Privacy Policy —
How mywin88 Protects Your Data

mywin88 ("we", "us", "our") operates the online gaming and sports betting platform accessible at mywin88.cam and all associated subdomains and mobile interfaces. We are committed to protecting and respecting your privacy in accordance with applicable data protection principles and regulations.

This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect the personal data of individuals ("you", "your", "Player", "User") who access or use any part of the mywin88 platform, including account registration, gaming, sports betting, promotional participation, customer support interactions, and any other service offered through mywin88.cam.

By registering an account, accessing our platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not use the mywin88 platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, directly or indirectly, including but not limited to name, identification number, location data, email address, financial details, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, modification, retrieval, use, disclosure, transmission, deletion, or destruction.
• "Data Controller" means mywin88, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party engaged by mywin88 to process Personal Data on its behalf in accordance with this Policy and applicable agreements.
• "KYC" means Know Your Customer — the identity and address verification procedures required by mywin88 to comply with anti-money laundering and responsible gambling obligations.
• "Cookies" means small text files placed on your device by the Platform to facilitate functionality, analytics, and personalisation.
• "Platform" means the mywin88 website, mobile interface, and all associated services available at mywin88.cam.

mywin88 collects personal data from you directly (when you provide it), automatically (through your use of the Platform), and in some cases from third parties (such as payment processors or identity verification services). The categories of data we collect include:

When you register an account on mywin88, we collect: full name, date of birth, gender, email address, mobile phone number, residential address (including city — for example, whether you are based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam), username, and encrypted password.

To comply with regulatory obligations and to protect against fraud and underage gambling, we collect copies of government-issued photo identification (Malaysian IC, MyKad, or passport), proof of address documents, and in some cases selfie photographs for facial verification purposes.

We collect information related to your deposits and withdrawals, including transaction amounts, timestamps, payment method identifiers (such as Touch 'n Go eWallet account references, Boost wallet IDs, DuitNow registered numbers, Maybank or CIMB account last four digits, or cryptocurrency wallet addresses for BTC and USDT transactions). We do not store full bank account numbers or full card numbers.

We record your gaming history, including games played, bets placed, wagering amounts, wins and losses, bonus usage, and session durations. This data is used for account management, bonus verification, responsible gambling monitoring, and regulatory compliance.

We automatically collect technical data including IP address, device type, operating system, browser type and version, referring URL, session timestamps, and geolocation data (at country and city level). This data is used to detect fraud, enforce geographic restrictions, and improve platform performance.

When you contact our customer support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and any attachments provided.

mywin88 uses the personal data collected from you for the following specific purposes:

mywin88 processes your personal data under the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) laws, age verification obligations, and responses to lawful law enforcement requests.
• Legitimate Interests: Processing carried out in pursuit of mywin88's legitimate business interests, including fraud prevention, platform security, and platform improvement, where such interests are not overridden by your fundamental privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

mywin88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with carefully selected third parties only in the following circumstances:

• Payment Service Providers: Data necessary to process financial transactions is shared with payment processors and banking partners, including local Malaysian e-wallet and banking networks (Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX) and cryptocurrency transaction processors. These parties process data solely to facilitate your transactions.
• Identity Verification Partners: To fulfil KYC obligations, we may share identity document data with third-party verification service providers who are contractually bound to process such data only for the purposes of identity verification on our behalf.
• Gaming Software Providers: Game providers may receive anonymised or pseudonymised session data necessary to deliver their games through the mywin88 platform. Full personal identifiers are not shared with game providers.
• Regulatory & Law Enforcement Authorities: We may disclose personal data to competent authorities where required by applicable law, court order, or regulatory directive. We will notify you of such disclosures where permitted by law.
• Group Companies: mywin88 may share data with affiliated companies within the same corporate group for the purposes of platform operations and compliance, subject to equivalent data protection standards.
• Professional Advisors: Legal counsel, auditors, and compliance consultants may access personal data on a need-to-know basis, subject to professional confidentiality obligations.

All third parties with whom mywin88 shares personal data are required to maintain appropriate technical and organisational safeguards and to process data only in accordance with our documented instructions.

mywin88 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention guidelines apply:

• Account Data: Retained for the duration of your active account plus five (5) years following account closure, to comply with anti-money laundering record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in accordance with applicable financial regulations.
• Transaction Records: Retained for seven (7) years from the date of each transaction to comply with financial reporting and audit requirements.
• Gaming Activity Logs: Retained for a period of three (3) years from the date of each session, used primarily for dispute resolution and responsible gambling monitoring.
• Customer Support Communications: Retained for two (2) years from the date of the last communication in a support thread.
• Marketing Preferences: Retained until you withdraw consent or close your account, with opt-out preferences recorded indefinitely to prevent re-subscription.
• Technical & Device Logs: Retained for up to twelve (12) months, used for fraud detection and platform performance optimisation.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised, such that it can no longer be associated with any identified or identifiable individual.

