WinMY21 is committed to protecting the personal data of every player who uses our platform. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, who it may be shared with, and the rights you hold over your own data.
These cards summarise the key principles of our Privacy Policy. They are not a substitute for the full document — please read all sections below.
We collect only the personal data necessary to operate your account, process transactions, satisfy KYC obligations, and deliver a safe gaming experience. We do not collect more than we need.
All data is stored on secured servers protected by 256-bit SSL encryption. Access to personal data is restricted to authorised personnel on a strict need-to-know basis, with full audit logging.
We do not sell your personal data. We share data only with payment processors (such as FPX, DuitNow, Touch 'n Go eWallet), KYC verification providers, and where legally required by regulators.
WinMY21 uses essential cookies for platform functionality, session management, and fraud prevention. Analytics cookies are used in aggregate, anonymised form only. You may manage cookie preferences through your browser settings.
You have the right to access, correct, and in certain circumstances delete the personal data we hold about you. You may also object to certain processing activities. Submit requests through our support team.
We retain account data for a minimum of five years following account closure in compliance with our licensing and AML obligations. Anonymised behavioural data may be retained for longer for analytics purposes.
WinMY21 ("we", "us", "our", "the Company", "the Platform") is committed to the responsible and transparent handling of personal data. This Privacy Policy ("Policy") describes how WinMY21 collects, uses, stores, shares, and protects the personal information of individuals ("you", "User", "Player") who access or use the WinMY21 online gaming platform, including all associated websites, mobile interfaces, games, betting markets, support services, and promotional programmes.
This Policy applies to all personal data processed by WinMY21 in connection with the provision of its services to players located in Malaysia and other jurisdictions where the Platform operates. It should be read in conjunction with our Terms and Conditions, which govern the overall contractual relationship between you and WinMY21.
WinMY21 processes personal data in accordance with internationally recognised data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. Where applicable, our practices align with the standards of the General Data Protection Regulation (GDPR) and the Malaysian Personal Data Protection Act 2010 (PDPA).
The following terms carry the meanings set out below throughout this Policy:
WinMY21 collects personal data through several channels. The categories of data we collect, and the contexts in which they are obtained, are set out in the table below:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, national identity card number, passport number, gender | Provided by you during registration and KYC |
| Contact Data | Email address, mobile phone number, residential address (city, postcode, state within Malaysia) | Provided by you during registration or account updates |
| Financial Data | Bank account details, e-wallet identifiers (e.g., Touch 'n Go, Boost, GrabPay), deposit and withdrawal history, transaction amounts in MYR | Provided by you and generated through Platform use |
| Technical Data | IP address, browser type, device type, operating system, session timestamps, login logs | Automatically collected through Platform interaction |
| Gameplay Data | Games played, bet amounts, win/loss records, session duration, product preferences | Generated through your use of the Platform |
| Communications Data | Live chat transcripts, support email content, feedback submissions | Generated through your interactions with our support team |
| Verification Documents | Copies of government-issued ID, proof of address documents, selfie photographs for liveness checks | Provided by you as part of KYC verification |
We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes.
WinMY21 processes your personal data for the following purposes:
WinMY21 processes your personal data one or more of the following legal bases, as applicable to each processing activity:
WinMY21 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances and with the following categories of recipients:
WinMY21 operates as an internationally licensed platform and may process, store, and transfer your personal data to servers and processors located outside of Malaysia. Where personal data is transferred to countries that do not provide a level of data protection equivalent to that afforded under Malaysian law or GDPR-aligned standards, WinMY21 will implement appropriate safeguards to ensure that your data remains protected.
These safeguards may include contractual clauses, binding corporate rules, or reliance on recognised adequacy frameworks as applicable. If you wish to obtain details of the specific safeguards applied to any particular international transfer of your data, please contact our Data Protection Officer using the details in Section 16.
WinMY21 uses cookies and similar tracking technologies (including pixel tags and session tokens) to operate the Platform effectively, maintain your logged-in session, detect fraud, and analyse aggregated usage patterns. The categories of cookies we use are described below:
You may control or delete cookies through your browser's settings. Please note that disabling essential cookies will prevent you from logging in or using key features of the Platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.
