Win125 Privacy Policy – Personal Data Protection for Malaysian Players

1. Personal Information We Collect

Win125 collects various types of information depending on how you interact with our platform. Generally, there are three main categories of data we collect.

1a. Information You Provide Directly

• Full name, date of birth, and gender upon win125 account registration.
• Malaysian email address and mobile number for account verification and communications.
• MyKad or passport number for the mandatory identity verification (KYC) process.
• Payment account details such as eWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay) or FPX bank accounts for deposit and withdrawal purposes.
• Information you provide when contacting win125 customer support via live chat or email.

1b. Automatically Collected Information

• IP address, device type, operating system and web browser type used to access win125.
• Gaming activity data, including games played, total bets placed, time spent, and wins or losses.
• Transaction data, including deposit history, withdrawals, and win125 bonus usage.
• Session information including pages visited, links clicked, and time spent on each section of the win125 platform.
• Cookie data and similar tracking technologies that help us understand platform usage patterns.

2. How win125 Uses Your Personal Data

Win125 only uses your personal data for legitimate and necessary purposes. We will never use your information for anything unrelated to the services you have requested from us.

• Account Management: Opening, verifying, and managing your win125 account, including processing deposits and withdrawals to your eWallet or bank account.
• Legal Compliance: Complying with Malaysian legal requirements, including PDPA 2010, the Anti-Money Laundering Act (AMLA), and mandatory KYC requirements.
• Platform Security: Identifying and preventing fraud, unauthorised account use, money laundering and other harmful activities that may compromise the safety of win125 players.
• Personalise Your Experience: Tailoring win125 content, promotions, and game recommendations to your preferences and playing habits so your experience stays relevant.
• Customer Support: Handling enquiries, complaints, and support requests submitted to the win125 support team.
• Marketing Communications: Sending information about win125 promotions, new bonuses, and platform updates via email or SMS — only if you have agreed to receive them.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need responsible gaming support, in line with win125's commitment to player wellbeing.

3. Sharing of Personal Information

Win125 does not sell or rent your personal data. However, there are limited circumstances in which we may need to share your information with certain parties.

• Payment Service Providers: Required information will be shared with payment processors such as DuitNow, FPX or eWallet gateway providers for the purpose of processing your deposits and withdrawals.
• Technical Service Providers: Companies providing IT infrastructure, security software and cloud computing services to win125 may have limited access to your data under strict confidentiality agreements.
• Statutory Authorities: win125 will disclose information requested by qualified Malaysian authorities when required by law, court order or valid legal process.
• Independent Fraud Checks: Third-party identity verification companies that assist win125 in verifying player documents and detecting fraudulent activity, subject to strict data confidentiality agreements.

4. win125 Data Security

Win125 continuously invests in security technologies and procedures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

• All data is transmitted over HTTPS connections protected by 256-bit SSL/TLS encryption — the same security standard used by leading Malaysian banking platforms such as Maybank2u and CIMB Clicks.
• Player passwords are stored using strong hashing methods and cannot be decrypted by anyone, including win125 staff.
• Access to players' personal data within win125's internal systems is restricted to staff who require it to perform their duties, based on a strict least-privilege access principle.
• win125 conducts regular penetration testing and security audits to identify and address any system vulnerabilities.
• In the event of a data breach affecting players, win125 is committed to notifying affected players within the timeframe required under Malaysia's PDPA.

5. Cookies & Tracking Technologies at win125

Win125 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the win125 platform.

• Essential Cookies: Required for core win125 platform functions such as login, session security, and ticket purchase button management. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how players interact with the win125 platform so we can improve the user experience. Data collected is aggregated and does not identify individuals.
• Functional Cookies: Saving your preferences, such as interface language and display settings, so you don't have to reconfigure them every time you log in to win125.
• Marketing Cookies: Used to display relevant win125 promotions to you based on your interests and activity. You can opt out via the cookie settings in your browser.

6. Your Privacy Rights as a win125 Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by win125.

7. Data Storage & Deletion at win125

Win125 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required under Malaysian law.

• Active account data is retained for the duration of the account and for an additional period following account closure as required by law.
• Financial transaction records are retained for a minimum of 7 years in accordance with Malaysian tax and accounting requirements.
• Once the retention period expires, your personal data will be securely deleted or anonymised so it can no longer be linked to your identity.
• Data retained for responsible gaming purposes may be kept for a longer period to help us identify and protect at-risk players in the future.

8. Changes to the win125 Privacy Policy

Win125 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other operational needs.

• The "Effective Date" at the top of this page will be updated whenever changes are made to the win125 Privacy Policy.
• For significant changes that affect how we use your data, win125 will notify you by email or in-platform notification at least 14 days before the changes take effect.
• Continued use of the win125 platform after notice of changes constitutes acceptance of the updated Privacy Policy.
• Previous versions of the win125 Privacy Policy are available upon request from our support team.

9. Contact the win125 Privacy Officer

If you have any questions, concerns or requests regarding this Privacy Policy or how win125 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels.