Winph Privacy Policy – Protecting Your Personal Data in Malaysia

Winph respects every player's privacy. Learn how we collect, use and protect your personal information — in full compliance with Malaysia's Personal Data Protection Act (PDPA).

Winph's Commitment to Malaysian Player Privacy

The six principles that underpin how Winph manages your personal data on a day-to-day basis.

Full Malaysia PDPA Compliance

All handling of Winph player personal data complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We do not collect data beyond what is necessary, nor do we retain your information for longer than required.

256-bit SSL Encryption

All data transmitted between your device and Winph's servers is protected by 256-bit SSL encryption — the same security standard used by major Malaysian banks such as Maybank and CIMB to safeguard their customers' online transactions.

No Sale of Data to Third Parties

Winph has never sold and will never sell player personal information to any third party for marketing or any other purpose. Your data belongs to you — it is not a business asset to be traded.

Full Control in Your Hands

Winph players have the full right to access, correct, download, or request the deletion of their personal data at any time. The process is straightforward and can be completed through your account settings or by contacting our support team.

Data Collection Minimisation

Winph only collects information that is genuinely necessary to provide a secure betting service — not excess data unrelated to the purpose of the service. The principle of "collect only what is needed" is central to our privacy policy.

Notification of Changes

If Winph makes any material changes to this Privacy Policy, you will be notified via your registered email at least 14 days before the changes take effect — giving you sufficient time to make an informed decision.

Last updated: 1 January 2026

Quick Summary: Winph collects your personal data solely to provide a safe and legitimate betting service. We do not sell your data. You may request access, correction, or deletion of your data at any time. All of this is protected under Malaysia's PDPA.

1

Introduction

This Privacy Policy explains how Winph ("we", "platform" or "Winph") collects, uses, discloses, stores and protects your personal information when you use our online betting platform at winph-bangla.com.

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. "Personal information" in this context refers to any information that can be used to identify you directly or indirectly — including your name, email address, phone number, bank account details, and transaction history.

By registering for or using the Winph platform, you agree to the collection and use of your information as described in this Privacy Policy. Please read this document carefully in its entirety before using our platform.

2

Personal Data We Collect

Winph collects various types of information depending on how you interact with our platform. The table below provides a summary of the data categories collected:

Data Type Example Information Collection Methods
Identification Data Full name, date of birth, MyKad or passport number Account registration & KYC verification
Contact Data Email address, Malaysian phone number, residential address Account registration
Financial Data Bank account number, bank name, digital wallet details (TNG, GrabPay, etc.) Deposit & withdrawal process
Betting Data Betting history, game types, wager amounts, wins & losses In-platform activity
Technical Data IP address, device type, browser, operating system, login timestamp logs Automatically collected during platform use
Cookie Data Language preferences, login sessions, usage analytics data Cookies and similar tracking technologies

We do not collect sensitive information such as biometric data, medical records, or details relating to your religious beliefs or political views.

3

How Winph Uses Your Personal Data

Personal information collected by Winph is used solely for the following purposes:

  • Account Management: To create, verify, and manage your player account, including the identity verification (KYC) process as required.
  • Transaction Processing: To process deposits via FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay — as well as manage withdrawals of winnings to your bank account or digital wallet.
  • Service Provision: To enable you to use all features of the Winph platform, including Sports Betting, Live Casino, slots, poker, and e-sports.
  • Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, multi-accounting, and any other misuse of the platform.
  • Legal Compliance: To comply with applicable regulatory and legal requirements, including anti-money laundering (AML) and know your customer (KYC) obligations.
  • Customer Support: To assist with troubleshooting, respond to enquiries, and provide you with effective customer support.
  • Platform Improvements: To analyse usage patterns and improve the user experience — using aggregated, anonymised data that cannot be used to identify you individually.
  • Service Communications: To send you important notifications about your account, changes to our terms, promotions you are eligible to claim, and relevant platform updates.

⚠️ Winph will not use your personal data for any purpose beyond those stated above without first obtaining your explicit consent.

