Privacy Policy winmy9 – Protection of Your Personal Data

Winmy9 collects various types of personal information for platform operations, identity verification and legal compliance. We only collect information that is strictly necessary and do not gather excessive or irrelevant data beyond the scope of our services.

In addition to information you provide directly, winmy9 also collects information automatically when you use our platform. This includes server logs, app performance data and diagnostic information that help us detect and resolve technical issues more quickly.

For the legally required KYC verification process, you will be asked to submit a copy of a valid identity document. These documents are stored securely and accessed only by authorised compliance staff. Once verification is complete, physical copies are not retained longer than necessary.

Winmy9 uses collected personal data solely for legitimate and transparent purposes. We do not use your data for purposes not stated in this Privacy Policy without first obtaining your additional consent.

• Account management: Creating, managing, and maintaining your member account, including the login process, password resets, and personal preferences.
• Transaction processing: Securely and efficiently processing deposits, withdrawals, and any other financial transactions you carry out on the winmy9 platform.
• Identity verification: Conducting mandatory KYC checks to ensure compliance with Malaysian laws on anti-money laundering and counter-terrorism financing.
• Fraud prevention: Identifying, investigating, and preventing fraudulent activity, account misuse, and security threats that could affect the platform and other members.
• Customer support: Providing effective technical support and customer service whenever you contact our support team.
• Service communications: Sending important notices regarding your account, terms changes, security updates, and relevant service information.
• Product improvement: Analysing aggregated usage patterns to improve platform design, technical performance, and the overall user experience.
• Personalised marketing: Sending promotional offers, bonuses, and new game information tailored to your interests and gameplay patterns — subject to your consent.
• Legal compliance: Fulfilling the legal and regulatory obligations applicable to the operations of the winmy9 platform.

All data processing activities carried out by winmy9 are grounded in a solid legal basis — whether based on your consent, contractual necessity, legal obligations or the legitimate interests of winmy9 that do not override your privacy rights.

The security of your personal data is a core commitment of winmy9. We continuously invest in the latest security infrastructure to ensure your information is protected at all times — both in transit and at rest.

The technical and organisational security measures we implement include:

• Data encryption at rest: All personal data stored in our databases is encrypted using AES-256, the encryption standard used by financial institutions and governments worldwide.
• Data encryption in transit: All communications between your device and winmy9 servers are secured with TLS 1.3 protocol, ensuring no third party can intercept your data.
• Layered access control: Access to members' personal data is strictly limited based on the principle of least privilege. Only staff with a legitimate business need are granted access, and every access is recorded in an audit log.
• 24/7 security monitoring: Our cybersecurity team continuously monitors the platform's infrastructure using real-time threat detection systems to swiftly identify and respond to any threats.
• Regular penetration testing: winmy9 conducts regular security testing, including penetration testing by independent security experts, to identify and patch any vulnerabilities before they can be exploited.
• Two-factor authentication (2FA): We encourage and support the use of 2FA for all member accounts as an additional layer of protection.

Data retention periods are determined based on service requirements and legal obligations. Generally, active account data is retained for the duration of your membership. Once an account is closed, data is kept for the minimum period required by Malaysian law (typically 7 years for financial records) before being securely deleted.

Winmy9 does not sell, rent or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where we need to share certain information with trusted parties to enable the platform to operate effectively.

• Payment processors: Required transaction information is shared with payment service providers such as FPX, Touch 'n Go, and GrabPay solely to process your financial transactions. These providers are bound by strict confidentiality agreements and PCI DSS compliance standards.
• Technology service providers: Some platform functions are operated by trusted third-party providers such as cloud services, analytics, and customer support. All such providers are bound by data processing agreements that set privacy standards equivalent to our own.
• Regulatory bodies and law enforcement agencies: Information is shared with relevant authorities when required by law, court order, or official requests from law enforcement agencies.
• Identity verification service providers: Data required for the KYC process is shared with licensed identity verification service providers that comply with PDPA.
• Auditors and professional advisors: In the context of audits, legal advice, or accounting, required information may be shared with professionals bound by strict confidentiality obligations.

