Official w1nwin Documents

Privacy Policy w1nwin — Personal Data Protection for Malaysian Members

Your privacy is our absolute priority. This document clearly and transparently explains how w1nwin collects, uses, stores and protects the personal data of all registered members in Malaysia — so you can play with peace of mind, free from concerns about the security of your information.

Last updated: 1 January 2026

W1nwin's Six Privacy Commitments to You

Before reading the full policy, here is a summary of the six core principles that guide how w1nwin handles the personal data of every Malaysian member.

256-bit SSL Encryption at All Times

All data transmitted between your browser or phone and w1nwin's servers is encrypted using 256-bit SSL technology — the same standard used by Malaysia's major banks. Whether you are making a deposit via Touch 'n Go eWallet, DuitNow, or FPX, your information cannot be intercepted by any third party.

Your Data Is Never Sold

W1nwin has never sold, rented, or traded members' personal data to any third party for marketing or commercial purposes — and we never will. Your data belongs to you; we use it only for the purposes explicitly stated in this policy, nothing more.

Restricted & Controlled Data Access

Only w1nwin staff with a legitimate operational need may access member data, and every access is automatically logged. Our layered access control system ensures that no staff member can access sensitive data without the required multi-level authorisation.

Personal Data Protection Act Compliance

W1nwin's data handling practices comply with internationally recognised personal data protection principles. We collect only what is strictly necessary for platform operations, retain it no longer than required, and handle it with full integrity at every stage.

You're in Full Control

You have the right to access, correct, request a copy of, or request deletion of your personal data held by w1nwin at any time. Exercising these rights is straightforward and can be initiated by emailing our privacy team — no complicated procedures required.

Marketing Communications Opt-Out Options

You can opt out of all marketing communications from w1nwin at any time — including SMS, promotional emails, and push notifications — without affecting your account functionality or platform services. Opt-out requests take effect within 48 hours of receipt.

Applicability of This Policy

This Privacy Policy applies to all registered members and visitors of the w1nwin platform at w1nwin.click. By registering an account or using our services, you agree to the data handling practices described in this document. If you have any questions, please contact us at support@w1nwin.click.

At w1nwin, we understand that your trust is the foundation of our relationship. Whether you are registering an account, making a deposit via Touch 'n Go eWallet or DuitNow, playing your favourite slots, or simply browsing our platform — you are entrusting us with your personal information. We do not take that responsibility lightly.

This Privacy Policy is written in plain, accessible language — not legal jargon — so every Malaysian member can genuinely understand how their data is handled by w1nwin. We believe transparency is the highest form of respect we can show our users.

1
Information We Collect
Types of personal data collected when you use w1nwin

W1nwin collects several categories of information from members and visitors. We only collect information that is genuinely necessary for legitimate platform operations — the principle of data minimisation is central to our approach.

Data Category Sample Information When Collected
Registration Information Malaysian phone number, username, password (encrypted), date of birth During account registration
Identity Data (KYC) Full name, Malaysian identification card number, verification selfie When required for large withdrawals
Financial Data E-wallet account numbers (TNG, DuitNow, GrabPay), deposit & withdrawal transaction history During and after transactions
Gaming Activity Data Game history, VIP points, bonus records, wins and losses Continuously during use
Technical Data IP address, device type, web browser, operating system, login session Automatically upon platform access
Communications Data Live chat transcripts, support emails, feedback, and complaints When you contact support
Information We Do Not Collect

W1nwin does not store credit or debit card numbers directly in our systems — all card transactions are processed entirely by third-party payment gateways that comply with PCI-DSS standards. We also do not collect biometric data (fingerprints, facial recognition) for any purpose other than KYC verification when specifically requested.

2
How We Use Your Data
Purpose and legal basis for processing member personal data

The data we collect is used for specific, legitimate purposes. Every use of your data has a clear basis — whether contractual necessity, our legitimate interests, legal obligations, or your consent.

  • Account management and identity verification: We use your registration information to create and manage your w1nwin account, verify your identity at login, and protect your account from unauthorised access.
  • Financial transaction processing: Your financial data is used solely to process your deposits and withdrawals through your chosen Malaysian payment method — Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, or CIMB Clicks — quickly and securely.
  • Gaming service delivery: Your gaming activity records are required to calculate VIP points, determine bonus eligibility, maintain your betting history, and ensure a consistent experience across sessions and devices.
  • Fraud prevention and security: Technical data and transaction patterns are automatically analysed by our systems to identify and prevent fraudulent activity, money laundering, duplicate account usage and other security threats that could affect other members.
  • Customer support: Communication records with the w1nwin support team are retained so our staff can better understand the context of an issue when you contact us again, ensuring a more efficient and personalised support experience.
  • Regulatory compliance: In certain circumstances, w1nwin may be legally required to retain transaction records or disclose information to the relevant authorities. This obligation constitutes a separate legal basis independent of your consent.
  • Platform improvements: Aggregated, anonymised usage data is used to understand how members interact with the platform, identify technical issues and prioritise the development of new features that deliver the most value to Malaysian users.
3
Data Sharing With Third Parties
When and with whom your data may be shared

This is the section most members are concerned about — and we understand why. Here is a clear, honest overview of the circumstances under which your data may be shared with third parties. w1nwin does not sell member personal data to anyone. Full stop.