4

Legal Basis for Data Processing

Winph processes your personal data on valid legal bases under Malaysia's PDPA and international data protection principles:

  • Contract Performance: Processing required to fulfil the service agreement between you and Winph — including account management and payment processing.
  • Legal Obligation: Processing required to comply with applicable Malaysian laws, including the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
  • Legitimate Interests: Processing for the purposes of fraud prevention, platform security, and service improvement that does not adversely affect your fundamental rights.
  • Consent: For any data processing not covered by the bases above — we will request your explicit consent before proceeding.
5

Data Sharing & Disclosure to Third Parties

Winph does not sell, rent or disclose your personal data to third parties for marketing purposes. However, in the following limited circumstances, Winph may share your data:

  • Payment Service Providers: Payment service providers such as FPX, DuitNow, Touch 'n Go, GrabPay, Boost and ShopeePay require certain transaction details to process your deposits and withdrawals. This data is shared only to the extent necessary to complete the relevant transaction.
  • Game Software Providers: Gaming platform providers (such as slots and Live Casino providers) may receive game session data necessary to technically operate the games. This data does not include your personal financial information.
  • Legal Authorities: Winph will disclose personal data to government authorities, law enforcement agencies, or regulatory bodies when required to do so by Malaysian law — including pursuant to a valid court order.
  • Technical Service Providers: Cloud infrastructure, analytics, and cybersecurity providers that support Winph in operating the platform — all subject to strict data protection agreements.

All third parties that receive Winph player data are bound by confidentiality and data protection agreements, ensuring your information is handled to the same security standards we apply internally.

6

Data Security

Winph implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or inadvertent disclosure:

  • Data Encryption in Transit: All communication between your device and Winph's servers is protected with 256-bit TLS/SSL encryption.
  • Stored Data Encryption: Sensitive data such as payment information and identity documents are encrypted at rest using industry-standard encryption algorithms.
  • Internal Access Controls: Only Winph staff with a legitimate business need may access player data — and all access is logged for audit purposes.
  • Data Segregation: Financial information is stored in separate systems with additional security layers beyond those applied to general profile data.
  • Continuous Monitoring: An intrusion detection system operates 24/7 to identify and respond to any security threats.
  • Regular Security Audits: Security assessments and penetration testing are conducted regularly by independent third parties.

In the Event of a Data Breach: In the event of a data breach affecting your personal information, Winph will notify you within 72 hours of confirming the breach — in line with international best practices for data protection.

7

Data Retention Periods

Winph retains your personal data only for as long as necessary to fulfil the original purpose of collection and to meet our legal obligations. The following are our data retention guidelines:

  • Active Account Data: Retained for the duration that your Winph account remains active.
  • Financial Transaction Records: Retained for a minimum of 7 years following the transaction date, in accordance with Malaysian legal requirements governing financial records.
  • Betting History: Retained for a minimum of 5 years for audit and regulatory compliance purposes.
  • KYC Verification Documents: Retained for a minimum of 5 years following account closure, in accordance with anti-money laundering legislation.
  • Support Communication Logs: Retained for 2 years for complaint resolution and service improvement purposes.
  • Closed Account Data: Once the mandatory retention period has expired, your personal data will be securely deleted or anonymised.
8

Your Rights as a Data Subject

Under Malaysia's PDPA and international data protection principles, you have the following rights regarding your personal data held by Winph:

Right of Access

Request a copy of all personal data Winph holds about you in a readable format.

Right to Rectification

Request the correction of any inaccurate or incomplete personal information held in our records.

Right to Erasure

Request the deletion of your personal data when it is no longer needed for the original purpose of collection.

Right to Object

Object to the processing of your personal data for direct marketing purposes or certain legitimate interests.

Right to Portability

Receive your personal data in a structured, machine-readable format for transfer to another platform.

Right to Restriction

Request a restriction on the processing of your data in specific situations while a complaint or review is in progress.

To exercise any of the rights above, please contact the Winph data protection team by email at support@winph-bangla.com stating the right you wish to exercise and providing sufficient information to verify your identity. We will respond within 30 calendar days of receiving your request.

Please note that certain exceptions apply to these rights — for example, we are unable to delete transaction records that Malaysian law requires us to retain for a specified period. In such cases, we will clearly explain the reason for the exception.

9

Cookies & Tracking Technologies

The Winph platform uses cookies and similar tracking technologies to enhance your experience and ensure platform functions operate correctly.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collects information on how you use the platform to help us improve the user experience. Data is collected in aggregate and anonymised form.
  • Preference Cookies: Saves your preferences such as language and display settings so you do not have to reconfigure them each time you visit.

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect your ability to use certain features of the Winph platform.

10

Cross-Border Data Transfers

In the course of operating the platform, your personal data may be transferred to and processed in countries outside Malaysia — particularly in the context of cloud infrastructure providers and international gaming software vendors.

