Winmy17 Privacy Policy – Malaysian Player Data Protection

01 Introduction

Winmy17 values the privacy of every user who trusts our platform. This privacy policy explains in detail how we collect, process, store, and protect your personal data when you use the winmy17 website, winmy17 mobile app, or any related services we offer to players in Malaysia.

By registering an account with winmy17 or continuing to use our services, you acknowledge that you have read and understood this privacy policy. Continued use of the winmy17 platform after any changes to this policy take effect will be considered your acceptance of the updated terms.

This winmy17 privacy policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. winmy17 acts as the data controller for all personal information collected through our platform.

02 Personal Data We Collect

Winmy17 only collects personal data that is strictly necessary to provide safe and responsible online betting services to our Malaysian players. The following are the categories of data we may collect:

Winmy17 does not collect any sensitive data such as medical records, political views, or religious beliefs. Financial information related to payment methods such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX is processed through verified payment providers and is not stored directly on winmy17's servers.

03 How Winmy17 Collects Data

Winmy17 collects personal data through the following channels:

• Account Registration: Information you provide when registering a winmy17 account, such as your name, email, phone number, and date of birth.
• Identity Verification (KYC): Documents you upload for verification purposes, such as a copy of your identity card or passport.
• Financial Transactions: Information generated when you make a deposit or withdrawal using methods such as Boost, ShopeePay, Maybank2u, or CIMB Clicks.
• Platform Usage: Data collected automatically as you browse or use winmy17's services, including cookie data and server logs.
• Communication: Information you share when contacting the winmy17 support team via live chat, email, or WhatsApp.
• Authorised Third Parties: Information received from identity verification providers or fraud prevention agencies that partner with winmy17.

04 How Winmy17 Uses Your Data

Winmy17 uses the personal data of our Malaysian players solely for legitimate and clearly stated purposes. The following are the primary reasons we process your data:

• Account Management: Creating, verifying, and maintaining your winmy17 account, including the KYC process and age verification.
• Transaction Processing: Processing your deposits and withdrawals via Malaysia's local payment methods supported by winmy17.
• Service Provision: Allowing you to access all winmy17 games including baccarat, poker, roulette, football, and live Sports Betting.
• Platform Security: Detecting and preventing fraud, money laundering, account abuse, and other security threats.
• Customer Support: Processing enquiries, complaints, and assistance requests submitted to the winmy17 support team.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need support and offering responsible gaming tools.
• Marketing Communications: Sending information about relevant winmy17 promotions, bonuses, and offers — only where you have consented to receive such communications.
• Legal Compliance: Fulfilling the legal and regulatory obligations applicable to winmy17's operations.

05 Data Sharing With Third Parties

Winmy17 understands that your trust is our most valuable asset. We do not sell, rent, or disclose your personal data to third parties except in the following limited circumstances:

• Payment Service Providers: Required transaction information is shared with providers such as Touch 'n Go eWallet, GrabPay, DuitNow, and banks that support FPX solely for payment processing purposes.
• Game Software Providers: Minimum required data is shared with winmy17's game providers to ensure smooth gameplay functionality.
• Fraud Prevention Agencies: Winmy17 may share data with authorised fraud prevention agencies to detect and prevent illegal activity on our platform.
• Legal Authority: Winmy17 is required to disclose data to the relevant authorities when ordered by a court or a legitimate regulatory body.
• Cloud Services: Data is stored with certified cloud service providers bound by strict data processing agreements, and they are prohibited from using your data for any other purpose.

All third parties that receive data from winmy17 are bound by legally enforceable data protection agreements and are required to handle your information in accordance with privacy standards equivalent to, or higher than, those of winmy17.

06 Cookies & Tracking Technology

Winmy17 uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and understand how Malaysian players use our services. The following are the types of cookies we use:

You can manage or disable cookies at any time through your web browser settings. However, disabling essential cookies may affect the functionality of the winmy17 platform. For non-essential cookies, you can manage your preferences through the privacy settings in your winmy17 account.

07 Data Security at Winmy17

Winmy17 invests seriously in security infrastructure to ensure the personal data of our Malaysian players is always protected. The technical and organisational security measures we implement include:

• Data encrypted in transit using TLS 1.3 and data encrypted at rest using AES-256
• Multi-layered firewall systems and intrusion detection and prevention systems (IDS/IPS) operating 24/7
• Role-based access control (RBAC) — only authorised personnel may access user data
• Mandatory two-factor authentication (2FA) for all staff access to winmy17's internal systems
• Regular independent security audits (penetration testing) conducted at least twice a year
• Mandatory security and data privacy training programmes for all winmy17 staff

While winmy17 takes all reasonable steps to protect your data, no security system can be guaranteed to be 100% secure. We encourage players to take their own precautions as well, such as using a strong password and enabling 2FA on your winmy17 account.

08 Data Retention Period

Winmy17 retains your personal data only for as long as necessary to fulfil the purposes stated in this privacy policy or to comply with applicable legal requirements. The following guidelines apply to winmy17's data retention periods:

• Active Account Data: Retained for as long as your winmy17 account remains active, and for 5 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for 7 years in accordance with Malaysian legal requirements on financial records and anti-money laundering.
• KYC Records & Identity Verification: Retained for 5 years after the business relationship ends, in accordance with AMLA (Anti-Money Laundering Act) requirements.
• Support Communication Data: Retained for 2 years from the date of last interaction.
• Cookie Data: Deleted in accordance with the retention period specified for each cookie type as outlined in Section 06.

Once the retention period has elapsed, winmy17 will securely delete or anonymise your data in accordance with established data disposal procedures.

09 Winmy17 User Rights

As a winmy17 player in Malaysia, you have the following rights regarding your personal data under the Malaysian PDPA:

To exercise any of the above rights, please contact the winmy17 privacy team at support@winmy17.net stating the type of request. winmy17 may require identity verification before processing any personal data requests.

10 Children's Data

Winmy17 is an online betting platform intended solely for individuals aged 18 and above. winmy17 does not knowingly collect or process personal data from individuals under the age of 18.

If winmy17 discovers that personal data of a minor has been collected without parental or guardian knowledge, we will take immediate action to delete the data and close the account in question. Parents or guardians who believe their child has registered an account with winmy17 should contact us immediately at support@winmy17.net.

11 Links to Third-Party Sites

The winmy17 website may contain links to third-party websites or services for reference purposes. Winmy17 is not responsible for the privacy practices or content of those third-party websites. This privacy policy applies solely to the winmy17 platform.

We encourage players to read the privacy policy of every website they visit, including any sites linked from the winmy17 platform. Winmy17 has no control over, and accepts no responsibility for, the content, privacy policies, or practices of third-party websites.

12 Privacy Policy Amendments

Winmy17 reserves the right to update or amend this privacy policy from time to time to reflect changes in our data practices, legal requirements, or improvements to winmy17's services. Users will be notified of any material changes via email or a prominent notice on the winmy17 homepage at least 14 days before the changes take effect.

It is your responsibility to review winmy17's privacy policy periodically. The "Updated" date at the top of this page indicates when the policy was last revised. Your continued use of the winmy17 platform after any policy changes take effect constitutes your acceptance of the latest version of this privacy policy.

13 Contact Us About Privacy

If you have any questions, concerns, or complaints about how winmy17 handles your personal data, our privacy team is here to help. We are committed to responding to all privacy-related enquiries within 3 business days.