Privacy Policy

This Privacy Policy ("Policy") sets out the practices of Wintown88 ("the Company", "we", "us", "our") with respect to the collection, use, storage, disclosure, and protection of personal data provided by users ("you", "the Player") of the Wintown88 platform, accessible at wintown88.cam (the "Platform").

We recognise that privacy is a fundamental right. This Policy is designed to be clear, honest, and accessible — not a document enginered to obscure how your data is really used. We commit to using your personal information only to deliver, maintain, and improve our services, and to fulfil our legal obligations as a licensed international online gaming operator.

By registering an account on the Wintown88 Platform or continuing to use our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact us to arrange account closure.

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Data Controller" means Wintown88, being the entity that determines the purposes and means of processing personal data.
• "Data Processor" means any third party engaged by Wintown88 to process personal data on its behalf and under its instructions.
• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, including name, identification number, contact details, financial account information, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Sensitive Personal Data" means personal data revealing racial or ethnic origin, financial account details, health data, biometric data used for identification, or any other category of data granted heightened protection under applicable law.
• "Third Party" means any natural or legal person other than the data subject, the Data Controller, or a Data Processor authorised to process data under the direct authority of the Data Controller.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data.

Wintown88 collects the following categories of personal data, depending on your interactions with the Platform:

3.1  Data Provided by You. The majority of personal data we hold is provided directly by you during account registration, KYC verification, payment processing, or communications with our support team.

3.2  Automatically Collected Data. Certain technical and behavioural data is collected automatically through cookies, server logs, and analytics tools when you access the Platform. Please refer to Section 7 (Cookies & Tracking) for full details.

3.3  Third-Party Sources. In limited circumstances, we may receive personal data from third parties, including identity verification agencies, fraud prevention services, and payment processors (such as FPX, DuitNow, Touch 'n Go eWallet, or Boost), for the purpose of verifying the accuracy of information you have provided.

Wintown88 processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your player account, including processing login requests and managing account settings.
• Identity & Age Verification (KYC): To verify that you meet the minimum age requirement of21 years and to confirm your identity before granting withdrawal access, in compliance with our licensing obligations.
• Payment Processing: To process deposits and withdrawals via Malaysian payment methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect. All transactions are processed in Malaysian Ringgit (MYR).
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the Platform.
• Regulatory Compliance: To meet our obligations under the terms of our international online gaming licence, including record-keeping, anti-money laundering (AML) checks, and cooperation with lawful regulatory enquiries.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our support channels.
• Responsible Gambling: To monitor gaming behaviour for indicators of problem gambling and to administer self-exclusion requests, deposit limits, and cooling-off periods.
• Platform Improvement: To analyse usage patterns and improve the functionality, security, and user experience of the Platform.
• Marketing Communications: To send promotional offers, bonus notifications, and relevant gaming updates to players who have consented to receive such communications. You may opt out at any time.

Wintown88 processes your personal data on the following legal bases:

6.1  No Sale of Personal Data. Wintown88 does not sell, rent, or commercially trade your personal data to any third party under any circumstances.

6.2  Authorised Third-Party Processors. We share personal data with carefully selected third-party service providers who process data on our behalf and under our instructions. These include:

• Payment processing partners (e.g., FPX, DuitNow, e-wallet providers) for the execution of deposit and withdrawal transactions.
• Identity verification and KYC service providers for document authentication and age verification.
• Fraud prevention and anti-money laundering (AML) screening services.
• Cloud hosting and data storage providers operating secure, encrypted infrastructure.
• Customer support platform providers that host our live chat and ticketing systems.
• Analytics services used to monitor Platform performance and user experience (data is processed in anonymised or aggregated form where possible).

6.3  Legal and Regulatory Disclosure. Wintown88 may disclose personal data to regulatory authorities, law enforcement agencies, or other competent bodies where required by law, court order, or regulatory directive. We will inform you of any such disclosure to the extent permitted by law.

6.4  Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or a material portion of our business assets, your personal data may be transferred to the successor entity. We will notify you of any such transfer and the successor entity's privacy practices prior to the transfer taking effect.

7.1  What Are Cookies. Cookies are small text files placed on your device when you visit a website. They are widely used to make websites function correctly, operate more efficiently, and to provide basic usage information to site operators.

