WinBet Privacy Policy – Malaysian Player Personal Data Protection

1Introduction

This Privacy Policy explains how WinBet ("we", "Platform") collects, processes, stores and protects your personal data when you use the winbet.ooo website, the WinBet mobile app, or any of the services we provide.

We understand that your trust is the most valuable asset in our relationship. That is why we have written this Privacy Policy in plain, easy-to-understand language rather than lengthy legal jargon. We want you to know exactly what happens to your data.

This document should be read together with winbet Terms and Conditions which forms part of the overall agreement between you and our platform. By registering for or using winbet services, you agree to the way we handle your data as described in this document.

2Personal Data We Collect

Winbet collects your personal data in several ways — directly when you register or interact with the platform, and automatically through technologies such as cookies and server logs. Below is a summary of the data we collect:

We do not collect sensitive information such as biometric data, health information or religious beliefs unless specifically required for legal compliance purposes and with your explicit consent.

3How We Use Your Data

The data we collect is used solely for legitimate purposes necessary to deliver WinBet's services safely and effectively. The following are the primary purposes for which your data is used:

• Account Management: To open, verify, manage, and protect your winbet account, including the KYC process required before your first withdrawal.
• Transaction Processing: To process your deposits and withdrawals securely, verify the identity of bank account holders, and prevent financial fraud.
• Service Provision: To allow you to access all games, use eligible bonuses, and take full advantage of all winbet platform features.
• Service Communications: To send important notifications related to your account, such as transaction confirmations, security updates, and technical information.
• Marketing (with Consent): To send promotional offers, exclusive bonuses, and the latest news about winbet — only if you have given consent to receive marketing communications.
• Fraud Prevention: To detect and prevent fraudulent activity, money laundering, and violations of our terms of use that could compromise platform security.
• Legal Compliance: To fulfill applicable legal and regulatory obligations, including reporting to the relevant authorities when required by law.

4Data Sharing with Third Parties

Winbet does not sell, rent, or trade your personal data to third parties for their own commercial purposes. However, there are limited situations where we need to share your data with certain parties:

• Payment Service Providers: Required financial information is shared with the payment gateways and banks that handle your deposit and withdrawal transactions. All such providers are bound by strict confidentiality agreements.
• Game Providers: Minimum technical data (such as session IDs) is shared with third-party game providers to ensure smooth gameplay. They do not receive your full personal identity information.
• Authorities: We are legally required to disclose certain information to the relevant authorities upon receiving a lawfully valid request.
• Fraud Prevention: In cases suspected of involving money laundering or financial fraud, certain information may be shared with the relevant financial crime prevention agencies.

All third parties with whom we share data are required to protect that data to a standard equal to or higher than the one we apply ourselves.

5Data Storage & Security Measures

All your personal data is stored on secure servers with multi-layered protection. We apply a defence-in-depth approach that combines encryption, access controls, continuous monitoring, and regular backups.

The technical security measures we use include:

• 256-bit SSL/TLS encryption for all data communications between your device and our servers
• AES-256 encryption for data stored in our databases
• Role-based access control (RBAC) ensuring only authorised staff can access personal data
• 24-hour security monitoring and intrusion detection system
• Regular data backups stored at geographically separate locations
• Regular security audits by independent security experts

Data Retention Period: We retain your personal data for as long as your account is active and for the required period after account closure to meet our legal obligations (typically 7 years for financial records in accordance with regulatory requirements). Once the required period expires, data is securely deleted.

6Cookies & Tracking Technologies

Winbet uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies:

• Essential Cookies: Required for core platform functions such as login, session verification and security. These cookies cannot be disabled without affecting the website's basic functionality.
• Performance Cookies: Collects information on how you use the platform — pages visited, time spent — to help us improve website performance.
• Functional Cookies: Saves your preferences such as language, display options, and account settings to deliver a more personalised experience.
• Analytics Cookies: Used to understand aggregated, anonymised usage patterns to help us make better platform development decisions.

You can manage cookies through your web browser settings. Disabling certain cookies may affect some platform features, but will not prevent you from accessing WinBet's core functions.

7Your Rights as a Data Subject

As a WinBet user, you have certain rights regarding your personal data under the Malaysia Personal Data Protection Act 2010. We respect and facilitate the exercise of these rights:

To exercise any of the above rights, contact the winbet support team via live chat in our app or website. We will process your request within 30 business days. For complex cases, this period may be extended up to 60 days with prior notification to you.

8Children's Data Protection

The WinBet platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store the personal data of any individual under the age of 18.

If we discover that personal data of an underage individual has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account.

Parents or guardians who have concerns that their child may have registered a WinBet account are encouraged to contact our support team immediately. We will cooperate fully to resolve the matter promptly.

9Amendments to This Privacy Policy

Winbet reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, new technology, or changes in how we operate. Whenever an amendment is made, the "Last Updated" date at the top of this document will be revised.

For material amendments — meaning changes that significantly affect how we use your data or your privacy rights — we will provide you with advance notice via email or in-app notification at least 14 days before the amendment takes effect.

Your continued use of the WinBet platform after any amendment takes effect constitutes your acceptance of the updated policy. We therefore encourage you to review this page periodically.

10Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist.

You can reach the WinBet customer support team through the following channels:

• In-App Live Chat: Available 24 hours a day, 7 days a week — the fastest way to get an immediate response
• Website Live Chat: Accessible via the chat icon at the bottom-right corner of winbet.ooo
• Email: [email protected] — for written enquiries that require documentation

For privacy complaints that our support team is unable to resolve, you have the right to submit a complaint to the Department of Personal Data Protection Malaysia or the relevant regulatory authority.