winningw88 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how winningw88 ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of users ("you", "your", "Player") who access or interact with the winningw88 website at winningw88.cam and all associated digital services and features.

winningw88 is committed to protecting your privacy and handling your personal data responsibly, transparently, and in compliance with applicable data protection laws. This Policy should be read together with our Terms & Conditions, which govern the overall use of the Platform.

By registering an account, accessing the Platform, or submitting any personal data to winningw88, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the Platform or submit any personal information to us.

Definitions

The following terms are used throughout this Policy with the meanings defined below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, including but not limited to name, contact details, identification numbers, financial account information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means winningw88, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party engaged by winningw88 to process Personal Data on its behalf, including payment processors, KYC verification providers, and IT infrastructure suppliers.
• "KYC" means Know Your Customer — the regulatory identity verification process requiring players to submit identity and address documents before withdrawal processing is approved.
• "Cookies" means small text files placed on your device by the Platform to store session state, preferences, analytics data, and security tokens.
• "Platform" refers to the winningw88 website, mobile-optimised web interface, and all associated features accessible at winningw88.cam.

Personal Data We Collect

winningw88 collects Personal Data across several categories depending on your interaction with the Platform. The table below outlines the categories of data collected, the specific data elements within each category, and the context in which collection occurs.

How We Collect Your Data

winningw88 collects Personal Data through the following channels and mechanisms:

1. Direct Submission: Data you provide voluntarily when registering an Account, completing KYC verification, submitting deposit or withdrawal requests, contacting customer support, or participating in promotions.
2. Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, browser information, device identifiers, and session activity logs. This collection occurs regardless of whether you are logged in to an Account.
3. Payment Processors: When you transact through our approved Malaysian payment partners — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank — limited transaction confirmation data is received from the relevant payment service provider to verify and reconcile your deposit or withdrawal.
4. KYC Verification Partners: Third-party identity verification services engaged by winningw88 may process your submitted identity documents to confirm authenticity. These partners operate under data processing agreements consistent with this Policy.
5. Cookies and Tracking Technologies: Session cookies, persistent cookies, and similar technologies are used to maintain your login session, personalise your experience, and collect anonymised usage analytics. See Section 8 for full details.

Purpose of Data Processing

winningw88 processes your Personal Data for the following specific, legitimate purposes. We do not use your data for any purpose incompatible with those listed below without obtaining fresh consent:

1. Account Management: Creating, maintaining, and administering your registered Account, including authentication and account security.
2. Identity Verification (KYC): Fulfilling regulatory obligations to verify player identity and age before processing withdrawals, in accordance with anti-money laundering requirements.
3. Payment Processing: Facilitating deposits and withdrawals in MYR through approved Malaysian payment channels, and maintaining accurate financial records of all transactions.
4. Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, account abuse, money laundering, and other prohibited activities on the Platform.
5. Responsible Gambling: Monitoring account activity to identify potential problem gambling indicators and to administer self-exclusion, deposit limits, and other player protection tools.
6. Customer Support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
7. Platform Improvement: Analysing aggregated and anonymised usage data to improve the Platform's performance, design, and content.
8. Legal and Regulatory Compliance: Meeting obligations imposed by applicable laws and regulatory frameworks, including record-keeping, audit, and reporting requirements.
9. Marketing Communications: Sending promotional offers, bonus notifications, and Platform updates to players who have provided consent to receive such communications. You may withdraw this consent at any time via your Account settings.

Legal Basis for Processing

winningw88 processes your Personal Data on one or more of the following legal grounds, depending on the nature of the processing activity:

1. Contractual Necessity: Processing required to perform our contractual obligations to you under the Terms & Conditions, including account management and payment processing.
2. Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC verification, anti-money laundering obligations, and record-keeping requirements.
3. Legitimate Interests: Processing necessary for the legitimate interests of winningw88, including fraud prevention, platform security, and the improvement of our services, where these interests do not override your fundamental rights.
4. Consent: Processing carried out on the basis of your freely given, specific, and informed consent, in particular for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing & Third-Party Disclosure

winningw88 does not sell, trade, or transfer your Personal Data to unaffiliated third parties for commercial purposes. We may share your data with the following categories of recipients only where strictly necessary and in accordance with this Policy:

1. Payment Service Providers: Including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-participating banks (Maybank, CIMB, Public Bank, Hong Leong, RHB), Visa, Mastercard, and cryptocurrency processing partners — solely for the purpose of processing your deposits and withdrawals.
2. KYC and Identity Verification Providers: Third-party identity verification services engaged to process and authenticate documents submitted during the KYC process.
3. IT Infrastructure and Hosting Providers: Cloud hosting, database, and cybersecurity service providers who process data on our behalf under binding data processing agreements.
4. Fraud Detection and Security Services: Third-party tools used to detect suspicious activity, prevent account fraud, and protect Platform integrity.
5. Legal and Regulatory Authorities: Competent authorities, law enforcement agencies, or regulatory bodies where disclosure is required by applicable law, court order, or regulatory directive.

