Wins88 Privacy Policy – Personal Data Protection for Malaysian Members

Wins88 collects several categories of personal data from members. Our principle is minimal collection — we only gather what is necessary to operate the platform securely and provide you with the best possible service.

Data you provide directly during registration:

• Full name (must match your official identification document)
• An active Malaysian phone number
• Email address
• Date of birth (for age verification, minimum age 21)
• Password (stored in encrypted form — we cannot view your password)

Data collected automatically when you use Wins88:

• Your device's IP address
• Device type and web browser used
• Activity history on the platform (betting, gaming, deposits, withdrawals)
• Login session date and time
• Cookie data to enhance user experience

Data collected during the identity verification (KYC) process:

• A copy of your Malaysian identity card (MyKad) or passport
• Proof of address if required (utility bill or bank statement)
• Payment account information (e-wallet or bank account name — not card numbers or PINs)

Wins88 does not collect sensitive data such as medical information, political opinions, or religious beliefs. The financial data we retain is limited strictly to transaction history within the Wins88 platform — not your full banking account details.

Wins88 uses members' personal data solely for the following purposes. Each use has a clear legal basis:

• Account Management: To register and manage your Wins88 account, process logins, and maintain the security of your account.
• Transaction Processing: To process deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost and ShopeePay in Malaysian Ringgit (RM).
• Identity Verification: To comply with KYC (Know Your Customer) and anti-money laundering (AML) requirements as mandated by industry regulations.
• Customer Support: To help you resolve account issues, transaction enquiries or technical problems through our Bahasa Malaysia live chat.
• Platform Security: To detect and prevent fraud, unauthorised access, multiple account usage, and suspicious activity that could compromise the security of other members.
• Service Improvement: To understand platform usage patterns in aggregate (not at an individual level), with the aim of improving Wins88 features and the overall user experience.
• Account-Related Communications: To send you important account-related notifications — including security alerts, transaction confirmations and policy updates. These are not marketing emails.

Wins88 does not use your personal data to build psychological profiles, for third-party cross-selling, or for any purpose not stated in this policy. If we intend to use your data for a new purpose, we will seek your consent beforehand.

Wins88 does not sell your personal data to any party. However, there are limited situations where we need to share certain data with specific parties in order to operate the platform:

Payment Service Providers: When you make a deposit or withdrawal, the transaction data shared with payment gateways (such as Touch 'n Go, FPX, or GrabPay providers) is kept to a minimum, limited strictly to the information needed to complete the transaction. These providers are governed by their own privacy policies and are not permitted to use your data for any other purpose.

Game Providers: Providers such as Evolution Gaming, Pragmatic Play Live, PG Soft, and others may receive minimal technical data (such as session IDs) required to load games. They do not receive your full personal data and are bound by strict confidentiality agreements with Wins88.

Legal Requirements: Wins88 may be required to disclose personal data to the relevant authorities when requested through a valid legal process. In such situations, we will endeavour to notify you in advance unless prohibited from doing so by law.

Fraud Investigation: In cases involving suspected fraud or money laundering, Wins88 may be required to share relevant information with the appropriate law enforcement or industry bodies.

In all of the above cases, data shared is kept to the minimum necessary for the stated purpose. Wins88 does not permit any third party to use our members' data for their own independent marketing purposes.

Wins88 takes security infrastructure seriously to protect members' personal data. The following are the security measures we have in place:

• Data Encryption in Transit: All communication between your device and Wins88 servers is protected by TLS 1.3 (Transport Layer Security) — the latest encryption protocol that supersedes the older SSL standard. This means no third party can read your data while it is in transit.
• Data Encryption at Rest: Sensitive data stored on Wins88 servers — including passwords (stored as non-reversible hashes) and identity information — is kept in encrypted form.
• Strict Access Controls: Only authorised Wins88 staff who require access to specific data to carry out their duties may access it. All access is logged and reviewed regularly.
• 24/7 Security Monitoring: Automated monitoring systems operate around the clock to detect unusual activity or unauthorised access attempts on our servers and member accounts.
• Regular Security Audits: Wins88 conducts regular security audits and penetration testing to identify and patch vulnerabilities before they can be exploited.
• No Payment Card Information Stored: Wins88 does not store your credit card numbers, CVV, PIN, or full bank account details. All financial transactions are handled entirely by licensed payment gateways.

