1. Introduction
winrm88 ("winrm88", "we", "us", "our") operates the online casino and sports betting platform accessible at winrm88.club (the "Platform"). We are committed to protecting the privacy and personal data of our users ("you", "User", "Player") in accordance with applicable data protection laws and internationally recognised privacy principles.
This Privacy Policy describes the types of personal data we collect when you access or use the winrm88 Platform, the purposes for which we process such data, the conditions under which we may share it, and your rights in relation to your personal data. This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy.
By registering for an account, accessing the Platform, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not use the Platform.
2. Personal Data We Collect
2.1 Information You Provide Directly
When you register for a winrm88 account or otherwise interact with the Platform, we collect the following categories of personal data that you provide to us:
- Identity Data: Full legal name, date of birth, gender, and nationality.
- Contact Data: Email address, mobile phone number, and country of residence.
- Verification Data: Government-issued identification documents (e.g., MyKad, passport), proof of address, and where required by our KYC procedures, selfie or biometric confirmation.
- Financial Data: Payment method details including bank account numbers, e-wallet identifiers (Touch n Go eWallet, Boost, GrabPay), and transaction history. We do not store full card numbers; payment instrument data is tokenised by our payment processors.
- Account Credentials: Username and hashed password. Passwords are never stored in plain text.
- Communications: Content of messages you send to our customer support team via live chat or email.
2.2 Information Collected Automatically
When you access the Platform, we automatically collect certain technical and behavioural data, including:
- IP address and approximate geolocation derived from IP.
- Device information: type, operating system, browser type and version, device identifiers.
- Usage data: pages visited, games played, bet history, session duration, click-stream data.
- Cookie and tracking data as described in Section 6 below.
2.3 Information from Third Parties
We may receive personal data about you from third parties including identity verification service providers, fraud prevention agencies, and payment processors, where necessary to comply with our legal and regulatory obligations.
3. How We Use Your Personal Data
winrm88 uses the personal data we collect for the following purposes:
- Account Management: Creating and administering your winrm88 account, verifying your identity, and enabling you to access the Platform.
- Service Delivery: Processing your deposits, withdrawals, and wagers; calculating and awarding bonuses; providing live chat and email support.
- Legal & Regulatory Compliance: Fulfilling our obligations under applicable anti-money laundering (AML) laws, know-your-customer (KYC) requirements, and international gaming licensing conditions, including filing statutory reports where required.
- Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, identity theft, and other prohibited activities on the Platform.
- Responsible Gaming: Monitoring gambling behaviour to identify signs of problem gambling; enforcing self-exclusion requests; complying with responsible gaming obligations under our operating licence.
- Platform Improvement: Analysing aggregated usage data to improve the design, functionality, and game offering of the Platform.
- Communications: Sending you transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts) and, where you have opted in, promotional communications about winrm88 offers.
4. Legal Basis for Processing
We process your personal data on the following legal grounds:
- Contractual Necessity: Processing is necessary to perform the contract with you (i.e., the winrm88 Terms & Conditions), including operating your account and processing transactions.
- Legal Obligation: Processing is required to comply with applicable laws and regulatory requirements, including AML and KYC obligations.
- Legitimate Interests: Processing is in our legitimate interests (e.g., fraud prevention, platform security, responsible gaming monitoring) where these interests are not overridden by your data protection rights.
- Consent: Where we rely on consent (e.g., marketing communications, optional cookies), you may withdraw that consent at any time by contacting us or adjusting your account or browser settings.
5. Sharing Your Personal Data
winrm88 does not sell your personal data to third parties. We may disclose your personal data to the following categories of recipients only where necessary and under appropriate data protection safeguards:
- Payment Processors: Providers of Touch n Go eWallet, Boost, GrabPay, FPX banking services, and USDT processing, to facilitate deposits and withdrawals.
- Identity Verification Providers: Third-party KYC and AML service providers who assist us in verifying player identities and screening for sanctions or fraud risk.
- Game Software Providers: Licensed game developers and platform providers whose software powers the casino and sportsbook products on the Platform. These providers may process certain technical and gameplay data as necessary to operate their games.
- Regulatory & Law Enforcement Authorities: Where we are legally required to do so, or where disclosure is necessary to prevent or investigate fraud or other criminal activity.
- IT & Security Service Providers: Cloud hosting, cybersecurity, and technical infrastructure providers who process data on our behalf under binding data processing agreements.
All third-party processors are contractually bound to handle personal data only in accordance with our instructions and applicable data protection law.
6. Cookies & Tracking Technologies
The winrm88 Platform uses cookies and similar tracking technologies (such as pixel tags and local storage) to operate the Platform, maintain your session, and gather usage analytics. We use the following categories of cookies:
- Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled and do not require consent.
- Performance & Analytics Cookies: Allow us to understand how users interact with the Platform (e.g., pages visited, errors encountered) in aggregated, anonymised form.
- Functional Cookies: Remember your preferences (e.g., language settings, game lobby layout) to improve your experience.
- Marketing Cookies: Used only where you have provided explicit consent. These track your activity to enable more relevant promotional communications.
You can control and manage cookies through your browser settings. Disabling certain cookies may affect Platform functionality. Your consent choices for non-essential cookies can be updated at any time.
7. Data Security
winrm88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
- Encryption at rest for sensitive data fields including payment details and identity documents.
- Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their role.
- Regular security assessments, penetration testing, and vulnerability scanning.
- Multi-factor authentication for internal systems that process personal data.
Notwithstanding these measures, no method of transmission over the internet or electronic storage is completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, winrm88 will notify affected users and relevant authorities in accordance with applicable legal requirements.
8. Data Retention
winrm88 retains personal data only for as long as is necessary for the purposes set out in this Privacy Policy, and in accordance with our legal and regulatory obligations. The following general retention periods apply:
- Account Data: Retained for the duration of your account and for a period of five (5) years following account closure, in accordance with AML and gaming regulatory requirements.
- Transaction Data: Retained for a minimum of five (5) years to comply with financial record-keeping obligations.
- KYC Documentation: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
- Communications Data: Support chat and email records retained for two (2) years for quality assurance and dispute resolution purposes.
- Technical Logs: Server and security logs retained for up to twelve (12) months.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.
9. Your Data Protection Rights
Subject to applicable law, you have the following rights in relation to your personal data held by winrm88:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right of Rectification: You may request correction of inaccurate or incomplete personal data.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
- Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances.
- Right to Data Portability: Where processing is based on consent or contract, you may request a copy of your data in a structured, machine-readable format.
- Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of these rights, please contact our support team via live chat on the Platform or at the email address in the footer. We will respond to verified requests within thirty (30) days. We may request proof of identity before processing a data rights request.
10. Children's Privacy
The winrm88 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete such data and close the associated account. If you believe that a minor has registered on the Platform, please notify us immediately via live chat support.
11. International Data Transfers
As an internationally operating platform, winrm88 may transfer your personal data to service providers and partners located outside of Malaysia. Where such transfers occur, winrm88 ensures that appropriate safeguards are in place to protect your personal data, including contractual arrangements consistent with applicable data protection requirements. By using the Platform, you acknowledge that your data may be transferred to and processed in countries with data protection laws that differ from those in Malaysia.
12. Changes to This Privacy Policy
winrm88 reserves the right to update or amend this Privacy Policy at any time. Any changes will be published on this page with a revised "last updated" date. Where changes are material, we will provide reasonable notice to registered users via the Platform or by email. Your continued use of the Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by winrm88, please contact our Data Protection team via live chat on the Platform (available 24/7) or by writing to the email address provided in the footer of this website. We are committed to resolving all privacy-related enquiries promptly and transparently.