1. Data Controller
winmy13 (referred to in this Policy as "winmy13", "we", "us", or "our") operates the Platform accessible at winmy13.net and is the data controller responsible for personal data collected through the Platform. We are committed to protecting the personal information of all Members, particularly those accessing winmy13 from Malaysia.
This Privacy Policy governs all personal data processed in connection with your registration, Account use, betting activity, payment transactions, and any other interaction with the winmy13 Platform. It should be read alongside our Terms & Conditions.
2. Personal Data We Collect
winmy13 collects the following categories of personal data from Members:
- Identity Data: Full legal name, date of birth, gender, nationality, and a copy of your MyKAD or valid passport submitted during KYC verification.
- Contact Data: Email address, Malaysian mobile number, and residential address.
- Financial Data: Payment method details (Touch n Go eWallet account identifier, Boost account identifier, bank account name and number for Maybank, CIMB, or Public Bank), deposit history, withdrawal records, and wallet balance information.
- Account Data: Username, encrypted password, account registration date, login history, and account status.
- Transaction Data: Records of all bets placed, game sessions, casino activity, bonus claims, and promotional participation.
- Technical Data: IP address, device type and operating system, browser type and version, session identifiers, and geolocation data (country-level) derived from your IP address.
- Usage Data: Pages visited, features accessed, time spent on sections of the Platform, and clickstream data.
- Communications Data: Records of your interactions with winmy13 customer support via Live Chat, including chat transcripts and support ticket history.
- Responsible Gaming Data: Any deposit limits, self-exclusion requests, session reminders, or other responsible gaming tool activations associated with your Account.
3. How We Collect Your Data
winmy13 collects personal data through the following means:
- Direct submission: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
- Automated collection: Technical and usage data collected automatically through cookies, server logs, and similar tracking technologies when you access the Platform.
- Third-party sources: Identity and fraud-screening data from KYC verification providers, payment gateway data from your chosen payment method (e.g., Touch n Go eWallet, Boost), and geolocation data from IP intelligence services.
- Anti-fraud and compliance tools: Data derived from device fingerprinting and behavioural analytics used to detect and prevent fraud, money laundering, and multiple Account creation.
4. How We Use Your Personal Data
winmy13 uses collected personal data for the following purposes:
- Account Management: To register and maintain your Member Account, verify your identity, and manage your login credentials and session security.
- Service Delivery: To process bets, settle winnings, facilitate deposits and withdrawals, and provide access to all features of the winmy13 Platform.
- KYC and Regulatory Compliance: To verify your identity and age (21+), comply with applicable anti-money laundering (AML) obligations, and meet any applicable reporting requirements.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised Account access, bonus abuse, and other prohibited activities described in our Terms & Conditions.
- Responsible Gaming: To monitor Account activity for indicators of problem gambling behaviour and to administer any self-imposed responsible gaming tools, including deposit limits and self-exclusion requests.
- Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 Live Chat service.
- Marketing Communications: To send you promotions, bonus offers, and personalised marketing materials — subject to your communication preferences. You may opt out of marketing communications at any time via your Account settings.
- Platform Improvement: To analyse usage patterns, conduct product research, and improve the features, performance, and user experience of the winmy13 Platform.
- Legal Obligations: To comply with any applicable law, regulation, court order, or lawful request from a competent authority.
5. Legal Basis for Processing
winmy13 processes your personal data on the following legal bases, consistent with applicable data protection legislation including Malaysia's Personal Data Protection Act 2010 (PDPA):
- Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you have entered into with winmy13 — including account management, bet processing, and payment transactions.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics where our legitimate business interests do not override your privacy rights.
- Legal obligation: Processing required to comply with applicable AML regulations, age verification requirements, licensing obligations, and lawful authority requests.
- Consent: Processing for direct marketing communications, where we have obtained your explicit consent at registration or through your Account communication preferences. You may withdraw consent at any time.
6. Data Sharing and Disclosure
6.1 winmy13 does not sell your personal data to third parties. We share personal data only where strictly necessary for the purposes described in this Policy, with the following categories of recipients:
- Payment processors: Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank, to the extent required to process your financial transactions.
- KYC and identity verification providers: Third-party identity verification services used to validate your identity documents and screen against sanction lists.
