This Privacy Policy describes how winmyr collects, uses, stores, shares, and protects personal data belonging to players and visitors of the winmyr platform. winmyr is committed to handling your personal data with transparency, security, and respect for your privacy rights.
winmyr collects only the personal data strictly necessary for account operation, KYC compliance, and platform service delivery — nothing beyond what is required.
All personal data and KYC documents stored by winmyr are encrypted at rest using AES-256 encryption. Access is restricted to authorised compliance personnel only.
You have the right to access, correct, export, and request deletion of your personal data held by winmyr, subject to legal retention obligations applicable to gaming operators.
winmyr does not sell, rent, or trade your personal data to third parties for commercial purposes. Data sharing is limited to operational necessity and legal obligation.
winmyr ("we," "us," or "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with the winmyr platform, including registered players, prospective players, and visitors to the winmyr website. This Privacy Policy sets out in clear, comprehensive terms how winmyr collects, uses, processes, stores, and discloses personal data in the course of providing its online casino, sportsbook, and related gaming services to Malaysian players.
This policy applies to all data processing activities conducted by winmyr in connection with the operation of the winmyr platform, including account registration, KYC verification, deposits, withdrawals, gameplay, customer support interactions, and marketing communications where applicable. This policy should be read in conjunction with the winmyr Terms & Conditions and Responsible Gaming Policy.
winmyr processes personal data in compliance with applicable data protection laws, international gaming authority requirements, and anti-money laundering obligations. Our data practices reflect a genuine commitment to transparency — not simply legal compliance — because Malaysian players deserve to understand clearly what happens with their personal information on any platform they trust with their data and their money.
winmyr is the data controller responsible for the personal data processed in connection with the winmyr platform. As data controller, winmyr determines the purposes and means of processing your personal data and is accountable for ensuring that processing is conducted lawfully, fairly, and transparently in accordance with applicable data protection obligations.
All data protection enquiries, requests to exercise your privacy rights, and formal complaints regarding winmyr's data processing practices should be directed to the winmyr Data Protection contact identified in Section 14 of this policy. winmyr will respond to all data subject requests within a reasonable timeframe and in accordance with its legal obligations.
winmyr collects personal data in several categories depending on the nature of your interaction with the platform. The following table summarises the categories of data collected and the context in which each category arises:
| Data Category | Specific Data Points | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Account registration, KYC verification |
| Contact Data | Email address, Malaysian mobile number | Account registration, support interactions |
| Identity Document Data | MyKad number or passport number, document images (front/back) | KYC identity verification |
| Financial Data | Payment method details (eWallet identifiers, bank account details), transaction history, deposit and withdrawal records | Payment processing, AML compliance |
| Gaming Activity Data | Bet history, game sessions, wager amounts, wins and losses, bonus usage | Platform use, responsible gaming monitoring |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, login history | Platform access, security monitoring |
| Communication Data | Support chat transcripts, email correspondence, feedback submissions | Customer support, dispute resolution |
| Preference Data | Responsible gaming settings, communication preferences, language settings | Account customisation, responsible gaming compliance |
winmyr does not collect special category personal data (as defined under applicable data protection law) beyond identity document images required for KYC compliance. winmyr does not collect biometric data, health data, political opinions, or religious beliefs.
winmyr processes your personal data for the following purposes:
Identity Data and Contact Data are used to create, maintain, and authenticate your winmyr account. This includes processing login events, managing session security, and enabling account recovery functions. winmyr uses Technical Data — specifically login history and device information — to detect and prevent unauthorised account access.
Identity Document Data is processed exclusively for the purpose of satisfying Know Your Customer obligations under international gaming authority licensing requirements and applicable anti-money laundering regulations. KYC data enables winmyr to confirm your identity, verify your age eligibility (21+), and bind withdrawal functions to your verified identity to prevent fraud and financial crime.
Financial Data is used to process MYR deposits and withdrawals via your nominated payment method — Touch n Go eWallet, Boost, FPX, or Malaysian bank transfer. winmyr retains transaction records as required by financial compliance obligations applicable to gaming operators.
Gaming Activity Data and Preference Data are used to monitor compliance with your responsible gaming settings — including deposit limits, session timers, and self-exclusion status — and to identify patterns of play that may indicate problematic gambling behaviour. winmyr may use this data to proactively intervene where appropriate under its responsible gaming obligations.
Technical Data and Financial Data are processed for the ongoing prevention of fraud, money laundering, and other financial crime. This includes automated monitoring of transaction patterns, login anomaly detection, and investigation of suspected prohibited conduct as defined in the winmyr Terms & Conditions.
Communication Data is used to manage and resolve customer support enquiries, disputes, and complaints. winmyr retains support interaction records for a defined period to ensure continuity of service and to enable dispute resolution where needed.
winmyr processes personal data to the extent necessary to comply with its legal obligations, including reporting requirements under gaming authority regulations, anti-money laundering laws, and any lawful requests from competent regulatory or law enforcement authorities.
winmyr processes personal data under the following legal bases as applicable to each processing activity:
winmyr may share your personal data with third parties only in the following limited circumstances:
Financial Data and Identity Data may be shared with licensed Malaysian payment service providers — including Touch n Go eWallet, Boost, and FPX-connected banking institutions — to the extent strictly necessary to process your deposit and withdrawal transactions. All payment providers engaged by winmyr are contractually bound to process your data solely for the transaction processing purpose and in compliance with applicable data protection standards.
