WinClub Privacy Policy – Data Protection for Malaysian Members

This Privacy Policy is published by WinClub, an online entertainment platform operating under an internationally recognised licence and providing services to players in Malaysia. This document outlines our practices regarding the collection, use, storage, and protection of personal data of all individuals who register for or use the WinClub platform.

At WinClub, we understand that trust is the foundation of our relationship with every member. Whether you're registering an account, making a deposit via Touch 'n Go eWallet or DuitNow, playing slots, betting on a Malaysia Super League match, or reaching out to our support team – you're entrusting us with your personal information. We take that trust seriously, and this Privacy Policy is our written commitment to how we honour it.

This Privacy Policy applies to all users of the WinClub platform — including unregistered website visitors, active registered members, and former members whose accounts have been closed. It covers all channels through which you interact with WinClub, including the main website, user accounts, customer support via live chat and email, and any promotional or service-related communications.

WinClub operates in accordance with strict data protection principles and complies with applicable legal requirements in the jurisdictions where we operate. We continually strive to maintain the highest achievable standard of privacy practices, and we update this policy periodically to reflect changes in industry practices and evolving legal requirements.

WinClub collects several categories of personal data from members and users of our platform. All data is collected for specific, legitimate purposes, and we do not collect data beyond what is necessary for platform operations.

2.1 Data You Provide Directly

This is data you actively provide to us when interacting with the WinClub platform:

• Registration information: Your full name (as shown on your MyKad), active mobile number, email address, account password, and date of birth for age verification.
• Identity verification (KYC) information: A copy of your Malaysian identity card (MyKad), a verification selfie, and any other documents requested during the KYC process to meet regulatory requirements.
• Payment information: Details of the payment method you use — whether Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX online banking such as Maybank2u or CIMB Clicks. WinClub does not store your bank card number or full bank account details directly; these are handled by our certified payment providers.
• Communication information: The contents of live chat sessions, support emails, and any other written communications between you and the WinClub team.

2.2 Automatically Collected Data

When you use the WinClub platform, certain technical data is collected automatically:

2.3 Data We Do Not Collect

WinClub does not directly collect your credit or debit card details, PIN numbers, e-banking passwords, biometric data beyond what is required for KYC, or any data that is not relevant to providing our platform services to you.

Every piece of data we collect has a clear and legitimate purpose. WinClub will not use your personal data for any purpose other than those stated below without first obtaining your consent.

3.1 Service Provision and Operations

This is the primary use of your data and the foundation of the entire WinClub platform:

• Creating and managing your member account, including the registration process, identity verification, and login management.
• Processes deposits and withdrawals through your preferred Malaysian payment method – whether that's Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX.
• Provides access to all games on the WinClub platform, including online slots, Live Casino with real dealers, poker, blackjack, Sports Betting for the Malaysia Super League and EPL, and e-sports betting for Mobile Legends, DOTA 2, CS2, and more.
• Crediting bonuses and promotions to your account, including welcome bonuses, weekly cashback, and any other special promotions you are eligible for.
• Providing customer support in Bahasa Melayu via live chat and email, including resolving technical issues, payment enquiries, and general feedback.

3.2 Security and Fraud Prevention

Your data is actively used to protect you and the WinClub platform from unauthorised activity:

• Monitoring account activity to detect suspicious patterns that may indicate unauthorised login attempts or account takeovers.
• Detecting and preventing duplicate account registrations using the same device, IP address, or payment method.
• Identifying fraudulent activity such as bonus abuse, money laundering, or suspicious transactions.
• Fulfilling reporting obligations to regulatory bodies regarding suspicious transactions where required by law.

3.3 Relevant Communications

WinClub uses your data to communicate matters related to your account and our services. This includes transaction notifications (deposit and withdrawal confirmations), account security alerts, updates regarding policy changes or Terms & Conditions that affect you, and information about promotions and offers relevant to your gaming interests. You can manage these communication preferences through your account settings or by contacting our support team.

