WIN99 Privacy Policy – Data Protection & Information Security

1 Introduction

WIN99 ("we", "Platform", "Company") respects the privacy of every individual who uses our services. This Privacy Policy is designed to transparently explain how we handle your personal information — from how it is collected, stored, and used, to how it is protected and disposed of when no longer needed.

This policy applies to all registered WIN99 members, website visitors, mobile app users, and any individual who interacts with our platform through any official channel. By registering an account or continuing to use the WIN99 platform, you immediately consent to the terms set out in this Privacy Policy.

WIN99 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and upholds internationally recognized data protection principles to ensure your information is managed responsibly and transparently.

2 Information We Collect

WIN99 only collects information necessary for platform operations, account security, transaction processing, and legal compliance. The types of information we collect are as follows:

We do not collect sensitive personal information such as biometric data, medical records, or religious information unless required by law. All data collection is conducted openly and with your knowledge.

3 How We Use Your Information

Information collected by win99 is used responsibly and only for the purposes stated below. We will not use your data for any other purpose without notifying you in advance.

• Account Management: Create, manage, and maintain the security of your member account at all times.
• Transaction Processing: Process deposits, withdrawals, bonuses, and all financial activity in your account accurately and promptly.
• Identity Verification (KYC): Verify your identity to comply with legal requirements for anti-money laundering (AML) and counter-terrorism financing (CFT).
• Platform Security: Detect and prevent fraudulent activity, manipulation, or multi-account usage that violates win99's terms.
• Service Improvement: Analyse aggregated usage patterns (without identifying individuals) to improve platform features, performance, and user experience.
• Service Communications: Send important notices relating to your account, security, changes to terms, or service disruptions that directly affect you.
• Marketing (with consent): Send promotional information, bonus offers, and exclusive campaigns where you have consented to receive such communications.
• Legal Compliance: Fulfil any legal obligations, regulatory directives, or enforceable court orders.

4 Sharing Information With Third Parties

WIN99 does not sell, rent, or disclose member personal information to third parties for commercial or marketing purposes without your consent. However, there are limited situations where information sharing may occur:

• Integrated Service Providers: WIN99 works with trusted payment service providers, gaming platforms, and technology infrastructure providers. These parties only receive access to the information necessary to perform their services and are bound by strict confidentiality agreements.
• Legal Requirements: WIN99 may be required to disclose personal information to government authorities, regulatory bodies, or courts where mandated by law or a valid legal order.
• Fraud Prevention: In cases involving fraudulent activity or financial crime, relevant information may be shared with law enforcement agencies or recognised fraud prevention bodies.
• Business Restructuring: In the event that WIN99 is involved in a merger, acquisition, or asset sale, member information may be transferred to the successor entity, subject to appropriate notice being provided to members.

In all of the above scenarios, WIN99 ensures that recipients of your information are bound by data protection obligations equivalent to or stricter than those we uphold ourselves.

5 Data Security

WIN99 continuously invests in advanced cybersecurity infrastructure to keep your personal information protected at all times. The technical and organizational security measures we implement include:

• Data in transit is encrypted using TLS 1.3 and 256-bit SSL protocols for all communications between your browser and win99's servers.
• Data at rest is encrypted using the AES-256 standard across all primary databases.
• Two-factor authentication (2FA) for an additional layer of protection during login.
• Round-the-clock security monitoring by win99's cybersecurity team with a real-time threat detection system.
• Regular penetration testing by independent third parties to identify and address any system vulnerabilities.
• Role-based access control (RBAC) ensuring only authorised staff can access sensitive data.
• Secure and regular data backups with tested disaster recovery procedures to ensure continuity of service.

6 Cookies & Tracking Technologies

WIN99 uses cookies and similar tracking technologies to enhance your platform experience. Understanding the types of cookies we use helps you make more informed decisions about your privacy.

• Essential Cookies: Required for core platform functions such as login session verification, security, and language preferences. These cookies cannot be disabled as they are critical to platform operations.
• Performance Cookies: Collect anonymous data on how you use the win99 platform to help us improve website performance and usability.
• Functional Cookies: Remember your preferences and settings such as display configuration, preferred language, and login details for your convenience.
• Analytics Cookies: Used to understand traffic patterns and aggregate user behaviour for the purpose of ongoing platform improvement.

You can manage or block cookies through your web browser settings. However, blocking essential cookies may affect platform functionality and your overall user experience.

7 Your Rights as a Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the data protection principles we uphold, you have the following rights regarding your personal information:

To exercise any of the above rights, please contact the WIN99 support team. We will process your request within 30 business days from the date we receive your complete request.

8 Data Retention

WIN99 retains your personal information for as long as necessary to fulfil the purpose of collection and meet relevant legal requirements. In general, our data retention policy is as follows:

• Active account data: Retained for the duration your account remains active, plus the period stipulated by legal requirements following account closure.
• Financial transaction records: Retained for a minimum of seven (7) years in line with Malaysia's financial and tax legal requirements.
• KYC documents: Retained for a minimum of five (5) years after the business relationship is terminated, in accordance with anti-money laundering requirements.
• Technical and security logs: Retained for a reasonable period for security and audit purposes, typically not exceeding 24 months.
• Customer support communications: Retained for 36 months for service reference and improvement purposes.

Once the retention period has expired and there is no legal requirement to retain the data longer, WIN99 will delete or anonymize the data in a secure and irreversible manner.

9 Links to Third-Party Services

The win99 platform may contain links or integrations with third-party services such as payment providers and third-party game providers. win99's Privacy Policy applies solely to the win99 platform.

WIN99 is not responsible for the privacy practices or content of any third-party websites or services. We encourage you to read the privacy policy of any third-party service you access through our platform before providing them with any personal information.

10 Changes to This Privacy Policy

WIN99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, technologies used, or applicable legal requirements. Any material changes will be communicated to you via:

• Notices published prominently on the win99 website homepage.
• Email notification to all registered members before changes take effect.
• In-platform notifications for logged-in members.

The "Last Updated" date at the top of this page will always reflect the latest version of the Privacy Policy in effect. Your continued use of the WIN99 platform after any changes take effect will be considered your acceptance of the latest version of the Privacy Policy.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy, WIN99's Data Protection Officer team is ready to assist you.

You may reach us through the customer support channels available on the platform, including 24/7 live chat or via our support email. We are committed to responding to all privacy-related enquiries within 5 business days.