Official Data Protection

Privacy Policy winlah – Personal Data Protection for Malaysian Players

Winlah takes your privacy seriously. This document clearly explains how we collect, use, store and protect your personal information throughout your time on our platform.

Effective Date: 1 January 2026

Compliance: Personal Data Protection Act 2010

Updated: 1 January 2026

winlah's Commitment: We never sell your personal data to any third party for marketing purposes. Your information is used solely for the purposes explicitly stated in this policy.

1. Introduction

Winlah ("we", "Platform" or "winlah") operates an online casino platform accessible at winlah.vu. We understand that your personal information is sensitive and valuable, and we are committed to protecting it to the highest standard you should expect from a trusted platform.

This Privacy Policy ("Policy") describes winlah's privacy practices regarding the collection, use, disclosure, and protection of personal information you provide to us when using our platform, registering an account, making transactions, or interacting with any of our service features.

This Policy applies to all users of the winlah platform, including registered players, visitors browsing our website, and any individuals who interact with our customer support team. By using the winlah platform, you fully agree to the terms of this Privacy Policy.

Winlah complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and international standards for personal data management. We continuously ensure that our internal systems and procedures meet or exceed the legal requirements set out.

2. Information We Collect

Winlah collects several categories of information depending on how you interact with our platform. Below is a full breakdown of the data we collect:

2.1 Information You Provide Directly

  • Full name as stated on your official identification document
  • Date of birth for age verification (platform requirement: 18 and above)
  • Active email address used during registration
  • Malaysian mobile number registered in your name
  • Current residential address
  • National identity card number (MyKad) or passport number
  • Bank account or e-wallet details for deposit and withdrawal purposes

2.2 Automatically Collected Information

  • IP address of the device used to access the platform
  • Device type, operating system, and web browser version
  • Gaming session data including date, time, game type, and betting amounts
  • Deposit and withdrawal transaction history
  • Platform usage data including pages visited and session duration
  • Cookie and similar tracking technology information

2.3 Information from Third-Party Sources

  • Identity verification data from licensed third-party KYC services
  • Information shared by payment providers such as FPX, Touch 'n Go eWallet, DuitNow, Boost, and GrabPay within the limits permitted by law
  • Information from anti-money laundering (AML) background check databases
Data Category Example Requirements
Personal Identity Name, IC, Date of Birth Mandatory (KYC)
Contact Information Email, Phone Number Mandatory
Financial Data Bank Account, e-Wallet Mandatory (Transaction)
Technical Data IP, Device, Browser Automatic
Gaming Data Wagering History, Sessions Automatic
Communication Data Support Logs, Email Where Applicable

3. How We Use Your Data

Every piece of information we collect is used for a specific and legitimate purpose. winlah will not use your data for any purpose other than those stated below:

  • Account Management: To create, verify and manage your player account, including the KYC process to ensure platform security.
  • Transaction Processing: To securely and efficiently process deposits, withdrawals and all other financial transactions via 256-bit SSL encryption.
  • Age Verification: To ensure that only individuals aged 18 and above can fully access winlah services.
  • Fraud Prevention: To detect, investigate and prevent fraudulent activity, money laundering and platform abuse.
  • Customer Support: To assist you when you contact our support team and resolve any reported issues.
  • Legal Compliance: To comply with applicable legal requirements, regulations and court orders.
  • Platform Enhancement: To analyse usage patterns and improve your overall gaming experience.
  • Marketing Communications: To send promotional information and exclusive offers — only if you have given your consent to receive them.

Important Note: You can unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting our support team. This will not affect important communications related to your account.

4. Legal Basis for Data Processing

Winlah processes your personal data on the following legal bases as provided under Malaysia's Personal Data Protection Act 2010:

  • Consent: You provide explicit consent during account registration by agreeing to this Privacy Policy. Consent may be withdrawn at any time, though this may affect your ability to use certain services.
  • Contract Performance: Processing is necessary to fulfil our contractual obligations to you, including payment processing and account management.
  • Legal Obligation: Certain data processing is required by Malaysian law, including AML and KYC obligations.
  • Legitimate Interest: winlah has a legitimate interest in protecting its platform from fraud and ensuring the safety of all users.

5. Data Sharing with Third Parties

Winlah does not sell, rent or trade your personal data to any third party for their own marketing purposes. However, we may share your data in the following limited circumstances:

  • Payment Service Providers: Minimum necessary data shared with providers such as Touch 'n Go eWallet, DuitNow, FPX and Visa/Mastercard to process your transactions.
  • KYC & AML Services: With licensed identity verification providers who help us verify player identities and meet compliance requirements.
  • Technology Providers: With technical partners providing platform infrastructure, server hosting, and support services — all subject to strict confidentiality agreements.
  • Legal Requirement: To the relevant authorities when required by law, court order, or official investigation.
  • Rights Protection: Where necessary to protect the rights, property, or safety of winlah, other players, or the general public.

All third-party partners we work with are bound by data processing agreements that require them to protect your information and use it only for permitted purposes.