Cookies & Tracking Technologies

winningw88 uses cookies and similar technologies on the Platform to provide essential functionality, enhance your user experience, and collect anonymised analytics data. The following categories of cookies are used:

1. Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. These cannot be disabled without impairing Platform functionality.
2. Functional Cookies: Used to remember your preferences, such as language settings and notification preferences, to provide a personalised experience across sessions.
3. Analytics Cookies: Used to collect anonymised statistical data about how users interact with the Platform — pages visited, session duration, and navigation paths. This data is used in aggregate to improve Platform design and performance.
4. Security Cookies: Used to detect and mitigate fraudulent activity, bot traffic, and other security threats. These support the integrity of your Account and the Platform as a whole.

You may control cookie settings through your browser preferences. Note that disabling strictly necessary cookies will impair your ability to use certain Platform features, including Account login.

Data Retention

winningw88 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

1. Account and Identity Data: Retained for the duration of your active Account relationship and for a minimum of five years following Account closure, to meet anti-money laundering and regulatory record-keeping requirements.
2. Financial Transaction Records: Retained for a minimum of seven years from the date of the transaction, in accordance with applicable financial record-keeping obligations.
3. KYC Documents: Retained for a minimum of five years following Account closure or the last transaction, as required for compliance audit purposes.
4. Support Communication Records: Retained for a minimum of two years from the date of the communication, for dispute resolution and quality assurance purposes.
5. Analytics and Technical Data: Anonymised analytics data may be retained indefinitely in aggregated, non-identifiable form. Identifiable technical data such as IP logs is retained for a maximum of 12 months.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data disposal procedures.

Data Security Measures

winningw88 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These include:

1. Encryption in Transit: All data transmitted between your device and the winningw88 Platform is encrypted using TLS 1.2 or higher (256-bit SSL), protecting your data from interception during transmission.
2. Encryption at Rest: Personal Data stored on winningw88 servers is encrypted using AES-256 encryption, including financial records, KYC documents, and account credentials.
3. Access Controls: Access to personal data systems is restricted on a role-based, need-to-know basis. All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
4. Two-Factor Authentication: All player accounts are supported with two-factor authentication (2FA) to reduce the risk of unauthorised account access.
5. Security Monitoring: Continuous monitoring of Platform infrastructure for intrusion attempts, anomalous activity, and security vulnerabilities, with incident response procedures in place.
6. Data Breach Notification: In the event of a confirmed personal data breach that poses a risk to affected individuals, winningw88 will notify affected players and take all reasonable steps to mitigate harm.

Your Rights as a Data Subject

As a data subject whose Personal Data is processed by winningw88, you hold the following rights. Requests may be submitted via our customer support channels as described in Section 15.

1. Right of Access: You have the right to request confirmation of whether winningw88 holds Personal Data about you and to obtain a copy of that data in a readable format.
2. Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held about you. You may update certain data elements directly through your Account settings.
3. Right to Erasure: You have the right to request deletion of your Personal Data in certain circumstances, including where the data is no longer necessary for its original purpose. Note that this right may be limited by our legal retention obligations set out in Section 9.
4. Right to Restrict Processing: You have the right to request a temporary restriction on the processing of your Personal Data in certain circumstances, for example where you contest its accuracy.
5. Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
6. Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. You also have the right to withdraw consent for marketing communications at any time via your Account notification preferences.

All data subject requests will be acknowledged within five business days and resolved within 30 days of receipt. In complex cases, this timeframe may be extended with reasonable notice provided to you.

Children & Underage Persons

The winningw88 Platform is strictly intended for individuals aged 21 years and above. winningw88 does not knowingly collect, process, or store Personal Data of any individual under the age of 21.

If we become aware that Personal Data has been submitted by or on behalf of an individual who does not meet the minimum age requirement, we will take immediate steps to delete all associated data and close the relevant Account. Any balances held in underage accounts will be forfeited in accordance with our Terms & Conditions.

If you have reason to believe that a minor has registered an Account or submitted Personal Data to winningw88, please notify our compliance team immediately via the contact details in Section 15.

Third-Party Links & Integrations

The winningw88 Platform may contain references or links to third-party payment services — including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank — with which you interact directly in the course of making deposits or withdrawals. These third-party services operate under their own privacy policies and terms of service, which are independent of and not governed by this Policy.

winningw88 is not responsible for the privacy practices or content of any third-party service with which you interact in connection with the Platform. We encourage you to review the privacy policies of any third-party service before submitting personal or financial information to them.

Updates to This Privacy Policy

winningw88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. The "Last Reviewed" date at the top of this Policy will be updated accordingly.

For material changes that significantly affect how your data is processed, winningw88 will provide advance notice to registered players via email or in-platform notification. For non-material updates, the revised Policy will be published on this page without separate notice.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. It is your responsibility to check this page periodically to stay informed of any changes.

Contact Us

For all privacy-related enquiries, data subject access requests, consent withdrawals, or complaints regarding the handling of your Personal Data, please contact the winningw88 data compliance team through the following channels:

winningw88 takes all privacy concerns seriously and is committed to responding to all formal data subject requests within the timescales specified in Section 11. Where a complaint cannot be resolved to your satisfaction, you may be entitled to escalate the matter to the relevant data protection authority in your jurisdiction.