Winrm18 Privacy Policy – User Data Protection

1 Information We Collect

Winrm18 collects various types of personal information to enable us to provide you with a safe, fair and responsible betting service. The following are the main categories of information we collect:

We only collect information that is strictly necessary for the stated purposes. winrm18 does not collect sensitive data categories such as health information, religious beliefs or political views, unless you voluntarily disclose them in communications with our support team.

2 How We Use Your Personal Data

Winrm18 uses your personal information only for lawful and transparent purposes. The following are the primary purposes for which your data is used on the winrm18 platform:

• Account management: Registering your account, verifying your identity through the KYC process, and enabling you to securely log in to the winrm18 platform.
• Service delivery: Processing bets, managing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and processing withdrawals to your account.
• Security & fraud prevention: Detecting and preventing fraudulent activity, money laundering, multiple account usage and violations of winrm18 Terms & Conditions.
• Customer support: Resolving complaints, responding to enquiries, and providing technical support to you.
• Legal compliance: Fulfilling compliance obligations under the Personal Data Protection Act 2010 (PDPA), anti-money laundering (AML) requirements, and directives from Malaysian authorities.
• Targeted marketing: Sending you relevant bonus offers, promotions, and new game updates — subject to the communication preferences set in your account.
• Platform improvement: Analysing usage patterns to improve user experience, platform performance, and the range of games offered.

Winrm18 will not use your data for any purpose beyond those stated above without first obtaining your consent. If you wish to withdraw consent for any specific purpose, you may contact our privacy team at support@winrm18.my.

3 Information Sharing & Disclosure

Winrm18 takes a highly cautious approach to sharing user data. We does not sell or rent your personal data to any party. Your information may only be shared in the following limited circumstances:

• Approved service providers: Third parties that help us operate the winrm18 platform, such as payment gateway providers (Touch 'n Go, GrabPay, DuitNow, FPX), licensed gaming software providers, and audited cloud service providers. All third parties are bound by strict confidentiality agreements.
• Legal requirements: When winrm18 is required by law, court order, or direction from Malaysian authorities (including the PDRM, BNM, and relevant agencies) to disclose certain information.
• Legitimate interests protection: In situations where disclosure is necessary to protect winrm18's legal rights, prevent fraud, or ensure the safety of other users on the platform.
• Business transfer: In the event of a merger, acquisition or sale of winrm18 assets, user data may be transferred as part of that transaction. You will be notified in advance via a notice published on the platform.

Any data sharing that occurs outside the scenarios described above requires your explicit consent. winrm18 also ensures that cross-border data transfers (where applicable) comply with PDPA requirements and internationally recognised data protection standards.

4 Data Security & Protection Measures

Winrm18 continuously invests in the latest cybersecurity infrastructure to keep your personal data protected at all times. The technical and organisational measures we implement include:

• Data-in-transit encryption using TLS 1.3 and 256-bit SSL protocols.
• At-rest encryption for all sensitive user records.
• Two-factor authentication (2FA) for added user account protection.
• Regular security audits conducted by independent, experienced third parties.
• Role-based access control (RBAC) ensuring that only authorised personnel are able to access user data.
• 24/7 monitoring system to detect any anomalies or unauthorised access attempts.
• A clear, well-rehearsed security incident response procedure to ensure prompt action in the event of a data breach.

While we take all reasonable steps to protect your data, no system can guarantee 100% absolute security. Should a data breach occur that affects your personal information, winrm18 will notify you within the timeframe prescribed by the Malaysian PDPA and take immediate action to limit the impact.

5 Cookies, Analytics & Tracking Technologies

The winrm18 platform uses cookies and similar tracking technologies to enhance your experience and help us understand how the platform is used. The following are the types of cookies used by winrm18:

• Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Stores user preferences such as display language and account settings to facilitate repeat visits.
• Analytics Cookies: Collects statistical information on how the platform is used, the most frequently visited pages and session duration. This data is used to improve the performance of the winrm18 platform.
• Marketing Cookies: Used to display relevant winrm18 offers and promotions based on your interests. You can opt out of marketing cookies at any time.

You can manage cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of the winrm18 platform. For more information on managing cookies, refer to the help section of your browser.

6 Your Rights as a winrm18 User

As a winrm18 user and Malaysian citizen, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA):

To exercise any of the rights above, contact the winrm18 privacy team at support@winrm18.my by stating the type of request and your account identification details. We will process each request within 14 working days. In certain cases requiring additional verification, this period may be extended to up to 30 working days, with written notice provided to you.

7 Data Retention Period

Winrm18 retains your personal data only for as long as necessary to fulfil the purpose of collection or to meet applicable legal requirements. The following are our data retention guidelines:

• Active account data: Retained for the duration your account remains active on the winrm18 platform, and for an additional period following account closure as required by law.
• Financial transaction records: Retained for a minimum of 7 years from the date of transaction, in accordance with Malaysia's financial compliance and anti-money laundering (AML) requirements.
• Support communication log: Retained for 2 years from the date of communication for reference and dispute resolution purposes.
• Marketing data: Retained until you withdraw consent or request deletion, whichever comes first.
• Technical data and logs: Stored for a maximum of 12 months for security purposes and technical troubleshooting.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you personally. Our data deletion procedures are regularly audited to ensure compliance.

8 Children's Privacy

The winrm18 platform is strictly for users aged 18 and above. We do not intentionally collect or process personal data of individuals under the age of 18. If we discover that a child's data has been collected without valid consent, we will take immediate steps to delete that data and terminate the account in question.

If you are a parent or guardian and discover that your child has registered an account on winrm18, please contact us immediately at support@winrm18.my so we can take the appropriate action without delay.

9 Links to Third-Party Sites

The winrm18 platform may contain links to third-party sites or services, particularly our licensed game providers and payment partners. This winrm18 Privacy Policy applies solely to our platform and does not cover the privacy practices of any third-party sites or services.

Winrm18 is not responsible for the content or privacy practices of any third-party sites. We recommend reading the privacy policy of every platform you visit before providing them with any personal information.

10 Privacy Policy Amendments

Winrm18 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Any material amendments will be communicated to you via an in-platform notice or email to your registered address at least 7 days before the amendment takes effect.

The "Last Updated" date at the top of this page reflects the latest version of winrm18's Privacy Policy. Continued use of the platform after the amendment's effective date constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

11 Contact Our Privacy Team

If you have any questions, concerns, or requests regarding winrm18's Privacy Policy or the handling of your personal data, please do not hesitate to contact us through the following channels:

• Email: support@winrm18.my
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the winrm18 platform
• Response time: Privacy-related enquiries will be responded to within 3 business days

Our Data Protection Officer (DPO) team is ready to assist you with all matters relating to privacy and personal data protection. We are committed to ensuring your privacy rights are respected and upheld at all times on the winrm18 platform.