WinWinBet Privacy Policy

WinWinBet ("the Company", "we", "us", "our") is the operator of the online gaming and sports betting platform accessible at winwinbet.buzz ("the Platform"). This Privacy Policy ("Policy") sets out how WinWinBet collects, processes, stores, shares, and protects the personal data of individuals who visit, register on, or otherwise interact with the Platform ("Players", "Users", "you").

This Policy is written in plain, professional English and forms part of WinWinBet's overall legal framework alongside our Terms and Conditions and Responsible Gambling Policy. Where this Policy refers to "personal data", this means any information that can identify you as an individual — either directly (such as your full name or email address) or indirectly (such as an account ID combined with transactional data).

WinWinBet is committed to handling your personal data responsibly, lawfully, and transparently. We process only the personal data that is genuinely necessary for the purposes described in this Policy. We do not sell or rent personal data to any third party for their own commercial purposes under any circumstances.

The following definitions apply throughout this Privacy Policy:

• "Controller" means WinWinBet, which determines the purposes and means of processing your personal data.
• "Data Subject" means an identified or identifiable natural person whose personal data is being processed — in this context, a registered Player or website visitor.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, email address, financial data, location data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Processor" means any third-party service provider that processes personal data on behalf of WinWinBet, subject to a data processing agreement.
• "Sensitive Data" means personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or other special categories warranting enhanced protection.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.

WinWinBet collects the following categories of personal data, depending on how you interact with the Platform:

WinWinBet collects personal data through the following means:

• Direct submission: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting our support team, or updating your Account profile.
• Automated technical collection: Technical data (IP addresses, device identifiers, session data) is collected automatically when you access the Platform, via server logs and analytics tools.
• Cookies and similar technologies: First-party and third-party cookies, pixel tags, and local storage are used to operate the Platform, maintain your session, and (where consent has been given) understand user behaviour for platform improvement purposes. See Section 9 for full cookie details.
• Third-party payment processors: When you make a deposit via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, or other accepted payment methods, the relevant payment processor shares transaction confirmation data with us to credit your Account.
• Identity verification providers: WinWinBet may use third-party KYC and identity verification services to verify documents submitted during the verification process. These services process your data under their own privacy policies as data processors acting on our behalf.

WinWinBet processes your personal data on the following legal bases:

• Performance of a Contract: The majority of data processing is necessary to perform our contractual obligations to you under the Terms and Conditions — including operating your Account, processing deposits and withdrawals, delivering gaming services, and providing customer support.
• Legal Obligation: Certain processing is required to comply with our obligations under our international gaming licence, anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, and other applicable laws. This includes identity verification, transaction monitoring, and record-keeping obligations.
• Legitimate Interests: We process some data on the basis of our legitimate interests as a business operator, including fraud prevention, platform security, responsible gambling monitoring, and aggregate analytics to improve the Platform. We balance these interests against your privacy rights and do not use this basis where it would override your fundamental rights.
• Consent: Where we send marketing communications or use non-essential cookies, we rely on your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

WinWinBet uses your personal data for the following specific purposes:

• Account management: Creating and maintaining your Account, authenticating logins, enabling password resets, and managing Account preferences.
• Identity verification (KYC): Verifying your identity and age (21+) before processing your first withdrawal and in response to ongoing AML compliance requirements.
• Payment processing: Processing deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen payment method, including Touch 'n Go eWallet, Boost, DuitNow QR, FPX, and bank transfers to Maybank, CIMB, Public Bank, Hong Leong, and others.
• Gaming services: Delivering casino games, live dealer tables, and sports betting markets; recording your gaming activity for account history and dispute resolution purposes.
• Fraud prevention and security: Detecting and investigating suspected fraud, money laundering, bonus abuse, collusion, or other prohibited conduct as defined in our Terms and Conditions.
• Responsible gambling: Monitoring gaming patterns to identify potential problem gambling behaviour and enabling responsible gambling tools (deposit limits, self-exclusion, cooling-off periods) as described in our Responsible Gambling Policy.
• Customer support: Responding to your enquiries, resolving complaints, and maintaining records of your interactions with our support team.
• Marketing communications (consent-based): Sending promotional offers, bonus notifications, and platform updates by email or within the Platform, where you have opted in. You may opt out at any time.
• Platform improvement: Analysing aggregated and anonymised usage data to understand how the Platform is used and to improve its performance, interface, and game selection.
• Legal and regulatory compliance: Retaining records as required by our licensing authority, responding to law enforcement or regulatory requests, and maintaining audit trails.

WinWinBet does not sell, rent, or trade your personal data. We share personal data only in the circumstances set out below, and only to the minimum extent necessary for each purpose:

• Payment processors: Payment service providers such as FPX operators, e-wallet platforms (Touch 'n Go, Boost, GrabPay), and banking partners receive the transaction data necessary to process deposits and withdrawals. These providers operate under their own privacy policies and are not permitted to use your data for any purpose other than completing your transaction.
• KYC and identity verification providers: Third-party verification services receive the identity documents you submit in order to perform age and identity checks on our behalf. They are bound by data processing agreements with WinWinBet and may not retain or use your data beyond the verification purpose.
• Game software providers: Casino game and live dealer providers receive the minimum data necessary to deliver gameplay (such as a session token and account identifier). They do not receive your full personal profile.
• Analytics and security providers: We use third-party analytics and fraud detection tools that may process technical data (IP addresses, device fingerprints) to help us secure the Platform and improve its performance. These operate under data processing agreements with WinWinBet.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or licensing authorities where required by law, court order, or our licensing obligations — without prior notice to the Player where the law prohibits such notice.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of WinWinBet's assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

WinWinBet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our licensing and legal obligations. The following general retention guidelines apply:

