Important Note: This Privacy Policy clearly explains how winmy9 collects, uses, stores, and protects your personal data. By registering and using the winmy9 platform, you fully agree to the terms set out in this policy.
1Introduction
Winmy9 is an online slot gaming platform operating under a valid licence and fully committed to protecting the personal data of its users. We understand that your personal information is a highly valuable asset, and we do not take this responsibility lightly.
This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data management. It applies to all users who access the winmy9.vip website, the winmy9 mobile app, and any services provided by our platform.
We want you to truly understand — not just skim through long, boring paragraphs. That's why we've structured this policy in an easy-to-follow format, using clear and straightforward language. Each section is designed to give you a complete picture of what we do with your data, why we need it, and what your rights are as a winmy9 user.
winmy9's commitment: We never sell your personal data to any third party for advertising or marketing purposes without your explicit consent. This is our promise to every user on the platform.
2Data Collected
Winmy9 collects various types of data to ensure the platform runs smoothly, securely and delivers the best experience to every user. The data we collect is divided into three main categories:
A. Data You Provide Directly
- Full name as shown on your identity card or passport
- Date of birth for age verification (18 and above)
- Active email address for account communications
- Mobile phone number for OTP verification
- Bank account number or digital wallet for deposit and withdrawal processing
- KYC documents such as copies of identity cards and bank statements when required
- Full address details for identity verification
B. Data Collected Automatically
- IP address and device information used
- Web browser type and version
- Your device's operating system
- Gaming activity history including dates, times and wagering amounts
- Login and logout session data
- Complete deposit and withdrawal transaction records
- Cookie data and session identifiers
C. Data From Third-Party Sources
- Verification information from registered KYC service providers
- Payment processing data from the payment gateways we use
- Basic credit check information required for AML compliance
| Data Type |
Primary Purpose |
Required? |
| Name & Date of Birth |
Identity & Age Verification |
Yes |
| Email & Phone No. |
Communication & Account Security |
Yes |
| Banking Information |
Deposit & withdrawal processing |
Yes |
| KYC Documents |
Legal Compliance & AML |
As needed |
| Device & IP Data |
Security & Fraud Prevention |
Automatic |
| Session Cookies |
User experience & analytics |
Automatic |
3How We Use Your Data
Every piece of data we collect has a clear and legitimate purpose. winmy9 never uses user data for purposes not stated in this policy. Here is how we use your information:
- Account Management: Processing your registration, login, password recovery, and profile updates.
- Transaction processing: Ensuring every deposit and withdrawal is processed accurately, securely, and within the stipulated timeframe.
- Identity verification (KYC): Complying with legal requirements for financial protection and anti-money laundering (AML).
- Platform security: Detecting and preventing fraudulent activity, unauthorized access, and account misuse.
- Service improvement: Analyzing usage patterns to improve your gaming experience and overall platform performance.
- Service communications: Sending important account-related notifications, promotions you have subscribed to, and security updates.
- Legal compliance: Meeting reporting obligations to relevant authorities when required by law.
- Customer support: Enabling our support team to identify and assist you more efficiently.
winmy9 does not use your personal data for any third-party marketing purposes or sell it to advertisers. Any marketing communications from winmy9 are only sent to users who have given explicit consent.
4Data Encryption & Security
Your data security is more than a promise — it is the technical infrastructure we build and maintain every day. winmy9 continuously invests in the latest security technologies to ensure your data remains protected at all times.
- 256-bit SSL Encryption: All data transmitted between your device and winmy9's servers is encrypted using TLS 1.3 protocol with 256-bit encryption — the same standard used by global banking institutions.
- Password Storage: Passwords are never stored in plain text. We use the bcrypt hashing algorithm with a unique salt for every account.
- Two-factor authentication (2FA): An additional security layer via SMS OTP or an authenticator app is available and strongly recommended for all accounts.
- 24/7 Monitoring: Our automated monitoring system tracks suspicious activity around the clock and sends instant alerts to our security team.
- Data segregation: Financial data is stored separately from profile data with strict access controls, minimising risk in the event of any security incident.
- Regular security audits: Our infrastructure undergoes regular penetration testing and security audits by independent third parties.
If you suspect your account has been accessed without authorization, contact the winmy9 support team immediately. We will respond within less than one hour to secure your account.
