Privacy Policy Win Way – Malaysian User Data Protection

At Win Way, we understand that your trust is the most valuable asset we hold. When you register an account, make a deposit via Touch 'n Go eWallet or DuitNow, place a bet on a Malaysia Super League match, or watch live badminton streaming on our platform, you share personal information with us. It is our responsibility to ensure that information is protected, used responsibly, and never misused.

This Privacy Policy is written in clear, plain language — not confusing legalese. We want you to genuinely understand what happens with your data, rather than feeling pressured to click "Agree" without knowing what you are consenting to.

Win Way is the data controller responsible for the personal information you provide to us. If you have any questions about how we handle your data, please contact us at support@winway.click at any time.

Win Way collects various categories of data depending on how you use our platform. Below is a full overview of the data we collect:

A. Account Registration Data

• Full name as shown on your Malaysian MyKad or passport
• Date of birth (for age verification — must be 21 years of age or older)
• An active Malaysian phone number
• A valid email address
• Self-chosen username
• Password (stored in hashed form – we do not store passwords in plain text)

B. Identity Verification Data (KYC)

• Copy of MyKad or passport
• Recent Malaysian bank statement or proof of address document
• Selfie or facial image for liveness verification (if required)

C. Financial Data

• Malaysian bank account details (bank name, account number)
• E-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay)
• Deposit and withdrawal transaction history in Malaysian Ringgit (RM)
• Payment records via DuitNow and FPX

D. Platform Activity Data

• Betting and wagering records (Sports Betting, Live Casino, roulette, lottery, virtual sports)
• Game history and play statistics
• Bonuses and promotions claimed
• Game session records including date, time, and duration

E. Technical Data

• IP address and network information
• Device type and version (phone, tablet, computer)
• Operating system and web browser version
• Cookie data and device identifiers
• Platform access logs and navigation data

Win Way uses your personal data solely for lawful and necessary purposes in order to provide you with the best possible service. Below is a detailed breakdown of how we use your data:

• Account Management: Creating, verifying, and managing your win way account, including identity verification and age verification.
• Financial Transaction Processing: Processes all deposits and withdrawals in MYR (RM) via supported Malaysian payment methods including Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
• Betting Services Provision: Enabling you to access and use all win way features, including Sports Betting (Malaysia Super League, EPL), Live Casino, roulette, lottery, virtual sports, and live matches with live streaming.
• Bonus & Promotion Management: Processing bonus claims, verifying promotion eligibility, and ensuring compliance with the relevant terms and conditions.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, account abuse, and other unlawful activities.
• Service Communications: Sending important notifications about your account, transactions, policy updates, and security information.
• Marketing (With Consent): Sending promotional offers and new Win Way product updates if you have consented to receive marketing communications.
• Platform Improvement: Analysing usage data to enhance the user experience, improve existing features, and develop new ones.
• Legal Compliance: Fulfilling obligations under applicable laws, regulations, and regulatory body requirements.

Win Way processing your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contract Fulfilment: Processing required to deliver the services you requested — such as processing MYR deposits, settling bets, and managing your account.
• Legal Obligation: Processing required to fulfil legal obligations, including KYC requirements, AML (Anti-Money Laundering) compliance, and reporting to the relevant authorities.
• Legitimate Interest: Processing for fraud prevention, platform security, service improvement, and business risk management.
• Consent: For direct marketing activities and promotional communications, we only process your data if you have given explicit consent.

Win Way does not sell, rent, or trade your personal data to any party for their own marketing or commercial purposes. However, we may share your data in the following limited circumstances:

• Payment Service Providers: With approved Malaysian payment providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks) solely for processing your financial transactions. They are bound by strict confidentiality agreements.
• Technology Service Providers: With third parties providing technical infrastructure (server hosting, data processing) that are bound by a strict Data Processing Agreement (DPA) with Win Way.
• Regulatory Body: Where required by Malaysian law or a directive from a lawful authority, Win Way will disclose the necessary information to regulatory bodies, law enforcement, or the courts.
• Fraud Prevention: In cases involving suspected fraud, money laundering, or financial crime, Win Way may share relevant information with the appropriate regulatory bodies or law enforcement agencies.

Win Way implement comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure:

• Transmission Encryption: All data transmitted between your device and Win Way's servers is protected by TLS 1.3 protocol and 256-bit SSL certificates.
• Storage Encryption: Sensitive data such as bank details and e-wallet account numbers are stored in databases encrypted using AES-256.
• Two-Factor Authentication (2FA): win way offers and encourages users to enable 2FA for an additional layer of account protection.
• Internal Access Controls: Only Win Way staff with a legitimate business need are permitted to access user data, and all access is logged and audited.
• Regular Security Audits: Win Way conducts regular penetration testing and security audits carried out by independent cybersecurity firms.
• Incident Management: Win Way has a clear incident response procedure in place. Should a data breach occur that may affect you, we will notify you within 72 hours of detection.

Platform Win Way uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Below are the types of cookies we use:

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality of the win way platform. Security cookies and session cookies are essential for normal platform operation and cannot be disabled without impacting your experience.

Win Way retaining your personal data only for as long as necessary for the purposes outlined in this Privacy Policy or as required by Malaysian law:

• Active Account Data: For as long as your account remains active on Win Way, and up to 7 years after account closure for financial regulatory compliance purposes.
• Financial Transaction Records: Minimum 7 years from the date of the transaction, in accordance with Malaysian financial regulatory requirements.
• KYC Documents: Up to 5 years after account closure, or for as long as required under applicable AML legislation.
• Support Communication Logs: 3 years from the date of last interaction.
• Anonymised Analytics Data: May be retained indefinitely as it can no longer be linked to your personal identity.

When your data is no longer required, Win Way will securely delete or anonymise it using approved methods to ensure it cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Win Way:

Platform Win Way is intended for adults aged 21 and above only. We do not knowingly collect personal data from individuals under the age of 21. If we discover that data from an underage individual has been collected without our knowledge, we will promptly delete that data and close the associated account.

If you believe that a child or individual under the age of 21 has registered for or accessed the Win Way platform, please notify us immediately at support@winway.click so that prompt action can be taken.

Platform Win Way may from time to time contain links or references to third-party websites such as Malaysian payment providers (bank websites, e-wallet portals) or sports information sources. This Privacy Policy applies solely to the Win Way platform.

Win Way is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policies of any other websites you visit independently of the Win Way platform.

Win Way reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new product developments. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this page
• Displaying a notice within the Win Way platform when you log in
• Sending email notifications for material changes to your privacy

We encourage you to review this page periodically. Continued use of the win way platform after any changes are published constitutes your acceptance of the updated Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data at Win Way, please contact us:

• Privacy Email: support@winway.click (subject: "Privacy Enquiry")
• Live Chat: Available 24/7 on the Win Way platform
• Response Time: Within 24–48 hours for email; within 3 minutes for live chat

If you are not satisfied with how Win Way has handled your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.