- Game content providers: Software providers whose games are hosted on the winmy13 Platform may receive anonymised session data necessary to operate their games.
- Fraud prevention and analytics providers: Technology partners who assist in detecting fraudulent activity, device fingerprinting, and platform usage analytics — subject to confidentiality and data processing agreements.
- Legal and regulatory authorities: Law enforcement agencies, regulators, or courts where winmy13 is under a legal obligation or court order to disclose data.
6.2 All third-party service providers engaged by winmy13 are contractually bound to process personal data only for the specific purposes instructed, to maintain appropriate security standards, and to comply with applicable data protection laws.
7. Cookies and Tracking Technologies
winmy13 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help us deliver a better, more personalised experience.
- Essential cookies: Required for the Platform to function — including authentication tokens that keep you logged in during a session and security cookies that help detect fraudulent activity.
- Performance cookies: Used to collect anonymised analytics data about how Members use the Platform, which pages are visited most frequently, and where technical errors occur.
- Functional cookies: Used to remember your preferences — such as language settings and previously viewed game sections.
- Marketing cookies: Used, with your consent, to serve relevant promotional content on the Platform based on your betting and gaming history.
You may control cookie settings through your browser settings. Disabling essential cookies will impair your ability to use the Platform. Disabling other cookies will not prevent access but may reduce Platform functionality.
8. Data Retention
winmy13 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.
- Active Accounts: All Account data is retained for the duration of your active membership with winmy13.
- Closed Accounts: Following Account closure, winmy13 retains Identity Data, Financial Data, and Transaction Data for a minimum of 5 years from the date of closure to comply with AML obligations and applicable regulatory retention requirements.
- Marketing data: Retained until you withdraw consent or for a maximum of 2 years of Account inactivity, whichever comes first.
- Technical and usage data: Typically retained for up to 12 months unless required for ongoing fraud investigations or legal proceedings.
9. Data Security
winmy13 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:
- 256-bit TLS/SSL encryption for all data transmitted between your device and winmy13 servers.
- Encrypted storage of sensitive personal data and payment information at rest.
- Access controls limiting personal data access to authorised personnel with a legitimate business need.
- Regular security audits and penetration testing of Platform infrastructure.
- Two-factor authentication available to all Members and mandatory for internal administrative access.
While winmy13 takes all reasonable precautions, no data transmission over the internet can be guaranteed as completely secure. You accept the inherent security risks of transmitting data over the internet and will not hold winmy13 responsible for security breaches unless directly attributable to winmy13's negligence.
10. Your Data Rights
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection frameworks, you have the following rights in respect of your personal data held by winmy13:
- Right of access: You may request a copy of the personal data winmy13 holds about you.
- Right to correct: You may request correction of inaccurate or incomplete personal data held in your Account.
- Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
- Right to limit processing: In certain circumstances, you may request that winmy13 restrict the processing of your personal data.
- Right to object: You may object to processing based on legitimate interests, including direct marketing.
To exercise any of these rights, please contact winmy13 via our 24/7 Live Chat or by email at [email protected]. winmy13 will respond to all data rights requests within 21 calendar days. We may be unable to fulfil certain requests where they conflict with legal obligations, including AML retention requirements.
11. Children's Privacy
The winmy13 Platform is strictly intended for persons aged 21 and above. winmy13 does not knowingly collect personal data from any person under the age of 21. If winmy13 discovers that personal data has been collected from a person under 21, the relevant Account will be immediately suspended, all data will be securely deleted in accordance with our retention policy, and any balance held will be handled in accordance with applicable regulatory requirements. If you believe a person under 21 has created an Account on winmy13, please contact our support team immediately.
12. Changes to This Privacy Policy
winmy13 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to Members via email or a prominent notice on the Platform at least 7 days before the changes take effect, except where immediate amendments are required for legal or regulatory compliance. The date at the top of this Policy reflects the date of the most recent revision. Your continued use of the winmy13 Platform following the effective date of any update constitutes acceptance of the revised Policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or winmy13's data processing practices, please contact us through the following channels:
- Live Chat: Available 24/7 via the winmy13 Platform — the fastest way to reach our support team.
- Email: [email protected] — please include "Privacy Policy Enquiry" in your subject line for faster routing.
winmy13 is committed to resolving all privacy-related concerns in good faith and within a reasonable timeframe.