win1win Privacy Policy

1. Who We Are

This Privacy Policy is issued by win1win ("win1win", "we", "us", "our"), the operator of the online gaming platform accessible at https://win1win.club (the "Platform"). win1win acts as the data controller in respect of personal data collected through the Platform. If you have questions about how win1win handles your personal information, please refer to Section 14 (Contact Us) below.

By creating a win1win account, using the Platform, or otherwise interacting with win1win's services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use the Platform.

2. Data We Collect

2.1 Data You Provide Directly

When you register a win1win account or use our services, we collect the following categories of personal data that you provide to us:

• Identity data: full legal name, date of birth, nationality, government-issued identification number;
• Contact data: email address, Malaysian mobile number, residential address;
• Financial data: payment method details (e.g. bank account number, e-wallet identifier) used for deposits and withdrawals; transaction history;
• Account credentials: username and hashed password (win1win does not store passwords in plain text);
• Verification documents: copies of identity documents, proof of address, or proof of payment method provided during KYC verification.

2.2 Data Collected Automatically

When you access the win1win Platform, certain data is collected automatically by our systems:

• IP address and approximate geographic location;
• Device type, browser type and version, operating system;
• Session timestamps, pages visited, features used;
• Referral source (i.e. how you arrived at the Platform);
• Cookies and similar tracking technologies (see Section 7).

2.3 Data from Third Parties

win1win may receive personal data about you from third parties in limited circumstances, including identity verification and fraud prevention service providers, payment processors confirming the status of a transaction, and publicly available sources used for enhanced due diligence where required by law.

3. How We Use Your Data

win1win uses the personal data it collects for the following purposes:

• Account creation and management: to register your win1win account, verify your identity, and manage your ongoing relationship with us;
• Service delivery: to process deposits and withdrawals, settle bets, deliver bonuses, and provide access to all Platform features following win1win login;
• Legal and regulatory compliance: to fulfil Know Your Customer (KYC), Anti-Money Laundering (AML), and responsible gaming obligations under applicable law and our licensing conditions;
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, account takeover, and other prohibited activities;
• Customer support: to respond to enquiries, complaints, and support requests submitted to win1win's team;
• Platform improvement: to analyse usage patterns and improve the performance, features, and user experience of the win1win Platform;
• Marketing communications: to send promotional offers and updates about win1win products and features, where you have consented to receive such communications or where we have a legitimate interest in doing so and you have not opted out.

4. Legal Basis for Processing

win1win processes personal data on the following legal bases:

• Contractual necessity: processing required to perform the contract between win1win and you, including account registration, service delivery, and payment processing;
• Legal obligation: processing required to comply with applicable laws, including KYC, AML, and data retention obligations;
• Legitimate interests: processing for fraud prevention, platform security, and Platform improvement where our legitimate interests are not overridden by your rights;
• Consent: processing for marketing communications and non-essential cookies, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Sharing Your Data

win1win does not sell your personal data. We share your data only in the following circumstances and only to the extent strictly necessary:

• Payment processors: Malaysian payment partners including e-wallet providers (e.g. Touch n Go, Boost) and banking FPX gateways receive transaction data to process deposits and withdrawals;
• Identity verification providers: KYC and AML service providers receive identity and address documentation to fulfil regulatory verification obligations;
• Game software providers: where required to operate games on the Platform, limited technical identifiers (not full identity data) may be shared with game providers;
• Fraud prevention services: to detect and prevent fraudulent activity on the Platform;
• Legal and regulatory authorities: win1win will disclose personal data to competent authorities where required by applicable law, court order, or our licensing obligations;
• Business transfers: in the event of a merger, acquisition, or sale of win1win's business, personal data may be transferred to the acquirer as part of the transaction, subject to equivalent privacy protections.

6. International Data Transfers

win1win's servers and those of certain third-party service providers may be located outside Malaysia. Where personal data is transferred to jurisdictions that may not offer the same level of data protection as Malaysia, win1win implements appropriate safeguards including standard contractual clauses, data processing agreements, and where applicable, adequacy determinations. By using the Platform, you acknowledge that your data may be processed in these jurisdictions in accordance with this Privacy Policy.

7. Cookies & Tracking Technologies

7.1 What We Use

win1win uses the following types of cookies and similar technologies on the Platform:

• Strictly necessary cookies: required for basic Platform functionality including session management and win1win login authentication. These cannot be disabled.
• Functional cookies: remember your preferences such as language, display settings, and last-visited game categories.
• Analytics cookies: collect anonymous usage data to help win1win understand how the Platform is used and identify areas for improvement.

7.2 Managing Cookies

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the win1win Platform. win1win does not use cookies for third-party advertising networks.

8. Data Retention

win1win retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, subject to the following minimum retention periods:

• Account data and transaction records: a minimum of five (5) years following account closure, to satisfy AML and regulatory audit obligations;
• KYC verification documents: a minimum of five (5) years following the completion of the verification process or account closure, whichever is later;
• Customer support records: three (3) years from the date of the last relevant interaction;
• Marketing preferences and consent records: maintained until you withdraw consent, plus an additional one (1) year for record-keeping.

Where there is no longer a legal, contractual, or business need to retain personal data, win1win will securely delete or anonymise it.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by win1win:

• Right of access: to obtain a copy of the personal data win1win holds about you;
• Right to rectification: to request correction of inaccurate or incomplete personal data;
• Right to erasure: to request deletion of your personal data in certain circumstances (note that regulatory retention obligations may prevent immediate deletion);
• Right to restriction: to request that win1win restrict processing of your data in certain circumstances;
• Right to data portability: to receive your personal data in a structured, commonly used, machine-readable format;
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting prior processing.

To exercise any of the above rights, please contact win1win at [email protected]. We will respond to verified requests within 30 days. We may need to verify your identity before processing a request.

10. Children's Privacy

The win1win Platform is strictly restricted to adults aged 21 and above. win1win does not knowingly collect personal data from persons under the age of 21. If win1win becomes aware that personal data has been collected from a minor, the account will be immediately suspended, the data will be deleted, and any associated balances forfeited. Parents or guardians who believe a minor has registered on win1win should contact [email protected] immediately.

11. Security

win1win implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• SSL/TLS encryption for all data in transit between your browser and win1win's servers;
• Encryption at rest for sensitive data fields including payment identifiers and identity document copies;
• Hashed storage of passwords — win1win never stores account passwords in recoverable plain text;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of the Platform;
• Two-factor authentication available for all win1win accounts.

Notwithstanding these measures, no data transmission over the internet is guaranteed to be completely secure. In the event of a data breach that affects your rights and freedoms, win1win will notify you and any applicable regulatory authorities as required by law.

12. Third-Party Links

The win1win Platform does not contain links to third-party websites. win1win is not responsible for the privacy practices of any third-party services you may independently access. This Privacy Policy applies solely to personal data collected and processed by win1win through the Platform at https://win1win.club.

13. Changes to This Privacy Policy

win1win may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. Material changes will be communicated to registered users via their registered email address at least 14 days before taking effect. The date of the most recent update appears at the top of this page. Continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

14. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or win1win's handling of your personal data, please contact our privacy team:

We aim to respond to all privacy-related enquiries within 30 days of receipt. For formal complaints, you may also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.