Privacy Policy winmy9

1 Introduction

Winmy9 ("Company", "We", "Platform") is committed to protecting the privacy of every individual who interacts with our platform. This Privacy Policy clearly and transparently explains how we manage your personal information — from how it is collected, why it is used, with whom it may be shared, and how you can control your own data.

This document applies to all users of the winmy9 platform, including website visitors, prospective members, registered members, and anyone who communicates with our support team. By using the winmy9 platform, you agree to the data processing practices described in this Privacy Policy.

Winmy9 takes a privacy-by-design approach — meaning data protection is not something we bolt on at the end of development, but something we build into every layer of our systems from the very beginning. This is our commitment to every Malaysian player who entrusts us with their personal information.

2 Information We Collect

Winmy9 only collects information that is strictly necessary to provide a safe, fair, and legally compliant service. We do not collect excessive or irrelevant data beyond what is needed to operate the platform.

In addition to information you provide directly during registration or use of the platform, we also collect data automatically through cookies and tracking technologies as described in Section 9 of this document.

3 How We Use Your Data

Every piece of information we collect has a clear and legitimate purpose. winmy9 uses your personal data for the following purposes:

• Account Management: Creating and managing your player account, including identity verification and KYC processing.
• Transaction Processing: Securely verifying and processing all deposits and withdrawals using supported payment methods.
• Platform Security: Detecting and preventing fraud, multi-account use, money laundering, and other illegal activities.
• Service Improvement: Analysing usage patterns to improve the gaming experience, platform speed, and customer support quality.
• Communications: Sending important account notifications, promotional information (with your consent), and relevant policy updates.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need support and offering appropriate self-control tools.
• Legal Compliance: Fulfilling legal obligations including anti-money laundering (AML) requirements and reporting to relevant authorities when required.

4 Legal Basis for Data Processing

Winmy9 processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA). Depending on the type of data and the purpose of processing, the legal bases we rely on are as follows:

• Consent: You provide explicit consent during account registration or when specifically requested for a particular purpose, such as marketing communications.
• Contract Performance: Processing necessary to fulfil the agreement between you and winmy9, such as deposit and withdrawal processing.
• Legal Obligations: Processing required to comply with Malaysian law, including KYC and AML requirements.
• Legitimate Interests: Processing for platform security, fraud prevention, and service improvement purposes that do not affect your fundamental rights and freedoms.

5 Data Sharing with Third Parties

Winmy9 does not sell or trade your personal information. However, there are limited situations where we may share data with trusted third parties for legitimate reasons:

• Payment Providers: Required transaction information is shared with payment processors and financial institutions to complete your deposits and withdrawals.
• Game Providers: Minimum technical data required is shared with integrated game software providers to enable smooth gameplay sessions.
• Legal Authorities: winmy9 will disclose information to Malaysian authorities when required by law, court order, or a legitimate official investigation.
• Identity Verification Services: Identity information is shared with approved third-party KYC service providers for document verification purposes.

All third parties that receive personal data from winmy9 are bound by strict confidentiality and data protection agreements, and are only permitted to use that data for the specified purposes.

6 Encryption & Security Measures

The security of your data is winmy9's highest priority. We implement multiple layers of technical and operational security to ensure your information is always protected against unauthorised access, disclosure, alteration, or destruction.

• 256-Bit SSL Encryption: All communications between your browser and the winmy9 servers are encrypted using the latest TLS 1.3 protocol.
• Data-at-Rest Encryption: Sensitive data such as financial information and identity documents is encrypted at rest in our database.
• Two-Factor Authentication (2FA): winmy9 supports two-factor authentication for an additional layer of security on player accounts.
• 24/7 Monitoring: Automated monitoring systems operate around the clock to detect suspicious activity and security threats in real time.
• Regular Security Audits: The winmy9 platform undergoes regular security audits by independent third parties to ensure no vulnerabilities go unaddressed.
• Staff Access Controls: Access to players' personal data is restricted to staff with a legitimate need only, and all access is logged for audit purposes.

7 Data Retention Period

Winmy9 does not retain your personal data for longer than is necessary for the purposes stated in this policy. Retention periods are determined based on service requirements and applicable legal obligations.

• Active Account Data: Retained throughout your membership period and for any additional period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysian financial and anti-money laundering regulatory requirements.
• KYC Documents: Retained for a minimum of five (5) years after the business relationship ends, as required by AML legislation.
• Communication Logs: Customer support communication records are retained for two (2) years for reference and dispute resolution purposes.
• Cookie & Analytics Data: Depends on the cookie type; session cookies are automatically deleted when the browser is closed, while persistent cookies are stored for a set duration.

Once the designated retention period has expired, your personal data will be securely deleted or permanently anonymised so that it can no longer be associated with you.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding the personal data winmy9 holds. We are committed to respecting and facilitating these rights:

To exercise any of the above rights, please contact the winmy9 Data Protection team via 24/7 live chat or our support email. We will process your request within 30 business days from the date the application is received.

9 Cookies & Tracking Technologies

Winmy9 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how players interact with our platform. The types of cookies we use are as follows:

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of the winmy9 platform.

10 Cross-Border Data Transfers

In the course of platform operations, there are situations where your personal data may be transferred to or processed in countries other than Malaysia, particularly in relation to the server infrastructure and technology service providers we use.

Winmy9 ensures that any cross-border data transfers are carried out with adequate safeguards, including:

• Using standard data transfer agreements recognised between winmy9 and data recipients in the destination country.
• Ensuring the destination country has a level of data protection equivalent to or higher than Malaysia.
• Implementing additional technical safeguards such as end-to-end encryption for data in transit.

11 Children's Privacy

The winmy9 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal information from children or minors.

If we discover that we have collected data from minors without proper age verification, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who suspect their child has registered on the winmy9 platform are encouraged to contact our support team immediately.

12 Privacy Policy Amendments

Winmy9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or service improvements. The date of the latest amendment is always displayed at the top of this document.

For material or significant amendments, winmy9 will notify you via a prominent notice on the platform or to your registered email at least seven (7) days before the changes take effect. Continued use of the platform after the amendment effective date constitutes acceptance of the revised policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. If you have any questions, concerns, or wish to exercise your data rights, the winmy9 Data Protection team is ready to assist you through our support channels, available 24/7.