6. Data Retention & Security Measures

Winlah implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration or unintended disclosure.

Technical Security Measures:

  • 256-bit SSL encryption for all data transmitted between your device and winlah servers
  • Data stored in our database is encrypted using the industry-standard AES-256 protocol
  • Two-factor authentication (2FA) for account access
  • 24/7 security monitoring with real-time threat detection systems
  • Network segregation and role-based access control (RBAC)
  • Periodic security audits by independent third parties

Data Retention Period:

  • Active account data: Retained for the duration your account is active plus 7 years after account closure (legal requirement)
  • Transaction records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legislation
  • Communication logs: Retained for 3 years
  • Technical data: Retained for a maximum of 2 years

Note: While winlah implements robust security measures, no data transmission system over the internet can be guaranteed 100% secure. You are also responsible for keeping your own login credentials safe.

7. Cookies and Tracking Technologies

The winlah platform uses cookies and similar tracking technologies to enhance your experience and ensure platform features function correctly. Cookies are small text files stored on your device when you visit our platform.

We use several types of cookies:

  • Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled.
  • Performance Cookies: Collects information on how you use the platform to help us improve performance and usability.
  • Functional Cookies: Saves your preferences such as language selection and display settings for a more personalised experience.
  • Analytics Cookies: Helps us understand aggregate traffic patterns and platform usage for improvement purposes.

You can manage cookie settings through your web browser preferences. Disabling certain cookies may affect platform functionality, particularly features that require you to remain logged in.

8. Your Rights Regarding Personal Data

As a winlah player, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010:

1
Right of Access

You may request a copy of the personal data we hold about you at any time.

2
Right to Rectification

If your data is inaccurate or outdated, you may request an immediate correction.

3
Right to Erasure

You may request deletion of your personal data, subject to our legal obligations.

4
Right to Restrict Processing

You may request that we restrict how we process your data under certain circumstances.

5
Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

6
Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, contact our privacy team by email at [email protected]. We will process your request within 30 calendar days.

9. Children's Data

The winlah platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

If we determine that data from a minor has been collected inadvertently, we will take immediate action to delete that data and close the account in question. If you believe a minor has registered on our platform, please contact us immediately at [email protected].

Warning: Parents and guardians are responsible for ensuring that minors in their care do not access the winlah platform. Consider using parental control software to protect children from online gambling content.

10. Links to Third-Party Websites

The winlah platform may from time to time contain links to third-party websites or services. This Privacy Policy applies solely to the winlah platform. We are not responsible for the privacy practices of any third-party websites or services.

We encourage you to read the privacy policy of every third-party website you visit, especially if you provide any personal information to them. winlah has no control over the content or privacy practices of third-party websites.

11. Amendments to the Privacy Policy

Winlah reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements or platform improvements. The "Updated" date at the top of this document will be revised each time an amendment is made.

For material and significant amendments, we will notify you via an in-platform notification or email to the address registered on your account at least 14 days before the changes take effect. Continued use of the platform after the amendment effective date constitutes your acceptance of the updated Policy.

Tip: Check this page periodically to stay informed about how we protect your personal information. If you disagree with any amendments, you have the right to close your account before the changes take effect.

12. Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or the way winlah handles your personal data, please do not hesitate to contact us:

  • Privacy Email: [email protected] (please mark the email subject: "Privacy Enquiry")
  • Live Chat: Available 24/7 directly on the winlah platform for the fastest response
  • Response Time: All privacy-related enquiries will be responded to within 5 business days
  • Language: We handle enquiries in both Malay and English

If you are dissatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority in your jurisdiction.

Commitment winlah Your Privacy

More than just legal compliance — we believe privacy is a fundamental right of every player, and we protect it wholeheartedly.

Bank-Grade Encryption

All data transmitted between your device and winlah servers is protected with 256-bit SSL encryption — the same security standard used by leading Malaysian banking institutions to safeguard financial transactions.

No Data Sales

Winlah has never sold and will never sell your personal data to advertisers or third parties. Your information belongs entirely to you, and we only use it for purposes to which you have given explicit consent.

Malaysia PDPA Compliance

The winlah Privacy Policy is built to fully comply with Malaysia's Personal Data Protection Act 2010. Our compliance team continuously monitors regulatory developments to ensure our practices remain current and lawful.

Data Control in Your Hands

You have full control over your data. Request access, correct inaccurate information, or delete your data — all through a simple request to our 24/7 responsive support team.

Regular Security Audits

Winlah's security infrastructure undergoes regular independent audits by third-party cybersecurity experts. Audit findings are used to continuously strengthen our data protection systems for your peace of mind.

Marketing Communications Control

You choose what you receive. Unsubscribe from promotional notifications at any time without affecting important account communications — full control is in your hands via your winlah account settings.

Your Data Is Safe With winlah

You now know how winlah protects your privacy. Join over 200,000 Malaysian players who trust our platform for a safe, fair, and transparent online casino experience.

256-bit SSL  •  PDPA Compliant  •  24/7 Support

Bahasa Melayu