winph Privacy Policy

This Privacy Policy governs the processing of personal data by winph in connection with the website, account services, live casino, slots, sports betting, promotions, customer support, payment processing, and responsible gambling controls. For this policy, “personal data” means information relating to an identified or reasonably identifiable individual.

By using winph, you acknowledge that your information will be handled as described in this policy. This acknowledgement does not remove any rights available under applicable data protection requirements. Where consent is required for a particular activity, winph will request it separately and allow you to withdraw that consent, subject to lawful limits.

Depending on how you interact with winph, we may collect and process the following categories of information:

• Identity data: full name, date of birth, nationality, gender where legally relevant, identification document details, photographs, and identity verification results.
• Contact data: email address, mobile number, residential address, city, postcode, and communication preferences.
• Account data: username, encrypted password credentials, account status, language preference, security settings, login records, and customer reference numbers.
• Financial data: deposit and withdrawal history, MYR transaction values, masked bank or e-wallet details, source-of-funds information where required, and payment verification results.
• Gaming data: wagers, wins, losses, game choices, bonus activity, sports markets viewed, session duration, and responsible gambling limits.
• Technical data: IP address, browser type, operating system, device identifiers, approximate location, screen size, and diagnostic logs.
• Communication data: support conversations, complaint records, survey responses, and other messages sent to winph.

winph does not intentionally request information that is irrelevant to platform operation. Where enhanced verification is necessary, winph will explain what is required and why before requesting additional documents.

winph receives personal data directly when you create an account, complete verification, set account controls, make a deposit or withdrawal, claim a promotion, or contact support. Data is also created through your activity, such as login records, betting history, bonus usage, and responsible gambling settings.

Some information may be received from payment providers and banks when you use Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong. Such information may include transaction status, account-holder matching results, and fraud-screening indicators. winph may also obtain verification or risk information from specialist service providers where permitted by law.

winph processes personal data only where there is a defined purpose. Principal purposes include:

• creating, administering, securing, and closing winph accounts;
• confirming that players meet the 21+ age requirement;
• processing MYR deposits, withdrawals, refunds, and payment queries;
• providing live casino, slots, football, Liga Super Malaysia, EPL, UFC, and other gaming services;
• detecting account takeover, bonus abuse, fraud, collusion, money laundering, and suspicious transactions;
• meeting identity verification, record-keeping, audit, and compliance obligations;
• providing customer support and resolving complaints;
• applying deposit limits, cooling-off periods, self-exclusion, and other responsible gambling controls;
• improving website reliability, mobile performance, accessibility, and player experience; and
• sending service notices or optional promotional communications in accordance with your preferences.

winph will not use personal information for a materially incompatible purpose without providing appropriate notice and, where required, obtaining consent.

The legal basis used by winph depends on the relevant activity and applicable law. Processing may be necessary to perform the agreement between you and winph, including providing account, gaming, payment, and support services. Processing may also be required to satisfy legal or regulatory duties, particularly identity verification, anti-fraud monitoring, record retention, and responsible gambling obligations.

winph may rely on legitimate interests where processing is necessary and proportionate for platform security, service improvement, complaint management, fraud prevention, or the protection of legal rights. Where winph relies on consent, such as for certain marketing preferences or optional technologies, you may withdraw that consent at any time. Withdrawal does not affect processing lawfully completed before the request.

To protect player funds and support lawful payment processing, winph may verify that a payment method belongs to the registered account holder. Identity checks may involve MyKad or passport details, proof of address, payment ownership evidence, and, where risk or compliance thresholds require it, information about source of funds.

Payment card or bank credentials may be handled by approved payment processors rather than stored directly by winph. The information visible to winph may be limited to masked account details, transaction references, status information, and risk indicators. Payment records are used to reconcile balances, investigate disputed MYR transactions, prevent third-party deposits, and process withdrawals to verified destinations.

Refusing required verification may prevent winph from completing a transaction or continuing to offer account services. This is a security and compliance safeguard rather than an automatic indication of wrongdoing.

winph may use cookies and similar local technologies to maintain secure sessions, remember language settings, support navigation, protect login activity, measure performance, and understand whether pages operate correctly across mobile and desktop devices. Essential technologies are necessary for core account and security functions.

Optional analytics or preference technologies, where used, are intended to improve service quality and are managed in accordance with applicable consent requirements. Browser controls may allow you to block or remove cookies, although disabling essential cookies can prevent login, payment, or gameplay features from working properly.

winph does not sell personal data. Information may be disclosed only where reasonably necessary to operate the platform, protect players, or satisfy lawful obligations. Recipients may include:

• payment providers, e-wallet operators, and banking partners processing deposits or withdrawals;
• identity verification, fraud prevention, cybersecurity, and compliance service providers;
• game and platform suppliers that require limited technical or account information to deliver services;
• professional advisers, auditors, insurers, and corporate service providers under confidentiality duties;
• regulators, courts, dispute-resolution bodies, or law enforcement authorities where disclosure is legally required; and
• a successor organisation in a merger, restructuring, financing, or business transfer, subject to appropriate safeguards.

