This Privacy Policy applies to all users of the Wintown88 platform, including the official website and Android and iOS mobile apps. By using our platform, you agree to the terms of this Privacy Policy.
1Introduction and Our Commitment to Privacy
Wintown88 understands that your personal information is sensitive and valuable. It is more than just data — it is part of your identity and your life. We therefore take seriously the responsibility entrusted to us when you choose to share your information with our platform.
This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing how organisations handle individuals' personal data in this country. We comply with all Data Protection Principles set out in the Act, namely the General Principle, Notice and Choice Principle, Disclosure Principle, Security Principle, Data Integrity Principle, Access Principle, and Data Transfer Abroad Principle.
Wintown88 is the responsible Data Controller under PDPA. If you have any questions, concerns, or complaints about how we handle your personal data, you may contact our Data Protection Officer through the channels listed at the end of this document.
2Types of Personal Data We Collect
We collect various types of information depending on how you interact with the Wintown88 platform. Below is an overview of the data categories we collect:
| Data Category | Data Examples | Collected During |
|---|---|---|
| Identity Data | Full name, IC number, date of birth, gender | Account registration and KYC |
| Contact Data | Phone number, email address, state of residence | Account registration |
| Financial Data | Bank account number, e-wallet type, transaction records | Deposits and fund withdrawals |
| Technical Data | IP address, device type, browser, operating system | Every access to the platform |
| Behavioural Data | Game records, wagering history, session duration, clicks | During platform use |
| Communication Data | Live chat records, support emails, feedback | Interactions with customer support |
We only collect data that is genuinely necessary to deliver our services safely and effectively. We do not request information that is irrelevant or unnecessary.
3Purpose of Data Collection and Processing
Wintown88 collects and processes your personal data for the following purposes only. We will not process your data for any purpose not listed here without prior notice and your consent.
- Service delivery: To create and manage your account, process deposits and withdrawals, and give you access to all games and platform features.
- Identity verification (KYC): To comply with legal requirements related to age verification, anti-money laundering, and fraud prevention.
- Platform security: To detect and prevent fraud, unauthorized access, account abuse, and other security threats.
- Service communications: To send account-related notifications, transaction updates, terms changes, and other important information.
- Marketing (with consent): To send information about wintown88 promotions, bonuses, and special offers — only to members who have given their consent.
- Platform improvements: To analyze usage patterns and help us improve platform functionality, performance, and user experience.
- Legal compliance: To fulfill applicable legal obligations, regulations, or court orders.
4Data Retention Period
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable law.
- Active account data: Retained for as long as your account remains active on the Wintown88 platform.
- Financial and transaction data: Retained for a minimum of 7 years from the transaction date, in accordance with financial reporting and anti-money laundering requirements.
- KYC Data: Retained for a minimum of 5 years after account closure, in line with legal compliance requirements.
- Support communication data: Retained for 3 years for dispute resolution and service improvement purposes.
- Log and technical data: Retained for 12 months, then anonymised or deleted.
When your data is no longer needed, we will securely delete or anonymise it so it can no longer be linked to your identity.
5Data Sharing with Third Parties
Wintown88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, we do share data with certain categories of third parties in limited circumstances as follows:
- Service providers: Service providers that help us operate the platform, such as payment gateway providers (FPX, DuitNow, etc.), KYC service providers, server hosting providers, and technical support. All such providers are bound by strict confidentiality agreements.
- Game providers: Minimum necessary data is shared with game providers (such as Pragmatic Play, PG Soft, and others) for technical purposes and in-game fraud prevention.
- Legal authorities: We will disclose data where required by law, court order, or a legitimate request from a law enforcement agency.
- Business transfers: In the event of a merger, acquisition, or sale of Wintown88 assets, your data may be transferred as part of that transaction, subject to the same Privacy Policy.
All third parties we work with are required to adhere to data protection standards equal to or higher than those we apply ourselves.
6Data Security Measures We Practice
Wintown88 implements a range of technical and organizational security measures to protect your personal data from unauthorized access, misuse, alteration, or loss.
- 256-bit SSL encryption: All data transmitted between your device and Wintown88 servers is protected with 256-bit SSL encryption — the same standard used by banking institutions.
