winlaju88 | Privacy Policy – How We Protect Your Personal Data

1

Introduction

This Privacy Policy ("Policy") describes the privacy practices of Winlaju88 Ltd ("Winlaju88", "we", "us") regarding the collection, use, disclosure, and protection of your personal data when you use our online gaming platform at winlaju88.bet.

Winlaju88 is committed to protecting your privacy at all times. We believe that trust is the foundation of a strong relationship between a platform and its users. That is why we take a transparent and responsible approach to every aspect of how we manage our members' personal data.

This Privacy Policy applies to all registered members, website visitors, and any individuals who interact with the platform or its services Winlaju88 — whether through our website, mobile app, or any of our official communication channels.

⚠️

By registering or continuing to use the platform Winlaju88, you confirm that you have read and understood this Privacy Policy and agree to the practices described herein. If you do not agree, please discontinue use of this platform.

2

Personal Data We Collect

Winlaju88 collects your personal data through various means — directly from you, automatically as you use the platform, and in some cases, from legitimate third parties. The following are the categories of data we collect:

Data Category	Sample Information	How Collected	Mandatory?
Identity	Full name, MyKad number, date of birth	Registration & verification	Yes
Contact	Malaysian phone number, email address	Account registration	Yes
Financial	Payment methods (TnG, GrabPay, DuitNow, FPX), transaction history	Deposits & withdrawals	Yes
Games	Betting history, games played, wins & losses	Automatically during gameplay	Yes
Technical	IP address, device type, web browser, OS	Automated system logs	Automatic
Behavioural	Usage patterns, pages visited, session duration	Cookies & Analytics	Preferences
Communications	Support chat records, emails sent/received	Support interactions	Where relevant

Note: Winlaju88 does not directly collect credit or debit card information. All payments are processed through authorised Malaysian e-wallet and banking providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX.

3

How We Use Your Personal Data

The personal data we collect is used solely for the following purposes, which are directly related to the provision of our services Winlaju88 to you:

Primary Purposes of Data Use:

Identity and age verification — to ensure all members meet the minimum age requirement of 18 years and above
Account management — account registration, login, password reset, and profile updates
Processing of financial transactions — deposits and withdrawals via Malaysian local payment methods
Gaming services provision — giving you access to slots, table games, poker, Sports Betting, and live matches
Bonus and promotions management — bonus crediting, wagering requirement monitoring, and reward fulfilment
Customer support — resolving your enquiries, complaints, and technical issues
Security and fraud prevention — identifying and blocking suspicious or unlawful activity
Legal compliance — fulfilling obligations under PDPA 2010, anti-money laundering laws, and other applicable regulations
Platform improvements — analysing usage patterns to improve the user experience
Responsible gaming — monitoring betting patterns to identify members who may need assistance

Marketing Communications: Winlaju88 will only send you promotional information and bonus offers if you have given your consent to do so during registration. You may withdraw this consent at any time via your account settings or by contacting our support team.

4

Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act (PDPA) 2010, Winlaju88 processes your personal data on the following legal bases:

Consent — for marketing communications, optional analytics, and non-essential cookie usage
Performance of Contract — to process deposits, withdrawals, bonuses, and the gaming services you have registered for
Legal Obligation — to comply with Malaysian laws including PDPA 2010, the Anti-Money Laundering Act 2001, and other applicable regulatory requirements
Legitimate Interest — for platform security, fraud prevention, and service improvements that do not require your specific consent

5

Data Sharing with Third Parties

Winlaju88 does not sell, rent, or trade your personal data. However, under certain circumstances, we may share necessary data with selected third parties:

Malaysian payment providers — Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banking institutions (Maybank2u, CIMB Clicks) for processing your financial transactions
Game software providers — companies such as Pragmatic Play, Evolution Gaming, and NetEnt to deliver a seamless gaming experience
Technical support service providers — companies that assist us in maintaining and improving the platform, under strict confidentiality agreements
Government authorities and law enforcement agencies — when required by law or a valid court order in Malaysia
Fraud prevention bodies — to verify identity and prevent financial fraud

⚠️

All third parties that receive data from Winlaju88 are bound by strict data protection agreements. They are permitted to use your data only for specific, agreed purposes and may not process it for any other purpose without our authorisation.