The mywin88 platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and gather analytics data. The categories of cookies we use are as follows:

• Essential Cookies: Strictly necessary for the platform to function. These include session authentication cookies that keep you logged in during an active session, security tokens, and load-balancing cookies. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, game lobby layout, and notification preferences. These improve your experience but are not strictly necessary.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Players use the platform — such as which pages are visited most frequently, average session durations, and navigation patterns. This data helps us improve the platform over time.
• Security Cookies: Used to detect fraudulent activity, identify multiple account creation attempts, and protect against automated bot attacks and CSRF exploits.

You may manage non-essential cookie preferences through your browser settings or through the cookie preferences panel available on the platform. Disabling essential cookies will impair platform functionality. Please note that mywin88 does not use third-party advertising or retargeting cookies.

mywin88 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Encryption: All data transmitted between your device and mywin88 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all platform pages, API calls, and payment transaction requests.
• Data Encryption at Rest: Sensitive personal data stored in our databases — including identity documents and payment method identifiers — is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised personnel on a strictly need-to-know basis. All access is logged and subject to regular audit review.
• Two-Factor Authentication: mywin88 supports and encourages two-factor authentication (2FA) on all player accounts to prevent unauthorised access.
• Penetration Testing: Our platform undergoes regular penetration testing by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, mywin88 will notify affected Players and relevant authorities within the timeframe required by applicable law.

While mywin88 implements robust security measures, no digital platform can guarantee absolute security against all possible threats. Players are encouraged to use strong, unique passwords, enable two-factor authentication, and report any suspicious account activity to our support team immediately.

Subject to applicable law, you have the following rights in relation to the personal data mywin88 holds about you. To exercise any of these rights, please contact us through the details provided in Section 14.

mywin88 strictly prohibits access to, and use of, the Platform by individuals under the age of 21 years. We do not knowingly collect personal data from minors. Age verification is a mandatory step in our registration and KYC process.

Where we discover or have reasonable grounds to suspect that an account has been registered by or on behalf of a minor, we will immediately suspend the account, investigate the circumstances, and where appropriate, notify relevant authorities. Any funds associated with such an account will be retained pending investigation and will not be returned.

If you are a parent or guardian and believe that your minor child may have registered on mywin88 without your knowledge, please contact our support team immediately with relevant details so that we may take appropriate action.

mywin88 operates as an internationally hosted platform. In the course of delivering our services, your personal data may be transferred to and processed in jurisdictions outside of Malaysia. Such transfers may occur when, for example, game software is hosted on servers in another country, or when identity verification partners process documents in their own jurisdictions.

Where personal data is transferred internationally, mywin88 ensures that appropriate safeguards are in place to protect it, including:

• Transferring only to jurisdictions that provide an adequate level of data protection as determined by applicable standards.
• Implementing contractual clauses with data processors that impose equivalent data protection obligations to those applicable in the originating jurisdiction.
• Using technical safeguards such as end-to-end encryption for cross-border data transmissions.

By using the mywin88 platform and providing your personal data, you acknowledge and consent to such cross-border transfers, subject to the protections described in this Policy.

mywin88 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable legislation, or platform services. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision.

Material changes — defined as changes that meaningfully affect how we process your personal data or that reduce your privacy rights — will be communicated to registered Players via the email address on file at least seven (7) calendar days before the revised Policy takes effect. A notice will also be displayed prominently within the platform.

Non-material changes (such as typographical corrections, clarifications that do not alter the substance of data practices, or reorganisation of existing content) may be made without advance notice and will take effect upon publication.

Your continued use of the mywin88 platform after any revised Privacy Policy becomes effective constitutes your acceptance of the updated terms. If you do not accept a revised Policy, you should close your account before the effective date of the revision.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mywin88, please contact us through any of the following channels:

• Live Chat: Available 24/7 on the mywin88 platform. Average first response time is under 2 minutes.
• Email (plain text — not a clickable link): [email protected]

When submitting a data-related request or complaint, please include your registered username, a clear description of your request or concern, and any supporting information that may assist us in responding accurately and efficiently.

For requests relating to your privacy rights (access, erasure, portability, objection), please indicate the specific right you wish to exercise. We will acknowledge your request within two (2) business days and provide a substantive response within thirty (30) calendar days.