Privacy Policy win123 – Malaysia User Data Protection

Introduction & Scope of This Policy

This Privacy Policy is published by WIN123 ("we", "Platform", or "WIN123") and applies to all users who access or use the WIN123 platform through the website win123.plus, the mobile app, or any other official WIN123 channels.

We understand that privacy is of utmost importance to every user. In today's digital era, user trust in online platforms depends greatly on how those platforms handle personal data. At win123, we do not treat privacy as a mere legal obligation — it is a core value in building long-term, trusted relationships with every member.

This policy explains in detail the types of data we collect, why we need it, how we use it, who it may be shared with, and what your rights are as a user regarding that data. We encourage you to read this document carefully and to contact our team if any section is unclear or requires further clarification.

Types of Personal Data We Collect

Win123 only collects data that is genuinely necessary to provide you with a safe, seamless, and high-quality service. The data we collect falls into several main categories:

We do not collect sensitive data categories such as your health information, religious beliefs, or political views. Any additional data required for specific purposes will be requested with your explicit consent beforehand.

How We Use Your Personal Data

Every piece of data we collect has a clear and legitimate purpose. win123 uses your personal data for the following purposes:

• Account Management: Creating and managing your account, processing registration, and verifying identity through the required KYC process.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions related to your account quickly and securely.
• Platform Security: Detecting and preventing fraud, money laundering, player collusion, and any other security threats to the platform.
• Service Communications: Sending important notifications related to your account, transactions, policy changes, and relevant security updates.
• Responsible Gaming: Monitoring gaming habits to identify players who may need assistance and providing appropriate responsible gaming tools.
• Service Improvement: Analyzing usage patterns to improve platform quality, user experience, and to offer more relevant content.
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including reporting requirements to the relevant authorities when necessary.
• Marketing (with consent): Sending promotional offers, bonuses, and new product information — only if you have given consent to receive such communications.

Win123 will not use your data for any other purpose not stated above without obtaining your consent first.

Data Sharing & Disclosure

Win123 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, there are limited situations where your data may be shared with other parties:

• Trusted Service Providers: Companies that help operate win123's operations, such as payment processors (FPX, Touch 'n Go, GrabPay), cloud infrastructure providers, and identity verification companies. All these parties are bound by strict confidentiality agreements.
• Legal Authority: When required by law, court order, or official investigation by a competent authority in relation to financial crime or money laundering.
• Fraud Protection: Industry bodies or other platforms within a recognised anti-fraud network to prevent illegal activity across platforms.
• Business Transfer: If win123 is involved in a merger, acquisition, or sale of assets, user data may be transferred as part of the business assets, subject to equivalent privacy protections.

Cookies & Tracking Technologies

Win123 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login, session authentication, and security. These cookies cannot be disabled.
• Functional Cookies: Remembering your preferences such as language, display settings, and gaming preferences to deliver a more personalized experience.
• Analytics Cookies: Collecting information about how you use the platform to help us understand usage patterns and improve our services.
• Security Cookies: Helping detect suspicious activity, unauthorized login attempts, and protecting your account from unauthorized access.

You can manage or disable non-essential cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality of the WIN123 platform.

Security & Data Protection

Win123 continuously invests in the latest security infrastructure to ensure your personal data is always protected to the highest standard. The key security measures we employ include:

• 256-bit SSL encryption for all data transmitted between your device and win123 servers.
• Passwords are stored using one-way hashing algorithms that cannot be decrypted.
• Two-factor authentication (2FA) is available and encouraged for all user accounts.
• Automated 24/7 monitoring to detect and respond to security threats in real time.
• Regular security audits conducted by independent third parties every quarter.
• Strict internal access controls — only authorized and necessary personnel may access user data.
• A clear incident response procedure to address any data breaches swiftly and effectively.

While win123 takes all reasonable steps to protect your data, no security system can be guaranteed to be 100% risk-free. We encourage you to also take your own precautions, such as using a strong password and not sharing your login credentials with anyone.

Data Retention & Deletion

Win123 only retains your personal data for as long as it is needed to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

• Active Account Data: Retained for as long as your account remains active on the WIN123 platform.
• Financial Transaction Data: Retained for a minimum of seven (7) years from the transaction date in accordance with Malaysian financial legal requirements.
• KYC Data: Retained for a minimum of five (5) years after account closure or the date of the last related transaction.
• Communication Records: Retained for two (2) years for complaint resolution and service improvement purposes.
• Technical Log Data: Retained for ninety (90) days for security and technical diagnostic purposes.

Once the specified retention period expires, your data will be securely deleted or anonymised so that it can no longer be personally linked to you. If you request account closure, we will process the deletion of data not subject to legal retention requirements within 30 working days.

Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and WIN123's Privacy Policy, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You may request the deletion of your personal data under certain circumstances, subject to our legal obligations.
• Right to Withdraw Consent: You may withdraw consent for certain data processing, such as marketing, at any time.
• Right to Object: You may object to the processing of your data for specific purposes such as marketing profiling.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another platform.

To submit any request relating to the above rights, please contact the win123 Data Privacy Officer team via email at [email protected] or via live chat on the platform. We will process your request within 14 working days.

Children's Privacy & Age Restrictions

The win123 platform is strictly reserved for individuals aged 21 and above. win123 does not intentionally collect or process personal data from minors.

If we find that we have collected data from individuals below the specified age limit, we will take immediate action to delete that data and close the relevant account. Parents or guardians who believe their child may have provided personal information to win123 are encouraged to contact us immediately at [email protected].

Contact Our Data Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how win123 handles your personal data, please contact us through the following channels: