Winmy2 Privacy Policy — Personal Data Protection Malaysian Members

Winmy2 ("we", "the winmy2 platform") values the privacy of every individual who interacts with our platform. This Privacy Policy clearly and transparently explains how we collect, use, store, and protect your personal data when you use our website, mobile app, or any service provided by winmy2.

By registering an account or using the winmy2 platform, you agree to the practices described in this Privacy Policy. This Policy should be read together with Terms and Conditions winmy2, which constitutes the entire agreement between you and our platform.

Winmy2 collects personal data necessary to provide a secure, seamless, and legally compliant service. The following are the categories of data we collect:

We only collect data that is strictly necessary for the stated purpose. This "data minimisation" principle ensures we do not gather information beyond what is needed to provide our services to you.

Your personal data is collected through the following channels:

• Account registration — information you provide directly when registering a new winmy2 account.
• KYC Process — identity verification documents submitted to meet legal compliance requirements.
• Financial Transactions — payment information collected during deposits and fund withdrawals.
• Platform interactions — data automatically generated when you use the winmy2 website or app, including cookies and server logs.
• Customer Support — information you share when communicating with our support team via live chat or email.
• Promotional programme — data submitted when participating in winmy2 contests, surveys, or promotional programs.

Winmy2 processes your personal data for lawful and specific purposes only. We will not use your data for any purpose beyond what is stated here without first obtaining your consent.

The primary purposes for processing your personal data are as follows:

• Account management — registering, verifying, and managing your account on the winmy2 platform.
• Service provision — enabling you to access all games, Sports Betting, and other platform features.
• Financial transaction processing — managing deposits, withdrawals, and all financial activities related to your account.
• Legal compliance — meeting KYC, anti-money laundering (AML), and other statutory reporting requirements.
• Platform Security — detecting and preventing fraud, account abuse, and other unauthorized activities.
• Customer Support — providing assistance and resolving issues you encounter.
• Responsible gaming — monitoring gameplay patterns to identify potential issues and provide appropriate assistance.
• Marketing communications — sending promotional information, exclusive offers, and platform updates, subject to your communication preferences.

Winmy2 does not sell your personal data to any third parties. However, in operating the platform, we are required to share certain data with the following parties under strict necessity:

• Payment providers — data required to process your deposit and withdrawal transactions via FPX, DuitNow, e-wallets, and other payment channels.
• Technical service providers — companies supporting winmy2's technology infrastructure, such as cloud and cybersecurity services, bound by strict confidentiality agreements.
• Game providers — the minimum information required by game software providers to allow you to play, without exposing your full identity.
• Regulatory authority — when required by law, court order, or a legitimate request from a law enforcement agency.

Protecting your personal data from unauthorised access, loss, alteration or disclosure is a core technical priority at winmy2. We implement multiple complementary layers of security:

• 256-bit SSL encryption — all communications between your device and winmy2 servers are protected with the same cryptographic encryption used by banking institutions.
• Two-Factor Authentication (2FA) — an additional security layer requiring identity verification via your device for every new login.
• 24/7 security monitoring — a real-time threat detection system that monitors for suspicious activity around the clock.
• Secure password storage — account passwords are stored using a one-way cryptographic hashing function that cannot be decrypted.
• Internal access controls — only specifically authorized personnel may access member personal data, subject to their role requirements.
• Regular security audits — penetration testing and security reviews conducted periodically by independent cybersecurity experts.

While winmy2 takes all reasonable security measures, you also play a role in protecting your account. Use a strong, unique password, enable 2FA, and never share your login credentials with anyone.

Winmy2 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand how our platform is used. Cookies are small text files stored on your device.

You can manage your cookie settings through your internet browser. Please note that disabling essential cookies may affect certain features of the winmy2 platform.

As a winmy2 member and data subject under Malaysia's PDPA, you hold the following rights, which we fully respect:

Winmy2 retains your personal data for as long as necessary to fulfill the purposes stated in this Privacy Policy or as required by applicable law.

• Active account data — retained for the duration your account is active and for 7 years after account closure in accordance with Malaysia's AML legal requirements.
• Financial transaction records — retained for a minimum of 7 years for legal compliance and audit purposes.
• Support communication data — retained for 3 years after the last interaction for quality control purposes.
• Technical logs — retained for 12 months for security and troubleshooting purposes.

Once the defined retention period ends, your personal data will be securely deleted or anonymized using industry-standard methods.

The winmy2 platform is for adult users aged 18 and above only. We do not knowingly collect personal data from minors. Our integrated KYC process is designed to identify and prevent registration by underage individuals.

Should winmy2 discover that personal data of a minor has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account. If you find that a minor has registered a winmy2 account, please notify us through our support channels immediately.

Winmy2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in operational practices, legal requirements, or technological developments. You will be notified of any significant amendments via your registered email or in-platform notification at least 14 days before those amendments take effect.

The "effective date" at the top of this document indicates when the latest revision was made. Your continued use of the winmy2 platform after that date constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

Any questions or concerns regarding this Privacy Policy may be directed to the winmy2 support team, available 24/7 via live chat or through the contact details listed on our platform.