  • Payment providers: When you make a deposit or withdrawal, the necessary transaction details are shared with your chosen e-wallet or bank provider (Touch 'n Go, DuitNow, GrabPay, and others) to process the payment. These providers have their own privacy policies and comply with Malaysian financial regulations.
  • Game providers: To stream games directly to your browser, a limited amount of session data (not full personal data) is shared with game providers such as Pragmatic Play, PG Soft and Evolution Gaming. This is a technical requirement for game functionality and is kept to the absolute minimum.
  • Technology service providers: w1nwin works with trusted third-party providers for hosting infrastructure, cybersecurity, platform analytics, and customer support. All such providers are bound by strict non-disclosure agreements (NDAs) and are not permitted to use your data for their own purposes.
  • Legal authorities: If w1nwin receives a valid, formally issued request from a competent authority — such as a law enforcement agency or regulatory body — we may be legally required to disclose certain information. In such cases, we will provide only the minimum information necessary and, where permitted by law, will notify you of the request.
  • Business transfers: In the event of a merger, acquisition or sale of w1nwin's assets, member data may be transferred as part of the business transaction. In such circumstances, members will be notified in advance and their privacy will continue to be protected by the new entity.
What We Do Not Do

W1nwin does not share member personal data with advertisers, data brokers, third-party marketing companies, or any entity without a legitimate operational need. We do not sell member email lists or phone numbers to any external party for their own promotional purposes.

4
Data Security — How We Protect Your Information
Technical and organisational measures to protect member data

Data security is not an afterthought at w1nwin — it is the foundation of our entire platform infrastructure. We continually invest in the latest security technologies and practices to ensure your data is protected at every level.

  • Data encryption in transit: All communication between your device and w1nwin's servers is protected by TLS 1.3 protocol and 256-bit SSL encryption. This means that even if someone were to intercept your network traffic, they would be unable to read any of the data transmitted.
  • Data encryption at rest: Sensitive data such as passwords and payment details are stored in encrypted form in our database. Your password is stored as a cryptographic hash that cannot be decrypted — not even w1nwin staff can view your original password.
  • Layered access controls: Access to databases and systems containing member personal data is strictly restricted to staff with a legitimate operational need. All access is automatically logged and periodically reviewed by our internal security team.
  • Continuous security monitoring: w1nwin's automated threat monitoring system operates 24 hours a day to detect unauthorised access attempts, cyberattacks, and suspicious anomalies, enabling a rapid response before any threat can escalate.
  • Regular security audits: w1nwin undergoes regular independent penetration testing and security audits to identify and remediate vulnerabilities before they can be exploited.
  • Incident response plan: In the event of a data breach affecting member data, w1nwin has a clear incident response procedure in place — including notifying affected members within a reasonable timeframe and taking appropriate remediation steps.
5
Cookies & Tracking Technologies
How w1nwin uses cookies and how you can manage them

W1nwin uses cookies and similar tracking technologies to keep the platform running smoothly, deliver a more personalised experience, and understand how our platform is being used. Below is a clear explanation of the types of cookies we use and their purposes.

  • Essential cookies: These cookies are required for the platform's core functions — including maintaining your login session, remembering your language preference and account settings, and ensuring deposits and withdrawals are processed smoothly. Without them, the platform will not work. This cookie category cannot be disabled.
  • Performance cookies: These cookies collect anonymized data about how members interact with the platform — which pages are visited most often, how long is spent in each section, and where technical errors occur. This information helps us identify issues and improve platform performance for all users.
  • Functional cookies: These cookies allow the platform to remember your preferences — such as the last game you played, your display settings, and other personal preferences — so your gaming experience feels comfortable and personalized every time you log in.
  • Analytics cookies: w1nwin uses analytics tools to understand aggregate platform usage patterns. This data is not linked to any individual's personal identity and is used solely for platform development and improvement.

You can manage your cookie settings through your web browser. Disabling non-essential cookies may affect some platform features but will not prevent you from using w1nwin's core services.

6
Your Rights as a Data Subject
Your rights over your personal data at w1nwin

As a data subject, you hold certain rights regarding your personal data held by w1nwin. We respect these rights and make them straightforward to exercise. To submit a request relating to any of the rights below, please contact us at support@w1nwin.click with the subject line "Privacy Rights Request".

👁️
Right of Access

You have the right to request and receive a copy of all personal data that w1nwin holds about you. We will provide a full report within 14 business days of the request being verified.

✏️
Right to Rectification

If any personal data held by w1nwin about you is inaccurate or out of date, you have the right to request a correction. Most profile information can be updated directly in your account settings.

