Winning88 Privacy Policy

This Privacy Policy ("Policy") sets out the manner in which Winning88 ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal data relating to individuals ("you", "the User", "the Player") who access or use the Winning88 website at winning88.cam (the "Website") and the services made available therein.

We are committed to protecting the privacy of all users of our platform and to handling personal data in a responsible, transparent, and lawful manner. This Policy is intended to provide you with a clear understanding of what data we hold about you and why, so that you can make informed decisions about your use of Winning88.

By accessing the Website, registering an account, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the Winning88 platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or is reasonably capable of identifying a natural person, directly or indirectly, including name, identification number, contact details, location data, online identifiers, and financial information.
• "Processing" means any operation or set of operations performed on personal data, whether by automated means or otherwise — including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, Winning88 acts as the Data Controller in respect of personal data collected from Users of the Platform.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller, such as payment service providers, KYC verification partners, and cloud hosting providers.
• "Cookies" means small data files placed on your device by a website during your visit, used to store information about your browsing session and preferences.
• "KYC" (Know Your Customer) means the identity and age verification process required under applicable anti-money laundering and responsible gambling regulations.

Winning88 collects personal data across several categories, depending on how you interact with the platform. The categories and examples of data collected are outlined in the table below:

We do not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) unless it is volunteered by you or required for a specific compliance purpose.

Winning88 collects personal data through the following methods:

4.1 Direct Collection

Data you provide to us directly includes: information entered during account registration; identity documents submitted for KYC verification; payment details submitted when making deposits or withdrawal requests; communications sent through our live chat or email support channels; and responses to surveys, promotions, or feedback requests.

4.2 Automated Collection

When you access the Winning88 platform, certain technical data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser configuration, and navigation behaviour on the site. This data is used primarily for platform security, performance monitoring, and fraud detection.

4.3 Third-Party Sources

In certain circumstances, Winning88 may receive personal data from third-party sources as part of our compliance and verification processes. These sources may include: identity verification service providers used for KYC; payment processors including FPX, DuitNow, and e-wallet platforms; fraud prevention and anti-money laundering screening services; and publicly available registers where legally permitted for compliance screening purposes.

Winning88 processes your personal data for the following defined purposes only. We do not use your data for purposes that are incompatible with those disclosed to you at the time of collection.

• Account Management: To create, maintain, and administer your Winning88 account, including verifying your identity and managing your account settings and preferences.
• Service Delivery: To provide access to games, sports betting markets, and all other platform features — and to process bets, record outcomes, and manage your gaming history.
• Payment Processing: To facilitate deposits, withdrawals, and refunds via your chosen Malaysian payment method, and to reconcile transactions with payment providers.
• KYC & Compliance: To verify your identity and age in compliance with applicable anti-money laundering (AML) requirements and responsible gambling obligations, including our 21+ age requirement.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeover, bonus abuse, money laundering, and other unlawful conduct on the platform.
• Customer Support: To respond to your inquiries, resolve disputes, handle complaints, and improve the quality of our support services.
• Responsible Gambling: To monitor gambling patterns, administer deposit and loss limits, process self-exclusion requests, and identify users who may require responsible gambling support.
• Platform Improvement: To analyse usage patterns, test new features, and improve the performance, functionality, and user experience of the Winning88 platform.
• Legal & Regulatory Obligations: To comply with applicable laws, respond to lawful requests from regulatory authorities, and enforce our Terms & Conditions.
• Marketing Communications: Where you have consented, to send you information about relevant promotions, offers, and platform updates. You may opt out of marketing communications at any time through your account settings or by contacting support.

Winning88 processes your personal data on the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing required to perform our obligations under the account agreement with you — including account management, service delivery, and payment processing — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including KYC identity verification, AML record-keeping, and cooperation with regulatory authorities — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out in pursuit of our legitimate business interests — including fraud prevention, platform security, and product improvement — is conducted on the basis of legitimate interests, subject to ensuring that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent — such as for optional marketing communications — processing is conducted only with your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Winning88 does not sell, rent, or commercially share your personal data. Data is shared with third parties only in the following limited circumstances:

7.1 Service Providers and Data Processors

We engage trusted third-party service providers who process personal data on our behalf under contractual data processing agreements. These providers are permitted to use your data only for the purposes specified by Winning88 and are required to maintain appropriate technical and organisational security measures. Categories of processors include: identity verification and KYC providers; payment processing partners (e-wallet operators, banks, and FPX/DuitNow intermediaries); cloud hosting and infrastructure providers; fraud detection and analytics platforms; and customer support software providers.

7.2 Legal and Regulatory Disclosure

Winning88 may disclose personal data to governmental authorities, law enforcement agencies, financial intelligence units, or licensing regulators where required by law, court order, or regulatory directive. Such disclosures are made only to the extent required and will be communicated to you where legally permissible.

7.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, personal data held by Winning88 may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. Affected users will be notified of any material change in data controller identity.

