Privacy Policy

1Introduction

This Privacy Policy ("Policy") is published by Wintoto88 ("Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at wintoto88.cam ("Platform"). This Policy describes how Wintoto88 collects, processes, stores, uses, and protects personal data relating to registered users, prospective users, and visitors to the Platform ("you", "User", "Data Subject").

Wintoto88 takes its data protection obligations seriously. We recognise that the personal information you share with us is sensitive, and we are committed to handling it with the highest standard of care, transparency, and security. This Policy has been drafted to reflect best practices in data protection applicable to internationally operating online gaming platforms serving Malaysian users.

By registering an Account, using the Platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should immediately discontinue use of the Platform.

2Definitions

For the purpose of this Privacy Policy, the following terms shall carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person — a person who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to that individual.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction, whether by automated means or otherwise.
• "Data Controller" means Wintoto88, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of Wintoto88 in accordance with its instructions and this Policy.
• "KYC" (Know Your Customer) means the identity verification and document authentication process required by Wintoto88 prior to enabling withdrawal functionality on a User's Account.
• "Cookies" means small text files placed on a User's device by the Platform to collect standard internet log information and visitor behavioural data.
• "Account" means a registered user account on the Wintoto88 Platform created following completion of the registration and KYC process.

3Data We Collect

Wintoto88 collects Personal Data only to the extent necessary for the legitimate operation of the Platform and fulfilment of our regulatory obligations. The categories of data we may collect include the following:

• Full legal name as it appears on your government-issued identity document
• Date of birth
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Email address and mobile phone number
• Government-issued identification document details (MyKad number, Passport number, or Driver's Licence number)

• Bank account numbers or e-wallet identifiers associated with registered payment methods (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong)
• Transaction history, including deposit amounts, withdrawal requests, and currency values in MYR
• Cryptocurrency wallet addresses where applicable
• Source of funds documentation where required by compliance obligations

• Gaming session logs, including games played, wagers placed, and outcomes
• Bonus claims, promotional interactions, and loyalty tier progression
• Responsible gambling tool usage, including deposit limits and self-exclusion records
• Sports betting selections, live betting activity, and odds accepted

• IP address, browser type, operating system, and device identifiers
• Session timestamps, login and logout records, and geographic access data
• Cookie data and similar tracking technologies as described in Section 8

• Records of live chat interactions with Customer Support
• Email correspondence submitted to [email protected]
• Feedback, complaints, and dispute records

4How We Collect Data

Wintoto88 collects Personal Data through the following primary channels:

5Data Processing & Legal Basis

Wintoto88 processes Personal Data only where a valid legal basis exists for doing so. The primary legal bases upon which we rely are as follows:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and Wintoto88, including Account operation, transaction processing, customer support, and fulfilment of our obligations under our Terms & Conditions.
• Legal Obligation: Processing is required to comply with applicable anti-money-laundering (AML) obligations, KYC regulatory requirements, fraud prevention mandates, and any other legal duties imposed on Wintoto88 as a licensed gaming operator.
• Legitimate Interests: Processing is necessary for the legitimate business interests of Wintoto88, including platform security, fraud detection, service improvement, and responsible gambling monitoring — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where required by applicable law, Wintoto88 will seek your explicit consent prior to processing certain categories of data, such as marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6How We Use Your Data

Personal Data collected by Wintoto88 is used exclusively for the following purposes:

• Creating, verifying, and maintaining your registered Account on the Platform
• Processing deposit and withdrawal transactions via your chosen Malaysian payment method (DuitNow, FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, Hong Leong, or cryptocurrency)
• Conducting mandatory KYC age and identity verification to comply with applicable regulations and enforce our strict 21+ age restriction
• Preventing, detecting, and investigating fraudulent activity, money laundering, and abuse of the Platform or its promotional offers
• Providing 24/7 Customer Support and resolving disputes or complaints submitted by registered players
• Administering responsible gambling tools including deposit limits, loss limits, session timers, and self-exclusion requests
• Personalising the Platform experience, including game recommendations and relevant promotional offers
• Sending transactional communications relating to your Account, such as deposit confirmations, withdrawal status updates, and security alerts
• Sending marketing communications regarding promotions, new games, or Platform updates — subject to your marketing preferences and applicable consent requirements
• Conducting internal analytics and performance reporting to improve Platform functionality and user experience

7Data Sharing & Disclosure

Wintoto88 does not share your Personal Data with third parties except in the following limited and controlled circumstances:

• Payment Processors: We share transactional data with Malaysian payment providers (including FPX, DuitNow, Touch 'n Go, Boost, GrabPay, and local banking partners) strictly as necessary to process your deposits and withdrawals. Each payment processor is bound by its own privacy and data security obligations.
• KYC & Identity Verification Partners: Identity documents submitted for KYC verification may be shared with our accredited identity verification service providers solely for the purpose of authenticating your identity and age.
• Game Studio Partners: Gaming activity data (excluding personal identity details) is shared with our licensed international game studio partners for the purpose of game delivery, RNG certification, and regulatory reporting.
• Regulatory & Law Enforcement Authorities: Wintoto88 may be required to disclose Personal Data to relevant regulatory bodies, law enforcement agencies, or courts of law where required by applicable legal obligation, court order, or in the context of a legitimate investigation into financial crime or fraud.
• Anti-Fraud & AML Service Providers: We may share relevant transaction and identity data with specialist anti-money-laundering monitoring services strictly as required by our compliance obligations.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of the Company, Personal Data may be transferred to the succeeding entity, subject to the same level of data protection as described in this Policy.

