Winmy6 Privacy Policy – Malaysian Player Personal Data Protection

Winmy6 takes your personal data privacy extremely seriously. As an online entertainment platform serving Malaysian players, we are subject to Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

This Privacy Policy clearly explains what types of information we collect, how we use it, who has access to it, and your rights as the owner of that data. We believe transparency is the foundation of trust — that's why we write this policy in plain language, not just difficult legal jargon.

The scope of this policy covers all your interactions with winmy6, including website visits, account registration, deposit and withdrawal activity, use of the Game Lobby, and any communication with our customer support team.

Winmy6 collects various categories of personal data depending on your stage of interaction with our platform. Below is a detailed overview of the data collected:

Every piece of data we collect has a specific and legitimate purpose. winmy6 does not collect data "just in case" — every item of information is used for a pre-defined purpose as follows:

• Account Management: To register, verify and manage your winmy6 user account securely.
• KYC Compliance: To fulfill identity verification requirements to prevent fraud, money laundering and access by minors.
• Payment Processing: To process deposits and withdrawals of funds in Malaysian Ringgit securely and accurately.
• Customer Support: To provide effective assistance when you contact the winmy6 support team.
• Platform Security: To detect and prevent fraud, account abuse and suspicious activity.
• Legal Compliance: To comply with reporting requirements to relevant authorities when mandated by law.
• Service Improvement: To analyze usage patterns to improve the overall winmy6 platform experience.
• Marketing Communications: To send promotional information and special offers to members who have consented to receive them.

The data we collect is processed by winmy6 internal systems protected by strict access controls. Only staff who require access to specific data to perform their duties are given such permission.

In the gaming context, your activity data — including betting history and win records — is used to ensure game integrity and detect any activity that does not meet fair play standards. This is not to monitor you personally, but to protect all players from fraud.

For communication purposes, winmy6 uses your email address and phone number to send important account notices, security updates and promotional information. You may unsubscribe from marketing emails at any time through your account settings.

winmy6 does not sell, rent or trade your personal data to any third parties for marketing purposes. This is a commitment we will not compromise.

However, there are limited situations where your data may be shared with carefully selected third parties:

• Payment Service Providers: DuitNow, FPX, Touch 'n Go and Boost receive the minimum transaction data required to process your payment.
• KYC Providers: Licensed identity verification partners receive your documents for verification purposes only.
• Game Providers: Non-personally identifiable game session data is shared with providers such as Pragmatic Play and PG Soft for technical purposes.
• Authorities: winmy6 will disclose data to law enforcement or regulatory bodies when required by Malaysian law.

All third parties that receive your data are bound by strict data protection agreements and are not permitted to use that data for any purpose other than what has been specified.

Winmy6 retains your personal data for as long as your account is active and for an additional period after account closure as required by law or legitimate business needs.

General retention period guidelines are as follows:

• Active account records: For the full duration of the active account period plus 5 years after closure.
• Financial transaction records: Minimum 7 years from the transaction date (legal requirement).
• Support communication records: 3 years from the date of last interaction.
• Technical logs and security logs: 12 months, unless related to active investigations.
• KYC Documents: For the full account period plus a minimum of 5 years.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with established procedures so that it can no longer be linked to you.

Winmy6 implements multiple technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration or destruction.

• 256-bit SSL Encryption: All data transmitted between your device and winmy6 servers is encrypted using 256-bit SSL technology — the same standard used by major financial institutions.
• Database Encryption: Sensitive data such as financial information and identity documents are encrypted in our database using AES-256 encryption standard.
• Internal Access Control: A role-based access control (RBAC) system ensures that only authorised staff can access specific data, and all access is logged for audit purposes.
• Regular Security Audits: Independent third parties conduct regular penetration testing and security audits on the winmy6 infrastructure.
• 24/7 Monitoring: An intrusion detection system (IDS) monitors abnormal activity in real time.

Winmy6 uses cookies and similar technologies to enhance user experience and ensure platform functionality runs smoothly. Below are the types of cookies we use:

• Essential Cookies: Required for the platform to function properly — including login session detection and security preferences. These cookies cannot be disabled.
• Functional Cookies: Saves your preferences such as language, display theme, and game settings to personalise your experience.
• Analytics Cookies: Helps us understand how users interact with the platform for improvement purposes. This data is collected in aggregate and does not identify you individually.
• Security Cookies: Helps detect and prevent fraudulent activity by identifying suspicious patterns.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the winmy6 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by winmy6:

For any inquiries, concerns or requests related to your data privacy, you may contact the winmy6 Data Protection Officer (DPO) team via the following channels:

• Live Chat: Available 24/7 in the winmy6 app or website — the fastest way to get a response.
• Support Email: [email protected] — for written requests requiring documentation.
• Help Centre: Visit the page winmy6 FAQ for answers to frequently asked privacy questions.

The winmy6 privacy team will respond to all written enquiries within 3 working days. For formal data access requests, please provide your full name and account number to expedite the verification process.