and necessary purposes. We will not use your data for any purpose outside the scope stated below without first obtaining your explicit consent.

3Information Sharing with Third Parties

winmy login does not share your personal information with external parties except in the limited and specific circumstances set out below. In all cases, we ensure that any data sharing complies with legal requirements and strict data protection agreements.

• Payment Processor: Minimal transaction details are shared with approved payment processors (such as FPX, DuitNow, and digital wallet providers) solely to complete your transactions.
• Identity Verification Provider: KYC documents are shared with trusted identity verification partners to ensure the accuracy and validity of the information you provide.
• Statutory Authorities: winmy login will disclose information to the relevant authorities when required to do so under Malaysian law, including in criminal investigations or compliance with court orders.
• Technical Service Provider: Limited information is shared with technical infrastructure providers (such as cloud hosting services) bound by strict confidentiality agreements.

4Cookies & Tracking Technologies

Platform winmy login uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how you interact with our platform.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting data on how pages are used to help us identify technical issues and continuously improve the platform.
• Preference Cookies: Saving your preferences such as language and display layout so you do not need to reset them each time you log in.

You can manage or disable non-essential cookies through your browser settings at any time. However, please note that disabling certain cookies may affect the functionality and user experience of the platform. winmy login.

5Data Security

We implement a range of technical and organisational security measures to protect your personal information from unauthorised access, loss, destruction, or accidental disclosure.

• Data encryption in transit using TLS 1.3 protocol.
• Data encryption at rest using AES-256.
• Two-factor authentication (2FA) for all internal admin accounts.
• 24/7 system monitoring to detect suspicious activity.
• Regular penetration testing by third-party security experts.
• Layered access controls — only authorised personnel may access sensitive data.

While we take all reasonable precautions, no security system is completely perfect. In the event of any data breach affecting your personal information, winmy login will notify you and the relevant authorities within the timeframe prescribed by law.

6Data Retention Period

winmy login retaining your personal information only for as long as necessary to fulfill the purposes stated in this policy, or as required by applicable Malaysian law.

• Active account data: Retained for the duration your account is active and for the required period following account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• KYC Documents: Retained for the period stipulated by the relevant authorities, typically 5 to 7 years after the business relationship ends.
• Security logs: Retained for 12 months for the purpose of detecting and investigating security incidents.

Once the defined retention period has ended, your data will be securely deleted or permanently anonymized in accordance with industry-standard procedures.

7Your Rights as a User

As a user winmy login in Malaysia, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team with a written request.

8Children's Data

Platform winmy login is not designed for use by individuals under the age of 21. We do not knowingly collect or store any personal information from children or minors.

If we find that personal information of a minor has been collected without proper age verification, we will take immediate steps to delete that information and close the associated account. If you have reason to believe that a minor has registered an account on our platform, please contact the support team winmy login immediately.

9Changes to This Privacy Policy

winmy login reserves the right to update or modify this Privacy Policy at any time. Any changes will take effect immediately upon publication of the updated version on this page. The effective date at the bottom of this document will be updated to reflect the date of the most recent change.

For significant and material changes, we will notify you via email or in-platform notification at least 14 days before the changes take effect. It is your responsibility to review this page periodically and ensure you remain informed of our current Privacy Policy.

10Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO) team through the following channels:

• Support Email: [email protected]
• Response Time: Within 3 business days for general inquiries; within 30 days for formal data rights requests.
• Language: We accept enquiries in both Bahasa Malaysia and English.

For formal data rights requests (such as access, correction, or deletion), please include your account number and a copy of a valid identification document to allow us to process your request accurately and securely.