Privacy Policy WinClub — Our Commitment to Protecting Malaysia Members' Data

WinClub collects various types of information from members to keep the platform running correctly, securely, and at its best. We only collect information that is genuinely necessary for platform operations — we do not collect excessive or irrelevant data.

1.1 Information You Provide Directly

• Registration Information: Full name, email address, Malaysian phone number, date of birth, and account password during registration.
• Identity Verification Documents: A copy of your MyKad or Malaysian passport may be requested as part of the KYC (Know Your Customer) process to meet compliance requirements.
• Financial Information: Details of your chosen payment method — this does not include your full credit card number or bank PIN. WinClub retains only the transaction identifiers required to record and process payments.
• Communications with Our Team: The content of any enquiries, complaints, or conversations you submit to the WinClub support team via live chat or email.

1.2 Automatically Collected Information

• Platform Usage Data: Game history, bets placed, deposit and withdrawal transactions, and browsing activity within the WinClub platform.
• Device & Connection Information: Device type, operating system, web browser, IP address, and coarse location data (state/city) based on IP address.
• Cookie Data: Information collected through cookies and similar technologies to improve platform functionality and personalise your experience.

WinClub uses the data collected for several core purposes, all of which relate to operating the platform and improving the experience for members in Malaysia. We do not use your data for purposes you would not reasonably expect or that are unrelated to WinClub's services.

WinClub will not use your data to make automated decisions that materially affect your rights without meaningful human involvement. Any significant decisions regarding your account — such as suspension or closure — will be manually reviewed by our team before being carried out.

Data security is WinClub's highest priority. We continually invest in security infrastructure to ensure that your personal and financial information is always protected from unauthorised access, loss, or misuse.

3.1 Technical Security Measures

• 256-bit SSL encryption for all data in transit between your device and WinClub's servers
• Data encryption at rest for all sensitive information stored in our databases
• Multi-layered firewall and intrusion detection system that monitors platform traffic in real time
• Two-factor authentication (2FA) is available as an additional security layer for member accounts
• Regular security audits conducted by our internal security team and independent third parties
• 24/7 monitoring for suspicious activity and cybersecurity threats

3.2 Organisational Security Measures

Access to WinClub members' personal data is restricted to staff who require it to carry out their legitimate job responsibilities. All WinClub personnel who handle personal data are bound by strict confidentiality agreements and undergo regular privacy training. We operate on a "minimum access" principle — each staff member is granted access only to the data necessary for their specific role.

In the unlikely event that a data breach occurs, WinClub is committed to notifying affected members in a timely manner in accordance with Malaysian legal requirements and industry best practices. We will provide clear information about the nature of the breach, the data that may have been affected, and the steps being taken to mitigate its impact.

WinClub does not sell, rent, or transfer members' personal data to third parties for their own marketing or commercial purposes. This is a commitment we have never compromised on since the platform launched.

There are, however, limited situations where WinClub needs to share data with certain parties for platform operational purposes — and we want you to be fully aware of this:

4.1 Authorised Service Providers

WinClub works with trusted third-party service providers to handle certain aspects of platform operations, including payment processors (such as Touch 'n Go, DuitNow, GrabPay, and FPX operators), IT and database service providers, and web analytics platforms that help us understand how members use the platform. All of these service providers are bound by strict confidentiality agreements and are only permitted to use shared data for the specified purpose.

4.2 Legal Requirements

WinClub may be required to disclose members' personal information to Malaysian government authorities or law enforcement bodies when compelled to do so by law, court order, or anti-money laundering compliance requirements. In such circumstances, WinClub will inform the affected member of the disclosure, provided doing so is not prohibited by law.

4.3 Protection for Service Providers

WinClub ensures that every third-party service provider we engage meets privacy and data security standards that are equal to or higher than our own. We conduct thorough due diligence before onboarding any service partner and review their compliance on a regular basis.

WinClub uses cookies and similar tracking technologies to keep the platform running smoothly and to deliver a better experience for members. Below is a clear explanation of the cookies we use and their purposes.

5.1 Cookies We Use

• Essential Cookies (Required): These cookies are required for the core functionality of the WinClub platform, including login, session management, and security. Without them, the platform cannot operate properly. These cookies cannot be disabled.
• Preference Cookies: Helps the WinClub platform remember your preferences such as language, theme and display settings to deliver a more personalised experience.
• Analytics Cookies: We collect information on how members use the WinClub platform — pages visited, time spent, and navigation patterns — to help us understand and improve the user experience. This data is collected in aggregate form and does not identify any individual personally.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and maintain the integrity of your login session.

5.2 Cookie Management

You can manage your cookie settings through your web browser at any time. Most modern browsers let you view, delete, or block cookies. Keep in mind, however, that disabling essential cookies may affect the functionality of the WinClub platform and your overall experience. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

WinClub retains members' personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy and to comply with applicable legal obligations.

6.1 Data Retention Periods

• Active Account Data: For as long as your WinClub account remains active, your account data will be fully retained to ensure the platform's services can operate without interruption.
• Financial Transaction Records: A minimum of 7 years from the date of the transaction, in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA).
• Data After Account Closure: WinClub retains the necessary records for a minimum of 5 years following account closure for compliance purposes and to resolve any potential disputes.
• Security Logs: Security log data is retained for 12 months to support investigations into any security incidents that may be reported at a later date.

6.2 Data Deletion Upon Request

You have the right to request deletion of your personal data, subject to the legal retention requirements stated above. Deletion requests can be submitted to support@winclub.cash. WinClub will process your request within 30 business days and notify you of the outcome. Please note that we may not be able to fulfil a deletion request in full if the data is still required to meet our legal obligations.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international privacy best practices, you as a WinClub member have the following rights regarding your personal data:

To exercise any of the rights above, please contact the WinClub team by email at support@winclub.cash, stating the right you wish to exercise and any relevant details. We will verify your identity before processing your request to ensure your privacy is fully protected.

WinClub communicates with members for a range of purposes — from important account updates to information about the latest promotions and bonuses. We respect your preferences regarding how and how often we contact you.

8.1 Mandatory Communications

There are certain communications we are required to send you regardless of your preferences — these include deposit and withdrawal transaction confirmations, account security alerts such as logins from new devices, important updates to our Terms & Conditions or Privacy Policy, and any information required by law. These communications form part of our service agreement and cannot be unsubscribed from.

8.2 Marketing Communications

With your consent given at registration, WinClub may send you information about promotions, new bonuses, the latest games, and exclusive offers via email or in-app notifications. You can opt out of marketing communications at any time in two ways: (1) Click the "unsubscribe" link in any marketing email, or (2) Update your communication preferences in your WinClub account settings. Unsubscribe requests will be processed within 3 business days.

8.3 Content Personalisation

WinClub uses your gaming activity data to personalise game recommendations and relevant promotions. This means you are more likely to receive information about the types of games you enjoy — badminton, slots, baccarat, or others — rather than generic content that may not interest you. If you are not comfortable with this personalisation, you can request that it be stopped by contacting our team.

WinClub reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to how we handle member information. The "Updated" date at the top of this document will always reflect the date of the most recent revision.

For material amendments that significantly affect how we use your data, WinClub will provide reasonable notice via email or in-platform notification at least 14 days before the changes take effect. Continued use of the WinClub platform after that notice period constitutes your acceptance of the updated Privacy Policy.

For minor amendments that have no material impact — such as spelling corrections or clearer explanations of existing practices — changes take effect immediately upon publication without prior notice.

9.1 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how WinClub handles your personal data, please do not hesitate to reach out to us:

If you are dissatisfied with how WinClub has handled your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.