Summary: winmy8 collects personal information necessary to operate a regulated online gaming platform — account registration, identity verification, payment processing, and platform security. We do not sell your personal data to third parties. We use data to operate the platform, comply with legal obligations, and improve your experience. You have rights to access, correct, and delete your data. This policy tells you exactly how it all works.
1.1 This Privacy Policy ("Policy") is issued by winmy8 ("winmy8", "we", "us", "our") and governs the collection, use, storage, disclosure, and protection of personal data obtained through your use of the winmy8 platform, including the website at winmy8.app and all associated services, games, and features.
1.2 winmy8 operates an online gaming platform serving Malaysian players and is committed to compliance with applicable data protection legislation, including the Personal Data Protection Act 2010 (Malaysia) ("PDPA") and applicable international standards.
1.3 By registering an account with winmy8 or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you must not use the winmy8 platform.
1.4 This Policy should be read together with winmy8's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.
2.1 winmy8 collects personal data in the following categories:
Full legal name, date of birth, gender, nationality, Malaysian NRIC or passport number, username, and account password (stored in encrypted form). This data is collected at registration and during KYC verification.
Email address, phone number, and residential address (including city, state, and postcode within Malaysia). Players located across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and all Malaysian states and territories are subject to this Policy equally.
Payment method identifiers (e.g., Touch 'n Go eWallet account reference, bank account details for FPX or DuitNow transactions, USDT wallet address), deposit and withdrawal history, transaction amounts in MYR, and source-of-funds documentation where required by anti-money laundering obligations.
Game session logs, wager amounts, game outcomes, bonus utilisation records, sportsbook betting history, session durations, and responsible gaming tool usage (including any limits or self-exclusion periods you set).
IP address, device type and model, operating system, browser type and version, screen resolution, time zone, and session identifiers. This data is collected automatically when you access the Platform.
Records of your communications with winmy8 customer support, including live chat transcripts, email correspondence, and support ticket content.
| Data Category | Source | Required? |
|---|---|---|
| Identity & Registration | You, KYC documents | Mandatory |
| Contact Details | You at registration | Mandatory |
| Financial Data | You, payment processors | Mandatory |
| Gaming Activity | Platform systems | Automatic |
| Technical / Device | Your browser/device | Automatic |
| Communications | Your interactions | When applicable |
3.1 winmy8 uses the personal data we collect for the following purposes:
4.1 winmy8 processes your personal data on the following legal bases:
5.1 winmy8 does not sell your personal data to third parties. We share personal data only in the following circumstances:
5.2 All third parties with whom winmy8 shares personal data are required by contract to maintain appropriate data security standards and to use the data only for the purposes for which it was disclosed.
6.1 winmy8 uses cookies and similar tracking technologies on the Platform for the following purposes:
6.2 You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair or prevent your ability to use the winmy8 Platform.
7.1 winmy8 retains your personal data for as long as your account is active and for a period thereafter as required by applicable legal, regulatory, and audit obligations. Specific retention periods are as follows:
7.2 Data retained beyond the active account period is stored in restricted-access archives and is not used for any purpose other than compliance with legal obligations.
8.1 winmy8 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
8.2 Notwithstanding the above, no electronic transmission or storage system is completely secure. winmy8 cannot guarantee the absolute security of data transmitted to the Platform and accepts no liability for security breaches that are beyond its reasonable control, provided winmy8 has implemented the measures described in this section.
8.3 You are responsible for maintaining the confidentiality of your account credentials. winmy8 will never ask for your password via email or live chat. If you suspect your account has been compromised, contact winmy8 support immediately.
9.1 Subject to applicable law and regulation, you have the following rights in respect of your personal data held by winmy8:
9.2 To exercise any of the above rights, please contact winmy8's data protection team at the email address provided in Section 15. winmy8 will respond to all valid requests within thirty (30) calendar days. Some requests may be subject to identity verification before they are processed.
9.3 Where winmy8 is unable to fulfil a request — for example, due to a legal retention obligation — we will explain the reason in writing.
10.1 The winmy8 platform is strictly restricted to individuals aged 21 years and above. winmy8 does not knowingly collect personal data from any person under the age of 21. Age verification is performed as part of the account registration and KYC process.
