Win2u Privacy Policy — Our Member Personal Data Protection

1 Personal Information We Collect

Win2u collects member personal information to ensure the platform operates safely, efficiently, and in compliance with applicable laws in Malaysia. The information we collect is kept to the minimum necessary and is always gathered transparently.

There are two main categories of information we collect:

Information you provide directly:

• Full name as stated on your identity card or passport.
• Identity card or passport number (for KYC purposes).
• Date of birth for age eligibility verification.
• Active email address for communications and account verification.
• Mobile phone number for two-factor authentication (2FA) and important notifications.
• Bank account or e-wallet information for deposit and withdrawal purposes.
• Current residential address (for enhanced KYC processes when required).

Information collected automatically when you use the platform:

• IP address and approximate location information derived from IP.
• The type of device, operating system, and web browser version you are using.
• Activity log data including login times, games played, and transactions carried out.
• Session data and browser cookies to maintain your login preferences.
• Records of communications between you and the win2u support team.

2 How We Use Your Personal Data

Win2u uses collected personal information solely for lawful and clearly stated purposes. We will not use your data for any other purpose without first obtaining your consent.

The following are the primary purposes for which win2u uses your personal data:

1. Account Management: Create, verify, and maintain your member account so you can access all win2u services seamlessly.
2. Transaction Processing: Process deposits and withdrawals securely, and verify that transactions carried out are legitimate and authorised by you.
3. KYC & Legal Compliance: Fulfil legal obligations including age verification, identity verification, and anti-money laundering (AML) requirements prescribed by Malaysian law.
4. Platform Security: Detect and prevent fraudulent activity, unauthorised access, multiple account usage, and any suspicious activity that could compromise platform integrity.
5. Service Communications: Send important notifications related to your account such as transaction confirmations, security alerts, and service updates.
6. Promotions and Offers: With your consent, sending information about promotions, bonuses, and the latest offers related to the win2u platform. You may opt out of receiving these marketing communications at any time.
7. Customer Support: Provide effective assistance when you contact the win2u support team, with reference to your account records and interaction history.
8. Platform Improvements: Analyse usage data in aggregate (without identifying individuals) to understand usage patterns and improve the quality of win2u's services.

3 Sharing Information with Third Parties

Win2u upholds strict confidentiality principles. We do not share, sell, or disclose your personal information to third parties except in the following clearly stated circumstances:

• Trusted Service Providers: We work with selected third-party providers such as payment processors, cloud computing service providers, and identity verification companies. All these providers are bound by strict confidentiality agreements and may only use your data for purposes specified by win2u.
• Legal Requirements: win2u may be required to disclose information to government authorities, law enforcement bodies, or courts where mandated by applicable Malaysian law, including AML and financial compliance requirements.
• win2u Rights Protection: In circumstances where win2u needs to defend its legal rights, prevent fraud, or protect the safety of other members, relevant information may be disclosed to the appropriate parties.
• Business Transfer: In the event of a merger, acquisition, or transfer of company assets, member information may be transferred as part of that business transaction, subject to equivalent privacy protections.

4 Cookies, Trackers & Similar Technologies

The win2u platform uses cookies and similar tracking technologies to enhance your experience on our website and app. Cookies are small text files stored on your device that help us recognise you on future visits.

We use four main types of cookies:

• Essential Cookies (Required): These cookies are required for the platform to function properly. They include login session cookies, security cookies, and language preference cookies. Without them, many platform functions will not work as intended.
• Performance & Analytics Cookies: Used to gather information on how members use our platform, such as the most frequently visited pages and how users arrive at our site. This information helps us continuously improve the platform.
• Functional Cookies: Allows the platform to remember your preferences such as your username, preferred language, and display settings, making your experience more personalised and convenient.
• Security Cookies: Used exclusively to detect suspicious activity, prevent unauthorised access, and protect your account from security threats.

You can manage or delete cookies through your web browser settings. Please note, however, that disabling or blocking essential cookies may affect certain functions of the win2u platform.

5 Data Security Measures

The security of your personal data is win2u's highest priority. We continuously invest in security infrastructure to ensure your information is always protected against increasingly sophisticated online threats.

Key security measures we employ include:

• 256-bit SSL/TLS Encryption: All communications between your device and win2u's servers are encrypted using the highest industry-standard encryption protocols.
• Two-Factor Authentication (2FA): An additional security layer that requires verification via your mobile phone for every new login or sensitive transaction.
• 24/7 Security Monitoring: Our security team continuously monitors systems to detect any unusual activity or intrusion attempts.
• Multi-Layered Firewall: Our firewall system protects win2u's databases and servers from unauthorised external access.
• Regular Security Audits: win2u undergoes regular security audits by independent third parties to identify and address any vulnerabilities in our systems.
• Internal Access Control: Access to members' personal data within win2u is restricted on a strict need-to-know basis, and every access is logged for accountability purposes.

6 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by win2u. win2u is committed to respecting and facilitating the exercise of these rights.

To exercise any of the above rights, please contact the win2u support team via 24/7 live chat. We will process your request within 14 business days. In some cases, we may need to verify your identity before processing the request.

7 Data Retention Period

Win2u retains member personal data for as long as your account is active or as long as necessary to provide services to you. When you close your win2u account, we will retain your data for any additional period required by law or for other legitimate purposes.

• Active Account Data: Retained for the duration your account is active, plus an additional seven years after account closure, to comply with legal requirements relating to financial records and AML.
• Financial Transaction Records: Retained for seven years in accordance with Malaysia's Companies Act requirements and relevant financial regulations.
• KYC Documents: Retained for a minimum of five years after the business relationship ends, in line with AML legal requirements.
• Support Communication Logs: Retained for two years from the date of last interaction for quality control and dispute resolution purposes.
• Log & Technical Data: Retained for 12 months for security and fraud detection purposes.

Once the designated retention period has ended, your data will be permanently deleted or anonymised from win2u's systems.

8 Links to External Websites or Services

The win2u platform does not contain links to third-party websites outside our control. However, if you access our platform via a mobile app, third-party app stores such as Google Play Store or Apple App Store may have their own privacy policies that apply during the download and installation process.

Win2u is not responsible for the privacy practices of any third-party platforms or services. We encourage you to review the privacy policy of each platform you use to ensure you are comfortable with how they handle your data.

The third-party payment providers we use, such as FPX, Touch 'n Go, and Boost platforms, have their own privacy policies covering data processing during transactions. We ensure all these providers comply with industry-recognised security standards.

9 Children's Privacy

Win2u is an entertainment platform intended exclusively for individuals aged 18 and above. We do not knowingly collect any personal information from children or minors under the age of 18.

If we find that a person under the age of 18 has registered or attempted to use our platform, we will promptly close the account and delete all associated personal data.

10 Privacy Policy Amendments and Contact Us

Win2u reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Any amendments take effect immediately upon publication on this page.

We will notify members of any material changes via in-platform notifications or by email to the address registered on your account. It is your responsibility to review this page periodically to stay informed of the latest terms of our Privacy Policy.

Your continued use of the win2u platform after any changes to this Privacy Policy will be deemed as your acceptance of the latest version.

If you have any questions, concerns, or wish to submit a request regarding your personal data, please contact the win2u Data Protection Officer via:

• Live Chat: Available 24 hours a day, 7 days a week via the win2u platform.
• Email: [email protected] (displayed as text only — not clickable)

We will endeavour to respond to all privacy-related inquiries within 5 business days. For more information, please also visit the FAQ and Terms and Conditions us.