Privacy Policy winjaya88 – Protecting the Personal Data of Our Malaysian Members is Our Priority

1 Introduction & Our Privacy Commitment

Winjaya88 ("we", "Platform") takes the privacy and data security of every member seriously. This Privacy Policy document details our practices for collecting, using, storing, and protecting personal data in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international security standards.

We understand that in this digital age, personal data is an extremely sensitive asset. Therefore, every decision we make about how to handle your data is grounded in two core principles: minimum necessity and maximum security. We collect only what is truly needed, and we protect it in the best way possible.

This policy applies to all users of the winjaya88 platform on the website winjaya88.onl, including registered members, visitors, and individuals who interact with our customer support team through any communication channel.

2 Types of Personal Data We Collect

Winjaya88 collects various types of data depending on how you interact with the platform. The following are the main categories of data we may collect:

2.1 Data You Provide Directly

• Full name as stated on official identification documents.
• Malaysian identity card number or passport number.
• Active email address used for account communications.
• A valid Malaysian mobile phone number.
• Date of birth for age verification.
• Current residential address.
• Bank account details for withdrawal processing (bank name, account number).
• KYC supporting documents such as a copy of your ID card or utility bill.

2.2 Data Collected Automatically

• IP address and approximate location information (state/city).
• Web browser type, operating system, and device used.
• Game activity logs including date, time, game type, and wagering value.
• Complete financial transaction records including deposits, withdrawals, and bonuses.
• Game session data and platform usage patterns.
• Relevant cookie and tracking technology information.

3 Purpose & Legal Basis for Data Collection

Winjaya88 only collects your personal data on a valid legal basis. All our data processing has a clear, legitimate, and limited purpose:

• Contract performance – to provide the platform services you registered for and use.
• Legal compliance – to fulfil KYC, anti-money laundering (AML), and applicable financial regulatory requirements.
• Legitimate interests – to detect and prevent fraud, illegal activity, and to ensure the safety of the platform and other users.
• Consent – for marketing communications and promotional offers you consented to during registration (you may withdraw consent at any time).

4 How We Use Your Data

The data collected is used exclusively for the following purposes and will not be used for any other purpose without your notification and consent:

• Creating and managing your account on winjaya88 securely.
• Processing deposits and withdrawals accurately and promptly.
• Conducting identity verification and KYC in compliance with regulatory requirements.
• Detecting, investigating, and preventing fraud, money laundering, and suspicious activity.
• Providing responsive and effective customer support.
• Sending important notifications related to your account, transactions, and security.
• Managing the VIP programme and calculating cashback and rewards you are eligible for.
• Improving platform quality based on anonymised aggregate usage patterns.
• Sending marketing communications (with your consent, which may be withdrawn at any time).

Your game and transaction records are used internally for the winjaya88 VIP program — including calculating points, determining cashback eligibility, and delivering relevant offers. This data is never shared with competitors or third parties without your consent.

5 Data Sharing With Third Parties

Winjaya88 does not sell your personal data. However, in certain limited situations, we may need to share data with trusted third parties for legitimate operational purposes:

• Payment providers – local banks, DuitNow, FPX, e-wallets, and other payment processors require the minimum data necessary to verify and process your transactions.
• Game providers – game software providers may receive session data necessary to deliver a seamless gaming experience.
• Cloud & technical service providers – our technical infrastructure is supported by providers bound by strict confidentiality and data security agreements.
• Legal authorities – we are required to disclose data when mandated by court orders, enforcement investigations, or other valid legal requirements.

6 Data Storage, Security & Protection

The security of your data is the absolute priority of winjaya88. We implement comprehensive technical and organisational security measures to ensure your data remains protected at all times.

6.1 Technical Security Measures

• 256-bit SSL encryption for all data transmitted between your browser and our servers.
• Sensitive data is stored in encrypted format using AES-256 standards.
• Strict access controls — only authorised personnel may access sensitive member data.
• 24/7 security monitoring with real-time threat detection systems.
• Regular security audits conducted by independent third parties.
• Two-factor authentication (2FA) for all staff access to internal systems.

6.2 Data Retention Period

Your personal data is retained for as long as your account is active and for an additional period after account closure in accordance with applicable legal requirements:

• Financial transaction records: retained for a minimum of 7 years in compliance with AML requirements and Malaysia's financial regulations.
• KYC records and identity verification: retained for 5 years after account closure.
• Game logs and platform activity: retained for 2 years for dispute resolution and verification purposes.
• Customer support communications: retained for 3 years for quality and training purposes.

After the specified retention period, data will be permanently deleted or fully anonymised in accordance with our strict internal procedures.

7 Cookies & Tracking Technologies

Winjaya88 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how the platform is used. The following are the categories of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled without affecting platform functionality.
• Performance Cookies: Gathering information on how you use the platform to help us identify technical issues and improve performance.
• Preference Cookies: Storing your preferences such as language and display settings to deliver a more personalised experience.
• Analytics Cookies: Helps us understand aggregate usage patterns for platform improvement purposes — this data is not used to identify you individually.

8 Your Rights Regarding Personal Data

As a data subject under Malaysia's PDPA, you have specific rights regarding your personal data held by winjaya88. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the winjaya88 customer support team via live chat or email. Requests will be processed within 14 business days. In complex cases, this period may be extended up to 30 days with prior notice to you.

9 Children's Data Protection

Winjaya88 takes the protection of children and minors very seriously. This platform is strictly for individuals aged 18 and above. We do not intentionally collect, process, or store any personal data from underage individuals.

Every account registration requires age verification through the KYC process. Should we discover that data from an underage individual has been collected inadvertently, we will take immediate steps to delete that data and close the associated account.

10 Changes to This Privacy Policy

Winjaya88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. We are committed to notifying you of any material changes in a clear and timely manner.

• Minor changes (such as formatting updates) will be communicated via an in-platform notice.
• Material changes (such as changes to how data is used or shared) will be communicated by email to all registered members at least 14 days before taking effect.
• The "Updated" date shown at the top of this document reflects the latest version of the policy.

Continued use of the platform after a policy change takes effect constitutes your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account before they take effect.

11 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us.