Winmy19 Privacy Policy – Our Full Commitment to Protecting Malaysian Players' Personal Data

Winmy19 is an online betting and casino platform operating for Malaysian players. We understand that the trust you place in us goes beyond fair gameplay and fast payouts — it also extends to how we handle your most personal information with the full responsibility it deserves.

This Privacy Policy is designed to clearly and transparently explain how winmy19 collects, processes, stores and protects your personal data. It also outlines your rights as a data subject and how you can exercise those rights when needed.

All of winmy19's data processing practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA). As a platform operating exclusively for the Malaysian market, we recognise our legal obligations under the PDPA and are committed to upholding them — not merely as a matter of compliance, but as a reflection of our core values around respecting individual privacy.

Winmy19 collects your personal data through various means as you use our platform. Below is a detailed explanation of the types of data collected and their purposes:

Winmy19 does not collect sensitive data such as medical information, religious beliefs, or political views unless voluntarily shared by you in a relevant context, such as a self-exclusion request made on health grounds.

Every piece of data winmy19 collects has a clear and legitimate purpose. We do not process your personal data for irrelevant purposes or beyond the scope stated in this policy. The following are the primary purposes for which winmy19 members' personal data is used:

• Account Management: Creating and managing your member account, including registration processing, login, identity verification, and profile management.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX, as well as withdrawals to your Malaysian bank account or e-wallet.
• Eligibility Verification: Verifying that you meet the minimum age requirement of 18 years and all other eligibility criteria to use the winmy19 platform.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, duplicate accounts, money laundering, and bonus abuse.
• Service Communications: Sending important notifications related to your account, transactions, policy changes, and security updates.
• Platform Improvement: Analysing aggregated usage patterns to improve the user experience, platform performance and the range of games offered.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support and to fulfil the platform's compliance obligations.
• Legal Compliance: Meeting the reporting and record-keeping obligations required under applicable Malaysian law.

Winmy19 does not sell, rent or disclose your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, winmy19 may need to share certain data with a limited set of third-party categories as follows:

• Payment Processing Providers: To facilitate your deposit and withdrawal transactions via supported Malaysian payment methods. These providers are bound by strict confidentiality agreements and only receive the data necessary to complete the relevant transaction.
• Game Providers: Some minimum technical data required to ensure smooth gameplay sessions may be shared with game providers. No personally identifiable data is shared for this purpose.
• Security & Fraud Prevention Services: winmy19 uses specialist third-party services to detect and prevent fraudulent activity. The minimum data required for security analysis may be processed by these services.
• Malaysian Authorities: winmy19 will disclose personal data when required by Malaysian law, a valid court order, or a request from a law enforcement agency with lawful jurisdiction.
• Business Succession: In the event of a merger, acquisition, or sale of winmy19's assets, member data may be transferred to the successor entity. Members will be notified in advance of any such change.

All third parties that receive data from winmy19 are bound by confidentiality obligations that meet or exceed the standards set out in this Privacy Policy. winmy19 conducts periodic reviews of all third-party partners to ensure ongoing compliance.

Winmy19 invests seriously in security infrastructure to protect members' personal and financial data from unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• 256-Bit SSL Encryption: All communications between your device and winmy19's servers are encrypted using 256-bit TLS/SSL protocol — the same standard used by Malaysia's online banking systems.
• Multi-Layered Access Controls: Access to members' personal data within the winmy19 organisation is strictly limited on a need-to-know basis. Only staff who require access to perform their duties are permitted.
• 24/7 Monitoring: winmy19's security systems are monitored around the clock to detect and respond promptly to any security threats or suspicious activity.
• Secure Password Storage: Member account passwords are never stored in plain text. All passwords are processed using strong cryptographic hashing functions before being saved.
• Fund Segregation: Member funds are held in accounts separate from winmy19's operational funds, ensuring your financial security is not affected by business operations.
• Regular Security Audits: winmy19 conducts regular security audits to identify and address any vulnerabilities in its data protection systems.

Winmy19 retains your personal data for as long as it is needed for the purposes stated in this policy, or for as long as required by Malaysian law. The general data retention principles applied by winmy19 are as follows:

• Active account data is retained for the duration your account remains active and for 5 years following account closure, for legal compliance purposes.
• Financial transaction records are retained for a minimum of 7 years in compliance with Malaysian legal requirements on financial reporting and anti-money laundering.
• Customer support communication logs are retained for 2 years for reference and complaint resolution purposes.
• Technical log data (IP addresses, access logs) is retained for 90 days for security and investigation purposes.
• Marketing data such as email preferences is retained until you withdraw your consent.

When data is no longer needed and there is no legal obligation to retain it, winmy19 will securely delete or anonymise it using appropriate methods. You may also request deletion of your data in certain circumstances – please refer to Section 8 for your rights.

Winmy19 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain secure login sessions, and understand how our platform is used. The types of cookies used are as follows:

You can manage your cookie settings through your web browser. Please note that disabling optional or analytics cookies will not affect the core functionality of the winmy19 platform, but disabling essential cookies may prevent certain features from working properly.

As a winmy19 member whose personal data we process, you have rights protected under Malaysia's Personal Data Protection Act 2010. winmy19 is committed to respecting and facilitating the exercise of these rights:

Winmy19 is a strictly 18+ platform. It is not designed, intended, or permitted for use by anyone under the age of 18.

Winmy19 does not knowingly collect any personal data from individuals under the age of 18. Should we become aware that we have inadvertently collected data from a person under 18, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and become aware that your child who is under the legal age has registered or attempted to use the winmy19 platform, please contact us immediately at support@winmy19.best so we can take appropriate action.

Winmy19 reserves the right to update or amend this Privacy Policy at any time to reflect changes in platform practices, evolving Malaysian legal requirements, or technological developments that affect how we process personal data.

When significant amendments are made to this Privacy Policy, winmy19 will take reasonable steps to notify you, including through in-platform notices or an email to the address registered to your account. The "Updated" date at the top of this page will always reflect the most recent date this Privacy Policy was revised.

Your continued use of the winmy19 platform after any amendments to this Privacy Policy are published will be considered your acceptance of the updated policy. We recommend checking this page periodically to stay informed about how we protect your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how winmy19 handles your personal data, we encourage you to reach out to us directly. Our team is ready to clarify, assist, and respond to any matter relating to your privacy.

• Privacy Email: support@winmy19.best — please state "Privacy Enquiry" in your email subject line
• Live Chat: Available 24/7 within the winmy19 platform for immediate enquiries
• Response Time: We are committed to responding to all privacy-related enquiries within 5 working days, and to data rights requests within 21 working days

We believe every privacy-related enquiry deserves a thoughtful and thorough response. This policy is more than a legal compliance document — it reflects winmy19's commitment to honouring the trust you place in us every time you use this platform.