Privacy Policy win44 – Malaysia Player Data Security

Welcome to the win44 Privacy Policy. This document is written specifically to give you a clear and honest picture of how our platform handles your personal information. We understand that trust is the foundation of our relationship with every player — and that trust can only be built through genuine transparency.

Win44 is an online gaming platform serving users in Malaysia. This Privacy Policy applies to all information collected through the win44 website, our mobile app for Android and iOS, and any official communication channels including live chat, support email, and promotional campaigns. It covers all users who register an account, visit the website without registering, or interact with any part of our platform.

By registering an account or continuing to use the win44 platform after reading this Privacy Policy, you provide your consent to the management of your personal data as described in this document. If you do not agree with any provision herein, please discontinue use of the platform and contact our support team for further assistance.

Win44 collects your personal data through several different means — some you provide directly, some collected automatically as you use the platform, and some we receive from legitimate third parties for verification purposes. Below is a detailed breakdown of each category of data we collect:

Every piece of information we collect has a clear and legitimate purpose. win44 firmly upholds the principle that data may only be used for the purpose stated at the time of collection, and nothing beyond that. Below is a detailed breakdown of each purpose for which we use your data:

• Account management: Identity and contact data is used to create, verify, and maintain your account on the win44 platform. This includes the mandatory KYC process to ensure the security and integrity of the platform.
• Payment processing: Financial information is used solely to securely process deposits and withdrawals. win44 does not directly store credit or debit card details — all payment data is handled by certified payment providers.
• User experience enhancement: Technical data and game data help us understand platform usage patterns for continuous improvement, interface optimisation, and rapid detection of technical issues.
• Fraud prevention and anti-money laundering (AML): Transaction data and technical data are continuously analysed to identify suspicious patterns and protect all users from illicit activity.
• Service communications: Email address and phone number are used to send important account notifications, transaction updates, and necessary security alerts.
• Relevant marketing: With your consent, we may use your information to inform you of exclusive win44 promotions and offers that may interest you. You may unsubscribe from marketing communications at any time.

Your data security is the highest technical priority in the development and maintenance of the win44 platform. We continuously invest in the latest security infrastructure to ensure your data remains protected against both external and internal threats.

The key security measures we implement are as follows:

• Data encryption in transit: All communications between your device and win44 servers are encrypted using TLS 1.3 with AES-256-bit encryption, ensuring no third party can intercept your data while in transit.
• Data encryption at rest: Sensitive data stored in our database, including identity and financial information, is re-encrypted at the storage level using a separate encryption method.
• Internal access controls: Only win44 staff with a legitimate need to access specific data are granted permission, based on the principle of "least privilege". All access to personal data is recorded for audit purposes.
• 24/7 security monitoring: Our automated monitoring system detects and responds to any unauthorised access attempts, cyberattacks, or anomalies in real time, around the clock.
• Two-factor authentication (2FA): We fully support two-factor authentication for user accounts to add an extra layer of protection against unauthorised access.
• Regular penetration testing: The win44 platform undergoes regular security testing by independent third parties to identify and address system vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no online system can be guaranteed 100% secure. We encourage you to do your part by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

Win44 firmly upholds the principle that your personal data belongs to you, not to us to share at will. We do not sell, rent, or permit the use of your data for third-party advertising purposes without your explicit consent.

However, in the course of running a safe and efficient platform, there are limited situations where win44 needs to share certain data with trusted third parties:

• Payment service providers: FPX, DuitNow, Touch 'n Go eWallet, GrabPay, and Boost require minimal transaction information to process your deposits and withdrawals. They are subject to their own strict privacy policies and security standards.
• Identity verification service providers: To meet KYC and AML requirements, win44 may engage accredited third-party services to verify identity documents. This data is used solely for verification purposes.
• Technology service providers: The cloud computing, data storage, and analytics services we use are subject to strict data protection agreements with win44.
• Legal authorities: win44 is required to disclose necessary data to the relevant authorities when a valid court order or binding legal compliance obligation exists.

