Winlah Privacy Policy – Data Protection for Malaysian Players

Winlah collects your personal data through several channels — during the account registration process, while you use the platform, and when you interact with our support team. The following are the categories of data we collect:

Personal Identification Data

• Full name as it appears on your MyKad or passport.
• An active Malaysian phone number used for registration and verification.
• A valid email address for account communications and notifications.
• Date of birth for age verification (18 years and above).
• Identity documents such as a copy of your MyKad or passport, where required for the KYC (Know Your Customer) process.

Financial Data & Transactions

• Records of all deposits made via DuitNow, FPX Maybank2u, CIMB Clicks, Touch 'n Go eWallet, GrabPay, ShopeePay, and Boost — including date, time, and amount in Malaysian Ringgit (MYR).
• Records of all withdrawals, including payment method, amount, and processing status.
• Complete betting history covering bet types, markets, odds, stakes, and outcomes.
• Bank account numbers or eWallet numbers registered for withdrawal purposes — stored securely and inaccessible to general Winlah staff.

Technical & Usage Data

• The IP address of the device used to access the winlah platform.
• Device type, phone model, operating system, and browser version.
• Session data including login time, logout time, and pages visited.
• Cookie data and device identifiers for security and user experience purposes.
• Error logs and performance reports for technical troubleshooting purposes.

Every piece of data Winlah collects has a clear and specific purpose. We do not use your data for anything unrelated to the provision of our platform services. The following are the primary purposes for which data is used:

Account Management & Services

• Processing account registration and verifying your identity as an eligible user.
• Managing your account settings, game preferences, and self-imposed betting limits.
• Providing relevant customer support when you reach out to our team.
• Sending important account notifications such as deposit confirmations, withdrawal status updates, and security alerts.

Financial Transaction Processing

• Processing all deposits and withdrawals accurately and securely in Malaysian Ringgit (MYR).
• Confirms that transactions are made by the legitimate account holder through name and payment method verification.
• Detecting and preventing financial fraud, money laundering, and other suspicious activity.
• Maintaining transaction records for audit and financial regulatory compliance purposes.

Security & Fraud Prevention

• Detecting unauthorised access attempts on your account using IP address and device data.
• Identifying suspicious betting patterns that may indicate system abuse or fraud.
• Investigating complaints and disputes related to accounts or transactions.

Platform Improvement

• Analysing aggregated (non-individual) usage data to understand how Malaysian players use the platform and identify areas for improvement.
• Testing new features and measuring their effectiveness prior to full launch.

Marketing Communications (with consent)

• Sending information about the latest promotions, new bonuses, and special events from winlah — only to members who have given consent to receive marketing communications.
• You may withdraw this consent at any time via your account settings or by clicking the "unsubscribe" link in any marketing email from winlah.

Winlah does not sell, rent, or disclose members' personal data to third parties for marketing purposes. However, there are limited situations where Winlah needs to share data with certain parties to ensure the platform operates correctly and securely:

Payment Service Providers

Winlah works with payment gateway providers that handle transactions via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, ShopeePay, and Boost. These providers receive only the data necessary to process your transactions and are bound by strict data protection agreements. They are not permitted to use your data for any other purpose.

Platform Technology Provider

Winlah works with third-party providers for services such as server hosting, live casino video streaming, and identity verification systems. These providers only access data relevant to their specific services and are bound by robust confidentiality agreements.

Legal Requirements

Winlah may be required to disclose certain data to the relevant authorities when mandated by law or a valid court order. In such situations, Winlah will endeavour to notify you in advance unless directed otherwise by the relevant authority.

Winlah takes data security seriously and employs multiple layers of protection to keep your information safe at all times. The following are the key security measures we have in place:

• 256-bit SSL Encryption on all communications between your device and Winlah's servers — no data is ever transmitted unencrypted.
• Hashed password storage using strong cryptographic algorithms — even Winlah staff cannot view your actual password.
• Two-factor authentication (2FA) available for all accounts as an added layer of security.
• 24/7 Monitoring by winlah's cybersecurity team to detect suspicious activity in real time.
• Regular security audits by independent third parties to identify and remediate any system vulnerabilities.
• Internal access controls strict controls ensure that only authorised staff can access specific data, and all access is logged for audit purposes.
• Separate data storage between personal data, financial data, and gaming data to minimise the risk of a widespread breach.

Even with all these security measures in place, no system can guarantee 100% security. We encourage you to play your part in protecting your account by using a strong and unique password, enabling 2FA, and never sharing your login credentials with anyone.

The Winlah website uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates correctly. Cookies are small text files stored on your device when you visit the Winlah website.

Types of cookies winlah uses:

• Essential Cookies: Required for the platform to function — including login session verification, in-platform wallet management, and form security. These cookies cannot be disabled as they are essential to core functionality.
• Preference Cookies: Saves your preferences such as language, default betting limits, and preferred table display — so you save time every time you log in.
• Analytics Cookies: Collecting anonymised usage data to help us understand how the platform is used and where improvements are needed. This data is not linked to your personal identity.
• Security Cookies: Helps detect unauthorised access attempts and bot activity by tracking unusual usage patterns.

You can manage cookies through your browser settings. However, disabling essential cookies may cause certain Winlah platform functions to stop working correctly, including login and transaction processing.

As a Winlah member, you have the following rights regarding your personal data. Winlah is committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, contact the winlah privacy team by email at support@winlah-bangla.com or via 24/7 live chat within the platform. Please include your full name and account number to help us assist you faster.

Winlah retains your personal data only for as long as necessary to fulfil the purpose for which it was collected. Retention periods vary by data category:

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to your personal identity. The deletion process uses methods that ensure the data cannot be recovered by any party.

In the event of account closure at your request, Winlah will initiate the data deletion process, which can proceed once all mandatory retention requirements have been met. You will be notified once this process is complete.

If you have any questions, concerns, or requests regarding this Privacy Policy or how winlah handles your personal data, we encourage you to contact us directly.

Winlah takes every privacy enquiry seriously and is committed to providing clear, helpful responses within a reasonable timeframe. Here's how to reach our privacy team:

• Email: support@winlah-bangla.com – for written enquiries that require documentation or detailed clarification.
• Live Chat: Available 24 hours a day, 7 days a week, directly within the Winlah platform — for immediate queries and fast responses.

When contacting us regarding a privacy matter, please include your full name, your Winlah account number, and a clear description of your query or request. This helps us process your request more quickly and accurately.

Winlah reserves the right to update this Privacy Policy from time to time to reflect changes in our data handling practices or in applicable laws. The latest version will always be available on this page, along with the date of the most recent update. For material changes, we will notify registered members via email.