W1win Privacy Policy – Malaysia Player Data Protection

W1Win takes player privacy very seriously. As a trusted online gaming platform in Malaysia, we understand that your trust in us depends not only on a great gaming experience — but also on how we handle your personal information responsibly and transparently.

This Privacy Policy is drawn up in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards, including the European GDPR where applicable. We continuously ensure our data handling practices are updated in line with the latest legal and technological developments.

In this document, "personal data" refers to any information that can identify you directly or indirectly, such as your name, email address, phone number, IP address, and financial information. We only collect data that is strictly necessary to provide the services you require.

W1Win collects various categories of information depending on how you interact with our platform. Below is a detailed breakdown of the types of data we collect and their purposes:

We also collect data automatically via cookies and tracking technologies when you browse our platform. This information helps us improve the user experience and ensure the security of your account.

The data we collect is used exclusively for legitimate purposes directly related to the provision of w1win services. The following is a complete list of purposes for which your personal data is used:

• Account registration and management: Creating and maintaining your account profile, processing login verification, and managing your account security settings.
• Financial transaction processing: Securely and accurately processing deposits, withdrawals, and all financial transactions related to your account.
• KYC and AML Compliance: Verifying your identity to meet anti-money laundering legal requirements and licensing compliance.
• Customer support provision: Resolving your enquiries, complaints, and assistance requests through all available support channels.
• Security and fraud prevention: Detecting and preventing suspicious activity, unauthorised access, and any form of fraud on the platform.
• Service improvement: Analysing usage patterns to improve the user interface, platform speed, and overall experience.
• Marketing communications: Sending relevant promotional information and bonuses — you may unsubscribe at any time through your account settings.
• Responsible gambling: Monitoring gameplay patterns to identify players who may need responsible gambling support.

W1Win does not use your data to make fully automated decisions that significantly affect your rights or interests without appropriate human review.

W1Win operates on the principle that your data belongs to you. We only share your personal information under very limited and necessary circumstances, as described below:

• Payment service providers: We share the necessary financial information with payment gateway providers (FPX, Touch 'n Go, GrabPay) to process your transactions securely.
• Game service providers: Our game software providers receive only the minimum session data required to operate the games.
• Identity verification services: Your KYC documents are shared with verified identity verification service providers that comply with high security standards.
• Regulatory authority: We will disclose information to government agencies or legal authorities when required by Malaysian law or a court order.
• Independent audit: Third-party auditors who have signed strict confidentiality agreements may access certain data within the limited scope of the audit.

W1Win never shares player data with advertising companies, data brokers, or any entity whose purpose is to build marketing profiles. Any cross-border data transfers are conducted with adequate safeguards, including recognised standard contractual clauses.

Your data security is w1win's top priority. We continuously invest in world-class security infrastructure to ensure your information is always protected against increasingly sophisticated cyber threats.

Key security measures we employ include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and W1Win's servers is protected by the same industry-grade encryption used by major banking institutions.
• Encryption of data at rest: Sensitive data stored in our databases is encrypted using the AES-256 algorithm, ensuring the data remains unreadable even in the event of a breach.
• Two-factor authentication (2FA): Players are encouraged to activate 2FA, which adds a critical layer of security to their account.
• 24/7 Monitoring: Our cybersecurity team continuously monitors platform activity to detect and respond to threats in real time.
• Regular penetration testing: Our platform undergoes quarterly security testing by independent security experts to identify and address any vulnerabilities.
• Strict access control: Only authorised staff with a genuine need are permitted to access player data, with all access recorded and audited.

W1Win uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as the platform will not function without them.
• Performance Cookies: Collecting information on how you use our platform — most frequently visited pages, load times, and any technical errors. All such information is used in aggregate and anonymised form.
• Functional Cookies: Storing your preferences such as selected language, display settings, and saved login information (if you choose to do so).
• Analytics Cookies: Helping us understand overall platform usage patterns for continuous improvement.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some platform features. For more information on managing cookies in your browser, please refer to your browser's help guide.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding your personal data that we hold. w1win fully respects and facilitates the exercise of these rights:

To exercise any of the above rights, please contact our privacy team via our support email. All requests will be processed within 30 business days. We may require identity verification before processing your request to ensure the security of your data.

W1Win retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable Malaysian law. The following are our data retention guidelines:

• Active account data: Retained for the duration your account is active and up to 7 years after account closure, in line with Malaysian financial legal requirements.
• Financial transaction records: Retained for a minimum of 7 years to comply with taxation and anti-money laundering legal requirements.
• KYC documents: Retained for 5 years after the end of the business relationship, or longer if required by regulatory authorities.
• Security and access logs: Retained for 12 months for security investigation and fraud detection purposes.
• Support communication data: Retained for 3 years to assist in resolving any subsequent disputes or complaints.
• Marketing data: Deleted within 30 days after you unsubscribe from marketing communications.

W1Win reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this page.
• Publishing a clear notice on the platform's home page at least 7 days before changes take effect.
• Sending notifications via registered email to all active accounts when changes are significant and affect player rights.
• Displaying an internal notice to players upon their next login.

Your continued use of the w1win platform after any changes to the Privacy Policy take effect constitutes your acceptance of the updated policy. We recommend reviewing this page periodically.

If you do not agree with the changes made, you have the right to close your account and request deletion of your data in accordance with the procedures set out in Section 7 above.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the w1win privacy team is here to help:

• Privacy Email: [email protected] — for specific enquiries regarding privacy and data protection.
• Live Chat: Direct access via the w1win platform — average response time under 2 minutes, 24/7.
• Telegram: Reach us via w1win's official Telegram channel for a fast response.

For formal privacy complaints, please use our email channel and include your account number, a detailed description of the issue, and any relevant supporting evidence. All formal privacy complaints will be acknowledged within 5 business days and resolved within 30 business days.

If you feel your complaint has not been resolved to your satisfaction, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) as the relevant regulatory authority.