5Data Sharing With Third Parties
Winmy9 does not share your personal data indiscriminately. Data sharing only occurs in limited and legitimate situations, with partners who have gone through our rigorous selection process:
- Payment service providers: Registered and licensed payment gateways are required to process deposits and withdrawals. They only receive data necessary for transaction purposes.
- KYC & AML providers: Licensed third-party identity verification companies are used to complete the KYC and AML compliance process. Data is shared securely and deleted once verification is complete.
- Game providers: Gaming software providers that operate games within our platform may receive minimal technical data (such as anonymised player IDs) for game operation purposes.
- Legal authority: In cases where the law requires disclosure — such as court orders, police investigations, or AML reporting requirements — we will comply with those legal obligations.
All third-party partners of winmy9 are bound by strict data protection agreements and are not permitted to use your data for any purpose other than what is specified in those agreements. We select partners carefully and assess their data security practices before any sharing is authorised.
6Cookies & Tracking Technologies
Winmy9 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform performs optimally. Below are the types of cookies we use:
- Essential Cookies: Required for core platform functions such as login session management, account security, and language preferences. These cookies cannot be disabled.
- Performance Cookies: Collecting information about how you use the platform — pages frequently visited, time spent, and any errors encountered. This data is used in aggregate to improve website performance.
- Functional Cookies: Storing your preferences such as text size, game settings, and display options to ensure a more personalized experience each time you log in.
- Analytics Cookies: Used to understand overall traffic patterns and user engagement to help us plan platform improvements.
You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect certain functions of the winmy9 platform. Each time you visit our platform for the first time or after clearing your browser data, a cookie consent notification will be displayed.
7Your Rights as a User
Under Malaysia's PDPA and the data protection principles we uphold, you have the following rights regarding your personal data that we hold:
Right of Access
You have the right to request a copy of the personal data we hold about you at any time.
Right to Rectification
If your data is inaccurate or outdated, you may request a correction through your account or via our support team.
Right to Erasure
You may request deletion of your data under certain circumstances, subject to our legal obligations.
Right to Object
You may object to the processing of your data for specific purposes such as direct marketing.
Right to Portability
You may request your data in a machine-readable format for transfer to another platform.
Right to Restrict Processing
In certain situations, you may request that we restrict how we use your data.
To submit any request relating to your data rights, contact the winmy9 privacy team via email at
[email protected]. We will process your request within 14 business days.
8Data Retention Period
Winmy9 does not retain your data any longer than necessary. Retention periods are determined based on operational requirements and applicable legal obligations:
- Active account data: Retained for the duration your account is active and for 5 years after account closure for AML compliance and financial audit purposes.
- Transaction records: Retained for 7 years in accordance with applicable Malaysian financial legal requirements.
- KYC documents: Retained for 5 years from the date of verification or account closure, whichever is later.
- Activity & session logs: Retained for 12 months for security and dispute resolution purposes.
- Support communication data: Retained for 2 years for reference and service improvement.
- Non-essential cookie data: Set with appropriate expiry periods (typically 30 to 90 days) and deleted automatically.
Once the designated retention period has expired, data will be securely deleted or anonymised using approved procedures. winmy9 does not retain data that is no longer needed within our active systems.
9Cross-Border Data Transfer
In certain circumstances, your personal data may be processed or stored outside Malaysia — particularly when we use the services of technology providers or international game providers. winmy9 ensures that all such data transfers are safeguarded by adequate protections:
- All international data transfers are conducted through encrypted channels using the latest industry standards.
- Our international partners are bound by data processing agreements that meet European GDPR and Malaysia's PDPA standards.
- We only use providers located in countries with data protection standards equivalent to or higher than Malaysia.
- Any data transfers for backup storage purposes are made to ISO 27001-certified data centres located in secure geographic zones.
10Contact Our Privacy Team
We welcome any questions, concerns, or feedback regarding this Privacy Policy. The winmy9 Data Protection Officer (DPO) team is always ready to assist you.
- Email: [email protected]
- Response time: General enquiries — within 48 hours; data rights requests — within 14 working days
- Language: Bahasa Malaysia and English
- Operating hours: 24 hours a day, 7 days a week for general support
If you are dissatisfied with how we handle your privacy request, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (PDPA) or the relevant regulatory body in your country.
The winmy9 support team is available via live chat on our platform 24/7. For sensitive privacy matters, we recommend contacting us by email to receive a written response you can keep for reference.