winmy9 Privacy Policy

1. Introduction

winmy9 ("we", "us", "our") operates the online gaming platform accessible at winmy9.win (the "Platform"). This Privacy Policy describes how winmy9 collects, processes, stores, and protects personal data relating to individuals who register for, access, or use the Platform ("Members", "you", "your").

By registering a winmy9 account or using any part of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree to this Privacy Policy, you must not use the Platform.

winmy9 takes the privacy of its Malaysian members seriously. Whether you are accessing the platform from Kuala Lumpur, Penang, Johor Bahru, or Petaling Jaya, your data is processed in accordance with the standards set out in this policy and applicable data protection legislation.

2. Personal Data We Collect

winmy9 collects personal data in the following categories:

2.1 Registration & Identity Data

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• Email address
• Residential address
• National identification number or passport number (where required for verification)
• Contact telephone number

2.2 Financial Data

• Payment method details (e-wallet identifiers for Touch 'n Go, Boost, GrabPay; bank account details for Maybank, CIMB, Public Bank, Hong Leong; card details for Visa and Mastercard)
• Transaction history — deposits, withdrawals, bonus credits, and wager records
• Account balance information

2.3 Usage & Technical Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser information
• Session logs — pages visited, games played, session duration
• Login timestamps and frequency of access

2.4 Communications Data

• Live chat transcripts and support ticket records
• Email correspondence with the winmy9 support team
• Responses to any surveys or feedback requests

3. How We Use Your Personal Data

winmy9 processes your personal data for the following purposes:

4. Legal Basis for Processing

winmy9 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to provide the winmy9 service as described in the Terms & Conditions, including account management and payment processing.
• Legal obligation: Processing required to comply with applicable anti-money laundering legislation, age verification requirements, and licensing conditions.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications and optional personalisation features, where you have provided express consent. You may withdraw consent at any time by contacting winmy9 support.

5. Data Sharing & Third Parties

winmy9 does not sell your personal data to third parties. We share data only in the following circumstances and only to the extent necessary:

• Payment processors: We share payment-relevant data with our licensed payment processing partners (including e-wallet providers and bank gateway operators) to process your transactions. These partners operate under their own data protection policies and applicable financial regulations.
• Game software providers: Session and wager data may be shared with our licensed game studios (e.g., RNG game providers, live dealer studio operators) for the purpose of game delivery, fair play auditing, and dispute resolution.
• Identity verification services: Where required, identity documents may be shared with third-party Know Your Customer (KYC) verification providers under strict data processing agreements.
• Regulatory and law enforcement authorities: winmy9 will disclose personal data to competent authorities where required by law, court order, or our licensing obligations.
• Fraud prevention and security: We may share data with fraud prevention agencies where we have reasonable grounds to suspect fraudulent activity or money laundering.

All third parties with whom winmy9 shares personal data are contractually required to handle it in accordance with applicable data protection standards and to use it only for the specified purpose.

6. Cookies & Tracking Technologies

winmy9 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Essential cookies: Required for the Platform to function correctly, including session management, login state, and security tokens. These cannot be disabled without rendering the Platform inaccessible.
• Analytics cookies: Used to collect aggregated data about how Members interact with the Platform — which pages are visited, how long sessions last, and which game categories are most popular. This data is anonymised and used solely to improve the winmy9 experience.
• Preference cookies: Store your language and display preferences so that settings persist between sessions.

You may manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of some Platform features.

7. Data Retention

winmy9 retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following retention guidelines:

• Active account data: Retained for the duration of your active winmy9 membership.
• Transaction records: Retained for a minimum of 5 years following the transaction date, as required under applicable anti-money laundering and gaming licence obligations.
• Identity verification documents: Retained for a minimum of 5 years following account closure or the completion of the relevant verification process.
• Support communications: Retained for 3 years following the resolution of the relevant query or complaint.
• Closed account data: Residual data retained for the minimum period required by applicable regulatory obligations, after which it is securely deleted or anonymised.

8. Data Security

winmy9 implements technical and organisational measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and winmy9 servers.
• Encrypted storage of sensitive account and financial data at rest.
• Access controls restricting internal access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• PCI-DSS compliant payment processing via our third-party payment partners.

While winmy9 takes all reasonable steps to protect your data, no transmission over the internet or electronic storage system is completely secure. Members are responsible for maintaining the confidentiality of their winmy9 login credentials.

9. Your Data Rights

Subject to applicable law and certain legitimate exceptions, you have the following rights in relation to the personal data winmy9 holds about you:

• Right of access: You may request a copy of the personal data winmy9 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held on your winmy9 account.
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to winmy9's legal retention obligations.
• Right to restriction: You may request that winmy9 restrict the processing of your personal data in defined circumstances.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to winmy9 where processing is based on consent or contractual necessity.
• Right to object: You may object to processing carried out on the basis of winmy9's legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact winmy9 support at support at winmy9.win. winmy9 will respond to verified requests within 30 calendar days.

10. Children's Privacy

The winmy9 Platform is strictly intended for adults aged 21 years and above. winmy9 does not knowingly collect or process personal data from individuals under the age of 21. If winmy9 becomes aware that a Member has provided false age information during registration and is under the required minimum age, the account will be immediately suspended, all balances will be placed on hold pending investigation, and the relevant personal data will be handled in accordance with applicable legal requirements.

If you believe that a minor has registered on the winmy9 Platform, please contact us immediately at support at winmy9.win.

11. International Data Transfers

winmy9's operations involve the use of servers and service providers that may be located outside Malaysia. Where personal data is transferred to jurisdictions that do not provide the same level of data protection as Malaysia, winmy9 implements appropriate safeguards such as standard contractual clauses or equivalent data transfer mechanisms to ensure your data remains protected to a comparable standard.

12. Changes to This Privacy Policy

winmy9 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered Members via email to their registered address or via a notification within the Platform, provided at least 7 days prior to the effective date of the change unless immediate amendment is required by law or regulatory directive.

The "Last Updated" date at the top of this policy reflects when the most recent changes were made. Continued use of the winmy9 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

13. Contact & Data Enquiries

For any queries, requests, or complaints relating to how winmy9 handles your personal data, please contact us using the details below:

• Email: support at winmy9.win
• Live Chat: Available 24/7 via the winmy9 Platform
• Response Time: Data subject requests acknowledged within 5 business days; fully resolved within 30 calendar days

If you are not satisfied with winmy9's response to a data-related complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.