winmy Privacy Policy

1. Who We Are

This Privacy Policy is issued by winmy ("winmy," "we," "us," or "our"), the operator of the online gaming platform accessible at winmy.bid. winmy is an internationally licensed online gaming operator providing casino, sportsbook, and related gaming services to players in Malaysia and other permitted jurisdictions.

For the purposes of applicable data protection law, winmy is the data controller in respect of personal data collected from players and users of the winmy platform. This Privacy Policy describes our practices concerning the collection, use, storage, disclosure, and protection of personal data in connection with the winmy platform and any related communications.

By registering for or using the winmy platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the winmy platform.

2. Personal Data We Collect

winmy collects personal data from players and platform users through registration, account use, transactions, and platform interactions. The categories of personal data we collect include:

2.1 Data Collected Indirectly

winmy may also receive personal data about you from third parties in the course of operating the platform, including payment processors confirming the completion of transactions, identity verification service providers assisting with KYC, and fraud detection services flagging suspicious activity patterns.

3. How winmy Uses Your Personal Data

winmy uses the personal data it collects for the following purposes:

• Account Management: Creating and maintaining your winmy player account, verifying your identity, and administering your account settings and preferences.
• Transaction Processing: Processing deposits and withdrawals through your chosen payment method (Touch n Go eWallet, Boost, Maybank, CIMB, or Public Bank), verifying payment methods, and maintaining financial records.
• Legal & Regulatory Compliance: Fulfilling winmy's obligations under its international gaming licence, including KYC verification, anti-money laundering checks, responsible gaming obligations, and age verification requirements.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account abuse, collusion, and other prohibited conduct on the winmy platform.
• Platform Operation & Improvement: Analysing platform usage to improve game offerings, user interface design, payment processes, and overall service quality.
• Customer Support: Responding to your enquiries, resolving disputes, and providing assistance with your winmy account.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviours and administering responsible gaming tools including self-exclusion programmes.
• Marketing Communications: Where you have provided consent, sending you information about winmy promotions, new games, and platform updates. You may withdraw marketing consent at any time by contacting support or updating your account preferences.

4. Legal Basis for Processing

winmy processes personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your winmy account, process transactions, and provide gaming services.
• Legal Obligation: Processing is necessary for winmy to comply with its legal and regulatory obligations, including gaming licence conditions, anti-money laundering legislation, and tax reporting requirements.
• Legitimate Interests: Processing is necessary for winmy's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: For non-essential purposes such as marketing communications, winmy relies on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. Sharing Your Personal Data

winmy does not sell, rent, or trade personal data. We share personal data with third parties only in the following circumstances:

• Payment Processors: We share necessary financial data with payment service providers (including Touch n Go, Boost, Maybank, CIMB, and Public Bank) to process your transactions. These providers are bound by their own data protection obligations and data processing agreements with winmy.
• Game Providers: Game providers whose titles are hosted on the winmy platform may receive technical data necessary to operate their games and maintain their own regulatory compliance.
• Identity Verification Providers: Third-party KYC and identity verification services receive identity data as necessary to complete verification checks required under our licensing obligations.
• Regulatory and Law Enforcement Authorities: winmy will disclose personal data to gaming regulatory authorities, financial intelligence units, and law enforcement agencies where required to do so by law, court order, or our gaming licence conditions.
• Fraud Prevention Services: Personal and technical data may be shared with fraud detection and prevention services to protect the platform and its players.

All third-party service providers with whom winmy shares personal data are required to maintain appropriate security standards and to use the data only for the purposes for which it was provided.

6. Cookies & Tracking Technologies

6.1 What We Use

The winmy platform uses cookies and similar technologies (including local storage and session tokens) to deliver and improve the platform experience. Cookies are small data files placed on your device when you visit the winmy website.

6.2 Types of Cookies

• Strictly Necessary Cookies: Required for the platform to function. These include session management cookies that keep you logged in to your winmy account during a session. These cannot be disabled.
• Functional Cookies: Remember your preferences (e.g., language, game lobby view settings) to improve your experience on return visits.
• Analytics Cookies: Collect anonymised information about how players use the winmy platform, which pages are visited most frequently, and where errors occur. This data is used to improve the platform.

6.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the winmy platform, including the ability to remain logged in or access certain features.

7. Data Retention

winmy retains personal data for as long as necessary to fulfil the purposes for which it was collected, and to comply with our legal, regulatory, and contractual obligations. Specific retention periods include:

• Account data and gaming records are retained for a minimum of five (5) years following account closure, as required by our gaming licence conditions and applicable anti-money laundering regulations.
• Financial transaction records are retained for a minimum of seven (7) years in accordance with financial record-keeping obligations.
• Customer support communications are retained for two (2) years from the date of the relevant interaction.
• Data collected solely for marketing purposes is retained until you withdraw consent or request deletion, whichever occurs first.

Upon expiry of the relevant retention period, winmy will securely delete or anonymise personal data in accordance with its data disposal procedures.

8. Your Data Protection Rights

Subject to applicable law and our legal retention obligations, you have the following rights in respect of your personal data held by winmy:

• Right of Access: You may request a copy of the personal data winmy holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can update most account information directly in your winmy account settings.
• Right to Erasure: You may request deletion of your personal data, subject to winmy's legal obligations to retain certain data (e.g., financial records required for regulatory compliance).
• Right to Restrict Processing: In certain circumstances, you may request that winmy restrict the processing of your personal data.
• Right to Data Portability: Where processing is based on consent or contract, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the winmy support team via live chat or the email address in the footer of this page. winmy will respond to valid requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days with prior notification.

9. Data Security

winmy implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the winmy platform;
• Encryption of sensitive data at rest, including financial and identity data;
• Role-based access controls limiting access to personal data to authorised personnel;
• Regular security assessments and penetration testing of platform infrastructure;
• Incident response procedures for data breach detection, containment, and notification.

While winmy takes all reasonable measures to protect your data, no internet-based system is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, winmy will notify affected players without undue delay in accordance with applicable regulatory requirements.

10. International Data Transfers

As an internationally licensed gaming operator, winmy may transfer personal data to jurisdictions outside Malaysia in connection with the operation of the platform, including to game providers, payment processors, and infrastructure providers located in other countries. Where such transfers occur, winmy ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses consistent with applicable international data protection standards.

11. Children's Privacy

The winmy platform is strictly for users aged 21 and above. 21+ winmy does not knowingly collect personal data from persons under 21 years of age. If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and terminate the relevant account. If you are a parent or guardian and believe your child has registered on the winmy platform, please contact us immediately via live support chat.

12. Changes to This Privacy Policy

winmy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, winmy will provide notice to registered players via email or a prominent notice on the platform prior to the amendments taking effect. The "Last updated" date at the top of this page indicates the date of the most recent revision. Continued use of the winmy platform following the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way winmy handles your personal data, please contact us through one of the following channels:

• Live Chat: Available 24/7 directly on the winmy platform — the fastest way to reach our support team.
• Email: The winmy data enquiries address is displayed in the footer of this page. Email enquiries are responded to within 4 business hours.

winmy is committed to resolving data privacy concerns promptly and transparently. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority or gaming regulatory body in accordance with applicable law.