This Privacy Policy explains how winmy18 collects, uses, stores, discloses, and protects personal information provided by users of the winmy18 platform. Please read this document carefully. Your continued use of winmy18 constitutes acceptance of this policy.
winmy18 ("we," "us," "the Platform") operates the online gaming platform accessible at winmy18.net and all associated subdomains and mobile interfaces (collectively, "the Services"). This Privacy Policy applies to all individuals who access or interact with the Services, including registered account holders, visitors browsing the platform without an account, and any person who contacts winmy18 through any communication channel.
winmy18 is committed to protecting the privacy and personal data of our users in accordance with applicable data protection legislation and the data handling standards imposed by our international gaming authority licensing framework. This policy is designed to give you clear, honest information about how your data is handled — not to obscure it in legalese.
This Privacy Policy should be read together with winmy18's Terms & Conditions and Responsible Gaming Policy, both of which govern your broader use of the platform.
For the purposes of applicable data protection law, winmy18 is the data controller in respect of the personal data it processes about users of its platform. winmy18 determines the purposes and means by which your personal data is processed and bears responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.
Queries, requests, and complaints relating to the processing of your personal data by winmy18 should be directed to our data protection contact at: [email protected].
When you create a winmy18 account, we collect: your full legal name, date of birth, email address, mobile number, and preferred username. Where KYC (Know Your Customer) verification is triggered — including before processing any withdrawal — we additionally collect copies of government-issued identification documents (e.g., MyKad, passport), proof of residential address, and where required, documentation evidencing source of funds.
We collect records of all deposits, withdrawals, bonus claims, and wagers placed on the winmy18 platform. This includes transaction amounts, timestamps, payment method identifiers (e.g., the last four digits of an account number, an e-wallet reference), and transaction status. We do not store complete bank account numbers, card numbers, or e-wallet PINs on our servers.
winmy18 records all gaming activity on the platform, including game sessions, wager amounts, outcomes, session durations, and responsible gaming tool usage (e.g., deposit limit changes, self-exclusion requests). This data is used for regulatory compliance, responsible gaming monitoring, and personalisation of your platform experience.
When you access winmy18, we automatically collect technical data including your IP address, browser type and version, operating system, device identifiers, referring URL, and pages visited. This data is used for security, fraud prevention, performance optimisation, and to ensure a consistent experience across your devices.
If you contact winmy18 support via live chat, email, or any other channel, we retain a record of that correspondence including timestamps, content, and any associated account information. This is used for dispute resolution, quality assurance, and to maintain an audit trail of player interactions.
winmy18 collects personal data through the following means:
winmy18 processes your personal data for the following purposes:
winmy18 processes personal data on the following legal bases:
winmy18 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients where necessary:
All third-party service providers who process data on behalf of winmy18 are bound by data processing agreements requiring them to handle your data securely, lawfully, and only for the specified purpose.
Some of winmy18's infrastructure, third-party service providers, and licensing authority oversight bodies are located outside Malaysia. Where personal data is transferred internationally, winmy18 ensures that appropriate safeguards are in place — including standard contractual clauses, adequacy decisions, or equivalent mechanisms — to ensure that your data receives a standard of protection consistent with this Privacy Policy and applicable data protection law.
winmy18 retains personal data for as long as is necessary to fulfil the purposes outlined in this policy, subject to the following minimum retention periods:
Where data is no longer required for any retention purpose, winmy18 will securely delete or anonymise it.
winmy18 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
No security system is completely impenetrable. While winmy18 takes all reasonable precautions, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials and ensuring that your personal device is adequately protected.
winmy18 uses cookies and similar technologies — including session cookies, persistent cookies, and pixel tags — to operate the platform, maintain your login session, remember your preferences, and collect analytics data about how players use the site. The following categories of cookies are used:
You may control cookie settings through your browser preferences. Note that disabling certain cookies may impair your ability to use parts of the winmy18 platform.
Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by winmy18:
To exercise any of these rights, contact winmy18 at [email protected]. We will respond to verified requests within 30 days. Note that certain rights may be subject to limitations where data processing is required to comply with regulatory or legal obligations.
winmy18's Services are strictly intended for individuals aged 21 years and above. winmy18 does not knowingly collect, store, or process personal data from minors. If winmy18 identifies or is notified that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be permanently closed. Any deposits or winnings associated with a minor's account will be forfeited and handled in accordance with our licensing authority's guidelines.
winmy18 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — affecting how we use your data or your rights under this policy — we will provide notice via the platform or by email to your registered address at least 14 days prior to the changes taking effect. The "Last Revised" date at the top of this document will always reflect the most current version. Your continued use of the winmy18 platform following notification of changes constitutes your acceptance of the updated policy.
If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a complaint about how winmy18 has handled your personal data, please contact us:
Email: [email protected] (plain text only — not a clickable link)
We aim to respond to all privacy-related queries within 30 days. If you are not satisfied with our response, you may refer your complaint to the relevant data protection supervisory authority in your jurisdiction or to winmy18's licensing authority dispute resolution body.
Six concrete commitments that underpin every data handling decision on the winmy18 platform.
All data transmitted between your device and winmy18 servers is encrypted with SSL 256-bit technology — the same standard used by major Malaysian banks for their online portals. Your login credentials and transaction data are never exposed in plain text.
winmy18 does not sell, rent, or trade your personal data to third-party marketers or data brokers. Data is shared only with service providers who need it to deliver your winmy18 experience, under strict contractual data processing obligations.
Identity verification before withdrawals means only the verified account holder can access funds. KYC isn't bureaucracy — it's the primary barrier preventing someone else from withdrawing your winmy18 balance.
Internal access to player data at winmy18 is role-based and strictly limited. Support staff, compliance, and finance teams each access only the data categories necessary for their specific function. Access logs are maintained and audited.
Access, rectification, erasure, portability — your data subject rights are always available to exercise by contacting winmy18 support. We respond within 30 days. Where a right cannot be fulfilled due to regulatory requirements, we will explain why clearly.
winmy18 does not retain data indefinitely. Defined retention periods apply to each data category — and when those periods expire, data is securely deleted or anonymised. We don't hold onto your information longer than the law or our operations require.
Our support team is available 24/7 to handle privacy queries, data access requests, or any concern about how your information is handled on the winmy18 platform. Malaysian players across Kuala Lumpur, Penang, and Johor Bahru can reach us anytime.