In all data sharing scenarios, winmy9 ensures that the receiving party has adequate privacy protections in place and uses the data solely for the specified purpose. We do not permit service providers to use your data for their own purposes.

Winmy9 uses cookies and similar tracking technologies to enhance user experience, maintain session security and understand how members use our platform. Cookies are small text files stored in your web browser when you visit the winmy9 platform.

• Essential Cookies: These cookies are essential for the platform's core functions, including login session management, account security, and transaction processing. Without them, the platform cannot operate properly and you will be unable to use it.
• Performance Cookies: These cookies collect information about how you use the platform, such as the most frequently visited pages and any errors encountered. This data is used solely to improve platform performance.
• Functional Cookies: These cookies allow the platform to remember your preferences — such as language settings, time zone, and display preferences — to deliver a more personalised experience.
• Analytics Cookies: We use analytics tools to understand usage patterns in an aggregated and anonymised manner. This data helps us make data-driven decisions for continuous product improvement.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of the winmy9 platform. Please refer to your browser's documentation for detailed guidance on managing cookies.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have specific rights regarding your personal information held by winmy9. We are committed to facilitating the exercise of these rights.

To exercise any of the above rights, contact our Data Protection Officer (DPO) team via email or the platform's live chat. We will verify your identity before processing any data request to protect your privacy from unauthorised access.

Winmy9 is an adult entertainment platform that is strictly for individuals aged 18 and above. We take child protection extremely seriously and enforce strict age verification procedures during the registration and KYC process.

Winmy9 does not knowingly collect, store or process any personal data from individuals under the age of 18. Should we discover that personal information has been inadvertently collected from a minor, we will take immediate action to delete that data and close the associated account.

If you believe your child or any minor has registered an account on winmy9, please contact our support team immediately via the platform's live chat. We will investigate and take appropriate action within 48 hours.

In the course of winmy9's global platform operations, your personal data may be transferred to and processed outside Malaysia, particularly at data centres or cloud service providers located in other countries. Such transfers are carried out solely when necessary to deliver services to you.

When your personal data is transferred outside Malaysia, winmy9 ensures that:

• The recipient country or region maintains an adequate level of data protection that is comparable to or exceeds Malaysia's PDPA standards.
• Appropriate data transfer agreements have been put in place with recipient parties, incorporating comprehensive data protection clauses.
• Data recipients are bound by confidentiality and security obligations equivalent to those of winmy9 itself.
• Data transfers cover only the minimum information required for the specific service purpose.

You may contact us for more information about the safeguard mechanisms used for international data transfers, including obtaining a copy of the relevant data transfer agreements if required.

Winmy9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, applicable legal requirements or changes to the services we offer. We are committed to notifying you of any material changes.

When this Privacy Policy is amended in a material way, winmy9 will:

• Displaying a prominent notice on the platform's home page for at least 14 days before the changes take effect.
• Sending email notices to all registered members outlining the key changes made.
• Displaying an in-account notice upon your next login after any amendment is made.
• Updating the "Last Updated" date at the top of this document.

Continued use of the winmy9 platform after the effective date of any privacy policy amendment shall be deemed acceptance of the updated terms. If you do not agree with the changes made, you have the right to close your account and request data deletion before the effective date of those changes.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how winmy9 handles your personal data, we encourage you to contact us directly. Our Data Protection team is available to assist you 24 hours a day, seven days a week.

• Data Protection Email: [email protected]
• Live Chat: Available on the winmy9 platform — click the support icon at the bottom corner of the screen.
• Official Telegram: The official winmy9 Telegram channel listed within the platform.
• Response Time: All privacy enquiries are answered within 3 business days. Data access or deletion requests are resolved within 21 business days.

You may also lodge a formal complaint with the Department of Personal Data Protection Malaysia if you believe your privacy rights have been violated and winmy9 has not taken satisfactory action to resolve the matter.

For further reading on winmy9 platform policies and practices, we recommend reviewing the following documents:

• winmy9 Terms and Conditions — Full rules and terms governing the use of the platform.
• Responsible Gaming — Self-control guides and tools for a healthy gaming experience.
• Frequently Asked Questions (FAQ) — Answers to the most frequently asked questions by winmy9 members.