Privacy Policy win2u — Our Commitment to Protecting Your Data

1Information We Collect

Win2u collects several categories of information from members and visitors to our platform. Each piece of data collected has a clear purpose and is used solely for that purpose.

Data you provide directly:

• Personal identification information — full name, identity card number (MyKad) or passport number, date of birth, and gender upon account registration.
• Contact information — mobile phone number, email address, and, where required for KYC, current residential address.
• Financial information — bank account number, bank name, account holder name, and digital wallet information for deposit and withdrawal processing purposes only.
• Verification documents — copies of MyKad or passport uploaded for the KYC (Know Your Customer) process to meet compliance requirements.
• Support communications — records of live chats, support tickets, and emails you send to our team.

Data collected automatically:

• Your IP address, device type, operating system and browser version when using the platform.
• Activity log data including login dates and times, pages visited, games played and transactions made.
• Approximate geolocation data based on IP address to ensure compliance with service region requirements.
• Cookie data and similar technologies as described in Section 5.

2How We Use Your Data

Personal data collected by win2u is used solely for the following purposes and for no other purpose without prior notice to you:

• Account management — to create, verify, and maintain your member account, including the login process, password recovery, and two-factor authentication.
• Transaction processing — to process deposits, withdrawals, betting, and all financial transactions carried out on the win2u platform.
• KYC and AML Compliance — to verify member identities and monitor transactions to meet anti-money laundering (AML) and counter-terrorism financing legal requirements.
• Service communications — to send important account-related notifications, transaction updates, terms changes, and security information.
• Platform improvements — to analyse usage patterns in aggregate and anonymised form to improve user experience, platform performance, and the games portfolio.
• Fraud prevention — to detect and investigate suspicious activity, bonus abuse, and unauthorised access attempts.
• Relevant marketing — to send you relevant promotional offers and bonuses via email or in-app notifications, subject to your communication preferences.
• Customer Support — to help resolve any issues, inquiries, or complaints you submit.

3Data Flow & Sharing

Win2u sets strict standards for any sharing of members' personal data. We do not sell your data. Data sharing only occurs in the following limited situations:

• Trusted service providers — third parties we engage to provide platform services such as payment processors (DuitNow, FPX, GrabPay), licensed game providers, high-security cloud hosting services, and platform analytics tools. All providers are bound by strict data confidentiality agreements.
• Legal requirements — if required by Malaysian law, a court order, or a directive from a competent law enforcement agency, win2u may be required to disclose certain information. We will notify you of such disclosure where permitted by law.
• Protection of legitimate interests — to protect the rights, property, and safety of win2u, other members, or the public from clear and present threats.
• Business transfers — in the event of a merger, acquisition, or sale of company assets, member data may be transferred to the new entity. You will be notified in advance and will have the right to opt out of such sharing.

4Data Security

Win2u continuously invests in comprehensive data security infrastructure to ensure your personal data is always protected against unauthorised access, loss, or misuse.

5Cookies & Tracking Technologies

Win2u uses cookies and similar tracking technologies to enhance user experience and analyse platform performance. The following are the types of cookies we use:

• Strictly necessary cookies — required for core platform functions such as login session verification, form security, and language preferences. These cookies cannot be disabled.
• Performance cookies — to collect information on how visitors use the website, such as the most frequently visited pages, to help us improve the platform. Data is collected in aggregate and anonymised form.
• Functional cookies — allows the platform to remember your preferences such as username, language, and display settings for a more personalised experience.
• Analytics cookies — used to understand overall usage patterns for platform development purposes. This data is not linked to your personal identity.

You can control or disable non-essential cookies through your browser settings. Please note, however, that disabling certain cookies may affect the functionality and user experience of the win2u platform.

6Your Rights as a win2u Member

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia and the privacy principles we uphold, you have the following rights regarding your personal data:

All data rights requests will be processed within 14 working days from the date of receipt of the completed request. win2u does not charge any fee for processing reasonable data rights requests.

7Data Retention Period

Win2u only retains your personal data for as long as it is needed for the stated purpose or as required by applicable Malaysian law.

• Active account data — retained for the duration your account is active and for a specified period after account closure to meet compliance requirements.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements.
• KYC documents — retained for the period prescribed by applicable AML compliance requirements, typically no less than 5 years after the business relationship ends.
• Activity logs and support communications — retained for 2 years for dispute resolution and security analysis purposes.
• Marketing data — retained until you withdraw consent or request deletion.

Upon expiry of the designated retention period, your personal data will be securely deleted or permanently anonymised so that it can no longer be linked to your identity.

8Children's Privacy

The win2u platform is exclusively for individuals aged 18 years and above. win2u does not intentionally collect, store or process any personal data from minors.

If we discover that personal data of a minor has been collected without our knowledge, such data will be deleted immediately and the account in question will be terminated. Parents or guardians with concerns about this matter are welcome to contact the win2u support team.

9Amendments to the Privacy Policy

Win2u reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or new platform features.

• Members will be notified of any significant amendments via their registered email or in-platform notification at least 14 days before the changes take effect.
• The "Last Updated" date at the top of this document will be updated whenever amendments are made.
• Continued use of the win2u platform after the effective date of any amendment constitutes acceptance of the revised policy.
• If you disagree with the amendments, you have the right to close your account and request deletion of your personal data.

We encourage you to review this Privacy Policy page periodically to stay informed on how win2u protects your information.

10Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact the win2u privacy team through the following channels:

• Privacy email: [email protected]
• Live chat: available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the win2u platform.
• Response time: privacy-related inquiries will be responded to within 3 to 5 business days.