Winmy16 Privacy Policy – Malaysia Personal Data Protection

1 Introduction

Winmy16 ("we", "our platform") is an online Sports Betting and casino platform operating in Malaysia. We are committed to protecting the privacy and personal data security of every member who uses winmy16's services.

This Privacy Policy explains in detail how winmy16 collects, uses, stores, shares, and protects your personal information. It also outlines your rights as a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA) and how you may exercise those rights.

This winmy16 Privacy Policy applies to all users of our platform, including website visitors, registered members, and anyone who interacts with winmy16's services through any channel — whether via website, mobile app, or other communication medium.

2 Data Collected

Winmy16 collects the following categories of personal data for the purposes described in this Privacy Policy:

Winmy16 does not collect sensitive data such as health information, political affiliations, or religious beliefs unless specifically required and you have given your explicit consent.

3 How We Collect Data

Winmy16 collects your personal data through the following channels and methods:

• Account Registration: Information you provide when registering a new winmy16 account, including your name, email, phone number, and MyKad details for KYC verification.
• Platform Usage: Data automatically generated when you use the winmy16 platform, such as activity logs, betting history, and interactions with platform features.
• Financial Transactions: Information shared when you make a deposit or withdrawal using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX.
• Customer Support: Information you share when contacting the winmy16 support team via live chat, email, or other communication channels.
• Cookies & Tracking Technologies: Technical data collected automatically via cookies, web pixels, and other tracking technologies as you browse the winmy16 platform.
• Third-Party Sources: In certain circumstances, winmy16 may receive information about you from trusted third parties, such as identity verification service providers or payment partners, strictly for verification and security purposes.

4 Data Usage Purposes

Winmy16 uses the personal data collected for the following lawful purposes:

• Service Delivery: Managing member accounts, processing bets and financial transactions, and delivering all features and functions of the winmy16 platform to you.
• Identity Verification (KYC): Ensuring every winmy16 member meets the age and identity eligibility requirements under Malaysian law.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, or any misuse of the winmy16 platform.
• Communications: Sending you account information, transaction notifications, winmy16 promotional updates, and customer support responses.
• Legal Compliance: Fulfilling the legal and regulatory obligations applicable to winmy16's operations in Malaysia, including PDPA requirements and financial reporting.
• Platform Improvement: Analysing usage patterns to improve the overall user experience, platform performance, and winmy16's service offerings.
• Responsible Gambling: Monitoring betting patterns to identify signs of problem gambling and providing appropriate support to members who may need it.

5 Disclosure to Third Parties

Winmy16 values your privacy and does not sell or rent your personal information to any third party. However, in the following limited situations, winmy16 may need to share your data:

• Payment Service Providers: Transaction information is shared with payment providers including Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and the FPX network to securely process your MYR deposits and withdrawals.
• KYC Verification Service Providers: Identity information is shared with approved identity verification service providers solely for the purpose of authenticating member identities.
• Technology Partners: Technology and cloud service providers that support winmy16's platform infrastructure may have limited access to data strictly for maintenance and technical support purposes.
• Legal Authorities: winmy16 will disclose personal data to Malaysian government authorities or law enforcement agencies when required by law or court order.
• Business Transfer: In the event of a merger, acquisition, or sale of winmy16's assets, member data may be transferred to the new entity, with equivalent protections ensured.

All third parties that receive personal data from winmy16 members are required to maintain security and privacy standards equivalent to, or higher than, those upheld by winmy16.

6 Data Security

Winmy16 implements a comprehensive range of technical and organisational security measures to protect member personal data from unauthorised access, disclosure, alteration, or destruction:

• Data encryption in transit using 256-bit TLS/SSL protocol
• Encryption at rest for all sensitive information
• Role-based access control (RBAC) ensuring that only authorised personnel can access member data
• 24/7 security monitoring and intrusion detection systems (IDS/IPS)
• Regular security audits conducted by independent cybersecurity experts
• A comprehensive data incident response procedure in compliance with PDPA requirements
• Mandatory data security training for all winmy16 staff who handle personal data

7 Data Retention Period

Winmy16 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law. The general data retention guidelines are as follows:

• Active Account Data: Retained for the duration that your winmy16 account remains active and in use.
• Financial Transaction Data: Retained for a minimum of 7 years after a transaction occurs, in accordance with Malaysian accounting and tax legislation.
• KYC Records: Retained for 5 years after account closure, in line with Malaysia's Anti-Money Laundering Act (AMLA) requirements.
• Technical Log Data: Retained for 90 days for security purposes and technical troubleshooting.
• Customer Support Records: Retained for 2 years after a case is resolved, for reference and service quality purposes.

Once the applicable retention period has elapsed, your personal data will be securely deleted or anonymised in accordance with winmy16's data deletion procedures.

8 Your Rights as a Member

Under Malaysia's PDPA and winmy16's Privacy Policy, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact the winmy16 Data Protection Officer by email at support@winmy16.my. winmy16 will process your request within 21 business days in accordance with PDPA requirements.

9 Cookies & Tracking Technologies

Winmy16 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse the winmy16 website.

The types of cookies used by winmy16 are as follows:

• Essential Cookies: Required for core winmy16 platform functions such as login, session management, and security. These cookies cannot be disabled.
• Functional Cookies: Allows the winmy16 platform to remember your preferences such as language, location, and display settings for a more personalised experience.
• Analytics Cookies: Helps winmy16 understand how members use our platform so we can continuously improve it. Data collected is aggregated and anonymised.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect certain functions of the winmy16 platform.

10 Links to External Sites

The winmy16 platform may contain links to third-party websites or services in certain contexts. winmy16's Privacy Policy does not apply to those external websites or services.

Winmy16 is not responsible for the privacy practices or content of third-party websites. We recommend reading the privacy policy of each website you visit independently. Access to any external website is at your own risk.

11 Changes to the Privacy Policy

Winmy16 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or business operations.

Members will be notified of any material changes to winmy16's Privacy Policy through:

• Prominent notifications on the winmy16 platform homepage
• Notification email sent to your registered email address
• In-account notifications on winmy16 when you log in

The "Last Updated" date at the top of this document will always reflect the date of the most recent amendment. Continued use of the winmy16 platform after any changes take effect will be considered your acceptance of the updated Privacy Policy.

12 Contact Us

If you have any questions, concerns, or complaints regarding winmy16's Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

If you are dissatisfied with how winmy16 has handled your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital.