Your privacy matters to winmy18. This Privacy Policy explains what personal data winmy18 collects from you, why it is collected, how it is used, with whom it may be shared, and the rights available to you regarding that data. Please read this document carefully. By registering an account or using the winmy18 Platform, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy applies to all personal data processed by winmy18 ("winmy18", "we", "us", "our") in connection with the online gaming platform operated at winmy18.org ("Platform"). It applies to all registered Players, website visitors, and any other individuals whose personal data winmy18 processes in the course of its operations.
winmy18 is committed to handling personal data responsibly and in compliance with applicable data protection laws, including the obligations imposed under our international gaming authority operating licence. This Policy is reviewed periodically and updated to reflect changes in our data processing activities or applicable legal requirements.
For the purposes of applicable data protection legislation, winmy18 is the data controller in respect of personal data collected from Players and visitors to the Platform. winmy18 determines the purposes and means by which personal data is processed and bears responsibility for the lawful, fair, and transparent processing of that data.
Queries regarding this Privacy Policy or winmy18's data processing practices may be directed to the winmy18 data protection contact at: [email protected] (plain text — not a clickable link), with the subject line "Data Protection Enquiry".
winmy18 collects personal data from you in the following categories:
When you register an account with winmy18, we collect: full legal name, date of birth, email address, mobile phone number, and residential address. This data is required to create and maintain your account and to fulfil our KYC obligations under our operating licence.
As part of our KYC process, winmy18 collects copies of government-issued identification documents (such as a Malaysian MyKad, passport, or driving licence) and proof of address documentation. We may also collect selfie photographs for identity verification purposes.
winmy18 collects information relating to your deposits, withdrawals, and payment instruments, including e-wallet identifiers (Touch 'n Go, Boost, GrabPay), bank account details for FPX transfers, and transaction history. Full payment card numbers, where applicable, are handled directly by our payment processor and are not stored by winmy18.
winmy18 records all gaming transactions on the Platform, including game sessions, bet amounts, game outcomes, bonus usage, and account balance history. This data is necessary for game integrity, dispute resolution, and regulatory reporting.
winmy18 automatically collects technical data when you access the Platform, including: IP address, device type and operating system, browser type and version, pages visited, session duration, and referring URLs. This data is used for security monitoring, fraud detection, and Platform optimisation.
winmy18 retains records of communications between you and our support team, including live chat transcripts, WhatsApp messages, and email correspondence.
| Category | Examples | Collection Method |
|---|---|---|
| Identity | Name, DOB, email, phone, address | Registration form |
| KYC Documents | MyKad, passport, proof of address | Player upload |
| Financial | E-wallet ID, bank account, transactions | Cashier, payment processor |
| Gaming Activity | Bets, game history, bonuses | Automatic — Platform activity |
| Technical | IP address, device, browser, session | Automatic — server logs, cookies |
| Communications | Support chat, email records | Support interactions |
winmy18 uses the personal data it collects for the following purposes:
winmy18 processes your personal data on the following legal grounds:
winmy18 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:
All third parties with whom winmy18 shares personal data are required by contract to process that data only for the specified purpose and to maintain appropriate data security standards.
The winmy18 Platform and its associated service providers may operate data processing infrastructure outside of Malaysia. Where personal data is transferred to countries that do not provide equivalent data protection standards, winmy18 implements appropriate safeguards — including contractual data protection clauses — to ensure your personal data remains protected to a standard consistent with this Policy.
winmy18 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised.
winmy18 implements technical and organisational security measures proportionate to the risk associated with the personal data it processes. These measures include:
No data transmission over the internet can be guaranteed to be entirely secure. While winmy18 takes all reasonable steps to protect your personal data, you acknowledge that you transmit data to the Platform at your own risk. In the event of a data breach that poses a risk to your rights or interests, winmy18 will notify affected individuals in accordance with applicable legal obligations.
winmy18 uses cookies and similar tracking technologies on the Platform for the following purposes:
You may manage cookie preferences through your browser settings. Disabling certain categories of cookies may affect Platform functionality. winmy18 does not use cookies to serve third-party advertising or to track your activity across external websites.
Subject to applicable data protection law, you have the following rights in relation to your personal data held by winmy18:
To exercise any of these rights, contact winmy18 at [email protected] with the subject line "Data Rights Request". winmy18 will respond within 30 days. We may require verification of your identity before processing a data rights request.
The winmy18 Platform is strictly for persons aged 21 and above. winmy18 does not knowingly collect personal data from individuals under the age of 21. If you have reason to believe that a minor has registered an account or provided personal data to winmy18, please contact us immediately at [email protected]. winmy18 will investigate the matter promptly and, where confirmed, will close the account and securely delete the minor's personal data, subject to any mandatory regulatory retention obligations.
winmy18 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered Players via the email address on file or via a notification upon next login to the Platform. The "Last Updated" date at the top of this document reflects the date of the most recent revision. Your continued use of the Platform following any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree to the revised terms, you must close your account and cease using the Platform.
For all data protection enquiries, data rights requests, or complaints regarding winmy18's handling of your personal data, please contact us via:
winmy18 aims to acknowledge data protection enquiries within 72 hours and to provide a substantive response within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
Six concrete measures that define how winmy18 handles the personal and financial data of Malaysian players.
Every data exchange between your device and winmy18 servers — login credentials, personal details, financial transactions — is encrypted via TLS. The padlock visible in your browser confirms active encryption on every page of the winmy18 Platform.
winmy18 never stores your password in readable form. All passwords are processed through industry-standard one-way cryptographic hashing. No winmy18 staff member — technical or operational — can retrieve or view your password.
winmy18 verifies the identity and age of all Players as a condition of withdrawal eligibility. Age verification protects the platform from underage access and ensures that the 21+ age restriction is actively enforced — not just declared.
winmy18 does not share your personal data with advertising networks or data brokers. Your gaming activity, browsing patterns, and payment methods are not sold or shared with any entity for advertising targeting purposes.
winmy18 retains personal data only for as long as required under our operating licence and applicable law. KYC and transaction records are kept for a minimum of five years in compliance with anti-money laundering obligations, then securely deleted.
Access, rectification, erasure, restriction, and portability rights are genuinely exercisable at winmy18. Submit a data rights request via email and winmy18 will respond within 30 days — with a substantive answer, not a redirect to a FAQ page.
winmy18 is built on the principle that Malaysian players deserve a platform that handles their personal and financial information with the same care and transparency applied to their gaming experience.