wi1win Privacy Policy

1. Introduction

Wi1win ("we", "us", or "our") is committed to protecting the personal data of all users ("you" or "Player") who interact with the wi1win platform at wi1win.co. This Privacy Policy sets out in detail what personal information wi1win collects from you, the purposes for which that information is used, the circumstances in which it may be shared with third parties, and the rights available to you in respect of your personal data.

By registering a wi1win account, accessing the Platform, or otherwise submitting personal information to wi1win, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue your use of the wi1win Platform and contact us to close your account.

This Policy should be read in conjunction with the wi1win Terms & Conditions, which are incorporated by reference.

2. Data Controller

For the purposes of applicable data protection law, wi1win is the data controller in respect of the personal information collected through the wi1win Platform. Wi1win determines the purposes and means of processing your personal data as described in this Privacy Policy.

If you have any questions about how wi1win processes your personal data, or wish to exercise any of your data rights, you may contact us using the details provided in Section 15 of this Policy.

3. Information We Collect

Wi1win collects personal data from you in the following ways: directly from you when you register an account or interact with the Platform; automatically through your use of the Platform; and from third-party service providers where necessary to deliver our services. The categories of personal data wi1win may collect include:

• Identity data: Full name, date of birth, nationality, and government-issued identification document details (collected during KYC verification).
• Contact data: Email address, mobile phone number, and residential address (including postcode, city, and state within Malaysia).
• Account data: Username, hashed password, account preferences, and communication settings.
• Financial data: Payment method details (e.g., Touch n Go eWallet account reference, Boost account reference, bank account number, bank name), transaction history including deposits, withdrawals, bets placed, and winnings received — all denominated in Malaysian Ringgit (MYR).
• Technical data: IP address, device type, browser type and version, operating system, session timestamps, and approximate geolocation data derived from IP address.
• Usage data: Pages visited, games played, bet amounts, game session duration, and navigation patterns within the wi1win Platform.
• Communications data: Records of your communications with the wi1win support team, including live chat transcripts and email correspondence.

Wi1win does not intentionally collect special categories of sensitive personal data (such as health data, racial or ethnic origin, or political opinions) unless such data is voluntarily and explicitly provided by you in the context of a responsible gaming support request.

4. How We Use Your Data

Wi1win uses the personal data it collects for the following purposes:

• Account management: To create, verify, maintain, and secure your wi1win account, including processing your wi1win Login authentication and enforcing the 21+ age requirement.
• Payment processing: To process deposits, withdrawals, and refunds through supported MYR payment channels including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank.
• KYC and fraud prevention: To verify your identity and age, detect and prevent fraudulent activity, money laundering, and other illegal activity in accordance with our regulatory obligations.
• Service delivery: To provide access to wi1win's full game library (live casino, Sic Bo, Baccarat, slots, sportsbook) and to personalise your Platform experience based on your preferences and usage patterns.
• Customer support: To respond to your enquiries, complaints, and support requests submitted via live chat or email.
• Responsible gaming: To monitor your account activity for signs of problem gambling behaviour and to operate the responsible gaming tools available to you, including deposit limits, loss limits, and self-exclusion.
• Legal and regulatory compliance: To meet wi1win's obligations under applicable gaming authority regulations, anti-money laundering laws, and data protection legislation.
• Platform improvement: To analyse usage data in aggregate form to improve the wi1win Platform, fix technical issues, and develop new features.
• Marketing communications: To send you promotional offers and platform updates where you have given your explicit consent to receive such communications. You may withdraw consent at any time by updating your account communication preferences.

5. Legal Basis for Processing

Wi1win processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the wi1win Terms & Conditions contract with you — including account creation, payment processing, and game access.
• Legal obligation: Processing required to comply with applicable laws — including KYC identity verification, anti-money laundering obligations, and regulatory reporting to the applicable gaming authority.
• Legitimate interests: Processing for wi1win's legitimate business interests — including fraud detection, platform security, and responsible gaming monitoring — where those interests are not overridden by your data protection rights.
• Consent: Processing for which you have given explicit consent — primarily direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Data

Wi1win does not sell, rent, or trade your personal data to third-party marketers. Wi1win may share your personal data with the following categories of third parties, only to the extent necessary for the stated purpose:

• Payment service providers: Touch n Go eWallet, Boost, and Malaysian bank partners (Maybank, CIMB, Public Bank) for the purpose of processing deposits and withdrawals in MYR.
• Identity verification providers: Third-party KYC and age verification services engaged to verify your identity and age during account registration or upon request.
• Fraud prevention services: Third-party fraud detection and anti-money laundering screening providers.
• Game software providers: Game studios and platform providers whose software powers the wi1win game library. These providers may receive limited transactional data (such as bet amounts and game results) as part of the game functionality.
• Regulatory authorities: Applicable gaming authority regulators, law enforcement agencies, and courts where disclosure is required by law or court order.
• Professional advisers: Legal, accounting, audit, and insurance professionals engaged by wi1win in the ordinary course of business, subject to confidentiality obligations.

