Privacy Policy winmy20 – Malaysian Member Data Protection

1 Personal Information We Collect

Winmy20 collects members' personal information through several means when you use our platform. This information is necessary to enable us to provide you with a secure, compliant, and high-quality service.

Information you provide directly:

• Full name as it appears on your identification document.
• Date of birth for age verification purposes (18 years and above).
• Active email address and mobile phone number.
• National identification number (MyKad) or passport number for the KYC process.
• Bank account or eWallet details for processing deposits and withdrawals in MYR.
• Your winmy20 account password (stored in encrypted hash form, unreadable by our staff).

Information collected automatically:

• IP address and device information you use to access winmy20.
• Web browser type and version, and operating system.
• Session log data including pages visited, access times, and in-platform actions.
• General geolocation data based on IP address for compliance purposes.
• Gaming activity information including wagering, wins, and bonus usage.

2 How We Use Your Information

Personal information collected by winmy20 is used exclusively for the following purposes. We do not use your data for any other purpose without obtaining your consent first:

You may withdraw consent to receive marketing communications at any time by contacting the winmy20 support team or through your account settings. Withdrawing consent will not affect the core services you receive.

3 Disclosure of Information to Third Parties

Winmy20 does not sell, rent, or disclose members' personal information to third parties for their own marketing purposes. However, in certain circumstances, winmy20 may need to share your information with the following parties:

• Payment processors and financial institutions — to securely process your deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost.
• Technical service providers — such as cloud and infrastructure service providers that assist in operating the winmy20 platform, subject to strict confidentiality agreements.
• Regulatory bodies and law enforcement authorities — when required by Malaysian law or a valid court order.
• Game software providers — anonymised game statistics that cannot identify individuals may be shared with game providers for audit and fairness testing purposes.

All third parties that receive winmy20 member data are bound by strict data protection agreements and are only permitted to use that information for the stated purpose.

4 Data Security Measures

Winmy20 invests seriously in cybersecurity infrastructure to ensure your personal data is always protected. Here are the layers of protection we have in place:

• 256-bit SSL/TLS encryption for all data transmitted between you and winmy20 servers.
• At-rest data encryption for all personal information stored in our database.
• Firewall and intrusion detection systems (IDS) monitored 24 hours a day.
• Two-factor authentication (2FA) available for all winmy20 member accounts to add an extra layer of security.
• Role-based access control — only authorised personnel may access members' personal data, and every access is logged.
• Regular penetration testing by independent security experts to identify and close any system vulnerabilities.

While winmy20 takes all reasonable precautions, no system on the internet can guarantee 100% absolute security. We encourage members to also take precautions by using a strong, unique password for their winmy20 account.

5 Cookies & Tracking Technologies

Winmy20 uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and analyze how our platform is used. Here are the types of cookies we use:

• Strictly Necessary Cookies — required for core platform functions such as login, session authentication, and security. These cookies cannot be disabled.
• Performance Cookies — collecting anonymised data on how members use the platform to help us improve our services.
• Functional Cookies — remembering your preferences such as language and display settings to deliver a more personalised experience.
• Analytical Cookies — helping us understand platform traffic and usage patterns in aggregated, anonymised form.

You may manage or disable cookies (except strictly necessary cookies) through your web browser settings. Please note that disabling certain cookies may affect the functionality and your experience on the winmy20 platform.

6 Your Rights as a winmy20 Member

As a winmy20 member and an individual protected under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the winmy20 customer support team via live chat within the platform. We will process your request within 14 business days.

7 Data Retention Period

Winmy20 retains members' personal information for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required under applicable Malaysian law.

• Active account data — retained for the duration that your winmy20 account remains active.
• Financial transaction records — retained for a minimum of seven (7) years in accordance with Malaysian financial regulatory requirements.
• KYC and identity verification records — retained for a minimum of five (5) years after the business relationship ends.
• Customer support communication logs — retained for two (2) years for reference and service improvement purposes.
• Marketing data — deleted immediately upon withdrawal of your consent.

Once the retention period expires, your personal data will be securely deleted or converted into anonymised data that cannot identify any individual.

8 Children's Privacy

The winmy20 platform is strictly for adults aged 18 and above. winmy20 does not knowingly collect any personal information from individuals under the age of 18.

Should winmy20 discover that personal information of a minor has been collected without our knowledge, we will take immediate action to delete that information and close the account in question. Parents or guardians who become aware that their child has registered on winmy20 are encouraged to contact us immediately.

9 Amendments to the Privacy Policy

Winmy20 reserves the right to amend this Privacy Policy from time to time to reflect changes in data practices, legal requirements, or platform improvements. Any amendments will be published on this page with a clear effective date.

For material amendments — meaning changes that significantly affect how we use your personal data — winmy20 will provide at least 14 days' advance notice via your registered email or an in-platform notification before the changes take effect.

Continued use of the winmy20 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account before the effective date.

10 Contact Us Regarding Privacy Matters

If you have any questions, concerns, or complaints regarding winmy20's Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the winmy20 platform — the fastest way to get a response.
• Email: [email protected] — we aim to respond within one (1) business day.

The winmy20 customer support team is Malaysian-speaking and understands the needs and concerns of local users. We are committed to handling every privacy-related enquiry with seriousness and full professionalism.