7.2  Types of Cookies We Use. Wintown88 uses the following categories of cookies on the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your login state and security cookies that protect against cross-site request forgery (CSRF). These cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Used to remember your preferences, such as language settings, responsible gambling limit configurations, and notification preferences.
• Analytics Cookies: Used to collect anonymised data about how visitors use the Platform, enabling us to identify and fix performance issues and improve the user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, including multi-account detection and abnormal login behaviour.

7.3  Cookie Management. You may control cookie settings through your browser's privacy or settings menu. Please note that disabling certain cookies may affect the functionality of the Platform or prevent you from accessing certain features.

Wintown88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and Wintown88's servers is encrypted in transit using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms this encryption is active.
• Encryption at Rest: Sensitive personal data, including identity documents and financial records, is encrypted at rest using AES-256 encryption on our secure infrastructure.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational requirement may access personal data, and all access is logged and audited.
• Two-Factor Authentication: Two-factor authentication (2FA) is available for all player accounts and is required for all administrative access to systems that process personal data.
• Penetration Testing: Our Platform and infrastructure undergo regular penetration testing and security audits conducted by independent cybersecurity professionals.
• Incident Response: We maintain a documented data breach incident response plan. In the event of a breach that presents a risk to your rights, we will notify affected users without undue delay.

While Wintown88 takes all reasonable steps to protect your personal data, no internet transmission is entirely without risk. You are responsible for maintaining the security of your Account credentials and should notify us immediately if you suspect unauthorised access to your Account.

9.1 Wintown88 retains personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable law and our international gaming licence obligations.

9.2 The following standard retention periods apply:

• Active Account Data: Retained for the duration of the Account's existence plus a minimum of five (5) years following account closure, in compliance with anti-money laundering regulatory requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Transaction Records: All financial transaction records are retained for a minimum of five (5) years in accordance with financial record-keeping requirements.
• Support Communications: Live chat transcripts and email correspondence are retained for a minimum of two (2) years from the date of the interaction.
• Marketing Consent Records: Records of marketing consent or opt-out are retained for the duration of the Account plus three (3) years to support compliance with applicable consent requirements.

9.3 Upon expiry of the applicable retention period, personal data will be securely deleted or permanently anonymised so that it can no longer be attributed to any individual.

As a data subject, you have the following rights in relation to your personal data held by Wintown88. To exercise any of these rights, please contact us using the details in Section 14.

We will respond to all verified data rights requests within 30 calendar days of receipt. Complex requests may require an extension of up to a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day period.

The Wintown88 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual who has not met our minimum age requirement, we will immediately close the associated Account and permanently delete all related personal data.

If you believe that a minor has registered on or is accessing the Wintown88 Platform, please contact us immediately at the email address provided in Section 14. We take underage gambling extremely seriously and will investigate all reports promptly.

12.1 As an internationally operated platform, some personal data processed by Wintown88 may be transferred to, stored, or processed in countries outside Malaysia. Such transfers may occur in connection with our payment processing partners, KYC verification providers, cloud hosting infrastructure, and customer support operations.

12.2 Where personal data is transferred internationally, Wintown88 takes steps to ensure that an adequate level of data protection is maintained, including through: (a) transfers to countries or territories that provide an adequate level of data protection as recognised under applicable frameworks; (b) the use of standard contractual clauses or equivalent transfer mechanisms in data processing agreements with third-party recipients; and (c) the implementation of supplementary technical measures, including end-to-end encryption, where appropriate.

12.3 You may request further information about the specific safeguards applied to international transfers of your personal data by contacting us using the details provided in Section 14.

Wintown88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed prominently at the top of this page.

Where changes are material — for example, where we introduce a new category of data processing or a new purpose for which we use your data — we will provide you with reasonable prior notice via a notification on the Platform or by email to the address registered to your Account. Your continued use of the Platform following the effective date of a material amendment constitutes your acceptance of the updated Policy.

We recommend that you review this Privacy Policy periodically. A summary of significant changes will be maintained at the top of this page for a period of 90 days following any material amendment.

If you have any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data, please contact Wintown88 using the following channels:

For responsible gambling queries, self-exclusion requests, or deposit limit settings, please visit our dedicated Responsible Gambling page or contact our support team directly.

For questions about our general platform Terms & Conditions, please refer to our Terms & Conditions page.