Wi1win Privacy Policy – Personal Data Protection for Malaysian Members

Welcome to the Privacy Policy page wi1win. We understand that sharing personal information with any online platform requires trust — and trust is never freely given. It must be earned through transparency, consistent action, and an ongoing commitment.

This Privacy Policy applies to all personal information collected, processed, stored, or used by wi1win in connection with our platform services at wi1win.biz, including all games, Sports Betting, Live Casino, slots, jackpots, lottery, and member account functions.

By using the wi1win platform, you agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services and contact us to close your account.

Wi1win only collects data necessary to provide our services safely and effectively. The following are the categories of data we may collect:

Your personal data is collected through various channels throughout your use of the platform wi1win:

• During account registration — You actively provide your name, email, phone number, and other basic details when registering a wi1win account for the first time.
• During the KYC (identity verification) process — When you submit verification documents such as your MyKad or proof of address for anti-money laundering compliance purposes.
• During financial transactions — Information related to deposits and withdrawals made via Malaysian payment methods such as Touch 'n Go eWallet, DuitNow, and FPX is recorded for financial audit purposes.
• Through platform usage — Gaming activity, football betting records, slots played, and interactions with platform features are automatically logged for security and service improvement purposes.
• Through your device and web browser — Technical data such as IP address, device type, and web browser are collected automatically for security and fraud prevention purposes.
• Via customer support communications — Live chat conversations, support emails, and any communications you send to the wi1win team are retained for record-keeping and service improvement.

Wi1win uses your personal data solely for legitimate and necessary purposes. The following are the primary reasons we process your data:

• Account management — To create, verify, and manage your account; process logins; and enable access to all wi1win platform features.
• Processing of financial transactions — To process deposits and withdrawals in Malaysian Ringgit (RM), verify payments, and maintain financial records required for auditing purposes.
• Legal compliance (AML/KYC) — To fulfil anti-money laundering (AML) obligations and verify member identities in accordance with Malaysian legal requirements.
• Security & fraud prevention — To detect and prevent unauthorised access, fraud, multiple account abuse, and other suspicious activity that may compromise you or the platform.
• Service improvement — To understand how members use the platform and continuously improve the user experience, interface, and technical performance of wi1win.
• Service communications — To send important notifications regarding your account, changes to terms, security information, and relevant service updates.
• Marketing (with consent only) — To send you promotional information, bonuses, and special offers — only where you have given consent to receive marketing communications at registration or at a later date.

wi1win does not sell your personal data. However, in limited and specific circumstances, we may need to share data with trusted parties:

• Payment processors — Companies operating the payment infrastructure for Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX require access to the transaction information necessary to process your payments. They are bound by strict confidentiality agreements.
• Game software providers — Third-party game developers whose titles are offered on the wi1win platform may receive anonymised statistical data on game usage — not your personally identifiable data.
• Relevant authorities (where required by law) — wi1win will disclose data where required by a Malaysian court order, direction from a lawful regulatory authority, or a recognised legal investigation.
• Security technology provider — Anti-fraud and cybersecurity services we use may process technical data (such as IP addresses) solely for threat detection purposes.

Wi1win continually invests in security infrastructure to ensure your personal data is always protected to the highest standard:

• 256-bit SSL Encryption — All communications between your browser and wi1win servers are encrypted using the latest TLS protocol, ensuring no third party can intercept data in transit.
• Database encryption — Sensitive data stored in our databases is encrypted using AES-256. Passwords are stored as one-way hashes that cannot be decrypted.
• Two-factor authentication (2FA) — You are encouraged to enable 2FA on your account for an additional layer of security during login.
• 24/7 Monitoring — Our automated monitoring system detects suspicious activity at all times and will automatically block any suspicious access.
• Regular security audits — wi1win undergoes regular independent penetration testing and security audits to identify and remediate any vulnerabilities.
• Restricted employee access — Only employees who require access to specific data to perform their duties are granted that access — in accordance with the principle of least privilege.

Wi1win does not store your personal data indefinitely. Retention periods are determined based on legal and legitimate operational requirements:

• Active account data — Retained for the duration your account remains active and for 7 years following account closure, in line with Malaysian legal financial record-keeping requirements.
• Financial transaction records — Retained for a minimum of 7 years following each transaction to meet audit and compliance requirements under the Anti-Money Laundering Act (AMLA).
• KYC document data — Retained for 7 years from the date the document was submitted or the account closure date, whichever is later.
• Gaming activity data — Game and betting records are retained for 3 years for dispute resolution and audit purposes.
• Support communication data — Chat logs and support emails are retained for 2 years for quality control and training purposes.
• Cookie data — Depending on the type of cookie — session cookies are deleted when the browser is closed; persistent cookies are stored for up to 24 months unless deleted earlier by you.

In accordance with Malaysia's PDPA 2010, you have the following rights regarding the personal data you provide to wi1win:

Wi1win uses cookies to enhance your experience on our platform. The following are the categories of cookies we use:

You can manage or delete cookies through your web browser settings (Firefox, Chrome, Safari, Edge). Please note that disabling certain cookies may affect platform functionality.

Wi1win reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legislative developments, or new operational requirements:

• Any material changes to this Privacy Policy will be communicated to members via an in-platform notice or email at least 7 days before the changes take effect.
• The "Updated" date at the top of this document will always reflect the date of the most recent revision. You are encouraged to review this page periodically.
• Continued use of the wi1win platform after the effective date of any changes constitutes acceptance of the revised terms.

If you have any questions, concerns, or requests relating to the privacy of your data on the wi1win, please contact us through the following channels: