winmy15 Privacy Policy

01 Introduction

winmy15 ("winmy15", "we", "us" or "our") is committed to protecting the privacy and personal data of all individuals who use the winmy15 Platform located at winmy15.cam (the "Platform"). This Privacy Policy ("Policy") explains how winmy15 collects, processes, stores, shares and protects personal information in connection with the provision of our services to registered users ("Users", "you" or "your").

By registering an account, submitting personal data or continuing to use the Platform, you confirm that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform or submit any personal data.

02 Definitions

In this Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that identifies or could reasonably identify a natural person, including name, identification number, contact details, financial data, device identifiers and behavioural data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer or deletion.
• "Controller" means winmy15, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Processor" means any third party engaged by winmy15 to process Personal Data on our behalf under a binding data processing agreement.
• "KYC Data" means identity and address verification documents collected in connection with Know Your Customer compliance procedures.
• "Cookies" means small text files stored on your device by your browser, used to manage sessions, preferences and analytics on the Platform.

03 Data We Collect

winmy15 may collect the following categories of Personal Data in connection with the operation of the Platform:

Registration and Identity Data

• Full legal name, date of birth, nationality and gender as provided during account registration.
• Government-issued identity document details (Malaysian MyKad, driver's licence, passport) submitted for KYC verification.
• A selfie photograph or likeness check image when required for identity confirmation.

Contact Data

• Email address, mobile phone number and, where provided, a residential address in Malaysia or overseas.

Financial and Transaction Data

• Payment method details used for MYR deposits and withdrawals, including data associated with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong and any supported cryptocurrency wallet addresses.
• Transaction history, deposit values, withdrawal amounts, bonus credits and account balance records.

Technical and Usage Data

• IP address, device type, operating system, browser type and version, screen resolution and time zone.
• Session logs, page views, click paths, search queries and other behavioural data generated during use of the Platform.
• Cookie identifiers, session tokens and similar tracking data.

Communications Data

• Records of messages sent to winmy15 support, including live chat transcripts, email correspondence and any attachments submitted.

04 Legal Basis for Processing

winmy15 processes Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing required to register and maintain an account, process transactions and deliver the services described in our Terms and Conditions.
• Legal obligation: Processing required to comply with applicable anti-money laundering, counter-terrorist financing, KYC, licensing and reporting obligations.
• Legitimate interests: Processing carried out in the legitimate interest of winmy15, including fraud prevention, platform security, service improvement and analytics, where such interests are not overridden by your fundamental rights.
• Consent: Processing carried out with your explicit prior consent, including the use of non-essential cookies and direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

05 How We Use Your Data

winmy15 uses Personal Data collected through the Platform for the following specific purposes:

• To create, verify, manage and maintain your winmy15 account.
• To process MYR deposits and withdrawals through supported Malaysian payment channels.
• To carry out identity and age verification in line with KYC obligations (confirming users are aged 21 and above).
• To detect, investigate and prevent fraudulent transactions, unauthorised access and prohibited account activity.
• To administer promotional offers, bonuses and loyalty rewards subject to applicable conditions.
• To provide customer support, respond to enquiries and resolve disputes.
• To analyse Platform usage and improve the quality, security and accessibility of our services.
• To fulfil reporting and record-keeping obligations imposed by applicable licensing and compliance frameworks.
• To send service-related communications such as account notifications, security alerts and policy updates.

06 Data Sharing and Disclosure

winmy15 does not sell, rent or trade Personal Data to third parties for their own marketing purposes. Personal Data may be shared in the following limited circumstances:

Service Providers and Processors

winmy15 engages third-party processors, including payment service providers (FPX, DuitNow, eWallet operators), identity verification partners, cloud hosting providers, fraud detection services and analytics providers. These parties process Personal Data strictly on our instructions and under binding contractual data protection obligations.

Legal and Regulatory Disclosure

winmy15 may disclose Personal Data to licensing authorities, law enforcement agencies, regulators or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, safety or property of winmy15, its users or third parties.

Business Transfers

In the event of a merger, acquisition, restructuring or sale of business assets involving winmy15, Personal Data held on the Platform may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments.