WinMY21 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, licensing obligations, or contractual requirements. Our standard retention periods are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Minimum 5 years after account closure | Licensing and AML obligations |
| Financial transaction records | Minimum 7 years after transaction date | AML and financial record-keeping requirements |
| KYC verification documents | Minimum 5 years after account closure | Licensing compliance |
| Support communications | 3 years after resolution of matter | Dispute resolution and quality assurance |
| Anonymised gameplay analytics | Indefinite (anonymised) | Platform improvement — not personal data |
| Marketing opt-in records | Duration of consent + 3 years | Demonstrating lawful basis for marketing |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents reconstruction of the original data.
Subject to applicable law and certain limitations, you have the following rights in relation to the personal data WinMY21 holds about you. To exercise any of these rights, please contact our Data Protection Officer as described in Section 16.
You may request a copy of the personal data WinMY21 holds about you, together with information about how it is being processed.
You may request correction of inaccurate personal data or completion of incomplete data held in your account.
In certain circumstances, you may request deletion of your personal data — subject to our legal retention obligations under licensing and AML requirements.
You may request that we restrict how your data is processed in specific situations, such as while a dispute about its accuracy is resolved.
Where processing is based on consent or contractual necessity, you may request a structured machine-readable copy of the data you have provided to us.
You may object to processing carried out on the basis of legitimate interests, including direct marketing. Objections to marketing will be acted upon immediately.
WinMY21 will respond to data rights requests within 30 days of receipt. Where requests are complex or numerous, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.
WinMY21 implements a comprehensive set of technical and organisational security measures to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. Our security programme includes:
WinMY21 strictly prohibits the use of the Platform by persons under the age of 21. We do not knowingly collect or process personal data from individuals under 21. As part of our KYC process, all account holders are required to verify their age before withdrawal functionality is enabled.
If WinMY21 discovers that personal data has been collected from a person under 21, that account will be immediately closed, all data will be securely deleted to the extent permitted by law, and any balance will be forfeited. If you are a parent or guardian and believe that your child has registered an account on WinMY21, please contact us immediately at the address provided in Section 16.
WinMY21 may use your contact information (email address and/or mobile number) to send you promotional messages, bonus offers, game recommendations, and platform updates, where you have consented to receive such communications or where we have a legitimate interest in keeping you informed about the Platform.
You may opt out of marketing communications at any time by:
Please note that opting out of marketing communications does not affect the receipt of transactional or service messages, such as deposit confirmation, withdrawal notifications, security alerts, and responses to support queries — these communications are necessary for the operation of your account and will continue to be sent.
The WinMY21 Platform may contain references to or integrations with third-party payment services, such as Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, DuitNow, and FPX. When you interact with these third-party services — for example, when you complete a deposit through your e-wallet app — your interaction is governed by the privacy policy of that third-party provider, not this Policy.
WinMY21 is not responsible for the privacy practices, content, or data handling of third-party services. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the WinMY21 Platform.
WinMY21 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, business practices, or Platform functionality. Where material changes are made to the Policy, we will notify registered users by email to their registered address and/or through a prominent notice on the Platform prior to the change taking effect.
The "Effective Date" at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how we are protecting your data. Continued use of the Platform following notification of a material change constitutes your acceptance of the updated Policy.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about the way WinMY21 has handled your personal data, please contact us through the following channels:
WinMY21 will acknowledge receipt of all formal privacy complaints within 3 business days and aims to resolve them within 30 days. Where a complaint cannot be resolved to your satisfaction, you may escalate to the relevant data protection authority in the jurisdiction in which you reside.
Your personal data is processed transparently, securely, and in accordance with internationally recognised privacy standards. WinMY21 is committed to earning your trust with every interaction — on screen and behind the scenes.
For players aged 21 and above only. Please gamble responsibly. If you need support, contact Talian Kasih at15999.