mywin Privacy Policy –
Your Data Is Fully Protected by Us

1Introduction

Mywin (referred to in this document as "we", "Platform" or "mywin") cares about the privacy of every user who uses our services. We understand that in today's digital world, concerns about data security and privacy are entirely valid.

This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and explains in detail: what data we collect, why we need it, how we use it, who can access it, and what your rights are as the data owner.

We do not collect your data merely to store it — every piece of information we request has a clear purpose directly related to delivering a safe, fair, and enjoyable mywin experience for you.

2Personal Data We Collect

Mywin collects two main categories of information: information you provide directly to us and information collected automatically as you use the platform.

3How mywin Uses Your Data

The data we collect is used solely for lawful and transparent purposes. We do not use your data for any purpose not stated here without obtaining your consent first.

The primary purposes for which mywin uses your personal data:

• Service provision — Manages your account, processes deposits and withdrawals, and enables you to access all games and platform features.
• Identity verification (KYC) — Ensures all members meet the minimum age requirement of 18 and verifies user identity to prevent unauthorised use.
• Account security — Detects and prevents unauthorised access attempts, fraud, and suspicious activity.
• Customer support — Enables our team to understand the context of your enquiry and provide accurate, effective assistance.
• Legal compliance — Fulfils legal obligations related to anti-money laundering and reporting requirements set by the authorities.
• Platform improvements — Analyses how users interact with the platform to continuously improve the user experience.
• Marketing communications — Sends you promotional offers and relevant information, subject to the opt-in preferences you have provided.

4Data Sharing with Third Parties

However, there are limited situations where your data may be shared with third parties necessary to operate our services:

• Payment providers — DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and banking institutions that process your financial transactions. They receive only the minimum information required to process payments.
• Cloud service providers — Server infrastructure used to store and process your data securely, subject to strict data protection agreements.
• Game providers — Game session data required by third-party game providers to operate games correctly. This data does not include your full identity information.
• Legal authorities — When required by law, court order, or directive from a competent authority.

All third parties with whom we share data are bound by strict data protection agreements and are required to use that information solely for the specified purposes.

5Data Security & Protection Measures

Your data security is mywin's highest priority. We continuously invest in security infrastructure and industry best practices to ensure your data is always protected.

The security measures we implement include:

• 256-bit SSL Encryption — All data communications between your device and our servers are protected with the same encryption protocol used by leading financial institutions.
• Hashed password storage — Your password is not stored in plain text. We use strong hashing algorithms so that your password cannot be recovered even by our own staff.
• Two-factor authentication (2FA) — An additional security layer requiring verification via your mobile device when logging in from a new device.
• 24/7 security monitoring — Our security team continuously monitors systems to detect any suspicious activity or intrusion attempts.
• Regular security audits — Independent security assessments conducted periodically to identify and address any vulnerabilities before they can be exploited.
• Internal access controls — Only staff who genuinely require access to user data to carry out their duties are permitted to do so, with every access fully logged.

While we take all reasonable precautions, no system can be guaranteed 100% secure. We encourage users to also protect their accounts by using strong, unique passwords and never sharing their login credentials with anyone.

6Cookies & Tracking Technologies

Mywin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies — Required for the platform to function properly, including session authentication and security settings. Cannot be disabled without affecting core functionality.
• Preference cookies — Saves your preferences such as language and display settings to provide a more comfortable experience on your next visit.
• Analytics cookies — Helps us understand how users interact with the platform so we can continuously improve it. Data is collected in aggregate and does not directly identify individuals.
• Functionality cookies — Enables advanced features such as personalised games and recommendations based on your game history.

You can manage cookie settings through your web browser. Disabling certain cookies may affect some platform features, though core functionality will remain available.

7Your Rights as a Data Owner

Under Malaysia's PDPA and mywin's privacy commitment, you have important rights regarding your personal data:

To exercise any of the above rights, contact our privacy team by email at [email protected]. We will process your request within 14 business days.

8Data Retention Period

Mywin retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable law.

• Active account data — Retained for the duration your account is active and for the required period after account closure to comply with legal obligations.
• Financial transaction records — Retained for a minimum of 7 years as required by Malaysia's financial and anti-money laundering laws.
• Security logs — Retained for 12 months for security investigation and fraud prevention purposes.
• Analytics data — Stored in aggregated, non-personally identifiable form for an indefinite period for platform improvement purposes.
• Marketing data — Retained until you withdraw your consent or close your account.

Once the retention period expires, data will be securely deleted or anonymized using industry-standard procedures.

9Child Protection

Mywin takes our responsibility to protect young people seriously. Our KYC process is designed to verify the age of every new registrant. Should we find that we have inadvertently collected data from someone under 18 years of age, we will promptly delete that data and close the account in question.

If you are a parent or guardian and discover that your underage child has registered on our platform, please contact us immediately at [email protected] and we will take immediate action.

10Amendments to the Privacy Policy

Mywin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new technological developments.

When we make significant changes to this policy, we will notify all members via:

• A notification email sent to the address registered to your account.
• Notifications will be clearly displayed on the mywin platform upon your next login.
• Update of the "Updated" date displayed at the top of this document.

Continued use of the mywin platform after any amendments take effect will be considered your acceptance of the latest version of the Privacy Policy. If you do not agree with any amendments, you have the right to close your account before the changes take effect.

11Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our privacy team is ready to assist.

You may also reach us via the live chat feature available 24/7 on the mywin platform. For requests involving the data rights outlined in Section 7, we recommend submitting a written request by email for clearer record-keeping.

For complaints that cannot be resolved through our channels, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia in accordance with the procedures set out under PDPA 2010.