7.4 No Third-Party Advertising Sharing

Winning88 does not share your personal data with third-party advertisers, data brokers, or social media platforms for their independent marketing purposes. Any advertising or promotional communications you receive from Winning88 are managed internally using data you have provided directly to us.

Winning88 uses cookies and similar tracking technologies (including web beacons and session identifiers) to support the operation, security, and improvement of the platform. The types of cookies we use are described below:

• Essential Cookies: Required for the core operation of the platform — including session management, authentication, and security. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences and personalise your experience, such as language settings, preferred payment method, and login status.
• Analytics Cookies: Used to collect aggregated data about how visitors interact with the platform — including page views, session duration, and navigation paths — to help us identify areas for improvement. This data is anonymised where possible.
• Security Cookies: Used to detect and prevent fraudulent activity, identify suspicious login patterns, and maintain platform integrity.

You may manage cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality of the Winning88 platform. Winning88 does not use third-party advertising or cross-site tracking cookies.

Winning88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, and to comply with applicable legal, regulatory, and contractual obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active account relationship with Winning88.
• Post-Closure Account Data: Following account closure, core account and transaction records are retained for a period of 5 years in compliance with applicable anti-money laundering record-keeping requirements.
• KYC Documentation: Identity verification documents are retained for a minimum of 5 years following the end of the customer relationship, or longer where required by applicable law.
• Support Communications: Live chat and email support transcripts are retained for up to 2 years to support quality assurance and dispute resolution.
• Technical and Log Data: Server logs and technical session data are typically retained for 90 days, after which they are deleted or anonymised.
• Marketing Consent Records: Records of marketing consent or opt-out are retained indefinitely to demonstrate compliance with consent obligations.

Once data is no longer required for any of the above purposes, it is securely deleted or irreversibly anonymised in accordance with our data disposal procedures.

Winning88 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption in Transit: All data exchanged between your device and our servers is encrypted using TLS 1.2 or higher with 256-bit SSL certificates, ensuring that data cannot be intercepted in transit.
• Encryption at Rest: Sensitive personal data stored on our infrastructure is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel only, on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Infrastructure Security: Our platform is hosted on secure, access-controlled cloud infrastructure with regular security patching, intrusion detection monitoring, and vulnerability scanning.
• Data Breach Response: Winning88 maintains an incident response procedure for data security breaches. In the event of a breach that poses a risk to your rights and freedoms, affected users will be notified as soon as reasonably practicable, and the relevant regulatory authority will be informed where required by law.

Whilst Winning88 takes all reasonable precautions to safeguard your data, no system can be guaranteed to be completely secure. You are also responsible for maintaining the security of your own account credentials and device. Please ensure you use a strong, unique password for your Winning88 account and do not share it with anyone.

As a data subject whose personal data is processed by Winning88, you hold a number of rights in relation to your data. These rights are set out below. To exercise any of these rights, please contact our support team at [email protected] or via live chat. We will respond to verified requests within 30 days.

The Winning88 platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Our registration process requires users to declare their age, and KYC verification is mandatory before withdrawal of funds.

If Winning88 becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, the data will be deleted as soon as practicable, and any deposited funds will be returned to the source payment method in accordance with our responsible gambling policy.

If you are a parent or guardian and believe that a minor has registered an account on Winning88, please contact us immediately at [email protected] so that we may take prompt action.

The Winning88 platform may reference or interact with third-party services, including payment providers such as Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, and FPX. Each of these services operates under its own privacy policy and terms of use.

Winning88 is not responsible for the privacy practices of third-party service providers. When you interact with a payment provider's interface — for example, completing a bank transfer through your Maybank2u app — you are subject to that provider's data practices. We encourage you to review the privacy policies of any third-party services you use in connection with your Winning88 account.

Winning88 does not include third-party tracking pixels, advertising SDKs, or social media embeds on our platform that would result in your data being shared with those third parties without your knowledge.

Winning88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform functionality. Revised versions of this Policy will be published on this page with an updated "Last Updated" date.

Where amendments are material in nature — for example, where we introduce a new category of data collection or a new purpose for processing — we will endeavour to provide advance notice through platform notifications or email communication to registered account holders.

Your continued use of the Winning88 platform following the publication of an amended Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any amendment, you should discontinue your use of the platform and may request account closure by contacting our support team.

We recommend reviewing this Privacy Policy periodically to stay informed of how your personal data is being handled by Winning88.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way Winning88 handles your personal data, please contact our Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the Winning88 platform. This is the fastest channel for most data-related queries.
• Email: [email protected] — for formal Subject Access Requests, erasure requests, or data-related complaints. Please include "Privacy Request" in your subject line to ensure prompt routing. We will acknowledge your request within 5 business days and provide a full response within 30 days.

When submitting a data rights request, please provide sufficient information to verify your identity so that we can fulfil your request accurately and securely. We may ask for confirmation of your registered email address, account username, and a copy of your identity document for verification purposes.