All third-party service providers engaged by wi1win are contractually required to process your personal data only on wi1win's documented instructions, to implement appropriate security measures, and to comply with applicable data protection law.

7. International Data Transfers

Wi1win's primary operations and data storage are aligned with its gaming authority jurisdiction. In some circumstances, personal data may be transferred to and processed in countries outside Malaysia — for example, where a game software provider or cloud infrastructure provider maintains servers in another jurisdiction.

Where such transfers occur, wi1win ensures that appropriate safeguards are in place to protect your personal data — including contractual data transfer agreements that impose equivalent data protection standards on the recipient. If you require further information about the safeguards applicable to any specific international transfer, please contact wi1win using the details in Section 15.

8. Data Retention

Wi1win retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Active account data: Retained for the duration of your wi1win account and for a minimum period of five (5) years following account closure, in compliance with anti-money laundering and gaming regulatory record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable law.
• Support communications: Retained for a minimum of two (2) years from the date of the communication.
• Marketing consent records: Retained until you withdraw consent plus one (1) year to evidence the basis for prior communications.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with wi1win's data destruction procedures.

9. Cookies & Tracking Technologies

The wi1win Platform uses cookies and similar tracking technologies (such as pixel tags and local storage) to enhance your experience, analyse Platform usage, and maintain session security. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function, including session management and wi1win Login authentication. These cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies: Used to collect aggregate, anonymised data about how users interact with the Platform to identify performance improvements.
• Functional cookies: Used to remember your preferences (such as language settings and responsible gaming limit configurations) between sessions.

You can manage and disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the wi1win Platform.

10. Your Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by wi1win:

• Right of access: You may request a copy of the personal data wi1win holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by wi1win.
• Right to erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Note that this right is subject to wi1win's legal and regulatory retention obligations.
• Right to restrict processing: You may request that wi1win restricts the processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that wi1win provides your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing based on wi1win's legitimate interests, including direct marketing. Wi1win will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact wi1win using the details provided in Section 15. Wi1win will respond to verified requests within 30 days of receipt.

11. Children & Minors

The wi1win Platform is strictly intended for individuals aged 21 years and above. Wi1win does not knowingly collect personal data from anyone under the age of 21. If wi1win discovers or reasonably suspects that an account is held by a person under 21 years of age, it will immediately suspend the account, freeze any account balance pending investigation, and delete the personal data of the underage individual in accordance with applicable law.

If you are a parent or guardian and have reason to believe that your child under the age of 21 has registered a wi1win account or submitted personal data to wi1win, please contact us immediately using the details in Section 15 so that appropriate action can be taken.

12. Security Measures

Wi1win implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the wi1win Platform — the same standard used by Malaysian banks for online banking portals.
• Hashed and salted storage of all account passwords. Wi1win staff cannot access your password in plain text under any circumstances.
• Role-based access controls ensuring that wi1win staff access personal data only to the extent required by their specific job function.
• Regular security audits and penetration testing of the wi1win Platform infrastructure.
• Two-factor authentication available for all wi1win account holders as an additional layer of login security.

Notwithstanding these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. Wi1win will notify affected users and relevant authorities in the event of a data breach that poses a risk to your rights and freedoms, in accordance with applicable notification requirements.

13. Third-Party Links

The wi1win Platform may contain links to third-party websites or services — for example, responsible gaming support organisations. These third-party sites are governed by their own privacy policies, which wi1win does not control and for which wi1win accepts no responsibility. Wi1win encourages you to review the privacy policies of any third-party sites you visit via links from the wi1win Platform.

14. Updates to This Privacy Policy

Wi1win reserves the right to update, modify, or replace this Privacy Policy at any time. The "Last updated" date at the top of this page will be revised accordingly whenever material changes are made. Where changes are material, wi1win will endeavour to notify you via the Platform or by email to your registered address prior to the changes taking effect.

Your continued use of the wi1win Platform following the publication of a revised Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should stop using the Platform and contact wi1win to close your account and request deletion of your personal data where applicable.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by wi1win, please contact us: