WinWin4D Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how WinWin4D ("the Platform", "we", "us", "our"), operating at winwin4d.cam, collects, uses, stores, discloses, and protects the personal data of individuals ("Members", "Users", "you") who access or use the Platform and its associated Services.

WinWin4D is committed to processing personal data in a lawful, fair, and transparent manner. This Policy has been drafted in accordance with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework, which WinWin4D adopts as a best-practice standard regardless of the jurisdiction in which a Member is located.

By registering an Account on WinWin4D or using any of our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

This Policy should be read in conjunction with our Terms and Conditions and our Responsible Gambling Policy.

2. Definitions

In this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, WinWin4D.
• "Data Processor" means any third party that processes Personal Data on WinWin4D's behalf and under its instructions.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, alteration, or deletion.
• "KYC" means Know Your Customer — the identity verification process required by WinWin4D's licensing obligations.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, analytics, and session management.
• "Account" means the registered member account created by a User on WinWin4D.

3. Data Controller

WinWin4D is the Data Controller in respect of all Personal Data collected via the Platform. As Data Controller, WinWin4D determines the purposes for which your Personal Data is processed and is responsible for ensuring that such processing complies with applicable data protection obligations arising from our licensing arrangements.

For all data protection queries, requests to exercise your rights, or concerns regarding this Policy, please contact our Data Protection team using the details provided in Section 15 of this Policy.

4. Categories of Personal Data We Collect

WinWin4D collects the following categories of Personal Data from Members and Platform visitors:

4.1 Identity and Contact Data

• Full legal name and date of birth
• Malaysian NRIC number (MyKad), Driver's Licence number, or Passport number (as provided for KYC)
• Residential address
• Email address and mobile phone number
• Profile photograph (where submitted as part of KYC selfie verification)

4.2 Account and Gaming Data

• Account username and password (stored in hashed/encrypted form — the plaintext password is never accessible to WinWin4D staff)
• Deposit and withdrawal history, including amounts in MYR, timestamps, and payment methods used (Maybank2u, CIMB Clicks, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, etc.)
• Game history, wager amounts, bet selections, and outcomes
• Bonus and promotion participation records
• Account tier and loyalty programme status

4.3 Technical and Usage Data

• IP address and approximate geographic location (city-level)
• Browser type, version, and operating system
• Device type (desktop, mobile, tablet) and device identifiers
• Pages visited, time spent on pages, and navigation patterns within the Platform
• Session duration and login/logout timestamps
• Error logs and crash reports

4.4 Communications Data

• Content of live chat conversations with our support team
• Email correspondence with WinWin4D support or compliance teams
• Records of complaints and their resolutions

4.5 Responsible Gambling Data

• Deposit limit settings and modification history
• Self-exclusion requests and status
• Cooling-off period activations
• Responsible gambling tool usage records — this data is treated with heightened sensitivity and is used solely for player protection purposes

5. How We Collect Personal Data

WinWin4D collects Personal Data through the following means:

• Direct submission: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically as you interact with the Platform, including through cookies, pixel tags, and server log files.
• Third-party sources: Identity verification and fraud screening data received from KYC service providers, payment processors, and (where required) sanctions screening databases. We may also receive information from payment networks when you transact using Maybank2u, DuitNow, FPX, or other supported payment methods.
• Referral data: If you register via a referral programme, the referring Member's account ID is recorded in connection with your registration.

6. Purposes of Processing & Legal Basis

The table below sets out the purposes for which WinWin4D processes your Personal Data and the legal basis relied upon in each case:

Purpose	Data Categories Used	Legal Basis
Account registration and management	Identity, Contact, Account Data	Contract performance
KYC and age verification	Identity Data, KYC documents	Legal obligation / Licensing compliance
Payment processing (deposits and withdrawals in MYR)	Financial, Identity, Account Data	Contract performance
Game provision and bet settlement	Account, Gaming Data	Contract performance
Customer support and complaint resolution	Identity, Communications, Account Data	Contract performance / Legitimate interests
Fraud detection and prevention	All categories	Legitimate interests / Legal obligation
Anti-money laundering (AML) monitoring	Financial, Identity, Gaming Data	Legal obligation / Licensing compliance
Responsible gambling monitoring and enforcement	Gaming, Responsible Gambling Data	Legitimate interests / Legal obligation
Promotion and loyalty programme administration	Account, Gaming, Identity Data	Contract performance / Consent
Platform analytics and performance improvement	Technical, Usage Data	Legitimate interests
Security and IT infrastructure management	Technical Data	Legitimate interests
Compliance with licensing and legal obligations	All categories as required	Legal obligation

7. Disclosure and Data Sharing

7.1 Service Providers and Data Processors

WinWin4D engages carefully selected third-party service providers to assist with the operation of the Platform. These providers act as Data Processors and are permitted to process your Personal Data only on WinWin4D's instructions, for the specific purposes for which they have been engaged, and subject to binding contractual data protection obligations. Categories of Data Processors include:

• Payment processors and Malaysian banking partners (for processing transactions via Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay)
• Identity verification and KYC technology providers
• Cloud hosting and data centre operators
• Customer support platform providers
• Fraud detection and cybersecurity service providers
• Analytics and performance monitoring tools

7.2 Regulatory and Legal Disclosure

WinWin4D may disclose Personal Data to government authorities, law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by law, court order, or our licensing obligations. Such disclosures are made only to the extent required and are not voluntary.

7.3 What We Do Not Do

WinWin4D does not sell, rent, exchange, or otherwise transfer your Personal Data to third parties for their own commercial or marketing purposes. We do not share your information with social media platforms, data brokers, or advertising networks for behavioural targeting purposes.

