Privacy Policy WinClub888 —
Protection Personal Data You

Winclub888 collects various types of information from users to ensure our services run smoothly, securely, and relevantly. The information we collect falls into two main categories: information you provide directly, and information collected automatically while you use our platform.

Information you provide directly:

• Full name as it appears on your official identification document
• Date of birth for age verification (18 years and above)
• An active and reachable email address
• Mobile phone number registered in Malaysia
• Current residential address
• Bank account or digital wallet details for financial transaction purposes
• KYC documents such as a copy of your identity card, passport, or driver's licence
• Information you share when communicating with our support team

Information collected automatically:

• The IP address of your device when accessing the platform
• Web browser type, operating system, and device type used
• Activity log data including pages visited, access times, and session duration
• Geolocation data (country and region only, not precise location)
• Cookie and similar tracking technology information
• Transaction history and wagering activity on the platform

All of this information is collected solely for legitimate purposes as stated in this policy. We do not collect information beyond what is required to operate the winclub888 platform.

The information we collect is used responsibly and limited to purposes that directly benefit you as a winclub888 user. Below is a detailed breakdown of how your data is used:

We also use your data to improve the overall platform experience — including usage pattern analysis, interface enhancements, and the development of new features relevant to the needs of users in Malaysia.

If you have consented to receive marketing communications, WinClub888 may send promotional information, the latest bonus offers, and platform news via email or in-app notifications. You may withdraw this consent at any time through your account settings.

Winclub888 takes a highly cautious approach to data sharing. We do not share users' personal information with external parties except in the following situations and with appropriate safeguards:

• Third-party service providers: We work with carefully selected service providers such as payment processing platforms, cloud service providers, and identity verification companies. These providers are only given access to the data necessary to carry out their tasks, and are bound by strict confidentiality agreements.
• Legal obligation: winclub888 will disclose user information when required by court order, legal obligation, or a valid request from Malaysian government authorities.
• Fraud detection: In cases suspected to involve fraud, money laundering, or criminal activity, we reserve the right to share relevant information with the appropriate authorities.
• Your consent: If you have given explicit consent for specific data sharing, we will follow your instructions accordingly.

All third parties granted access to winclub888 user data are required to comply with data protection standards equal to or exceeding those we apply ourselves. We conduct regular assessments of third-party providers to ensure ongoing compliance.

The security of your personal data is winclub888's highest priority. We continuously invest in advanced cybersecurity infrastructure to ensure your information is protected against unauthorized access, data breaches, and other cyber threats.

Security measures we implement include:

• Data encryption in transit: All communications between your device and winclub888 servers are secured with TLS 1.3 protocol and 256-bit SSL encryption — the highest industry standard for online security.
• Data encryption at rest: Sensitive data stored in our databases, including financial information and identity documents, is encrypted using the AES-256 algorithm.
• Two-factor authentication (2FA): winclub888 supports and encourages the use of 2FA on all accounts for an additional layer of protection during login.
• Continuous threat monitoring: Our systems are monitored 24/7 by an experienced cybersecurity team to detect and respond to any threats in real time.
• Network isolation: Database servers are isolated from public internet access through a layered network architecture with firewalls and intrusion detection systems.

Despite all these security measures, no online system can guarantee 100% absolute security. We encourage users to take an active role in protecting their accounts by using strong passwords, not sharing login credentials, and always logging out after each session.

Winclub888 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored in your web browser when you visit our site.

The types of cookies we use are as follows:

• Essential cookies: Required for core platform functions such as login session verification, security, and account settings preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collects information about how you use the platform — most frequently visited pages, time spent on each section, and any errors encountered. This data is used for ongoing platform improvements.
• Functional cookies: Saves your preferences such as language, display settings, and game preferences so you don't need to reconfigure them each time you log in.
• Analytics cookies: Helps us understand aggregated, anonymized usage patterns for internal analysis and service improvement.

You can manage or delete cookies through your web browser settings. However, disabling certain cookies may affect your experience on the WinClub888 platform, particularly the login function and personal settings storage.

As a winclub888 user and data subject under Malaysia's PDPA, you have specific rights regarding your personal data. We fully respect these rights and will process every request within a reasonable timeframe.

Winclub888 retains your personal data for as long as your account is active or as long as needed to provide services to you. Once you close your account, we will delete or anonymize your personal data within a reasonable timeframe, unless extended retention is required by law.

Specific retention periods for certain data types:

• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's Anti-Money Laundering Act (AMLA) requirements.
• KYC documents: Retained for the duration of the active account plus 5 years after account closure.
• Support communication logs: Retained for 2 years after the last interaction.
• System log data: Retained for 12 months for security and fraud detection purposes.
• Marketing data: Deleted within 30 days of your consent withdrawal.

When data is no longer needed, we ensure secure and thorough deletion using industry-standard methods, including electronic data wiping and physical destruction of storage media where applicable.

The winclub888 platform may contain links to third-party websites or services such as game providers, sports news portals, and payment service partners. Please note that this Privacy Policy applies to the winclub888 platform only.

Winclub888 is not responsible for the privacy practices or content of those third-party websites. We encourage you to read the privacy policy of every website you visit outside our platform. Your security and privacy on other websites are beyond our control.

Third-party game providers operating within the winclub888 platform are bound by strict data-sharing agreements. They receive only the minimum technical data required to deliver gaming services and are not permitted to use that data for any other purpose.

Winclub888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. We will notify you of any significant amendments through:

• In-platform notification on your next login
• Email to your registered email address
• Update the "Last Updated" date shown at the top of this page

Continued use of the winclub888 platform after any amendments are published will be considered acceptance of the updated Privacy Policy. We recommend reviewing this page periodically, at least every six months, to stay informed about how we manage your personal data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the WinClub888 privacy team is ready to assist you. We are committed to responding to every enquiry within 72 business hours.

• Live Chat: Available 24/7 directly within the winclub888 platform — the fastest way to get immediate assistance
• Privacy Email: [email protected] — for written inquiries that require documentation
• FAQ Section: Visit our FAQ page for answers to the most frequently asked questions about privacy and account security

For formal complaints related to data protection, you may also contact the Department of Personal Data Protection Malaysia (JPDP), the official regulatory body under the Ministry of Communications and Digital Malaysia.