Identity Document Data may be processed by contracted third-party KYC verification technology providers who assist winmyr in automating and validating identity document checks. These providers operate as data processors acting on winmyr's instructions and are subject to data processing agreements requiring compliance with applicable data protection law.
winmyr will disclose personal data to competent gaming regulatory authorities, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or legitimate regulatory instruction. winmyr will disclose the minimum data necessary to satisfy any such obligation and will notify you of such disclosure where legally permissible.
In the event of a merger, acquisition, restructuring, or sale of all or part of winmyr's business, personal data held by winmyr may be transferred to the acquiring entity as part of the transaction, subject to the acquiring entity assuming equivalent data protection obligations to those set out in this policy.
winmyr retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by applicable legal and regulatory obligations:
Upon expiry of the applicable retention period, winmyr will securely delete or permanently anonymise your personal data in accordance with its data destruction procedures, unless retention is required by an ongoing legal obligation or regulatory proceeding.
winmyr implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
winmyr uses cookies and similar tracking technologies on the winmyr platform for the following purposes:
These cookies are essential for the operation of the winmyr platform and cannot be disabled without affecting core platform functionality. They include session management cookies that maintain your authenticated state between page loads, security cookies that enable CSRF protection, and cookies that store your language and regional preferences.
Functional cookies enable winmyr to remember your preferences and settings — such as responsible gaming limits you have configured and display preferences — so that you do not need to re-enter them on each visit. These cookies do not track you across third-party websites.
winmyr may use analytics technologies to collect aggregated, anonymised data about platform usage patterns — such as which game categories are most frequently accessed and where players encounter navigation issues. This data is used solely to improve the winmyr platform and is not linked to individual player identities.
You may configure your browser to block or delete cookies. However, disabling strictly necessary cookies will impair your ability to use the winmyr platform and may prevent login and payment functionality from operating correctly.
Subject to applicable data protection law and winmyr's legal retention obligations, you have the following rights in respect of your personal data held by winmyr:
Request a copy of the personal data winmyr holds about you, including information on how it is used and with whom it has been shared.
Request correction of inaccurate or incomplete personal data held by winmyr. KYC data corrections require submission of updated identity documentation.
Request deletion of your personal data where winmyr no longer has a legitimate or legal basis for retaining it. Statutory retention periods may limit the scope of erasure.
Request a structured, machine-readable export of the personal data you have provided to winmyr, where technically feasible and legally applicable.
Request that winmyr limit the processing of your personal data in specific circumstances, such as while a data accuracy dispute is under investigation.
Object to winmyr's processing of your personal data where processing is based on legitimate interests, to the extent that your fundamental rights override those interests.
To exercise any of the rights described above, please contact winmyr's Data Protection contact as described in Section 14. winmyr will respond to all rights requests within 30 days, or within such shorter period as may be required by applicable law. Identity verification will be required before winmyr processes any rights request to ensure the security of your personal data.
winmyr will immediately suspend any account where there is reasonable evidence to suggest the account holder may be under 21 years of age, pending full identity verification. Any personal data collected from a person subsequently confirmed to be under 21 will be permanently deleted without retention, except to the extent required to document the compliance breach for regulatory purposes.
Parents and guardians who suspect that a minor may have registered on the winmyr platform are encouraged to contact winmyr's support team immediately. winmyr will investigate all such reports promptly and take appropriate action.
winmyr's primary data processing infrastructure is designed to serve Malaysian players. Where winmyr engages third-party service providers whose systems are located outside Malaysia — such as KYC technology providers or payment processing partners — personal data may be transferred internationally in the course of service delivery.
Any cross-border transfer of personal data by winmyr or its contracted processors is conducted under appropriate safeguards designed to ensure that your personal data receives a level of protection equivalent to that afforded under applicable data protection standards. These safeguards may include contractual data protection clauses, processor certification under recognised data protection frameworks, or other legally recognised transfer mechanisms. winmyr does not transfer personal data to jurisdictions that do not offer adequate data protection standards without implementing appropriate additional safeguards.
winmyr reserves the right to update, modify, or revise this Privacy Policy at any time to reflect changes in its data processing practices, applicable legal requirements, or platform services. Where changes are material — meaning they substantively affect your privacy rights or how your data is used — winmyr will provide advance notice via email to your registered address and/or a prominent notice on the winmyr platform prior to the changes taking effect.
The "Effective Date" at the top of this policy will be updated to reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Continued use of the winmyr platform following the effective date of any revision constitutes your acknowledgement of the updated policy.
For all privacy-related enquiries, requests to exercise your data subject rights, or formal complaints regarding winmyr's data processing practices, please contact the winmyr Data Protection team through the following channel:
winmyr Data Protection
Email: [email protected]
Subject line: Privacy Request – [Your Account Email]
Please include your full name, registered account email address, and a clear description of your enquiry, right request, or complaint. winmyr will acknowledge receipt of your communication within 3 business days and provide a substantive response within 30 days, or within any shorter timeframe required by applicable law.
If you are dissatisfied with winmyr's handling of your privacy complaint after having raised the matter directly with winmyr, you may refer your complaint to the relevant data protection supervisory authority or gaming regulatory authority with jurisdiction over winmyr's operations.
AES-256 encrypted storage, 256-bit SSL sessions, mandatory KYC protection — your personal data and MYR balance are secured at every level of the winmyr platform.