6

Data Security Measures

Winlaju88 continually invests in security infrastructure to keep your personal data protected at all times. The security measures we have implemented include:

256-bit SSL Encryption for all communications between your device and Winlaju88 servers
Data-at-rest encryption — personal data stored in our databases is encrypted using AES-256 standards
Tiered access control — only authorised personnel may access members' personal data, and only to the extent required for their role
Two-factor authentication (2FA) for staff accounts that access internal systems
Regular security audits by certified independent auditors on a quarterly basis
24/7 threat monitoring using advanced intrusion detection systems (IDS)
Incident response plan that is comprehensive in addressing any data breach promptly

Data Breach Notification: In the event of a data breach affecting your personal data, winlaju88 will notify you and the Malaysian Personal Data Protection Commissioner within 72 hours of detecting the breach, in line with enhanced PDPA requirements.

7

Data Retention Period

Winlaju88 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by Malaysian law.

Data Type	Retention Period	Reason
Identity verification data	5 years after account closure	AML legal requirements
Financial transaction records	7 years	Malaysia financial reporting requirements
Game history	3 years	Dispute resolution & audits
Support communication logs	2 years	Customer service reference
Technical log data	90 days	Security & debugging
Analytics cookie data	13 months	Usage trend analysis

Upon expiry of the retention period, data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

8

Your Rights as a Data Subject

Under Malaysia's PDPA 2010, you have the following rights in relation to the personal data held by Winlaju88:

Right of Access

Request a copy of all personal data we hold about you. We will respond within 14 business days.

Right to Rectification

Request the correction of inaccurate or incomplete data. Update via your account settings or contact our support team.

Right to Erasure

Request the deletion of your data under certain circumstances, subject to legal obligations that require data to be retained.

Right to Object

Object to the processing of your data for direct marketing purposes or based on our legitimate interests.

Right to Data Portability

Receive your data in a machine-readable format and request its transfer to another service provider where applicable.

Right to Restriction

Request a restriction on data processing while a dispute is being resolved or while you are objecting to processing.

To exercise any of the above rights, please submit a written request to support@winlaju88.bet stating the right you wish to exercise and your identifying information. We will respond within 14 business days.

9

Cookies and Tracking Technologies

Winlaju88 uses cookies and similar technologies to enhance the user experience, ensure security, and analyse platform usage. The following are the types of cookies we use:

You can manage cookie usage through your web browser settings. However, disabling essential cookies may affect platform functionality. For optional cookies, you may withdraw your consent at any time via the Privacy Settings section in your account.

10

Children's Data Protection

Winlaju88 is a gaming platform exclusively for individuals aged 18 years of age and above. We do not knowingly collect personal data from minors.

🚫

Important: Should we discover that we have inadvertently collected personal data from an individual under the age of 18, the account in question will be terminated immediately and all associated data will be permanently deleted. Parents or guardians who suspect their child has registered on Winlaju88 should contact us immediately at support@winlaju88.bet.

11

Cross-Border Data Transfers

In certain cases, your personal data may be transferred to or processed in another country — for example, for cloud server services or international gaming software providers. In all such cases, Winlaju88 ensuring:

The recipient country provides an adequate level of data protection
Appropriate data protection agreements have been signed with the receiving parties
Data transfers comply with Malaysia's PDPA 2010 requirements and applicable laws
Data transferred is limited to what is strictly necessary and is protected by encryption in transit

12

Changes to This Privacy Policy

Winlaju88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When significant changes are made, we will:

Updating the "Last Updated" date at the top of this document
Sending email notifications to all registered members at least 14 days before changes take effect
Displaying clear notices on the winlaju88 platform regarding changes being implemented

Continued use of the platform Winlaju88 after the effective date of any changes will be deemed acceptance of the updated Privacy Policy.

13

Contact Our Data Protection Officer

For any enquiries, concerns, or requests relating to this Privacy Policy and your rights as a data subject, please contact Winlaju88's Data Protection Officer (DPO) through:

Email: support@winlaju88.bet (subject label: "Privacy Inquiry / PDPA")
Live Chat: Available 24/7 within the Winlaju88 platform — please indicate that your enquiry relates to privacy
WhatsApp: For inquiries requiring an immediate response

We are committed to resolving all privacy enquiries within 14 working days. For more complex complaints, this period may be extended with prior notice to you.

If you are not satisfied with winlaju88's response to your privacy enquiry, you have the right to lodge a complaint with Department of Personal Data Protection Malaysia (JPDP) or seek remedies through the appropriate legal channels in Malaysia.

Privacy Policy Winlaju88 — Personal Data Protection for Malaysian Members

Six Pillars Data Protection Winlaju88