Wi1win Privacy Policy – Protection of Your Personal Data

Welcome to the wi1win Privacy Policy. This document outlines the privacy practices of the wi1win platform regarding the collection, use, storage, and protection of personal data of members who use our online casino platform at wi1win.onl.

Wi1win values the privacy of every member. We understand that you trust us with sensitive information, and we take that trust seriously. This policy applies to all users accessing the wi1win platform via the website or mobile app, whether as a guest visitor or a registered member.

This Privacy Policy is drawn up in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. By registering or using the wi1win platform, you acknowledge that you have read and understood this policy.

Wi1win only collects personal data that is strictly necessary to provide a safe, efficient, and responsible service. Below is a summary of the data we collect by category:

We do not collect sensitive data such as medical information, religious beliefs, or political views. Data collected through the KYC process, such as copies of your identification documents, is stored securely and accessed only when strictly necessary for verification purposes.

Personal data collected by wi1win is used exclusively for legitimate purposes that have been disclosed to you. We do not use your data beyond the scope stated in this policy.

Data usage purposes include:

• Account management — Creating, verifying, and managing your member account securely.
• Transaction processing — Processing deposits, withdrawals, and bonus payments accurately and securely.
• KYC & AML compliance — Meeting Know Your Customer and Anti-Money Laundering requirements in accordance with regulatory obligations.
• Platform security — Detecting and preventing fraud, multi-account usage, and suspicious activity.
• Customer Support — Providing effective and relevant assistance when you contact our team.
• Service communications — Sending important notices regarding your account, transactions, and policy changes.
• Marketing (with consent) — Notifying you about promotions and new offers if you have agreed to receive them.
• Analytics & improvements — Understanding how the platform is used to help us improve your overall experience.
• Responsible gaming — Monitoring gameplay patterns to identify members who may need assistance.

Wi1win processes data on valid legal bases including contract fulfilment, legal obligations, legitimate business interests, and your consent where applicable. You may withdraw consent for marketing communications at any time.

Wi1win does not sell, rent, or trade your personal data to third parties for marketing purposes. However, in the course of operating the platform lawfully and securely, we may share data with the following parties under certain circumstances:

• Payment service providers — FPX, DuitNow, Touch 'n Go, GrabPay, and partner banks to securely process your financial transactions.
• Third-party game providers — Gaming platforms such as slot, live casino and sports providers operating under strict data protection agreements.
• Regulatory authorities — When required by Malaysian law, court order, or a legitimate investigation by an authorised enforcement body.
• Trusted technology providers — Companies providing technical infrastructure, analytics and cybersecurity services, subject to strict confidentiality agreements.
• Business transfers — In the event of a merger, acquisition or asset sale, your data may be transferred to the new entity, which will uphold the same privacy obligations.

Wi1win continually invests in the latest security infrastructure to ensure your data is always protected against unauthorised access, loss, or damage. Our security measures include:

• 256-bit SSL Encryption for all data communications between your browser and our servers.
• Hashed password storage using irreversible algorithms — wi1win staff cannot view your password.
• Two-factor authentication (2FA) available for an additional layer of security on your account.
• Real-time threat monitoring to detect and respond to any suspicious activity promptly.
• Role-based access control that ensures wi1win staff only access the data necessary for their specific role.
• Regular security audits by an independent party to identify and remediate any potential vulnerabilities.
• Secure data backup that are encrypted and stored in separate locations to ensure service continuity.

While we take all reasonable steps to protect your data, no security system is 100% immune to threats. In the event of a data breach that materially affects your privacy, we will notify you in accordance with PDPA requirements within the stipulated timeframe.

Wi1win uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies — Required for core platform functions such as session login, security, and navigation. These cookies cannot be disabled.
• Performance Cookies — Helping us understand how the platform is used through analytics data that does not directly identify individuals.
• Functional Cookies — Saving your preferences such as language, theme, and display settings for a more personalised experience.
• Marketing Cookies — Used to display relevant content and offers to you. You may opt out of these cookies.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some wi1win platform features. For more information about cookies, visit the official website of allaboutcookies.org as an independent reference.

As a wi1win member and Malaysian citizen or resident, you have certain rights under the Personal Data Protection Act 2010 (PDPA). wi1win fully respects and facilitates the exercise of these rights.

To exercise any of the rights above, contact our privacy team via the platform's live chat or by email at [email protected]. We will verify your identity before processing any request to ensure your data remains secure.

Wi1win retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations in Malaysia.

• Active account data — Retained for the duration your account is active and for a reasonable period following account closure.
• Financial transaction records — Retained for a minimum of 7 years in accordance with Malaysian accounting and tax legal requirements.
• KYC Documents — Retained for the period specified by applicable AML compliance requirements.
• Support communication logs — Retained for 3 years for reference and service improvement purposes.
• Technical data & security logs — Retained for 90 days for security investigation and fraud prevention purposes.

Once the retention period expires or upon a valid deletion request, your data will be securely erased using methods that ensure it cannot be recovered. Anonymised data may be retained for analytics purposes without being able to identify you personally.

Wi1win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform service improvements.

When we make material changes to this policy, we will:

• Updating the date "Last Updated" at the top of this document.
• A clear notice will be displayed on the wi1win platform when you log in after any amendment takes effect.
• Sending email notifications to all active members for significant amendments.

Minor amendments such as language clarifications, spelling corrections or formatting changes do not require specific notice. Your continued use of the wi1win platform after any amendment takes effect will be considered your acceptance of the latest version of this privacy policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding how wi1win handles your personal data, our privacy team is ready to assist. We are committed to providing clear and accurate responses within a reasonable timeframe.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia which is the regulatory body responsible under the PDPA 2010. For more information on responsible gaming and member protection, please visit the Responsible Gaming ours.