Winph ensures that any cross-border data transfers are subject to adequate safeguards, including:

  • Use of approved standard contractual clauses to safeguard personal data during transfers.
  • A thorough assessment of the level of data protection in the recipient country before any transfer takes place.
  • Binding data processing agreements with all third-party providers that receive Malaysian players' data.

By using the Winph platform, you agree to data transfers as described in this section, subject to the protections stated herein.

11

Child Protection

The Winph platform is intended for users aged 18 and above only. Winph does not knowingly collect personal data from individuals under the age of 18.

If Winph discovers or is made aware that personal data belonging to an individual under the age of 18 has been collected, we will take immediate steps to:

  • Immediate closure of the account in question.
  • Delete all personal data collected from the individual concerned.
  • Taking appropriate action in compliance with legal requirements relating to child protection.

If you have reason to believe that a minor has registered on the Winph platform, please contact us immediately at support@winph-bangla.com.

12

Changes to This Privacy Policy

Winph reserves the right to update or amend this Privacy Policy from time to time in line with changes in law, technology or business practices. When material changes are made, we will:

  • Updating the "Last Updated" date at the top of this document.
  • Sending notifications to all active players via their registered email address at least 14 days before the changes take effect.
  • Displaying a summary of changes made on the main privacy page for a minimum period of 30 days.

Continued use of the Winph platform after an updated Privacy Policy takes effect will be considered acceptance of those changes. If you disagree with any changes made, you have the right to close your account and withdraw your remaining balance before the changes come into effect.

13

Contact Us About Privacy

For any questions, concerns, or requests regarding your privacy and personal data at Winph, please reach out to us via:

  • Privacy Email: support@winph-bangla.com (please state "Data Privacy" in the email subject line)
  • Live Chat: Available 24/7 within the Winph platform
  • Frequently Asked Questions: winph-bangla.com/faq

We are committed to responding to all privacy-related enquiries within 5 business days. For formal data subject rights requests (such as data access or deletion requests), the response time is up to 30 calendar days in accordance with PDPA requirements.

Right to Lodge a Complaint: If you are dissatisfied with how Winph handles your personal data, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP), the regulatory authority responsible for personal data protection in Malaysia.

Privacy FAQs at Winph

Answers to the questions most frequently asked by Malaysian players about data protection at Winph.

Your payment information — including bank account details, Touch 'n Go wallet numbers, GrabPay, Boost, or ShopeePay account details — is shared only with the relevant payment service provider solely for the purpose of processing your transaction. Winph does not retain your full card number or account details in our systems once a transaction is complete. All payment gateways we use comply with the stringent PCI DSS security standard.

You may submit a data access request by emailing support@winph-bangla.com with the subject line "Data Access Request". Please include your full name, registered email address, and phone number for identity verification. Winph will provide a copy of your personal data in a readable format within 30 calendar days. The data provided will include your account profile, transaction history, betting history, and any relevant support communications.

Winph only sends promotional communications related to our own platform — such as new bonuses, Sports Betting promotions for the Malaysia Super League or EPL, and relevant game updates for you as a member. We do not use your data for third-party advertising, nor do we sell access to your data to external advertisers. If you no longer wish to receive promotional communications from Winph, you may unsubscribe at any time via the link at the bottom of any promotional email or by contacting customer support.

When you close your Winph account, your personal data will not be deleted immediately, as we have legal obligations to retain certain records — such as financial transaction history — for the period required under Malaysian law. Once the mandatory retention period has elapsed (typically 5–7 years depending on the type of data), your data will be securely deleted or anonymised. Closed accounts cannot be accessed by anyone, and your data will not be used for any commercial purpose following closure.

Yes. Identity documents submitted for the KYC (Know Your Customer) process are stored in a separate encrypted system with strict access controls. Only authorised compliance personnel may access these documents, and all access is logged for audit purposes. Documents will not be shared with any party unless required by Malaysian law. Once verification is complete, high-resolution versions of documents are not retained — only the verification status and basic details necessary for KYC records.

Winph uses multiple layers of security to protect your account: 256-bit SSL encryption for all communications, two-factor authentication (2FA) via SMS to your registered Malaysian number, an unusual login detection system based on location and device, and instant email notifications for any new login activity. We also limit the number of failed login attempts before your account is temporarily locked. You are encouraged to use a strong, unique password and to never share your login credentials with anyone.

Your Privacy Is Protected. Now It's Time to Play.

Winph protects your personal data to the highest standard so you can focus on what matters most — enjoying Sports Betting, Live Casino, slots, and E-Sports with complete confidence.

⚠️ 18+ Only. Bet responsibly. Learn more

Bahasa Melayu