Service providers receive only the information needed for their assigned functions. winph requires appropriate confidentiality, security, and processing obligations where such requirements are within our contractual control.

Because online gaming, cloud infrastructure, payment processing, and support services may operate across several jurisdictions, personal data may be processed outside Malaysia. Privacy and regulatory standards can differ between countries.

Where an international transfer requires protection, winph uses measures appropriate to the circumstances. These may include contractual safeguards, controlled access, data minimisation, encryption, provider assessments, and transfer arrangements recognised by applicable law. winph reviews cross-border processing risks as services and legal requirements change.

winph retains personal data only for as long as reasonably required for the purposes described in this policy. Retention periods consider account status, transaction history, legal limitation periods, audit needs, fraud prevention, dispute management, anti-money laundering duties, and responsible gambling requirements.

Closing a winph account does not always permit immediate deletion. Transaction, identity, self-exclusion, and complaint records may need to be retained after closure to satisfy legal duties, prevent repeated misuse, honour exclusion requests, or establish and defend legal claims. When continued identification is no longer required, winph will delete, securely destroy, or anonymise the information in accordance with operational procedures.

winph applies technical and organisational controls intended to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. Measures may include encryption in transit, access restrictions, authentication controls, monitoring, system testing, staff confidentiality duties, backups, and incident-response procedures.

No online service can guarantee absolute security. Players also have an important role: use a unique password, keep account credentials private, log out on shared devices, and contact winph promptly if account activity appears unfamiliar. winph may temporarily restrict an account where doing so is necessary to investigate suspected compromise.

Subject to applicable law and verification of your identity, you may request access to personal data held by winph, correction of inaccurate or incomplete information, deletion where no lawful retention ground remains, or restriction of certain processing. You may also object to particular processing, withdraw consent, or ask for an available portable copy of information you supplied.

Some requests may be limited where fulfilling them would conflict with legal duties, fraud prevention, the rights of another person, active disputes, regulatory retention rules, or self-exclusion protections. For example, winph may need to retain minimal identity information to ensure that an excluded player cannot immediately create another account.

winph may ask for information sufficient to confirm your identity before acting on a request. This protects personal records from unauthorised disclosure. Requests will be considered within the timeframe required by applicable law, and winph will explain any lawful limitation or refusal.

Service communications about account security, changes to policies, withdrawals, verification, or responsible gambling controls may be sent where necessary to operate your account. These messages are not promotional and may continue while the relevant winph account remains active.

Promotional communications about games, bonuses, sports markets, or loyalty offers are managed separately. Where required, winph sends such communications only with permission or another valid legal basis. You may change marketing preferences through available account controls or by asking support. Preference updates can require a reasonable processing period, and they do not affect essential service notices.

winph services are intended exclusively for adults aged 21 and above. winph does not knowingly permit people under 21 to open accounts or gamble. Age and identity verification measures are used to support this restriction.

If winph identifies an account held by an underage person, the account will be suspended and reviewed in accordance with the Terms & Conditions. A parent or guardian who believes an underage person has provided information to winph should contact support using the plain-text details below so that the matter can be investigated.

When a player uses deposit limits, loss limits, cooling-off, self-exclusion, or related support, winph processes the information required to apply and enforce that request. Communications about financial difficulty, emotional wellbeing, or gambling harm may be treated as sensitive and restricted to personnel who need access for player protection.

Responsible gambling records may be retained even after account closure because removing them could undermine an active exclusion or allow controls to be bypassed. Further information about these safeguards appears on the Responsible Gambling page. winph encourages every player to treat gambling as paid entertainment, set an affordable MYR budget, and never chase losses.

winph may revise this policy to reflect legal developments, new security practices, changes to payment methods, or updates to platform services. The current version will be displayed on this page with its revision date.

Where a change materially affects how personal data is used, winph will provide an appropriate notice through the platform or registered contact details. Continued use of the service does not replace consent where separate consent is legally required.

If you have a privacy question, wish to exercise a data right, or believe information associated with your winph account is inaccurate, contact the winph support team. Please describe your request clearly and avoid sending full identity documents unless the support team specifically requests them through an approved verification process.

For general platform guidance, you may also review the FAQ. Questions about contractual account rules should be directed to the Terms & Conditions.