Win MYR Privacy Policy – Personal Data Protection for Malaysian Players

1Introduction

Win MYR ("we", "platform") takes our responsibility to protect the privacy and personal data of every individual using our services seriously. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the latest international data protection standards.

The Win MYR platform provides online casino services covering live casino, jackpot slots, table games, lottery, roulette, and sports betting on football (Malaysia Super League, EPL), badminton, e-sports, and more to users across Malaysia. In the course of delivering these services, Win MYR needs to collect and process certain personal information.

This Privacy Policy transparently outlines:

• The types of personal data Win MYR collects from you.
• The purpose and legal basis for processing such data.
• Parties that may receive or access your data.
• The security measures Win MYR takes to protect your data.
• Your rights as a data subject under PDPA 2010.
• How to contact Win MYR regarding privacy and data matters.

2Personal Data We Collect

Win MYR collects personal data through various channels and for different purposes. The following are the categories of data we collect:

3How We Use Your Personal Data

Win MYR uses the personal data collected for the following purposes:

• Account Management: Processing registrations, verifying identity, managing member accounts, and enabling secure login to the Win MYR platform.
• Service Provision: Processing deposits and withdrawals in RM via Malaysian payment methods (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX), providing access to casino games, and ensuring a seamless gaming experience.
• Legal Compliance: Carrying out Know Your Customer (KYC) procedures, anti-money laundering (AML) measures, and fulfilling reporting obligations under applicable Malaysian laws.
• Platform Security: Detecting and preventing fraud, multi-account abuse, bonus misuse, and other illegal activities that compromise the integrity of the Win MYR platform.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling, enforcing player-set limits, and providing support to members who need it.
• Customer Support: Processing and responding to enquiries, complaints, and support requests from Win MYR members.
• Marketing Communications: Sending information about Win MYR promotions, bonuses, and offers — only to members who have consented to receive such communications.
• Platform Improvements: Analysing aggregated usage data to improve the design, performance, and features of the Win MYR platform.

4Legal Basis for Data Processing

Win MYR processes your personal data on the basis of one or more of the following legal grounds under Malaysia's PDPA 2010:

• Consent: For marketing activities and promotional communications, we process your data on the basis of the consent you have provided. You may withdraw this consent at any time.
• Contract Performance: Processing necessary to fulfil the service agreement between you and Win MYR — including account management, transaction processing, and providing access to games.
• Legal Obligations: Processing required to comply with applicable Malaysian laws, including KYC, AML, and reporting obligations to the relevant authorities.
• Legitimate Interest: Processing for fraud prevention, platform security, and service improvements that benefit all Win MYR users.

5Data Sharing with Third Parties

Win MYR does not sell, rent, or trade members' personal data to third parties for their own commercial purposes. However, we do share data in the following limited circumstances:

6Win MYR Data Security Measures

Win MYR implements comprehensive technical and organisational security measures to protect members' personal data from unauthorised access, loss, destruction, or disclosure:

• 256-bit SSL Encryption: All data communications between the Win MYR platform and your device are encrypted using the latest SSL/TLS standards.
• Encrypted Passwords: Win MYR member passwords are stored in an irreversible hashed format. Win MYR staff cannot view your password.
• Two-Factor Authentication (2FA): Win MYR offers a 2FA option for added login security via OTP through SMS or an authenticator app.
• 24/7 Monitoring: A round-the-clock threat detection system that identifies and responds to any suspicious activity.
• Regular Security Audits: Win MYR undergoes regular penetration testing and independent security audits.
• Internal Access Controls: Access to members' personal data within the Win MYR system is restricted to staff who genuinely require it, based on a strict need-to-know principle.

7Data Retention & Deletion

Win MYR retains members' personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by Malaysian law:

• Active Account Data: Retained for as long as your account remains active and in use.
• Post-Account Closure Data: Win MYR retains financial transaction data and compliance records for a minimum of 7 years after account closure, as required under Malaysian financial laws.
• Support Conversation Logs: Retained for 3 years for dispute resolution and service improvement purposes.
• Marketing Data: Deleted within 30 days of you withdrawing consent to receive marketing communications.
• Technical Data (Logs): Retained for 12 months for security purposes and technical troubleshooting.

When data is no longer needed, Win MYR will delete or anonymise it in a secure and irreversible manner.

8Cookies & Tracking Technologies

The Win MYR platform uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. The following are the types of cookies we use:

• Essential Cookies: Required for core Win MYR platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collects information on how visitors use the Win MYR platform — for example, the most frequently visited pages and any error messages encountered. This data is used to improve how the platform functions.
• Functionality Cookies: Allows the Win MYR platform to remember your preferences (such as language and display settings) to deliver a more personalised experience.
• Analytics Cookies: Used to understand aggregated, anonymised usage patterns to help Win MYR make better product improvement decisions.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the Win MYR platform. Please refer to your browser's documentation for more information on managing cookies.

9Your Privacy Rights as a Win MYR Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding your personal data held by Win MYR:

To exercise any of the rights above, please contact Win MYR by email at privacy@winmyr.im or via the platform's live chat. We will respond within 14 business days.

10Child Protection

Win MYR services are strictly for individuals aged 18 years and above. Win MYR does not knowingly collect, store, or process personal data of individuals under the age of 18.

Should Win MYR discover that personal data of an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete such data and close the associated account.

11Changes to the Privacy Policy

Win MYR reserves the right to update or amend this Privacy Policy at any time. Changes take effect immediately upon publication of the updated version on the Win MYR platform.

For material and significant changes — particularly those affecting how we use your personal data — Win MYR will notify members via:

• In-platform notifications on your next login to Win MYR.
• Email to the address registered to your Win MYR account.
• A prominent notice on the Win MYR platform homepage.

We encourage you to review this Privacy Policy periodically. The "Updated" date at the top of this document will always reflect the latest version currently in effect.

12Contact the win myr Privacy Officer

Win MYR has appointed a Data Protection Officer (DPO) responsible for ensuring Win MYR's compliance with PDPA 2010 and this Privacy Policy. For any enquiries, requests, or concerns regarding your privacy and personal data, please contact:

This Privacy Policy is governed by the laws of Malaysia. Any privacy-related disputes shall first be resolved through Win MYR's complaint resolution procedure. If you remain unsatisfied, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia.