win44 Privacy Policy

Introduction

This Privacy Policy applies to all personal data processed by win44 in connection with the platform available at win44.lat. The policy covers data collected during account registration, login, MYR payment transactions, sports betting and casino activity, bonus and promotion claims, customer support interactions, and platform browsing — whether or not the user holds a registered account.

By registering a win44 account, depositing funds, placing a wager, or otherwise using the platform, you acknowledge that your personal data will be processed as described in this policy. If you do not accept this policy, please do not use win44. Continued use after a revised effective date signifies acceptance of the updated terms.

This policy should be read together with the win44 Terms and Conditions and, where applicable, any specific terms attached to promotions, VIP tier communications, or security notices. In the event of a direct conflict, the more specific document governs for the matter to which it relates.

Definitions

In this Privacy Policy, the following expressions carry the meanings stated below:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, including name, identification number, contact details, account credentials, transaction records, and device identifiers.
• "Processing" means any operation performed on personal data — including collection, recording, storage, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Controller" means the entity that determines the purposes and means of processing personal data. win44 acts as controller for data collected through the platform.
• "Processor" means a third party that processes personal data on behalf of win44 under binding instructions — for example, a payment gateway provider or identity verification service.
• "KYC" means Know Your Customer — the identity, age, address, payment ownership, and source-of-funds verification procedures win44 uses to protect players and meet compliance requirements.
• "Cookies" means small data files placed on a user's device to support platform functionality, session management, analytics, and security.

Personal Data We Collect

win44 may collect personal data in the following categories, depending on the level of interaction:

Account and Identity Data

Full legal name, date of birth (to verify 21+ eligibility), residential address, email address, mobile phone number, username, encrypted password, and Malaysian MyKad or passport number supplied during registration or KYC verification.

Payment and Financial Data

Bank account numbers, e-wallet identifiers (such as Touch 'n Go eWallet, Boost, GrabPay, and DuitNow), FPX transaction references, cryptocurrency wallet addresses (BTC, USDT), deposit and withdrawal history, and MYR balance records. We do not store full card numbers or payment credentials beyond the minimum needed to process and verify a transaction.

Gaming and Betting Activity

Wagering history across sports (Liga Super Malaysia, EPL, UFC, football, and other markets), casino game sessions, bonus claims, wagering requirement completion, jackpot participation, and session timestamps.

Technical and Device Data

IP address, device type and operating system, browser version, connection type, screen resolution, session duration, pages visited, and geolocation data derived from your IP address. We do not use GPS-level location tracking.

Communications Data

Customer support chat transcripts, email correspondence, document uploads submitted for KYC, and feedback submitted through platform channels.

Responsible Gambling Data

Deposit limits set by the player, cooling-off requests, self-exclusion periods, session reminder preferences, and internal assessments conducted where win44 has a responsible gambling concern relating to account behaviour.

Data Processing — Purposes and Legal Basis

The table below summarises the primary purposes for which win44 processes personal data and the lawful basis for each:

Where win44 relies on legitimate interests as a lawful basis, those interests are balanced against users' rights and interests. Processing will not continue on that basis where your interests or fundamental rights clearly override the legitimate interest pursued.

Cookies and Tracking Technologies

win44 uses cookies and similar technologies — including session tokens, local storage objects, and server-side logging — to operate the platform, maintain login sessions, detect unusual access patterns, and improve user experience for Malaysian players on both desktop and mobile devices.

Essential Cookies

These are required for core platform functions including account login, secure session management, navigation between the sportsbook and casino, and payment processing. They cannot be disabled without impeding platform functionality.

Analytical Cookies

These help win44 understand how users navigate the platform — which pages are visited most, where users exit, and how long sessions last. Data collected through analytical tools is aggregated and does not individually identify users.

Security Cookies

These detect and prevent fraud, bot activity, account takeover attempts, and other malicious behaviour. They may record IP addresses, device fingerprints, and access timestamps in connection with security event reviews.

You may adjust cookie settings through your browser preferences. Disabling certain cookies may affect your ability to log in, process payments, or use real-time features. win44 does not operate third-party advertising networks or social media trackers on the platform.

Data Sharing and Third Parties

win44 does not sell personal data to third parties for their marketing or commercial purposes. Data may be shared with third parties only in the following circumstances and subject to contractual data-protection obligations:

• Payment processors and e-wallet providers — including banks, DuitNow, FPX operators, Touch 'n Go, Boost, GrabPay, and cryptocurrency networks — to execute and verify transactions.
• Identity and KYC verification providers — services that check MyKad authenticity, confirm age, verify address, and screen against sanctions or fraud databases.
• Game suppliers and live dealer studios — who may receive a session identifier and technical parameters to deliver casino games. They are not permitted to use this data for any independent purpose.
• IT infrastructure and platform hosting providers — who store and process data on servers under win44's security and contractual requirements.
• Regulatory and law enforcement authorities — where disclosure is required by applicable law, a court order, or a lawful request from a competent authority.
• Professional advisers — such as legal counsel, auditors, or accountants — where access is necessary and subject to professional confidentiality obligations.