All third parties with whom Wintoto88 shares Personal Data are required to maintain appropriate technical and organisational measures to protect that data and to process it only for the specified purposes.

8Cookies & Tracking Technologies

Wintoto88 uses cookies and similar tracking technologies to operate the Platform effectively, enhance user experience, and collect analytical data that helps us understand how our Malaysian players interact with the Platform.

You may configure your browser to refuse all or some cookies, or to alert you when cookies are being sent. Please note that disabling strictly necessary cookies will impair or prevent access to certain Platform functions. Analytical and functional cookies can be disabled without affecting your ability to use the Platform, though your experience may be less personalised.

9Data Retention

Wintoto88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following indicative retention periods apply:

• Account Data (identity, contact): Retained for the duration of the Account and for a minimum of five (5) years following Account closure, in accordance with applicable AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following submission, in accordance with applicable identity verification and anti-money-laundering obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming Activity Logs: Retained for a minimum of three (3) years from the date of each session.
• Customer Support Communications: Retained for two (2) years from the date of the last interaction.
• Marketing Consent Records: Retained until consent is withdrawn and for an additional two (2) years to evidence compliance.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents re-identification.

10Data Security

Wintoto88 implements comprehensive technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit TLS Encryption: All data transmitted between your device and the Platform is protected by industry-standard Transport Layer Security (TLS) encryption.
• Data Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to Personal Data within Wintoto88 is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication (2FA): Available and encouraged for all registered Accounts to prevent unauthorised access.
• Intrusion Detection & Monitoring: Continuous automated monitoring systems detect and respond to security threats in real time.
• Third-Party Security Audits: We conduct periodic independent security assessments to identify and remediate vulnerabilities in our infrastructure.

11Your Rights

As a Data Subject whose Personal Data is processed by Wintoto88, you hold the following rights in relation to your data. To exercise any of these rights, please contact us using the details in Section 16:

Wintoto88 will respond to verifiable data subject requests within thirty (30) calendar days of receipt. Where a request is particularly complex or numerous, we may extend this period by a further sixty (60) days, providing written notice of the extension within the initial thirty-day period.

12Protection of Minors

The Wintoto88 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Our mandatory KYC age verification process is specifically designed to prevent minors from accessing or registering on the Platform.

If Wintoto88 discovers or reasonably suspects that Personal Data has been collected from a person under the age of 21, we will immediately suspend the associated Account, initiate a verification review, and delete the relevant data in accordance with applicable law. Any funds deposited by or on behalf of a minor will be handled in accordance with our Terms & Conditions and applicable regulatory guidance.

We urge parents and guardians to make use of available internet filtering and parental control tools to prevent minors from accessing online gambling platforms. If you suspect a minor has registered on Wintoto88, please contact our Customer Support team immediately.

13Third-Party Services

The Wintoto88 Platform integrates with a number of third-party service providers necessary for its operation, including payment processors, identity verification services, and game delivery infrastructure. While we take reasonable steps to ensure that our third-party partners maintain appropriate data protection standards, Wintoto88 is not responsible for the privacy practices of those third parties.

This Policy does not apply to any third-party website, service, or application that may be linked from, or integrated with, the Platform. Users are encouraged to review the privacy policies of any third-party services they interact with independently of the Wintoto88 Platform.

14International Data Transfers

In the course of operating the Platform and fulfilling our service obligations, Personal Data may be transferred to, processed by, or stored in jurisdictions outside Malaysia. This may include transfers to countries where our game studio partners, payment processors, or cloud infrastructure providers are located.

Where Personal Data is transferred internationally, Wintoto88 ensures that appropriate safeguards are in place to protect the data in accordance with the standards described in this Policy. Such safeguards may include contractual data processing agreements, standard contractual clauses, or reliance on the data protection frameworks of the recipient jurisdiction.

15Policy Amendments

Wintoto88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our operational practices. Where amendments are material, we will provide reasonable notice to registered Users via email notification or by posting a prominent notice on the Platform.

The effective date displayed at the top of this document will always reflect the most recently published version of the Policy. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. We recommend bookmarking this page and reviewing it periodically.

16Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by Wintoto88, please contact our Data Protection team. We are committed to responding to all privacy-related enquiries within thirty (30) calendar days.