Winn22 Privacy Policy – User Personal Data Protection

1 Introduction and winn22's Privacy Commitment

Winn22 takes the responsibility of protecting user personal data extremely seriously. We understand that your trust is our most valuable asset, and safeguarding your privacy is part of our commitment to every member who uses this platform.

This Privacy Policy ("Policy") clearly describes how winn22 collects, uses, discloses, transfers, and stores your information when you use our website at winn22.pro, the winn22 mobile app, and all related services ("Platform").

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. Every data collection and processing action we carry out has a valid legal basis, whether grounded in your consent, contractual necessity, or applicable legal obligations.

When you register an account, make a deposit, play games, or simply browse our platform, you may share certain information with us. We want you to fully understand what we collect, why we need it, and how we protect it — not just because the law requires it, but because we believe you have the right to know.

2 Types of Personal Data We Collect

Depending on how you interact with the winn22 platform, we collect various categories of personal data. Below is a comprehensive overview of the types of information involved:

We only collect data that is genuinely necessary for the stated purposes. We do not collect sensitive data such as medical information, religious beliefs, or political views unless required by law in specific circumstances.

3 How We Collect Your Information

Winn22 collects your personal data through several key channels:

• Account Registration: When you open a new account, you directly provide basic information such as your name, email, phone number, and date of birth.
• KYC (Know Your Customer) Process: To meet legal compliance requirements, we collect copies of your identity documents and proof of address during the verification process.
• Financial Transactions: Every time you make a deposit or withdrawal, financial transaction details are automatically collected to process your payment securely.
• Platform Usage: Usage data such as games played, time spent, and wagering patterns are collected automatically through our internal analytics system.
• Cookies and Tracking Technologies: Our website and app use cookies and similar technologies to enhance the user experience and understand how the platform is used.
• Support Communications: When you contact our support team via live chat or email, those conversations are recorded for quality assurance and future reference.
• Trusted Third Parties: In certain cases, we may receive your information from third-party identity verification providers or our payment processing partners.

4 How We Use Your Personal Data

The personal data we collect is used solely for legitimate and transparent purposes. Below are the primary purposes for which your information is used:

• Account Management: Creating, maintaining, and managing your user account, including secure login and identity verification.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions you carry out on the winn22 platform quickly and securely.
• Legal Compliance (AML/KYC): Fulfilling our obligations under anti-money laundering laws and other regulatory requirements applicable to online wagering platforms.
• Service Improvement: Analysing usage patterns to improve the user experience, enhance platform features, and ensure optimum technical performance.
• Customer Support: Helping you resolve any issues, queries, or complaints more effectively using previous interaction records.
• Platform Security: Detecting and preventing fraud, unauthorised access, account abuse, and other illegal activity.
• Marketing Communications: Sending information about promotions, special offers, and platform updates — only to users who have consented to receive such communications.
• Responsible Gaming: Monitoring gameplay patterns to identify users who may need responsible gaming support.

5 Data Sharing and Disclosure to Third Parties

Winn22 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, in certain situations, we may need to share your data with the following parties:

• Payment Service Providers: Our integrated payment processing partners and e-wallet providers require access to transaction information to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC companies we engage to verify user identities for legal compliance purposes.
• Technology Partners: Gaming software providers, analytics platforms, and technical infrastructure providers that help us operate the winn22 platform effectively.
• Regulatory Authorities: Regulatory bodies, law enforcement agencies, and courts when we are legally required to disclose certain information.
• Professional Advisors: Lawyers, accountants, auditors, and insurance consultants bound by their professional confidentiality obligations.

All third parties receiving your data are bound by strict data processing agreements and are required to uphold data protection standards equal to or higher than our own.

6 Data Storage and Security Measures

Winn22 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

Technical Security Measures We Use:

• Data encryption using 256-bit SSL/TLS protocols for all data in transit.
• Encryption of sensitive data stored in databases using the AES-256 encryption algorithm.
• Two-factor authentication (2FA) for all access to internal systems containing user data.
• Continuous 24/7 security monitoring using advanced intrusion detection systems (IDS).
• Regular security audits including penetration testing conducted by independent security experts.
• Strict role-based access control (RBAC) — only staff who require access to specific data are permitted.

Data Retention Period:

• Active account data is retained for as long as your account is active or as needed to provide our services.
• Following account closure, transaction and KYC data is retained for a minimum of five (5) years for AML compliance and tax law purposes.
• Customer support communication logs are retained for two (2) years.
• Data that is no longer required will be securely deleted or anonymised in accordance with our data disposal procedures.

7 Cookies, Tracking Technologies, and Your Choices

The winn22 platform uses cookies and similar tracking technologies to enhance the user experience, understand usage patterns, and ensure the security of your account. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as Login session verification and security. These cookies cannot be disabled.
• Performance & Analytics Cookies: Helping us understand how users interact with the platform, which pages are visited most frequently, and where users encounter difficulties.
• Preference Cookies: Saving your personal settings such as preferred language, display theme, and game preferences so you do not need to reconfigure them every time.
• Security Cookies: Used to identify suspicious activity, prevent fraud, and ensure the integrity of your session.

You can manage your cookie settings through your web browser at any time. Please note, however, that disabling certain cookies may affect the functionality of some winn22 platform features.

8 Your Rights as a Data Subject

As a winn22 user and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our privacy team by email at [email protected]. We will process your request within thirty (30) business days.

9 Children's Data Protection

The winn22 platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children or minors who have not reached the legal age for wagering.

We use age verification mechanisms during the registration process to ensure only eligible individuals can access our platform. If we discover that we have collected data from someone under the age of 18, we will take immediate steps to delete that data and close the relevant account.

If you are a parent or guardian and believe that a child under your care has registered an account on the winn22 platform, please contact us immediately so we can take appropriate action.

10 Amendments to This Privacy Policy

Winn22 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any amendments will be published on this page along with a new "Last Updated" date.

For significant amendments — such as changes to how we use your data or new types of data we collect — we will notify you via your registered email or an in-account notification at least fourteen (14) days before the amendment takes effect.

Continued use of the winn22 platform after an amendment's effective date constitutes your acceptance of the updated Privacy Policy. If you do not agree with the amendments, you have the right to close your account before the effective date.

11 Contact Us for Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the winn22 privacy team is here to help:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the winn22 platform
• Response Time: Within 30 business days for personal data-related requests

For information on the legal terms and regulations governing the use of the platform, please refer to the Terms and Conditions us. For responsible gaming guidance, visit the Responsible Gaming us.