Win MYR Privacy Policy – Personal Data Protection for Malaysian Players

1Introduction – Who We Are and Why This Policy Exists

Welcome to the Privacy Policy Win MYR. This document explains in detail how Win MYR ("we", "the platform") collects, uses, stores, shares, and protects your personal information ("data") when you use our website, application, or any of the services we provide.

Win MYR operates as an online casino and Sports Betting platform dedicated exclusively to Malaysian players. We understand that your trust is our most valuable asset, and protecting your privacy is a core part of that trust. This policy is shaped in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and international best practices in data protection.

By registering a Win MYR account or using our platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please stop using the Win MYR platform and contact us to close your account.

2Personal Data Collected by Win MYR

Win MYR only collects data that is genuinely necessary for the stated purposes. Below are the categories of data we collect:

2.1 Data You Provide Directly

• Registration information: Full name, date of birth, Malaysian phone number, email address, and password (stored as an unreadable hash).
• Identity verification documents (KYC): A copy of your Malaysian identity card (MyKad) or passport for age and identity verification purposes.
• Contact information: Messages you send to Win MYR customer support, along with any feedback or complaints you submit.

2.2 Automatically Collected Data

• Usage data: The games you play on Win MYR, session duration, betting details, transaction history, and records of wins or losses.
• Technical data: IP address, device type, operating system, browser version, and network information.
• Location data: Approximate location based on IP address for compliance and fraud detection purposes — Win MYR does not access your device's GPS.

2.3 Data We Do NOT Collect

• Your eWallet PIN or password (Touch 'n Go, GrabPay, Boost, etc.).
• Full credit or debit card details (processed directly by certified payment gateways).
• Full bank account numbers (only the last four digits are retained for withdrawal verification purposes).
• Any biometric data such as fingerprints or facial scans.

3How Win MYR Uses Your Data

Every piece of data we collect has a clear and lawful purpose. Win MYR uses your data for the following:

4Legal Basis for Data Processing

Win MYR processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010:

• Contract performance: Processing is necessary to deliver the Win MYR services you agreed to under our Terms & Conditions — including account management, deposits and withdrawals.
• Legal obligation: Compliance with KYC requirements, anti-money laundering (AML) obligations, and reporting to the relevant Malaysian authorities where required by law.
• Legitimate interests: Fraud prevention, platform security and usage analysis for the improvement of Win MYR services.
• Consent: For direct marketing communications such as promotional emails and Win MYR offer notifications — you may withdraw this consent at any time.

5Data Sharing with Third Parties

Win MYR does not sell, rent, or trade your personal data. That said, in the course of operating the platform, we may share data with carefully selected third parties in the following categories:

• Malaysian payment providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers for processing financial transactions. They are subject to strict PCI-DSS security standards.
• Game software providers: Companies such as Evolution Gaming, Pragmatic Play, and PG Soft that provide Live Casino and slots games — they receive only the minimum data required to deliver the gaming experience.
• Analytics services: Platform analytics tools that process anonymised data to help Win MYR understand usage patterns and improve the player experience.
• Legal authorities: Win MYR will disclose data when required by a Malaysian court order or a lawful request from law enforcement authorities.

6Win MYR Data Security

Win MYR continually invests in security infrastructure to ensure your personal data is protected at every level:

• 256-bit SSL encryption: All data in transit between your device and Win MYR's servers is protected by banking-grade encryption.
• Data-at-rest encryption: Sensitive data stored in Win MYR's database, including passwords and KYC documents, is encrypted using AES-256 standards.
• Internal access controls: Only authorised Win MYR staff with a legitimate business need may access player data, and all access is logged for audit purposes.
• 24/7 threat monitoring: Win MYR's systems are monitored around the clock to detect any suspicious activity or intrusion attempts.
• Regular security testing: Win MYR conducts regular independent penetration testing and security audits.

7Data Retention Period

Win MYR does not retain your personal data longer than necessary. The following are our data retention guidelines:

• Active account data: Retained for as long as your Win MYR account is active and for the required period following account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in compliance with Malaysian financial and tax regulatory requirements.
• KYC documents: Retained for a minimum of 5 years after the business relationship ends, in line with Malaysia's AML requirements.
• Customer support chat logs: Retained for 2 years for service quality and dispute resolution purposes.
• Marketing data (with consent): Retained until you withdraw consent or request deletion.

Once the retention period expires, Win MYR will securely delete or anonymise your data using methods that ensure it cannot be recovered.

8Cookies, Analytics & Tracking Technologies

Win MYR uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential cookies (required): Required for core Win MYR platform functions such as login sessions, security, and language preferences. These cannot be disabled.
• Performance cookies: Collecting information on how you use Win MYR to help us improve platform performance and speed.
• Functional cookies: Remembering your preferences such as language, display settings, and game preferences.
• Analytics cookies: Helps Win MYR understand aggregate (anonymised) usage patterns for product improvement.

You can manage your cookie preferences through your browser at any time. Please note, however, that disabling certain cookies may affect the functionality of the Win MYR platform.

9Your Personal Data Rights at Win MYR

As a Win MYR player based in Malaysia, you have the following rights regarding your personal data under PDPA 2010:

10Children's Privacy

The Win MYR platform is strictly intended for individuals aged 18 years and above. We do not knowingly collect, process or store personal data of minors.

Should Win MYR become aware that a child's personal data has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child has registered on Win MYR should contact us immediately at support@winmyr.best.

Win MYR employs a multi-layered age verification system — including date-of-birth checks at registration and through the KYC process — to prevent access by underage individuals.

11International Data Transfers

In the course of Win MYR's operations, some of your data may be processed by servers or service providers located outside Malaysia. Win MYR ensures that any such data transfers are protected by safeguards that meet or exceed Malaysian standards:

• Binding data processing agreements (DPAs) with all overseas service providers.
• Using recognised standard contractual clauses for data protection in international transfers.
• Selecting partners that hold internationally recognised privacy certifications.

Win MYR does not transfer data to countries without an adequate level of data protection unless appropriate additional safeguards are in place.

12Changes to This Privacy Policy

Win MYR reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a prominent notice within the Win MYR platform to keep you informed.
• Sending email notifications to all registered players when changes are material enough to affect your rights.

We encourage you to review this Privacy Policy periodically. Your continued use of the Win MYR platform after any changes take effect will be considered your acceptance of the updated Privacy Policy.

13Contact the Win MYR Privacy Officer

Win MYR has appointed an internal privacy officer responsible for ensuring compliance with this Privacy Policy and Malaysia's PDPA 2010. If you have any questions, concerns, or complaints regarding your data privacy, please contact us:

• Privacy Email: support@winmyr.best (with the subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 within the Win MYR platform in Bahasa Melayu
• Response time: Win MYR will acknowledge receipt of your request within 3 business days and provide a full response within 21 business days.

If you are not satisfied with Win MYR's response to your privacy complaint, you have the right to refer the matter to Malaysia's Personal Data Protection Department (PDPA) for further investigation.