Your data, your rights

winrm88 Privacy Policy

This Privacy Policy explains how winrm88 collects, uses, stores, and protects your personal information when you use our online casino and sports betting platform as a Malaysian player.

Effective date: 1 January 2026

Key commitments

What This Policy Covers at a Glance

These four principles underpin every aspect of how winrm88 handles your personal data.

Data We Collect

Registration details, verification documents, payment records, and gameplay data — only what is necessary to run your account.

How We Use It

Account management, KYC, MYR payment processing, fraud prevention, customer support, and platform improvements.

Who Sees It

Verified payment processors, identity providers, game suppliers, and authorities where legally required. Never sold to third parties.

Your Rights

Access, correction, deletion, restriction, and portability rights — contact support to exercise them at any time.

1

Introduction

winrm88 ("we", "us", "our") is committed to protecting the personal information of every person who accesses the winrm88 platform, opens an account, makes a deposit in Malaysian Ringgit (MYR), claims a promotion, places a wager, or contacts our support team. This Privacy Policy sets out what personal data we collect, why we collect it, how we process and safeguard it, who we may share it with, and the rights available to you as a data subject.

By registering with winrm88 or continuing to use the platform after this policy becomes effective, you acknowledge that you have read and understood its terms. This policy should be read alongside the winrm88 Terms & Conditions and Responsible Gambling information. Where those documents address matters of data processing, this policy governs.

If you disagree with any part of this policy, you should discontinue use of the platform and contact us to arrange account closure. We will handle any remaining balance in accordance with our payment and verification procedures.

2

Definitions

"Personal data" means any information that identifies or could reasonably identify a natural person — including, but not limited to, a name, identity document number, mobile number, email address, bank account details, e-wallet identifier, IP address, or device identifier.

"Processing" means any operation performed on personal data, whether automated or manual, including collection, storage, retrieval, use, disclosure, modification, and deletion. "Data controller" means winrm88, the entity that determines the purposes and means of processing. "Data processor" means a service provider that processes personal data on winrm88's behalf under a written instruction. "Player" or "you" means the individual who holds or seeks to hold a registered winrm88 account.

3

Personal Data We Collect

3.1 Information You Provide Directly

  • Registration details: full legal name, date of birth, residential address, email address, and mobile number.
  • Identity verification documents: MyKad, passport, national identity card, or equivalent document; selfie or biometric liveness data where required by KYC procedures.
  • Payment information: bank account name and number, FPX reference, DuitNow registered number, Touch 'n Go eWallet ID, Boost ID, GrabPay linked number, CIMB, Maybank, Public Bank, or Hong Leong Bank account details, or cryptocurrency wallet address.
  • Proof of address: utility bill, bank statement, or government-issued correspondence.
  • Source-of-funds documentation where requested for compliance purposes.
  • Communications with our support team, including messages, attachments, and call records where applicable.

3.2 Data Collected Automatically

  • Technical data: IP address, browser type and version, operating system, device model and identifiers, screen resolution, and language settings.
  • Usage data: pages visited, time spent, game sessions, wager amounts, bet history, login timestamps, and navigation paths.
  • Transaction data: deposit amounts, withdrawal requests, bonus claims, and payment method used.
  • Cookie and tracking data as described in Section 9 below.

3.3 Data from Third Parties

winrm88 may receive information from identity-verification agencies, payment processors, fraud-detection providers, and game suppliers. Such data is used only for the stated purposes and is subject to this policy.

4

How We Use Your Personal Data

winrm88 processes personal data for the following purposes:

  • Account creation and management: verifying eligibility, creating and maintaining your player profile, and enabling access to platform features.
  • Identity and age verification: confirming that you are at least 21 years old and are the legitimate holder of the account and payment method.
  • Payment processing: handling deposits and withdrawals in MYR through DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, BTC, USDT, and other supported methods.
  • Fraud prevention and security: detecting suspicious login activity, duplicate accounts, payment fraud, bonus abuse, and other prohibited conduct.
  • Regulatory and legal compliance: meeting obligations applicable to winrm88's operating jurisdiction, including anti-money-laundering and record-keeping requirements.
  • Customer support: responding to account queries, transaction disputes, bonus enquiries, and technical issues.
  • Platform improvement: analysing aggregate usage patterns to optimise games, payment flows, interface performance, and support quality.
  • Responsible gambling tools: applying deposit limits, session controls, and self-exclusion instructions to protect player wellbeing.
  • Promotional communications: informing you of offers or promotions where you have opted in to receive such communications, or where winrm88 has a legitimate interest in doing so consistent with applicable rules.
6

Data Sharing and Disclosure

winrm88 does not sell personal data to any third party. We may share personal data in the following circumstances:

  • Payment processors: banks, FPX operators, DuitNow providers, e-wallet operators (Touch 'n Go, Boost, GrabPay), and cryptocurrency networks — to process deposits and withdrawals.
  • Identity-verification providers: third-party KYC services that check identity documents, screen against sanctions databases, or perform liveness verification.
  • Game suppliers: certified casino and live dealer providers (such as Evolution Gaming, SA Gaming, Pragmatic Play, and others) who process game-session data to deliver certified gameplay.
  • Fraud and risk services: providers that assist in detecting unusual account behaviour, duplicate registrations, or payment anomalies.
  • Legal and regulatory authorities: where winrm88 is required by law, court order, or regulatory direction to disclose information.
  • Business continuity: in the event of a merger, acquisition, or business restructure, personal data may be transferred to a successor entity subject to the same privacy obligations.

All third-party processors engaged by winrm88 are required to handle personal data solely for the purpose for which it was disclosed and under contractual data-protection obligations consistent with this policy.

7

Data Retention

winrm88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce agreements. Account information and transaction records are generally retained for a minimum of five years following account closure, in line with standard financial record-keeping practice.