- Stored data encryption: Sensitive data such as financial information and identification numbers is stored in encrypted form within our databases.
- Internal access controls: Access to members' personal data is restricted to staff who genuinely need it to perform their official duties. All access is logged and monitored.
- Periodic security audits: Our platform undergoes regular penetration testing and security audits by independent third parties.
- Two-Factor Authentication (2FA): wintown88's internal systems require 2FA for all staff access to systems containing personal data.
In the event of a data breach that may affect your rights and freedoms, Wintown88 is committed to notifying you within a reasonable timeframe after becoming aware of the incident.
7Cookies, Logs and Tracking Technologies
The Wintown88 platform uses cookies and similar tracking technologies to enhance the user experience and analyze how the platform is used. Below are the types of cookies we use:
- Essential cookies: Required for core platform functions such as login session verification and language preferences. These cannot be disabled without affecting platform functionality.
- Functional cookies: Stores your preferences such as game settings and display options for a more personalized experience.
- Analytics cookies: Helps us understand how members interact with the platform — which pages are most popular, where technical issues occur, and more. This data is collected in aggregate and does not identify individuals.
You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect your ability to use certain platform features.
Wintown88 does not use third-party cookies for targeted advertising or to track your activity outside our platform.
8Your Rights Regarding Personal Data
Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data held by Wintown88. To submit any request, please contact us through the channels stated at the end of this document.
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide this information within 21 working days from the date your request is received.
Right to Rectification
If you find that the data we hold about you is inaccurate or incomplete, you may request that we correct it. Some corrections can be made directly in your account settings.
Right to Withdraw Consent
You may withdraw your consent to data processing for specific purposes (such as marketing communications) at any time through your account settings or by contacting us.
Right to Restrict Processing
In certain circumstances, you have the right to request that we stop or restrict the processing of your data pending the resolution of a dispute or objection you have raised.
Right to Lodge a Complaint
If you believe your privacy rights have been violated, you may first raise a complaint with Wintown88, and subsequently with the Malaysian Personal Data Protection Commissioner if you are not satisfied with our response.
9Child Data Protection
The Wintown88 platform is strictly for users aged 18 and above. We do not knowingly collect or store any personal data from individuals under the age of 18.
If we discover that personal data of a child under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a child has registered on our platform, please notify us immediately via email at [email protected].
Wintown88 uses an age verification system during registration and the KYC process to ensure all members meet the minimum age requirement.
10How to Contact Us About Privacy
For any inquiries, requests, or complaints regarding this Privacy Policy or how we handle your personal data, you may contact the wintown88 Data Protection Officer through the following channels:
- Email: [email protected] (please include "Privacy Inquiry" in the email subject line)
- Live Chat: Available 24/7 on the wintown88 mobile app and website
We aim to respond to all privacy-related inquiries within 5 business days. For more complex requests, such as full data access requests, processing may take up to 21 business days.
This Privacy Policy is subject to periodic review and updates. Any material changes will be communicated to members via in-platform notifications before the changes take effect.
Six Ways Wintown88 Protects Your Data
Data protection is not just a document — it is a daily practice embedded in every layer of our operations.
Bank-Grade Encryption
All data transmitted between your device and our servers is protected with 256-bit SSL encryption — the same security standard used by major banks in Malaysia.
Strict Access Controls
Only authorised staff may access member data, and all such access is logged. The principle of least privilege is practised across the organisation.
PDPA 2010 Compliance
Our policy is drafted and updated in line with Malaysia's Personal Data Protection Act 2010 and the latest developments in data protection legislation.
Guaranteed Data Deletion
When your data is no longer needed, it is deleted or anonymised using procedures that comply with international information security standards.
Independent Security Audit
The Wintown88 platform undergoes regular security testing and independent audits to ensure there are no vulnerabilities that could expose member data.
Rapid Incident Notification
In the event of a data breach, we are committed to promptly notifying affected members and taking the necessary remedial action.
Privacy FAQs at wintown88
Your Data is Safe. Play with Peace of Mind at Wintown88.
Our platform is built with privacy protection as a core priority. Register today and play with full confidence that your data is always protected.
Wintown88 – Trusted by Over 500,000 Malaysian Players
Trust starts with transparency. Join our community and enjoy a safe, fair, and enjoyable gaming experience.