3.4 Responsible Gaming

Your gameplay activity data — including session frequency and duration, deposit patterns, and betting behaviour — is analysed by the WinClub team to ensure you are playing within healthy limits. If our system detects patterns that may indicate signs of problem gambling, the WinClub team may proactively reach out to offer information on self-control tools or available support resources. This is not a judgement — it is part of WinClub's commitment to the wellbeing of our members.

3.5 Platform Improvements

Aggregated, anonymised data (which cannot be traced back to any individual) is used to analyse platform usage, identify areas for improvement, and develop better new features for all WinClub members. This type of data does not reveal any individual's identity and is used solely for technical and product improvement purposes.

WinClub invests seriously in security infrastructure to ensure your personal data remains protected at all times. The level of security we maintain is on par with that of Malaysia's leading financial institutions.

4.1 Data Encryption

All data transmitted between your device and WinClub's servers is encrypted using Transport Layer Security (TLS) with 256-bit SSL standards. This means that even if someone were to intercept communications between your device and our servers, the intercepted data cannot be read or understood without the encryption key held only by the authorised parties.

Data stored on WinClub's servers — including account information, transaction records, and game history — is also encrypted at rest using industry-recognised encryption standards. This provides an additional layer of protection even in the event of an unexpected physical threat to our servers.

4.2 Access Controls

Access to WinClub members' personal data is strictly limited to staff who require it to carry out their duties – on a need-to-know basis. All access to sensitive data is logged and monitored. WinClub staff with access to member data are required to undergo rigorous privacy and security training and to sign binding confidentiality agreements.

4.3 Data Retention Period

WinClub retains members' personal data for as long as necessary to fulfil the purpose for which it was collected and to comply with applicable legal requirements. In general:

• Active account data is retained for as long as the account remains active and for a minimum of seven years after account closure, for legal compliance and financial audit purposes.
• Financial transaction records are retained for a minimum of seven years, in line with financial reporting and anti-money laundering requirements.
• Customer support communication logs are retained for three years for dispute resolution and service quality improvement purposes.
• Identity verification (KYC) data is retained in accordance with applicable regulatory requirements, typically for the same duration as financial record retention periods.

4.4 Periodic Security Assessments

WinClub conducts regular security assessments and penetration testing to identify and address any vulnerabilities in our security infrastructure before they can be exploited by malicious parties. Our security team monitors current cyber threats and updates our protective measures in line with the latest developments in the threat landscape.

WinClub does not sell, rent, or share members' personal data with third parties for marketing or commercial purposes. This is a non-negotiable commitment. However, there are limited situations where WinClub needs to share certain information with third parties to ensure smooth platform operations and compliance with legal requirements.

5.1 Certified Service Providers

WinClub works with a select group of carefully vetted third-party service providers to support our platform operations. These providers include:

• Payment providers: Payment processing companies that handle transactions via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX. They receive only the data necessary to process your transactions.
• Game providers: Game software providers such as Pragmatic Play, PG Soft, and live casino providers that require minimum account information to enable gameplay within our integrated platform.
• Technical infrastructure services: Cloud and hosting service providers that store and manage our servers. All such providers are required to comply with strict security standards and to sign binding data processing agreements.

All third-party service providers working with WinClub are required to sign strict confidentiality and data protection agreements. They may only use shared data for the specific purposes defined in those agreements and are prohibited from using it for any other purpose.

5.2 Legal and Regulatory Requirements

WinClub may be required to disclose certain member information to the relevant authorities in specific circumstances prescribed by law:

• Valid instructions from a regulatory body or law enforcement agency with the relevant jurisdiction.
• A valid and binding court order or other legal process.
• Reporting obligations under applicable anti-money laundering laws.
• In circumstances where disclosure is necessary to prevent serious harm to an individual.

In all of the above cases, WinClub will endeavour to notify the relevant member of any such disclosure request before the information is released, unless prohibited from doing so by law or court order.

