Privacy Policy wi1win — Malaysia Personal Data Protection

Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") describes the personal data collection, use, storage, and protection practices of wi1win ("we", "Platform") for all users who access or use our services through the wi1win website, mobile app, or any official wi1win channel.

Wi1win takes user privacy very seriously. We understand that your personal information is sensitive, and we are committed to handling it with full responsibility, transparency and respect for your rights. This Policy applies to all registered users as well as visitors who simply browse our platform.

By using the wi1win platform, you agree to the practices described in this Privacy Policy. If you do not agree with any part of this Policy, you are encouraged to discontinue use of the platform and contact us if you have any questions.

Personal Data We Collect

2.1 Data You Provide Directly

When registering and using the wi1win platform, you provide the following information directly to us:

• Identity information: full name, identification card number (MyKad) or passport, date of birth and gender
• Contact information: email address, mobile phone number and residential address
• Financial information: bank name, bank account number for withdrawal processing and transaction records
• KYC documents: MyKad copy, passport, proof of address and proof of ownership of payment method
• Account information: username, password (stored in encrypted form), language preference and account settings

2.2 Automatically Collected Data

When you use the wi1win platform, we automatically collect the following technical information to ensure platform security and performance:

• Device data: device type, operating system, phone model and unique device identifier
• Network data: IP address, network location (country/region), internet service provider (ISP) name
• Usage data: pages visited, session duration, games played, login frequency and in-platform actions
• Cookie data: session cookies, preference cookies and analytics cookies (further details in Section 6)

How We Use Your Personal Data

Wi1win uses your personal data solely for legitimate purposes directly related to the provision of platform services. The following are the specific purposes for which your data is used:

• Account management: create, verify and maintain your user account
• Transaction processing: process deposits, withdrawals and other financial transactions securely
• Identity verification (KYC): meet legal compliance requirements and prevent fraud
• Platform security: detect, investigate and prevent fraudulent activity, hacking and abuse
• Customer support: help you resolve technical issues, account enquiries and complaints
• Service improvement: analyse usage patterns to improve user experience and platform performance
• Service communications: send important notices regarding your account, security and terms changes
• Marketing communications: send promotions and exclusive offers (only if you have opted in)

Wi1win will not use your data for any purpose other than those stated above without obtaining your additional consent beforehand.

Data Sharing & Disclosure

4.1 When We Share Your Data

Wi1win does not sell your personal data. We share your data only in the following circumstances and exclusively with trusted parties:

• Payment service providers: to process your deposits and withdrawals securely through approved payment channels
• Game software providers: minimum information required to run the games you access
• KYC verification services: trusted third-party providers to verify your identity for legal compliance
• Legal authorities: when required by law, court order or official authority investigation

4.2 All Partners Are Bound by Confidentiality Agreements

Every third party that receives wi1win user data is bound by a Data Protection Agreement strict standards. They are only permitted to use such data for the purposes specified in the relevant agreement and are subject to the same security standards as wi1win.

Data Security & Protection

Wi1win implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. Among the security measures we have in place:

• 256-bit SSL/TLS encryption for all data transfers between users and servers
• Database-level data encryption for stored sensitive information
• Two-factor authentication (2FA) available for all user accounts
• 24/7 real-time security monitoring by a dedicated security team
• Periodic penetration testing by independent third parties
• Role-based access control (RBAC) for internal staff
• Secure data backups and a tested disaster recovery plan

Cookies & Tracking Technologies

6.1 Types of Cookies We Use

Wi1win uses cookies and similar tracking technologies to enhance user experience and analyse platform performance. The following are the types of cookies we use:

• Essential cookies: required for basic platform functions such as login session verification and security. These cookies cannot be disabled.
• Preference cookies: save your preferences such as language, currency and display settings to deliver a more personalised experience.
• Analytics cookies: help us understand how users interact with the platform — this data is used in aggregate and does not directly identify individuals.
• Performance cookies: monitor page loading speed and identify technical issues for continuous improvement.

6.2 Managing Your Cookie Preferences

You can manage and delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect platform functionality — particularly essential cookies required for secure login sessions. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

Your Rights Under PDPA 2010

As a wi1win user in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA) Malaysia:

Your Rights	Description & How to Use It
Right to Access	You have the right to obtain a copy of the personal data we hold about you. Requests will be processed within 14 working days.
Right to Rectification	If your data is inaccurate or outdated, you have the right to request a correction. Please contact customer support with the relevant proof.
Right to Erasure	You may request the deletion of your personal data, subject to applicable legal requirements and active contractual obligations.
Right to Object	You have the right to object to the processing of your data for direct marketing purposes. Your objection will be enforced within 48 hours.
Right to Portability	You may request your data in a machine-readable format (CSV or JSON) for transfer to another platform.
Right to Restrict Processing	In certain circumstances, you may request that we restrict how we process your data while a dispute is being resolved.

To exercise any of the above rights, please contact the wi1win customer support team via live chat on the platform. We will respond to your request within 14 working days and may require identity verification before the request is processed.

Data Retention & Deletion

Wi1win retains your personal data only for as long as necessary for the purposes stated in this Policy or as required by applicable law. The following are our general data retention periods:

• Active account data — Retained for as long as your account is active and for 5 years after account closure, in line with financial compliance requirements
• Transaction records — Retained for 7 years in accordance with Malaysia's financial and taxation legal requirements
• KYC Documents — Retained for 5 years after the business relationship ends
• Security logs — Retained for 2 years for security investigation purposes
• Analytics data — Data that does not identify individuals is retained indefinitely for long-term trend analysis

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally.

Privacy Policy Amendments

Wi1win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or service improvements. Users will be notified of any significant amendments through:

• Clear notices on the wi1win platform homepage
• Email notification to your registered address
• In-app notifications on the wi1win mobile app

The "Last Updated" date at the top of this Policy will always be updated to reflect the latest version. We encourage you to review this Policy periodically. Continued use of the wi1win platform after any amendments constitutes acceptance of the revised Policy.

Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, you may contact the wi1win team through the following channels:

• Live Chat: Available 24/7 directly within the wi1win platform — the fastest way to get a response
• Privacy Email: [email protected] — for data-related enquiries requiring written documentation
• Help Centre: Visit the FAQ us for answers to frequently asked questions

Our team will respond to all privacy-related inquiries within 3 working days. For more complex issues requiring in-depth investigation, the response time may take up to 14 working days and we will keep you informed of your case progress.

If you believe that wi1win is not complying with the PDPA 2010 or this Privacy Policy, you also have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia through their official channels.