winmy12 Privacy Policy

winmy12 ("we," "us," "our," or "the Platform") is an online casino and sports betting platform operated at winmy12.org and licensed by an international gaming authority. winmy12 is the data controller responsible for your personal data collected through this Platform. We are committed to protecting your privacy and to processing personal data fairly, lawfully, and transparently.

This Privacy Policy applies to all Members and visitors of winmy12, including players across Malaysia — from Kuala Lumpur and the Klang Valley to Penang, Johor Bahru, Kota Kinabalu, and beyond. By registering an account or continuing to browse winmy12.org, you acknowledge that you have read and understood this policy.

winmy12 collects the following categories of personal data:

2.1 Identity Data — Full legal name, date of birth, nationality, and copies of government-issued identification documents (e.g., MyKad, passport) provided during Know Your Customer ("KYC") verification.

2.2 Contact Data — Email address, mobile phone number, and correspondence records arising from your communications with winmy12 support.

2.3 Financial Data — Payment method details (e.g., bank account identifiers, e-wallet references for Touch 'n Go eWallet, Boost, Maybank, CIMB, and Public Bank), transaction history, deposit and withdrawal records, and balance information.

2.4 Technical Data — IP address, device identifiers, browser type and version, operating system, time zone, and login timestamps collected automatically when you access winmy12.org.

2.5 Usage Data — Pages visited, game sessions played, bet history, wagering patterns, session duration, and navigation paths within the Platform.

2.6 Responsible Gaming Data — Self-imposed limits, cooling-off requests, self-exclusion elections, and any communications related to responsible gaming tools used on your account.

winmy12 collects personal data through the following means:

• Direct interactions — when you register an account, complete KYC, make deposits or withdrawals, contact support, or use responsible gaming tools.
• Automated technologies — cookies, server logs, and analytics tools that record your device and usage data as you browse winmy12.org.
• Third-party sources — identity verification bureaus used for KYC compliance, payment processors, and fraud detection services may provide supplementary data to validate your identity or transaction authenticity.

winmy12 uses your personal data for the following purposes:

• Account administration — creating, maintaining, and securing your winmy12 account, processing logins, and managing your preferences.
• KYC and regulatory compliance — verifying your identity and age (21+), fulfilling anti-money-laundering ("AML") obligations, and complying with our gaming licence requirements.
• Transaction processing — processing deposits and withdrawals in MYR via your chosen payment method and maintaining accurate financial records.
• Customer support — responding to queries, resolving disputes, and maintaining records of communications.
• Platform security and fraud prevention — detecting, investigating, and preventing fraudulent activity, unauthorised account access, and prohibited conduct.
• Responsible gaming — administering deposit limits, self-exclusion, and cooling-off periods, and monitoring usage patterns that may indicate problem gambling behaviour.
• Service improvement — analysing aggregated usage data to improve Platform performance, game selection, and user experience.
• Marketing communications — sending promotional emails and notifications about winmy12 offers where you have given explicit consent. You may withdraw consent at any time by contacting support.

winmy12 processes your personal data under the following legal bases:

• Contractual necessity — processing required to perform the Member agreement, including account management, transaction processing, and KYC verification.
• Legal obligation — processing required to comply with AML regulations, gaming licence conditions, and other applicable legal requirements.
• Legitimate interests — processing for fraud prevention, Platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent — processing for marketing communications, where you have given explicit, freely-given consent that you may withdraw at any time.

winmy12 does not sell your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the purposes set out in this policy:

• Payment processors — to facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other supported methods.
• Identity verification providers — to conduct KYC checks as required by our gaming licence.
• Game software providers — technical data shared with certified game studios (e.g., session tokens) to deliver live casino and slot game services.
• Regulatory and law enforcement authorities — where winmy12 is legally obligated to report under AML legislation or gaming licence conditions, or where compelled by a valid court order.
• IT and security service providers — cloud hosting, cybersecurity, and platform infrastructure providers operating under binding data processing agreements with winmy12.

All third parties with whom winmy12 shares personal data are contractually required to maintain appropriate security standards and to use the data only for the specific purpose for which it was disclosed.

winmy12 uses cookies and similar tracking technologies on winmy12.org. Cookies are small text files stored on your device that help the Platform function correctly and allow us to analyse how Members use the site.

Essential cookies are required for core Platform functionality, including maintaining your login session and storing your game preferences. These cannot be disabled without affecting Platform usability.

Analytics cookies collect aggregated, anonymised data on page visits, session duration, and navigation patterns to help winmy12 improve the user experience. You may opt out of analytics cookies by adjusting your browser settings.

Marketing cookies may be used to serve winmy12 promotional content relevant to your interests. These are only deployed where you have given consent, which you may withdraw at any time via your browser settings or by contacting winmy12 support.

winmy12 retains your personal data for as long as your account is active and for a period thereafter as required by our gaming licence and applicable law. Specifically:

• KYC and identity documents are retained for a minimum of 5 years following account closure, in line with AML regulatory requirements.
• Transaction records are retained for a minimum of 5 years following the date of the transaction.
• Communication and support records are retained for 3 years following the relevant interaction.
• Marketing consent records are retained for the duration of the consent and for 2 years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with winmy12's data disposal procedures.

winmy12 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• All data in transit between your device and winmy12's servers is encrypted using 256-bit SSL/TLS.
• Passwords are stored as salted cryptographic hashes — plain-text passwords are never retained.
• Access to production systems containing personal data is restricted to authorised personnel on a need-to-know basis and protected by multi-factor authentication.
• Login geography monitoring detects unusual access patterns and triggers account alerts for suspicious activity.
• Regular security audits and penetration testing are conducted by independent third-party security firms.

Notwithstanding these measures, no electronic transmission or storage system is entirely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, winmy12 will notify you without undue delay in accordance with its regulatory obligations.

Subject to applicable data protection law, you have the following rights in relation to your personal data held by winmy12:

• Right of access — to request a copy of the personal data winmy12 holds about you.
• Right of rectification — to request correction of inaccurate or incomplete personal data.
• Right of erasure — to request deletion of your personal data, subject to winmy12's legal retention obligations.
• Right to restrict processing — to request that winmy12 limit how it uses your data in certain circumstances.
• Right to data portability — to receive your personal data in a structured, commonly used format where technically feasible.
• Right to object — to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent — to withdraw marketing consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact winmy12 support via live chat at winmy12.org or by emailing [email protected]. winmy12 will respond to verified requests within 30 days.

winmy12 does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly intended for adult users aged 21 and above. If winmy12 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all data will be deleted, and any balances will be forfeited in accordance with our Terms and Conditions. If you have reason to believe that a minor has registered on winmy12, please contact support immediately.

winmy12 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform functionality. Material changes will be communicated to registered Members by email or via a prominent notice on the Platform no fewer than 7 days before taking effect. The date of the most recent revision is displayed at the top of this page. We encourage you to review this policy periodically. Your continued use of winmy12 following the effective date of any update constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how winmy12 handles your personal data, please contact our support team:

• Live chat: available 24/7 at winmy12.org
• Email: [email protected] (plain text — not a clickable link)

winmy12 aims to resolve all data-related enquiries promptly. For unresolved complaints, you may escalate to the relevant data protection authority or the dispute resolution body specified under our gaming licence.