winclub Privacy Policy

Introduction and Scope of Application

This Privacy Policy is issued by winclub ("we", "platform", "us") to explain the personal data management practices we apply in operating the online gambling platform under the domain winclub.one. This policy applies to all individuals who register an account, access the website, use our services, or communicate with us through any channel we provide.

By registering a winclub account or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you are advised not to use the winclub platform.

Personal Information We Collect

During the period you register and use winclub services, we may collect various categories of personal information, depending on your interaction with our platform. These categories include:

• Identity Information: Full name, identification card number (MyKad), date of birth, gender and nationality — collected during the account registration and identity verification (KYC) process.
• Contact Information: Email address, mobile phone number, and mailing address — used for account communications and transaction notifications.
• Financial Information: Details of the payment methods you register (Touch 'n Go eWallet, DuitNow, FPX, Boost, cryptocurrency), deposit and withdrawal records, and transaction history within the platform.
• Usage Information: Activity data within the platform including games played, total bets placed, session duration, game preferences, and bonus usage records.
• Technical Information: IP address, web browser type and version, device operating system, cookie data, access logs and other technical diagnostic information.
• Communication Information: The content of your interactions with our 24/7 customer support team, including enquiries, complaints and feedback submitted via live chat or email.

We do not collect sensitive personal information beyond the KYC requirements set out, except with your explicit consent or as required by law.

How We Collect Information

Personal data is collected through the following methods:

• Direct Registration: Information you enter yourself in the winclub account registration form, KYC form, or customer assistance form.
• Platform Use: Information generated automatically when you use our services — including transaction logs, game records, and user session data.
• Cookies and Tracking Technologies: Through session cookies, functional cookies and similar technologies operating on the winclub.one website. Further information about cookies is provided in a dedicated section below.
• Customer Service Communications: Information you share when contacting our customer support via live chat or email at [email protected].
• Licensed Third Parties: In certain cases, we may receive information from payment service providers used to process deposits and withdrawals, for verification and fraud prevention purposes.

Purposes for Using Personal Data

winclub uses the personal information collected for the following purposes, all of which are directly related to the provision of our services:

• Creating and securely managing your user account, including the login and identity verification process.
• Processing deposits and withdrawals through supported payment methods, and maintaining accurate transaction records.
• Ensuring compliance with international licensing requirements, including anti-money laundering (AML) and KYC procedures.
• Sending important account-related notifications — such as transaction confirmations, security alerts and policy updates — via email or in-platform channels.
• Providing effective customer support and resolving any enquiries or complaints submitted.
• Analysing platform usage patterns on an aggregated basis for technical improvement and user experience purposes.
• Detecting and preventing fraudulent activity, unauthorised multiple account use, or any attempt to misuse the platform.
• Sending information about winclub promotions, bonuses and offers — only to members who have given consent to receive marketing communications.

Sharing Information with Third Parties

winclub does not sell, rent or disclose your personal information to outside parties except in the following limited circumstances:

• Payment Service Providers: Information required to process deposits and withdrawals is shared with licensed payment service providers such as e-wallet platforms and FPX banking institutions. These providers are bound by strict data confidentiality agreements.
• Game Software Providers: Technical data required to display games and verify results is shared with licensed software providers. Personal identity information is not disclosed to game providers.
• Legal Requirements: We may disclose personal information if required by a court order, regulatory body directive, or valid legal requirement.
• Fraud Prevention: In cases of suspected fraudulent activity or financial crime, relevant information may be shared with the responsible authorities.

In all data sharing situations, we ensure that the receiving party meets data protection standards equivalent to or higher than those we apply.

Data Security Measures

We implement multiple layers of technical and administrative security controls to protect your personal information from unauthorised access, alteration, disclosure or destruction:

• Data encryption in transit using TLS/SSL protocols with key lengths that meet current industry standards.
• Storage of sensitive data in encrypted format within databases protected by firewalls and layered access controls.
• Internal access controls based on the principle of least privilege — only staff who need access to carry out their duties are permitted.
• Continuous monitoring of system activity to detect any anomalies or suspicious access attempts.
• Regular security audits and vulnerability assessments to proactively identify and address security risks.
• A clear incident response protocol to ensure any data breach is identified and addressed promptly.

That said, no security system can be guaranteed 100% secure. You are also responsible for keeping your winclub account password confidential and not sharing your login information with anyone.

Data Retention Period

We retain your personal information for as long as necessary to fulfil the purposes stated in this policy, or as required by law and licensing requirements. Generally:

• Active account data is kept for as long as your account remains active with winclub.
• Financial transaction records and game history are retained in accordance with the compliance and audit requirements of the applicable international licensing.
• Customer support communication logs are retained for a sufficient period to allow for follow-up action and dispute resolution.
• Data collected during the KYC process is retained in accordance with applicable anti-money laundering legislation.

When data is no longer needed, it will be deleted or anonymised using secure and irreversible methods.