Win44 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help the platform remember your preferences and keep your login session secure.

The types of cookies used by win44 are as follows:

• Essential Cookies: These cookies are required for the platform's core functions, such as login session management and security. Without them, the platform cannot operate properly. This type of cookie cannot be disabled.
• Performance Cookies: Used to analyse how users interact with our platform, helping us identify the most frequently visited pages and detect any technical errors. All data is in aggregate form and does not identify individuals.
• Functional Cookies: Enables the platform to remember your preferences such as language, region, and display settings to deliver a more personalised experience.
• Security Cookies: Helps verify user identity and prevent unauthorised account access, including protection against CSRF (Cross-Site Request Forgery) attacks.

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the win44 platform and your gaming experience. For detailed instructions on managing cookies, please refer to your web browser's documentation.

Win44 does not retain your personal data longer than necessary for the purposes stated in this Privacy Policy. Data retention periods are determined based on operational needs, legal obligations, and the platform's legitimate interests.

• Active account data: For as long as your account is active on the win44 platform, your profile and account data will be retained to enable continued use.
• Data after account closure: Once an account is closed, your core personal data will be retained for a minimum of seven years to fulfil AML and applicable tax reporting obligations in Malaysia.
• Financial transaction records: Deposit, withdrawal, and game transaction records are retained for seven years in line with financial compliance and legal requirements.
• Support communication data: Live chat and support email records are retained for two years for reference in the event of any dispute.
• Technical data and access logs: Access logs and technical data are retained for 90 days for security and troubleshooting purposes.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or linked back to you.

As a win44 user and Malaysian resident, you have rights protected under the Personal Data Protection Act 2010. win44 is committed to ensuring you can exercise these rights easily and without unnecessary obstacles. Below is a list of your rights and how to exercise them:

• Right to access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 working days.
• Right to rectification: If any information we hold is inaccurate or outdated, you have the right to request prompt correction.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data, except where retention is required by law.
• Right to restrict processing: You may request that we restrict the use of your data in certain situations, such as while a dispute regarding data accuracy is ongoing.
• Right to object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of processing carried out prior to withdrawal.

In operating the win44 platform, a small amount of technical data may be processed on servers located outside Malaysia, primarily for cloud computing services and technical infrastructure that we use. win44 takes appropriate measures to ensure that any such data transfers are carried out with protection equivalent to Malaysian standards.

Every cross-border data transfer carried out by win44 is subject to the following conditions:

• Data processing agreement: All overseas service providers are contractually bound to protect your data to the same or higher standard as required under Malaysia's PDPA 2010.
• Risk assessment: Before engaging any service provider that requires international data transfer, win44 conducts a thorough risk assessment to ensure an adequate level of protection is in place.
• Sensitive data remains local: Sensitive identity information such as MyKad copies and KYC documents are processed and stored within Malaysia or at locations meeting equivalent protection standards.

Win44 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, technological developments, or user feedback. We are committed to carrying out this process transparently and responsibly.

Whenever a material change is made to this Privacy Policy, win44 will:

• Sending email notifications to all registered users at least 14 days before changes take effect.
• Displaying a clear notice on the platform's home page and on this Privacy Policy page regarding upcoming changes.
• Updating the "Last Updated" date displayed at the top of this document.
• Maintaining an archived version of previous Privacy Policies that can be requested through our support team.

Win44 has appointed a dedicated officer to handle all privacy and data protection inquiries and complaints. If you have any questions, concerns, or wish to exercise your rights as a data subject, we are here to help.

You may contact the win44 Privacy & Data Protection team through the following channels:

• Live chat: The fastest way to get an immediate response — available 24/7 directly on the win44 platform.
• Official email: Submit your written enquiry to [email protected]. We aim to respond to all emails within 2 business days.

For requests related to data rights (access, correction, deletion), please include your full name, win44 account number, and a brief description of your request. Identity verification will be required before we can process it, to protect your account security.