• Account data and KYC documents: Retained for a minimum of five (5) years after Account closure, in accordance with our international gaming licence's AML record-keeping requirements. This period may be extended if required by law or if a dispute or investigation is ongoing at the time of Account closure.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with standard AML and financial record-keeping obligations.
• Gaming activity records: Retained for a minimum of three (3) years for dispute resolution, responsible gambling monitoring, and audit purposes.
• Customer support communications: Retained for two (2) years from the date of the interaction, or longer if the communication relates to an unresolved complaint or ongoing investigation.
• Marketing consent records: Retained for the duration of your Account and for two (2) years after Account closure to demonstrate compliance with consent obligations.
• Technical and log data: Retained for twelve (12) months for security monitoring purposes, then deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or rendered permanently anonymous in a manner that prevents re-identification. You may request early deletion of your personal data subject to the exceptions set out in Section 11 (Your Rights).

WinWinBet uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us operate the Platform and understand how you use it. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without preventing the Platform from operating correctly.
• Functional Cookies: Used to remember your preferences, such as your preferred language setting, display preferences, and whether you have acknowledged certain Platform notices. Disabling these cookies may affect your experience but will not prevent Platform access.
• Analytical Cookies: Used to collect aggregated, anonymised data about how visitors use the Platform — which pages are visited most, where navigation paths are abandoned, and how long sessions typically last. This data helps us improve the Platform. We use this category only with your consent.
• Security and Fraud Prevention Cookies: Used to detect anomalous behaviour patterns that may indicate fraud, account compromise, or bot activity. These are necessary for Platform security and cannot be disabled.

You may manage your cookie preferences at any time through your browser settings. Withdrawing consent for non-essential cookies will not affect the lawfulness of any processing that took place before the withdrawal. Note that disabling cookies entirely may prevent certain Platform features from working correctly.

WinWinBet operates under an international gaming licence and uses service providers located in various jurisdictions. As a result, your personal data may be transferred to, stored in, or processed in countries outside Malaysia, including the country in which the Company is incorporated.

When your personal data is transferred outside your home jurisdiction, WinWinBet ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections afforded by internationally recognised data protection principles. These safeguards include:

• Data processing agreements with all third-party processors that include binding data protection obligations.
• Use of recognised transfer mechanisms (such as standard contractual clauses) where required by applicable data protection frameworks.
• Selection of service providers that operate in jurisdictions with adequate data protection laws or that have independently certified their compliance with recognised privacy frameworks.

As a data subject, you hold the following rights in relation to your personal data held by WinWinBet. To exercise any of these rights, please contact our Customer Support team as described in Section 15. We will respond within 30 days.

The WinWinBet Platform is strictly intended for individuals aged 21 years and above. WinWinBet does not knowingly collect, process, or retain personal data from any individual under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will take immediate steps to delete that data and close the associated Account.

Age verification is a mandatory component of WinWinBet's KYC process. All players must provide a valid government-issued identity document (Malaysian IC / MyKad, passport, or equivalent) confirming their date of birth before withdrawal of any funds is permitted.

If you are a parent or guardian and have reason to believe that a minor has registered an Account on the WinWinBet Platform using false information, please contact us immediately through the channels listed in Section 15. We will investigate and act on all credible reports without delay.

WinWinBet implements a multi-layered approach to data security designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key technical and organisational security measures include:

• Encryption in transit: All communication between your browser or mobile device and the WinWinBet Platform is encrypted using TLS 1.2 / 1.3 with 256-bit encryption. This applies to account logins, financial transactions, and all data submissions.
• Encryption at rest: Sensitive personal data stored on our servers — including identity documents and financial records — is encrypted at rest using AES-256 or equivalent industry-standard encryption.
• Access controls: Internal access to personal data is restricted to authorised personnel on a need-to-know basis, governed by role-based access controls. All access to sensitive data is logged and subject to audit review.
• Two-factor authentication (2FA): WinWinBet offers 2FA for all Player Accounts. We strongly recommend enabling this feature to protect your Account from unauthorised access.
• Penetration testing and vulnerability assessments: Our systems are subject to regular security testing by qualified professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that poses a material risk to your rights, WinWinBet will notify affected Players and the relevant supervisory authority as required by applicable law, within the timeframes specified by those obligations.

While WinWinBet implements robust security measures, no system is completely immune from attack. You are also responsible for maintaining the confidentiality of your Account credentials and for notifying us promptly if you suspect any unauthorised access to your Account.

WinWinBet reserves the right to amend, update, or replace this Privacy Policy at any time, in response to changes in applicable data protection laws, our business operations, or the services we offer. The "Last Updated" date at the top of this page will reflect when the most recent revision was made.

Where changes to this Policy are material — for example, where we introduce a new purpose for which we process your personal data — we will notify registered Players via the email address associated with their Account or through a prominent Platform notification before the changes take effect. For minor clarifications or editorial updates, the updated Policy will be published on this page without separate individual notification.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the update. We encourage you to review this page periodically to remain informed of how we protect your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact WinWinBet's Data Protection team through any of the following channels. All responses are provided in English on Malaysia Standard Time (MYT, UTC+8):

• Live Chat: Available 24/7 directly on the Platform. Specify "Privacy / Data Request" in your opening message so the query is directed to the correct team. Average first-response is under 5 minutes.
• Email (plain text — not a link): [email protected] — Please include "Privacy Policy Enquiry" or "Data Subject Request" in your subject line. We aim to respond to data subject requests within 30 days.

When submitting a data subject request (access, rectification, erasure, portability), you will be required to verify your identity before your request is processed. This is to ensure we do not disclose or modify your personal data in response to a fraudulent request.