🗑️
Right to Erasure

You may request deletion of your personal data when it is no longer needed for the purpose for which it was originally collected, subject to any legal retention obligations that may apply to certain financial records.

⏸️
Right to Restrict Processing

In certain circumstances, you may request that w1nwin restrict how your data is processed — for example, while a dispute about data accuracy is ongoing or during an appeal against a decision involving your data.

📦
Data Portability Rights

You have the right to receive the personal data you have provided to w1nwin in a machine-readable format and to transfer it to another service provider of your choice.

🚫
Right to Object

You have the right to object to the processing of your personal data for certain purposes — particularly for direct marketing. Objections to marketing will be actioned immediately, with no justification required.

Response Timeframes for Privacy Rights Requests

W1nwin will acknowledge your request within 3 business days and complete it within 14 business days. If your request is complex or involves a large volume of data, we will notify you within the initial 14-day window and provide a more precise completion timeline.

7
Data Retention & Deletion
How long w1nwin retains your personal data

W1nwin does not retain personal data longer than necessary. Retention periods vary by data category and the relevant operational or legal requirements.

  • Active account data: For as long as your account remains active and has not been permanently closed, your profile data, gaming history, and VIP points records are retained to ensure continuity of service. This includes information needed to properly run the VIP Rewards Programme.
  • Financial transaction records: Records of all deposit and withdrawal transactions are retained for a minimum of 7 years from the transaction date, in line with internationally recognised financial record-keeping requirements. This is a legal obligation that applies even after an account has been closed.
  • Closed account data: When an account is closed at a member's request, most profile data will be deleted or anonymised within 90 days. Financial records will be retained in accordance with applicable legal retention requirements.
  • Support communication log: Live chat conversation records and support emails are retained for 2 years to enable us to provide ongoing support and resolve any disputes that may arise during that period.
  • Technical data and system logs: Access logs, IP addresses and technical session data are retained for a maximum of 12 months for security and troubleshooting purposes, after which they are automatically deleted or anonymised.

Once the retention period expires or the data is no longer needed, w1nwin will delete or anonymise it using secure deletion procedures that ensure the data cannot be recovered.

8
Marketing Communications & Notifications
How w1nwin communicates with members and your opt-out options

W1nwin uses the contact information you provide to send various types of communications. We distinguish between essential service communications and optional marketing communications, so you have clear control over the messages you receive.

  • Service communications (cannot be disabled): Transaction verification SMS or emails, account security notifications (suspicious login attempts, password changes), withdrawal processed notifications, and important operational messages relating to your account. These communications are part of our core service and cannot be turned off.
  • Promotional communications (can be disabled): Information about the latest promotions such as daily 30% reload bonuses, weekly VIP cashback, new game offers, badminton and e-sports betting, as well as special promotions for festivals and seasonal events. You may opt out of these communications at any time.
  • How to opt out: To stop receiving marketing communications, you may: (a) click the "unsubscribe" link in any promotional email, (b) update your notification settings within your account, or (c) email support@w1nwin.click with the subject line "Marketing Opt-Out". Opt-out requests will be processed within 48 hours.
  • Important note: Opting out of marketing communications will not affect your eligibility to receive bonuses — any bonuses you qualify for will still be credited to your account even if you are not receiving promotional notifications.
9
Privacy Policy Amendments & Contact Us
How we update this policy and how to reach us with privacy enquiries

The digital landscape is constantly evolving, and our privacy policy may need to be updated from time to time to reflect changes in our operational practices, legal requirements, or platform needs. Below are our commitments regarding such policy amendments.

  • Material amendment notice: For any significant amendments that directly affect your privacy rights, w1nwin will notify all members via email or in-platform notification at least 14 days before the changes take effect. This gives you ample time to review the updates and make an informed decision.
  • Minor amendments: For minor corrections, language clarifications, or updates that do not materially affect your rights, amendments may take effect immediately upon updating the date at the top of this document.
  • Periodic review: We recommend reviewing this page periodically — especially after receiving an amendment notice — to stay informed about how w1nwin handles your data.

For any enquiries, concerns, or requests relating to your data privacy at w1nwin, you can reach us via:

  • Email: support@w1nwin.click — use the subject line "Privacy Enquiry"
  • Live chat: Available 24/7 through the w1nwin platform
  • Response time: Privacy enquiries will be answered within 3 business days

Our team is ready to assist you in Bahasa Malaysia, Mandarin and English.

Related Documents & Policies

Your Data Is Safe. Your Game Is Fun.

W1nwin protects your privacy with bank-grade encryption so you can focus on what matters — enjoying over 500 of Malaysia's best games. Sign up for free and claim a welcome bonus of up to RM1,888.

SSL 256-bit Data is never sold to third parties Withdrawals in 5–15 minutes

⚠️ 18+ only. Gambling can be addictive. Please play responsibly.

Bahasa Melayu