07 Cookies and Tracking Technologies

The winmy15 Platform uses cookies and similar tracking technologies to deliver a functional, personalised and secure user experience. The following categories of cookies may be active on the Platform:

• Strictly necessary cookies: Required for user authentication, session security and core Platform functionality. These cannot be disabled without affecting basic service operation.
• Functional cookies: Used to remember user preferences such as language settings, display options and recently visited pages.
• Analytics cookies: Collect aggregated, anonymised data about how users navigate the Platform to help us identify improvement opportunities.
• Performance cookies: Monitor Platform response times, error rates and load balancing to support stable service delivery.

You may manage, restrict or delete cookies through your browser settings. Disabling certain cookies may affect the functionality of the Platform or require you to re-authenticate your session. winmy15 does not use third-party advertising or behavioural retargeting cookies.

08 Data Retention

winmy15 retains Personal Data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following retention principles:

• Account registration and identity data is retained for the full duration of an active account and for a minimum of five years following account closure, in line with standard anti-money laundering record-keeping obligations.
• Transaction records, including MYR deposit and withdrawal histories, are retained for a minimum of five years from the date of each transaction.
• KYC documents are retained for the period required by applicable compliance and licensing obligations.
• Support correspondence and chat records are retained for up to two years from the date of each interaction, unless a longer retention period is required for dispute resolution or regulatory purposes.
• Analytics and usage data is typically retained in anonymised or aggregated form and may be held indefinitely for statistical purposes.

09 Data Security

winmy15 implements a range of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform.
• Encrypted storage for sensitive personal and financial data held on winmy15 servers.
• Role-based access controls restricting staff access to Personal Data on a need-to-know basis.
• Regular security assessments and monitoring of Platform infrastructure.
• Two-factor authentication options for account access where supported.

10 User Rights

Depending on the applicable law of your jurisdiction, you may hold one or more of the following rights in respect of Personal Data held by winmy15:

• Right of access: The right to request a copy of the Personal Data winmy15 holds about you and information about how it is used.
• Right to rectification: The right to request correction of inaccurate or incomplete Personal Data.
• Right to erasure: The right to request deletion of Personal Data in certain circumstances, subject to overriding legal or regulatory retention obligations.
• Right to restriction: The right to request that winmy15 limits the processing of your Personal Data in specific situations.
• Right to data portability: The right to receive certain Personal Data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object: The right to object to processing carried out on the basis of legitimate interests, including profiling for fraud detection purposes.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact the winmy15 Data Privacy team at the contact details set out in Section 14. We will respond to verified requests within 30 calendar days. Identity verification may be required before processing a rights request.

11 Children and Minors

The winmy15 Platform is intended exclusively for adults aged 21 and above. winmy15 does not knowingly collect or process Personal Data from individuals below the minimum age threshold.

Where winmy15 identifies or is made aware that Personal Data has been collected from a user who does not meet the minimum age requirement, the associated account will be suspended, any balance will be reviewed in accordance with our Terms and Conditions, and Personal Data will be deleted without undue delay.

If you believe that a minor may have registered an account on the Platform, please contact winmy15 support immediately.

12 International Data Transfers

winmy15 operates in an international context. Personal Data may be transferred to and processed in countries outside Malaysia, including countries where the applicable data protection laws may differ from those in your home jurisdiction.

Where Personal Data is transferred internationally, winmy15 takes reasonable steps to ensure that appropriate safeguards are in place, including contractual data protection clauses and security standards consistent with recognised international frameworks.

13 Changes to This Policy

winmy15 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, registered users will be notified via the registered email address or through a prominent notice on the Platform prior to the changes taking effect.

Continued use of the Platform after the effective date of any amended Policy constitutes acceptance of the revised terms. Users who do not accept an amended Policy should discontinue use of the Platform and may request account closure by contacting winmy15 support.

14 Contact Us

For questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the winmy15 Data Privacy team using the details below. Do not include passwords, one-time PINs or complete payment card numbers in any correspondence.

• Website email: [email protected]
• Live chat: Available 24 hours a day, 7 days a week through the Platform.
• Response target: Within 10 minutes for live chat; within 30 calendar days for formal data rights requests submitted in writing.

For concerns related to responsible gambling controls, deposit limits or self-exclusion, please refer to the Responsible Gambling section available in the main site navigation.