10.2 If winmy8 discovers or is notified that personal data has been collected from a person under 21, winmy8 will immediately close the relevant account, delete or anonymise all associated personal data, and return any financial balance held in the account following standard verification procedures.
10.3 If you believe a person under the age of 21 has registered an account on the winmy8 platform, please contact our support team immediately using the contact details in Section 15.
11.1 winmy8's primary operations and data processing infrastructure are configured to serve Malaysian players. Some of our service providers and game content partners may be located outside Malaysia, which may involve the transfer of personal data to jurisdictions outside Malaysia.
11.2 Where personal data is transferred internationally, winmy8 ensures that appropriate safeguards are in place, including contractual data protection clauses and verification that recipient jurisdictions provide an adequate level of data protection consistent with Malaysian PDPA requirements.
11.3 By using the winmy8 platform, you consent to the transfer of your personal data to third-party service providers in other jurisdictions as described in this Policy and subject to the safeguards described herein.
12.1 winmy8 may send you promotional communications, including information about bonuses, new games, Deepavali festival promotions, and seasonal campaigns, where you have provided explicit opt-in consent at registration or subsequently via your account settings.
12.2 You may opt out of marketing communications at any time by: (a) clicking the unsubscribe link in any marketing email; (b) updating your communication preferences in your winmy8 account settings; or (c) contacting winmy8 support.
12.3 Opting out of marketing communications does not affect winmy8's ability to send you service communications — including account security alerts, transaction confirmations, KYC requests, and responsible gaming notifications — which are sent on a contractual and legal obligation basis regardless of marketing preferences.
12.4 winmy8 will not send marketing communications to players who have initiated self-exclusion or cooling-off periods, regardless of their registered communication preferences.
13.1 The winmy8 platform may contain links to third-party websites or services, including payment provider portals and game lobby environments operated by game software providers. This Policy does not govern the data practices of those third parties, and winmy8 is not responsible for the content or privacy practices of any third-party site.
13.2 We encourage you to review the privacy policies of any third-party services you access in connection with your use of the winmy8 platform.
14.1 winmy8 reserves the right to amend this Policy at any time. Material changes will be communicated to registered players by email to the address on file and/or by a prominent notice on the winmy8 platform. The updated Policy will state the effective date of the revision at the top of the document.
14.2 Your continued use of the winmy8 platform following notification of any change constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must discontinue use of the Platform and may close your account in accordance with the Terms & Conditions.
15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or winmy8's data practices, please contact us at:
Data Protection Enquiries
Email: [email protected]
Please include "Privacy Enquiry" in your email subject line. winmy8 will acknowledge receipt within 3 business days and provide a substantive response within 30 calendar days. For urgent data security concerns such as suspected unauthorised account access, please also use the live chat function within your winmy8 account for immediate assistance.
Note: This Privacy Policy applies to the winmy8 platform at winmy8.app only. winmy8 is committed to handling all player data with transparency, security, and respect. For full platform terms, see our Terms & Conditions. For responsible gaming information, visit our Responsible Gaming page.
Six concrete measures that make winmy8 a trusted platform for Malaysian players.
All data transmitted between your device and winmy8 is encrypted with 256-bit SSL — the same standard used by major Malaysian banks including Maybank2u and CIMB Clicks. The padlock in your browser confirms it.
winmy8 does not and will not sell your personal information to advertisers, data brokers, or any third parties. Your data is used to operate your account and comply with legal obligations — nothing else.
Independent third-party security firms conduct regular penetration testing and vulnerability assessments of the winmy8 platform. Security findings are acted on promptly — players don't wait months for patches.
Access, rectify, or delete your personal data — winmy8 processes all valid data rights requests within 30 days. You're not just a username in a database; your data rights under PDPA are taken seriously.
Marketing communications from winmy8 are opt-in only. One click unsubscribes you from all promotional emails. Self-excluded players are automatically removed from marketing lists with no further action required.
winmy8 enforces age verification at registration and KYC stages. Any account found to belong to someone under 21 is closed immediately, data is deleted, and funds are returned — no exceptions.