Where personal data is no longer required, winrm88 will delete or anonymise it in a secure manner. If a player requests account closure, residual data needed for legal, compliance, or dispute-resolution purposes may be retained for the legally required period even after the account has been deactivated.

8

Data Security

winrm88 applies industry-standard technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

  • Transport Layer Security (TLS) encryption for all data transmitted between your device and the winrm88 platform.
  • Encryption of sensitive data at rest, including identity documents and payment credentials.
  • Access controls limiting staff access to personal data on a need-to-know basis.
  • Multi-factor authentication options for player accounts.
  • Regular internal security reviews and monitoring for anomalous access patterns.

While winrm88 implements rigorous safeguards, no method of transmission over the internet or electronic storage is completely secure. You should protect your account credentials and notify us promptly if you suspect unauthorised access to your account.

9

Cookies and Tracking Technologies

winrm88 uses cookies and similar technologies — including local storage and session tokens — to maintain your login session, remember account preferences, monitor platform performance, detect fraud signals, and analyse aggregated usage patterns that help us improve the platform.

9.1 Types of Cookies Used

  • Essential cookies: required for the platform to function; cannot be disabled without affecting core features such as login and the cashier.
  • Analytics cookies: collect anonymous data about page views, session duration, and navigation paths to help winrm88 understand how players use the platform.
  • Security cookies: detect and prevent fraudulent activity, bot access, and session hijacking.

You may control non-essential cookies through your browser settings. Disabling essential cookies may impair your ability to log in or complete transactions. winrm88 does not use cookies to serve advertising to third-party platforms.

10

Your Data Rights

Subject to applicable law, you may exercise the following rights in relation to your personal data held by winrm88:

  • Right of access: request a copy of the personal data winrm88 holds about you.
  • Right to rectification: ask us to correct inaccurate or incomplete data.
  • Right to erasure: request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to legal retention obligations.
  • Right to restriction: ask us to pause processing while a dispute or accuracy query is resolved.
  • Right to data portability: receive a structured, machine-readable copy of the data you have provided to winrm88.
  • Right to object: object to processing carried out on the basis of legitimate interest, including profiling for direct marketing.
  • Right to withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any right, contact the winrm88 support team with your registered account details and a clear description of your request. We may need to verify your identity before acting on the request. We aim to respond within 30 days of receiving a valid request.

11

Minors and Age Verification

winrm88 does not knowingly collect personal data from, or provide services to, individuals under the age of 21. Age verification is performed as part of the account registration and KYC process. If winrm88 discovers that a player is under 21, the account will be immediately suspended, all deposits returned to the payment source where possible, and any data collected will be deleted except where retention is required by law.

Parents and guardians who believe a minor has opened a winrm88 account should contact support immediately.

12

International Data Transfers

winrm88 may store or process personal data through servers or service providers located outside Malaysia. Where such transfers occur, winrm88 takes steps to ensure that an adequate level of data protection is maintained — for example, through contractual clauses, data processing agreements, or recognised adequacy frameworks applicable in the relevant jurisdiction.

Game data processed by certified international suppliers such as Evolution Gaming, SA Gaming, or Pragmatic Play may transit or be stored on infrastructure outside Malaysia. These suppliers operate under their own regulatory and security certifications and are bound by contractual obligations to winrm88 regarding data protection.

13

Changes to This Privacy Policy

winrm88 may update this Privacy Policy to reflect changes in platform features, payment integrations, legal requirements, or data-processing practices. The updated policy will be published on this page with a revised effective date. Material changes will be communicated to registered players via the contact details held on their account.

Your continued use of winrm88 after the stated effective date constitutes acceptance of the updated policy. If you do not accept any change, you should stop using the platform and request account closure before the new policy takes effect.

14

Contact Us

If you have a question about this Privacy Policy, wish to exercise a data right, want to report a privacy concern, or need to notify us of a potential security issue relating to your account, contact the winrm88 support team. Please include your registered account username or email address and a clear description of your query. For security, never include your account password or one-time verification code in any message.

Contact email: [email protected] (displayed as plain text — please copy and paste into your mail client).

Our support team operates 24 hours a day, 7 days a week. We aim to acknowledge all privacy-related requests within 3 business days and to resolve them within 30 days, unless the matter requires additional time due to complexity or third-party involvement.

Personal Data Reminder

Keep your account details, identity documents, and payment information current and accurate. Outdated or inaccurate information can delay withdrawals and KYC verification. Contact support at any time to update your registered data.

Our data principles

Privacy Built Into Every Part of the Platform

These six practices reflect how winrm88 applies its privacy commitments in day-to-day platform operations.

Minimum Necessary Collection

winrm88 collects only the data required to open your account, verify your identity, process MYR payments, and comply with applicable obligations — nothing more.

No Data Sales

Your personal information is never sold to advertising networks, data brokers, or any third party for commercial purposes. Sharing occurs only as described in Section 6.

Encrypted at Every Stage

Data travels over TLS-encrypted connections and sensitive records are encrypted at rest. Security reviews are conducted regularly to identify and address vulnerabilities.

Identity Verification Protects You

KYC checks prevent another person from withdrawing from your account, protect against stolen identity misuse, and maintain the integrity of MYR payment flows.

Meaningful Consent Controls

Where processing relies on consent — such as opt-in marketing — you can withdraw it at any time through your account settings or by contacting support.

Clear Retention Periods

Data is kept only as long as legally or operationally necessary. When it is no longer required, it is securely deleted or anonymised in line with our documented retention schedule.

What would you like to do next?

Continue Exploring winrm88

Return to the homepage to start playing, review our Terms & Conditions, or learn more about responsible gambling tools available to every winrm88 member. For players aged 21 and above only.