8. International Data Transfers

WinWin4D's Platform infrastructure is hosted on servers located in data centres that may be situated outside Malaysia. As a consequence, your Personal Data may be transferred to, stored in, or processed in jurisdictions other than your country of residence. Where such international transfers occur, WinWin4D implements appropriate safeguards to ensure that your data is afforded a level of protection equivalent to the standards described in this Policy.

Safeguards used for international transfers may include: standard contractual clauses approved by recognised data protection authorities; binding corporate rules where applicable; or transfers to jurisdictions that maintain adequate data protection frameworks. You may request further information about the safeguards in place for specific transfers by contacting our Data Protection team.

9. Data Retention

WinWin4D retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal and licensing obligations. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your Account's active status, plus a minimum of five (5) years following account closure, to satisfy AML, fraud prevention, and licensing audit requirements.
• KYC Documentation: Retained for a minimum of five (5) years following the end of the business relationship, in accordance with standard anti-money laundering regulatory requirements.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years from the date of the transaction.
• Support and Communications Records: Retained for up to three (3) years from the date of the interaction, unless a longer period is required in connection with an ongoing dispute or regulatory matter.
• Technical and Usage Data: Generally retained for up to twelve (12) months from collection, after which it is anonymised or deleted.
• Responsible Gambling Records: Self-exclusion and responsible gambling tool usage records are retained for a minimum of five (5) years to prevent circumvention of exclusion orders.

When Personal Data is no longer required, WinWin4D deletes or irreversibly anonymises it in a secure manner. Anonymised, aggregated data that can no longer be linked to an individual may be retained indefinitely for analytics and business improvement purposes.

10. Your Data Subject Rights

Subject to applicable legal limitations (including where processing is required for compliance with licensing obligations, fraud prevention, or legal proceedings), you have the following rights in respect of Personal Data that WinWin4D holds about you:

• Right of Access: You may request a copy of all Personal Data that WinWin4D holds about you. We will respond to validated subject access requests within 30 days.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that we correct it. For account-related data (such as your registered address), you can update many fields directly from your Account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where: (a) it is no longer necessary for the purpose for which it was collected; (b) you withdraw consent (where consent was the sole legal basis); or (c) you object to processing and there is no overriding legitimate interest. Note that WinWin4D may be required by law or licensing obligations to retain certain data even after an erasure request.
• Right to Restrict Processing: You may request that we restrict processing of your Personal Data in certain circumstances — for example, while a rectification request is pending, or whilst you have lodged an objection.
• Right to Data Portability: Where processing is based on consent or contract performance and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object at any time to processing of your Personal Data for direct marketing purposes. You may also object to processing carried out on the basis of legitimate interests, in which case WinWin4D will assess whether compelling grounds for the processing override your interests.

11. Cookies and Tracking Technologies

11.1 What Are Cookies

Cookies are small data files placed on your device when you visit the Platform. They enable the Platform to remember your preferences, maintain session state, and collect usage analytics. WinWin4D also uses similar technologies such as web beacons, pixel tags, and local storage where appropriate.

11.2 Categories of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These enable login session management, security tokens, and core Platform features. They cannot be disabled without significantly impairing your ability to use the Platform.
• Performance and Analytics Cookies: Collect anonymised data about how visitors use the Platform — pages visited, time on page, error events — to help us improve performance and user experience.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and whether you have acknowledged certain notifications.

11.3 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to block all cookies, accept only certain types, or delete existing cookies. Please note that disabling strictly necessary cookies may prevent some features of the Platform from functioning correctly. Detailed cookie management instructions are available in your browser's help documentation.

12. Minors and Age Restriction

WinWin4D's Services are intended exclusively for individuals aged 21 years and above. WinWin4D does not knowingly collect Personal Data from individuals under the age of 21. If you believe that a minor has submitted Personal Data to WinWin4D, please contact us immediately at [email protected] and we will take prompt action to identify and delete such data, and to close the associated Account.

Age verification is conducted as part of the mandatory KYC process. Accounts where the registered member is confirmed to be under 21 years of age are closed without appeal and all associated data is handled in accordance with our compliance obligations.

13. Data Security

WinWin4D implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• End-to-end TLS/SSL encryption for all data transmitted between your device and the Platform
• AES-256 encryption for data at rest on our servers
• Password hashing using industry-standard cryptographic algorithms (plaintext passwords are never stored)
• Two-factor authentication (2FA) available for all Member accounts
• Role-based access controls limiting employee access to Personal Data on a strict need-to-know basis
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure
• 24/7 automated monitoring and alerting for suspicious access patterns and potential breaches
• Staff training on data protection obligations and information security practices

Whilst WinWin4D implements these measures, no online system can guarantee absolute security. You are responsible for maintaining the security of your Account credentials, enabling 2FA, and ensuring your device is adequately protected from malware and unauthorised access.

14. Amendments to This Policy

WinWin4D reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal or licensing obligations, or operational requirements. Where changes are material, WinWin4D will notify registered Members by email to their registered address and/or by posting a prominent notice on the Platform.

The date of the most recent revision is displayed at the top of this Policy under "Last Updated". Continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you may close your Account by contacting our support team.

15. Contact Us — Data Protection Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which WinWin4D processes your Personal Data, please contact our Data Protection team:

• Data Protection Enquiries: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 on the Platform — average first response under 3 minutes

Please clearly state "Privacy / Data Protection Query" in the subject line of any email correspondence, and include your registered username and a description of your request or concern. We acknowledge all data protection enquiries within 48 hours and aim to provide a substantive response within 30 calendar days.