Any third party receiving personal data from win44 is required to maintain appropriate technical and organisational measures and is restricted from processing that data for purposes beyond those specified.

Data Retention

win44 retains personal data for as long as necessary to fulfil the purposes described in this policy and to comply with applicable legal and regulatory obligations. In practice, this means:

• Account data is retained for the duration of an active account and for a defined period following closure, which may extend several years to meet anti-money laundering, fraud-prevention, or dispute-resolution requirements.
• KYC documents and verification records are retained in accordance with the applicable regulatory retention period, which is typically a minimum of five years following the end of the customer relationship.
• Transaction records — including MYR deposits, withdrawals, wager history, and bonus records — are retained for at least five years to support audits, complaints, and legal claims.
• Customer support correspondence is retained for two to five years depending on the nature of the exchange and whether it relates to an unresolved matter.
• Analytical and technical logs may be retained for up to two years for platform security and performance review purposes.

When data is no longer required for any purpose, win44 deletes or anonymises it in accordance with our data disposal procedures. Requests for earlier deletion are considered under the User Rights provisions but may not always be fulfilled where legal retention obligations apply.

Security Measures

win44 implements technical and organisational security measures appropriate to the risk presented by the personal data we hold. These include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and win44 servers.
• Encrypted storage of sensitive account credentials and KYC documents at rest.
• Role-based access controls ensuring staff can access only the data necessary for their specific function.
• Two-factor authentication for account access, with further verification for high-value transactions.
• Continuous monitoring of login attempts, payment patterns, and account activity for fraud indicators.
• Regular internal security reviews and penetration testing procedures.

Despite these measures, no internet-connected system is completely immune to security risks. If you suspect that your win44 account has been accessed without authorisation, contact support immediately at [email protected]. Do not include passwords or one-time codes in any support communication.

User Rights

Subject to applicable law and win44's compliance obligations, you hold the following rights in respect of your personal data:

Right of Access

You may request a copy of the personal data win44 holds about you, together with information about how it is used and with whom it is shared. We will respond within a reasonable period following identity verification.

Right of Rectification

You may request correction of personal data that is inaccurate or incomplete. Where the correction affects identity or payment details, supporting documentation may be required.

Right of Erasure

You may request that win44 delete your personal data where it is no longer needed for the purposes for which it was collected, where consent is withdrawn and no other basis applies, or where processing is unlawful. This right does not override legal retention obligations.

Right to Restrict Processing

You may ask win44 to restrict processing of your data while we investigate a rectification request, a complaint, or a competing interest claim.

Right to Object

You may object to processing based on legitimate interests or to marketing communications. Where the objection relates to direct marketing, win44 will cease that processing without delay.

Right to Withdraw Consent

Where processing is based on your consent — for example, optional promotional communications — you may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

To exercise any of the above rights, contact win44 customer support through live chat or email. Requests will be acknowledged and identity verified before action is taken. We aim to resolve all data rights requests within 30 days of receipt.

Minors and the 21+ Requirement

win44 is strictly for adults aged 21 and above. We do not knowingly collect personal data from persons below the age of 21. Age is verified during the registration and KYC process.

If win44 discovers that an account has been opened by a person below the minimum age, that account will be closed, relevant balances held pending investigation, and any supporting data collected will be handled in compliance with applicable obligations concerning minors. Persons under 21 must not attempt to register or use win44.

If you are a parent or guardian and believe your child has accessed win44, contact our support team immediately. win44 cooperates fully with parental requests relating to underage data and takes such matters with the highest priority.

Changes to This Privacy Policy

win44 may revise this Privacy Policy from time to time to reflect changes in platform features, payment methods, applicable law, regulatory guidance, or internal data practices. Where a change is material — that is, where it meaningfully affects how personal data is used or what rights users hold — we will notify registered account holders through a platform notice and update the effective date shown at the top of this document.

Routine administrative revisions, corrections of typographical errors, and structural clarifications that do not alter the substance of the policy will take effect on the stated effective date without individual notification. Archived versions of this policy can be requested from customer support.

Continued use of win44 after a revised effective date constitutes acceptance of the updated Privacy Policy. If you do not accept the revised policy, you should stop using win44 and contact support to request account closure.

Contact Us

If you have questions about this Privacy Policy, wish to exercise a data right, have a concern about how your personal data has been handled, or need to report a potential data security issue relating to your win44 account, please contact our support team. All privacy and data-related enquiries are handled by support staff with appropriate training.

When contacting us about a data matter, please include your registered account username and a clear description of your request or concern. Do not include your password, full bank account number, or one-time security codes in any communication.