winmy13 Privacy Policy

1 Introduction

winmy13 ("the Platform", "we", "us", "our") operates the online gaming and sports betting services accessible at winmy13.org. As a platform serving players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and the wider region — we collect and handle personal data in the ordinary course of providing our services.

This Privacy Policy is issued in accordance with applicable data protection principles and sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by winmy13. We are committed to ensuring that your information is kept secure, used only for legitimate purposes, and handled with full transparency.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall agreement governing your use of winmy13.

2 Data We Collect

winmy13 collects the following categories of personal data from Members and platform visitors:

2.1 Identity Data

• Full legal name as per identity document;
• Date of birth (used to verify the 21+ age requirement);
• Government-issued identification number (e.g., MyKad NRIC or passport number);
• Copies of identity documents submitted during KYC verification.

2.2 Contact Data

• Email address (primary account identifier and communication channel);
• Mobile phone number (used for account verification and, where opted into, promotional communications);
• City or state of residence (for regional compliance and responsible gaming purposes).

2.3 Financial Data

• Bank account details or e-wallet identifiers (Touch n Go, Boost, GrabPay) submitted for withdrawal processing;
• Transaction history including deposit amounts, withdrawal amounts, and dates;
• Payment method type and provider (e.g., Maybank2u, CIMB Clicks, DuitNow, FPX).

2.4 Betting & Gaming Data

• Full history of bets placed, games played, outcomes, and winnings;
• Bonus utilisation and wagering activity;
• Session duration and frequency of platform use.

2.5 Technical Data

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Cookie identifiers and session tokens (see Section 7).

2.6 Communications Data

• Records of communications with winmy13 support staff, including live chat logs and email correspondence;
• Feedback, complaints, or dispute submissions made through the platform.

3 How We Collect Data

winmy13 collects personal data through the following methods:

• Direct submission — data you provide when registering an account, completing KYC verification, making a deposit, requesting a withdrawal, or contacting support;
• Automated collection — technical data gathered automatically when you access the winmy13 platform, including via cookies, server logs, and tracking technologies (see Section 7);
• Third-party providers — identity verification data and fraud risk scores returned by our KYC and payment processing partners;
• Public sources — where permitted by law, data from publicly available databases used for fraud prevention or regulatory compliance.

4 How We Use Your Data

winmy13 uses the personal data it collects for the following purposes:

• To create and manage your winmy13 account;
• To verify your identity and age (21+ requirement) in compliance with our obligations under applicable gaming authority regulations;
• To process your deposits, withdrawals, and other financial transactions in MYR;
• To provide, operate, and improve the winmy13 platform including sportsbook, live casino, and slots services;
• To detect and prevent fraud, money laundering, bonus abuse, and other prohibited conduct;
• To comply with legal obligations, including responding to law enforcement requests and anti-money laundering (AML) reporting requirements;
• To send you transactional communications (deposit confirmations, withdrawal notifications, security alerts);
• To send you promotional communications where you have consented to receiving them — you may opt out at any time;
• To support responsible gaming — including monitoring for signs of problem gambling behaviour and administering self-exclusion requests;
• To resolve disputes, enforce our Terms & Conditions, and defend legal claims.

5 Legal Basis for Processing

winmy13 processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfil our obligations to you under the Terms & Conditions (e.g., account management, payment processing);
• Legitimate interests — processing necessary for our legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights;
• Legal obligation — processing required to comply with applicable law, regulatory requirements, or gaming authority obligations;
• Consent — where you have given explicit consent, such as for receiving marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

winmy13 does not sell your personal data to third parties. We may share your data in the following limited circumstances:

• Payment processors — financial data is shared with Malaysian banking partners and e-wallet providers (Maybank, CIMB, Touch n Go, Boost, DuitNow, FPX, etc.) solely to process your transactions;
• Identity verification providers — identity documents and data may be shared with third-party KYC service providers for age and identity verification;
• Game providers — where required for game functionality, session identifiers or anonymised player references may be shared with certified game providers in our platform;
• Regulatory and law enforcement bodies — winmy13 will disclose data as required by law, court order, or applicable gaming authority directive;
• Fraud prevention networks — where necessary to prevent fraud or abuse, data may be shared with industry-standard fraud prevention databases;
• Corporate restructuring — in the event of a merger, acquisition, or sale of assets, Member data may be transferred to the acquiring entity subject to equivalent data protection commitments.

All third-party data processors engaged by winmy13 are contractually required to handle your data in accordance with applicable data protection standards and solely for the purposes for which it was shared.

7 Cookies & Tracking Technologies

winmy13 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies used include:

• Strictly necessary cookies — essential for the platform to function, including session authentication and security tokens. These cannot be disabled;
• Functional cookies — used to remember your preferences (e.g., language, odds format) and improve your experience;
• Analytics cookies — used to collect aggregated, anonymised data about how Members use winmy13, to help us improve platform performance;
• Security cookies — used to detect and prevent fraudulent login attempts and suspicious account activity.

You may control cookie settings through your browser. However, disabling strictly necessary cookies will prevent certain features of the winmy13 platform from functioning correctly. winmy13 does not use cookies to serve third-party advertising.

8 Data Retention

winmy13 retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, including for the duration of your account and for such period thereafter as may be required by applicable law or regulation.

In practice, this means:

• Account and identity data is retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations;
• Transaction and betting records are retained for a minimum of five (5) years;
• Communication records (support logs) are retained for two (2) years;
• Technical logs (IP addresses, session data) are retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9 Data Security

winmy13 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the winmy13 platform;
• Encrypted storage of sensitive data including payment details and identity documents;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of the winmy13 infrastructure;
• Two-factor authentication (2FA) options for Member accounts.

Whilst winmy13 takes all reasonable steps to protect your data, no system of data transmission or storage over the internet can be guaranteed to be completely secure. Members are advised to maintain strong, unique passwords and to notify winmy13 immediately if they suspect any unauthorised access to their account.

10 Your Rights

Subject to applicable law and the legitimate interests of winmy13, you have the following rights in respect of your personal data:

To exercise any of these rights, please contact winmy13 support via the live chat function or via email at: [email protected]. winmy13 will respond to all valid data rights requests within thirty (30) days.

11 Children & Minors

12 Third-Party Links

The winmy13 platform does not contain links to third-party websites in its primary navigation or content areas. To the extent that any third-party content is displayed on the platform (such as within game provider interfaces), winmy13 is not responsible for the data practices of those third parties. Members should review the privacy policies of any external service they interact with.

13 International Data Transfers

winmy13 operates under an international gaming authority licence. As a result, certain personal data may be processed or stored on servers located outside Malaysia. Where such transfers occur, winmy13 ensures that appropriate safeguards are in place — including contractual data protection clauses with processing partners — to ensure that your data receives a level of protection equivalent to that applicable within Malaysia.

14 Changes to This Privacy Policy

winmy13 reserves the right to update or revise this Privacy Policy at any time. Material changes will be notified to Members via the registered email address on their account and/or via a prominent notice on the winmy13 platform. The revised policy will take effect on the date stated in the notice. Continued use of the winmy13 platform following such notice constitutes acceptance of the revised Privacy Policy.

15 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which winmy13 handles your personal data, please contact us via:

• Live Chat — available 24/7 via the winmy13 platform;
• Email — [email protected] (plain text only — not a clickable link).

Please include your registered username and a clear description of your query. winmy13 aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 days.