Winmy21 Privacy Policy – Member Personal Data Protection

Information We Collect

Winmy21 only collects information that is strictly necessary to provide a quality, secure, and compliant service. The following are the categories of data we collect:

Account Registration Information:

• Full name as per official identification document
• Date of birth (for age verification)
• Active email address
• Mobile phone number
• Password (stored in encrypted form — we cannot view your password)
• Your preferred username

Identity Verification Information (KYC):

• Copy of Malaysian Identity Card (MyKad) or passport
• Proof of address (recent bank statement or utility bill)
• Information on payment methods used

Financial & Transaction Information:

• Deposit and withdrawal records
• Payment methods used (DuitNow, FPX, e-wallet)
• In-platform transaction history

Platform Usage Data:

• IP address and general location
• Device type, operating system, and web browser
• Gaming history and in-platform activity
• Login session time and duration

Purpose of Data Collection

Every piece of data we collect has a clear and legitimate purpose. winmy21 uses your information for the following purposes only:

• Identity and age verification — ensuring only eligible individuals can use our platform in accordance with legal requirements.
• Account management — processing your registration, login, account settings, and activity history.
• Financial transaction processing — verifying deposits, processing withdrawals, and maintaining accurate financial records.
• Platform Security — detect and prevent fraud, money laundering, and any unlawful activity that threatens the security of the platform and other members.
• Legal compliance — meeting the reporting and record-keeping obligations required by the relevant regulatory bodies.
• Service improvement — analysing usage patterns in aggregate (not individually) to improve user experience, platform speed, and game selection.
• Service Communications — sending important notifications related to your account, security, promotions you have subscribed to, and platform updates.
• Customer support — resolving enquiries, complaints, and assistance requests more quickly and effectively.

Information Sharing

Winmy21 does not sell, rent, or trade members' personal data to any third party for commercial purposes. However, in certain limited situations, we may need to share some of your information with the following parties:

• Technology service providers — such as cloud infrastructure providers, authentication systems, and customer support platforms we use to operate the platform. They are bound by strict confidentiality agreements.
• Licensed payment processors — to enable your deposit and withdrawal transactions to be processed securely. They receive only the minimum information required for the transaction concerned.
• Regulatory bodies and law enforcement authorities — when required by law, court order, or direction from a relevant authority. winmy21 will comply with all valid legal obligations.
• Identity verification partners — third-party services that assist with KYC processing and document verification securely.

Data Security

Winmy21 continuously invests in the latest security infrastructure to keep your personal data and financial information safe at all times. The security measures we implement include:

• 256-bit SSL Encryption on all communications between your browser and our servers — data transmitted cannot be intercepted or read by outside parties.
• Static data encryption (at-rest encryption) for all sensitive information stored in our database, including KYC documents and payment details.
• Two-factor authentication (2FA) available on all member accounts as an additional security layer, which we strongly recommend enabling.
• 24/7 security monitoring by our cybersecurity team, who continuously monitor for suspicious activity in real time.
• Regular security audits by independent third parties to identify and address any system vulnerabilities.
• Strict internal access controls — only authorised staff who require access to perform their duties may view member data.

Cookies & Tracking Technologies

Winmy21 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies — required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled.
• Performance Cookies — collecting information about how you use our platform (pages visited, time spent) to help us improve the overall user experience.
• Functional Cookies — saving your preferences such as language, display theme, and personal settings so you do not need to reconfigure them each time you log in.
• Analytics Cookies — helping us understand usage patterns in aggregate through privacy-compliant analytics tools.

You can manage or block cookies through your web browser settings at any time. Please note that blocking essential cookies may affect certain functions of the winmy21 platform.

Your Rights as a Member

As a winmy21 member, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of all these rights:

Data Storage & Deletion

Winmy21 retains your personal data for as long as your account is active or as long as necessary to provide services to you. For closed accounts, data is retained for a specified period in accordance with legal requirements:

• Financial and transaction records — retained for a minimum of 7 years in accordance with financial reporting and relevant legal requirements.
• KYC Documents — retained for a minimum of 5 years after account closure for anti-money laundering (AML) compliance purposes.
• Customer support communication logs — retained for 3 years for reference and dispute resolution when necessary.
• Usage and analytics data — deleted or anonymised within 24 months after account inactivity.

Once the required retention period has expired, your data will be securely deleted from all our systems using industry-standard deletion methods.

Third-Party Links

The winmy21 platform may contain links to third-party websites or services for your convenience. Please note that this Privacy Policy applies to the winmy21 platform only.

Winmy21 has no control over the content, privacy policies, or security practices of those third-party websites. We are not responsible for any information you provide to or that is collected by those third-party websites. We encourage you to read the privacy policy of every website you visit.

Changes to the Privacy Policy

Winmy21 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements.

When we make material changes, we will notify you via:

• In-platform notifications while you are logged in
• Email to the address registered with your account
• Update the "Updated" date at the top of this document

Continued use of the winmy21 platform after changes are published is considered your acceptance of the updated policy. If you do not agree with the changes made, please discontinue use of the platform and contact us to close your account.

Contact Us

If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy, please contact the winmy21 Privacy Officer through the following channels:

• Live Chat: Available 24/7 directly within the winmy21 platform — the fastest way to get an immediate response
• Email: [email protected] — response within 24 business hours
• Telegram: Reach us via the official winmy21 Telegram account

When contacting us regarding privacy, please provide your account username and clearly describe your request so we can assist you faster and more accurately.