5.3 What We Do NOT Do

To remove any doubt: WinClub never sells members' personal data to advertising companies or marketers, does not share email lists or phone numbers with third-party marketing firms, does not permit third parties to "mine" or analyse our members' data for targeted advertising purposes, and does not disclose individual gameplay records or financial history to any party without a valid legal basis.

The WinClub platform uses cookies and similar tracking technologies to deliver a better user experience and ensure the platform functions correctly. This section explains the types of cookies we use and how you can manage them.

6.1 Types of Cookies Used

• Session cookies: Session cookies are temporary and expire automatically when you close your browser. They are used to maintain your login status and ensure a seamless gaming experience during your active session. Without session cookies, you would need to log in again each time you navigate between pages on the WinClub platform.
• Persistent cookies: Persistent cookies remain on your device for an extended period. WinClub uses these cookies to remember your preferences – such as language and display settings – and to streamline the login process on future visits.
• Security cookies: Cookies used specifically for security purposes, including detecting suspicious login attempts and protecting your account from CSRF (Cross-Site Request Forgery) attacks.
• Analytics cookies: Cookies that collect anonymous data about how users interact with the platform — most frequently visited pages, time spent in each section, and general navigation patterns. This data helps us understand how to improve the WinClub user experience.

6.2 Managing Your Cookie Preferences

You can manage or delete cookies through your web browser settings. Most modern browsers allow you to view existing cookies, delete specific or all cookies, and block new cookies from being installed. Please note, however, that blocking all cookies may affect the functionality of the WinClub platform — particularly session cookies required for the login process and account security.

As a WinClub member, you have several clear and enforceable rights regarding the personal data we hold about you. WinClub is committed to respecting and facilitating the exercise of these rights.

7.1 How to Exercise Your Rights

To exercise any of the rights above, you may contact the WinClub customer support team via live chat or send an email to support@winclub-jit.com, clearly stating the right you wish to exercise and the information required to verify your identity. WinClub will process your request and respond within 14 business days from the date the request is received.

Please note that the exercise of certain rights may be limited by our legal obligations – for example, we may be unable to delete specific transaction records due to financial record-keeping requirements prescribed by law. In such cases, WinClub will clearly explain why a request cannot be fully fulfilled and what alternatives are available.

7.2 Withdrawing Consent

In situations where WinClub processes your data based on your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the validity of any processing that took place prior to the withdrawal. To withdraw consent, contact our customer support team or update your communication preferences in your account settings.

The WinClub platform is strictly for adults aged 18 and above, without exception. WinClub does not knowingly collect, store, or process personal data belonging to individuals under the age of 18.

The WinClub account registration process requires age verification through the date of birth provided and, in certain cases, identity verification documents. Should WinClub become aware that a person under the age of 18 has registered an account by providing false information about their age, the account will be terminated immediately and all collected data will be deleted in accordance with applicable legal requirements.

WinClub reserves the right to amend or update this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or developments in how we deliver services to Malaysian members.

9.1 How We Notify You of Changes

When we make material changes to this Privacy Policy, we will notify you by email to your registered address and via an in-platform notification when you log in to WinClub. Notice will be given at least 14 days before the changes take effect, giving you sufficient time to review them and make an informed decision about your continued use of the platform.

Minor changes that do not materially affect your rights – such as spelling corrections, clearer language, or updated contact information – may take effect without prior notice. We encourage you to review this page periodically to stay informed about how WinClub protects your data.

9.2 Acceptance of Changes

Continued use of the WinClub platform after the effective date of any Privacy Policy amendment constitutes acceptance of the updated policy. If you disagree with the changes, you have the right to close your account before they take effect. Any valid remaining balance will be processed in accordance with our standard account closure procedure.

WinClub takes every data privacy enquiry and concern seriously. If you have any questions about this Privacy Policy, how we handle your data, or wish to exercise any of the rights set out in this document, please do not hesitate to get in touch with us.