Privacy Policy win28 — Your Personal Data Protection

1Introduction & Scope of This Policy

Win28 is an online gaming platform providing casino, sports betting, and live gaming services to players in Malaysia and permitted regions. In delivering these services, we need to collect and process certain personal information from you.

This Privacy Policy applies to all information we collect through the win28 website, the win28 mobile app, and all related services we offer. It also applies to any communications you have with our support team.

We operate on clear privacy principles: we only collect data that is strictly necessary, we use it solely for the stated purposes, and we never sell it to anyone. Your trust is the foundation of everything we do.

2Types of Personal Data We Collect

Win28 collects various types of personal information depending on how you interact with our platform. Below is a summary of the data we collect:

2.1 Data You Provide Directly

This includes all information you provide when registering an account, completing your profile, carrying out financial transactions, or communicating with our support team via Live Chat, email, or other channels.

2.2 Automatically Collected Data

When you use the win28 platform, our systems automatically record certain technical information such as your device's IP address, browser type and version, operating system, pages visited, session duration, and actions performed within the platform. This data is used primarily for security and user experience improvement purposes.

3How win28 Uses Your Data

Win28 only uses your personal data for stated and lawful purposes. We do not process your data for unrelated purposes without first obtaining your consent.

• Account management: Creating and managing your player account, including the login process, identity verification, and profile updates.
• Transaction processing: Processing all deposits, withdrawals, and other financial transactions securely and accurately.
• Legal compliance: Meeting KYC (Know Your Customer), AML (Anti-Money Laundering), and other applicable legal reporting obligations.
• Platform security: Identifying and preventing fraud, account abuse, and other illegal activities that threaten the safety of the platform and other players.
• Service improvement: Analysing usage patterns to improve the interface, gaming experience, and customer support services.
• Marketing communications: Sending promotional information, bonus offers, and the latest news — only if you have given consent to receive such communications.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support.

4Data Sharing with Third Parties

Win28 does not sell or rent your personal data to any third party. However, in the course of operating the platform, we may need to share certain information with the following parties under limited circumstances:

4.1 Payment Service Providers

To process your deposits and withdrawals, we need to share the necessary transaction information with the banks, e-wallet companies, and payment processors we use. All payment providers we work with maintain strict data security policies and comply with payment industry standards.

4.2 Technology Service Providers

We use trusted software providers and cloud services to operate the platform. Their access to your data is limited to technical requirements only and is governed by strict data processing agreements.

4.3 Legal Authorities

Win28 will disclose your personal data to legal authorities, regulatory bodies, or law enforcement agencies when required by law, court order, or valid regulatory requirement. In all cases, we will only disclose the minimum information necessary.

5Cookies & Tracking Technologies

The win28 platform uses cookies and similar tracking technologies to enhance your experience and ensure platform security. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how you use the platform (pages visited, time on page) to help us improve the user experience.
• Functional Cookies: Remembering your preferences such as language, display settings, and personal preferences so you do not have to reconfigure them every time.
• Security Cookies: Used to identify suspicious login attempts, help prevent fraud, and protect your account from unauthorised access.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect your ability to use certain features of the win28 platform.

6Data Security Measures

Win28 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

• Transit encryption: All data transmitted between your device and win28 servers is protected using TLS 1.3 protocol with 256-bit encryption.
• Storage encryption: Sensitive data such as financial information and identity documents is stored in encrypted form within protected databases.
• Access controls: Access to players' personal data in internal systems is restricted based on the principle of least privilege — staff may only access data necessary for their role.
• Two-factor authentication: All staff accounts with access to player data require two-factor authentication to log in.
• Continuous monitoring: The win28 security monitoring system operates 24/7 to detect and respond to any threats or suspicious activity in real time.
• Secure backups: Data is regularly backed up to secure, encrypted locations to ensure full recovery in the event of any incident.

7Your Rights Over Personal Data

As a win28 player, you have clear rights regarding your personal data. win28 respects and facilitates the exercise of the following rights:

To exercise any of the above rights, contact the win28 support team via 24/7 Live Chat. We will process your request within 30 business days and may require identity verification before processing any data-related requests.

8Data Retention Period

Win28 does not retain your personal data longer than necessary for the stated purposes, or as required by applicable law. Below are our general data retention period guidelines:

• Active account data: Retained for the duration your account is active and for an additional period specified after account closure.
• Financial transaction records: Retained for a minimum of 7 years to meet legal requirements related to financial reporting and AML.
• KYC documents: Retained for a minimum of 5 years after the business relationship ends, in line with regulatory requirements.
• Security logs: Retained for 12 months for digital forensics and security incident investigation purposes.
• Marketing data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period expires, your data will be permanently deleted or anonymized in accordance with our secure data disposal procedures.

9Cross-Border Data Transfers

As part of its global operations, win28 may transfer your personal data to servers or service providers located outside Malaysia. All cross-border data transfers are conducted with adequate safeguards in place to protect your data.

The safeguards we apply to international transfers include:

• Use of recognised standard contractual clauses to protect data in transit.
• Verification that the recipient country provides an equivalent or higher level of data protection.
• Binding data processing agreements with all third parties involved in data transfers.
• Data encryption prior to transfer to ensure confidentiality throughout the data journey.

10Children's Privacy

The win28 platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

If we discover that we have inadvertently collected personal data from children under 18, we will take immediate action to delete that data and close the relevant account. Parents or guardians who become aware that their child has registered an account at win28 are requested to contact us immediately.

11Links to Third-Party Sites

The win28 platform may contain links to third-party websites or services such as game providers or payment partners. This Privacy Policy does not apply to those third-party sites. win28 is not responsible for the privacy practices or content of third-party websites.

We encourage you to read the Privacy Policy of every website you visit, especially before providing any personal information to them.

12Changes to This Privacy Policy

Win28 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any material changes will be communicated to you via in-platform notifications or email at least 14 days before the changes take effect.

The "Last Updated" date at the top of this document will always reflect the latest version of the Privacy Policy. We encourage you to review this page periodically. Your continued use of the win28 platform after changes take effect constitutes your acceptance of the latest version of this Privacy Policy.