Even with all these measures in place, no security system in the world can be guaranteed 100% proof against every threat. We therefore also encourage members to practise good security on your end — use a strong password, do not share your login credentials, and log out of your Wins88 account when using a shared device.

Wins88 retains members' personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law.

• Active Account Data: Personal data and transaction history of active members are retained for the duration of active membership and for a minimum of 5 years after account closure, in line with AML compliance requirements and industry regulations.
• Login and Activity Data: Platform activity logs are retained for 12 months for security and dispute resolution purposes. Older logs are periodically deleted or anonymised.
• KYC Documents: Copies of identity documents submitted during identity verification are retained for the period required by regulation — typically 5 years after account closure.
• Support Communication Data: Live chat and email conversation records with the Wins88 support team are retained for 24 months for quality control and dispute resolution purposes.

When data is no longer needed and there is no legal requirement to retain it, Wins88 will securely delete or anonymise it. Anonymised data can no longer be linked to any individual and may be used for aggregate analytics purposes.

As a Wins88 member, you have the following rights regarding your personal data. All requests can be submitted to the Wins88 support team via live chat or email at support@wins88.run:

Wins88 will respond to all data rights requests within a reasonable timeframe at no charge for reasonable requests. For complex or repeated requests, we reserve the right to verify your identity before proceeding, to ensure your data is not disclosed to unauthorised parties.

Wins88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored on your device when you visit a website.

Types of cookies used by Wins88:

• Session Cookies (Required): Required to keep you logged in during your gaming session, manage your bet slip, and secure your transactions. These cookies cannot be disabled without affecting core platform functionality.
• Preference Cookies: Stores your preferences such as interface language, favourite games, and display settings to personalise your Wins88 experience.
• Analytics Cookies: Helps us understand how members use the Wins88 platform — which pages are visited most frequently, session duration, and so on. This data is collected in aggregate and cannot be linked to any individual. Wins88 uses this data to improve the platform.
• Security Cookies: Helps detect suspicious login attempts and protects your account from unauthorised access.

You can manage your cookie preferences through your web browser. However, disabling essential cookies may affect the functionality of the Wins88 platform, including your ability to log in or complete transactions. Wins88 does not use third-party cookies for targeted advertising.

Wins88 sends members two types of communications — mandatory transactional communications and optional marketing communications.

Transactional Communications (Required): These are important account-related notifications that cannot be stopped while your account remains active. They include deposit and withdrawal confirmations, account security alerts such as password changes, important updates to the Terms & Conditions or Privacy Policy, and responses to your customer support enquiries.

Marketing Communications (Optional): This includes new bonus offers, special promotions, Sports Betting information such as the latest Malaysia Super League and EPL odds, as well as new game announcements. You may opt out of marketing emails at any time via the "unsubscribe" link at the bottom of any marketing email, or through your Wins88 account settings.

Wins88 does not send marketing communications to your phone number without your explicit consent. Any SMS notifications you receive are strictly for two-factor authentication (2FA) security verification and contain no marketing content.

While Wins88 takes every reasonable step to protect members' personal data, we acknowledge that cybersecurity incidents are a possibility on any digital platform. In such an unwanted situation, Wins88 is committed to:

• Detecting data breaches promptly through our monitoring systems.
• Containing the breach and promptly assessing its scope upon detection.
• Notifying affected members within a reasonable timeframe after a breach is confirmed — via registered email and in-platform notifications on Wins88.
• Notifying the relevant authorities in accordance with applicable legal requirements.
• Taking remedial steps to prevent similar breaches from occurring in the future.

Breach notifications to members will include details on the type of data that may have been exposed, the date the incident occurred or is estimated to have occurred, the steps Wins88 has taken and is taking in response, and recommended actions for you to protect yourself — such as changing your password or monitoring your payment account activity.

Wins88 reserves the right to update or amend this Privacy Policy at any time as needed — whether due to changes in law, evolving industry practices or improvements to our services. Any material changes will be communicated to members via their registered email and in-platform notifications at least 14 days before taking effect.

The "Updated" date at the top of this page reflects the date of the latest revision. Your continued use of the Wins88 platform following any amendments constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding your data privacy at Wins88, please reach out to us via:

• Live Chat: Available 24 hours a day, 7 days a week in Bahasa Malaysia and English — the fastest way to get a response.
• Email: support@wins88.run — for formal inquiries or those requiring written documentation.

The Wins88 team is committed to responding to all privacy-related enquiries within 3 business days. For data deletion or data copy requests that require identity verification, the process may take up to 14 business days.