Winlaju88 Privacy Policy — Your Personal Data Protection

✦Introduction

Winlaju88 takes seriously its responsibility to protect the personal data of every member who uses our platform. This Privacy Policy transparently explains how we collect, process, store, and protect your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the latest international security standards.

By registering or using the winlaju88 service, you agree to the terms of this Privacy Policy. We encourage you to read this document in full so you understand your rights as a user and how we handle your data responsibly.

This policy applies to all information collected through the winlaju88 website, mobile app, and any official communication channels including customer support email. Any material changes to this policy will be communicated to you via account notification or email at least 14 days before the changes take effect.

1Information We Collect

Winlaju88 only collects information necessary to provide you with a safe, compliant, and enjoyable experience. The data we collect falls into three main categories:

Personal Identification Information — collected during account registration and the KYC process:

Platform Usage Information — collected automatically when you use our services:

Cookie Information — to enhance your browsing experience:

• Session cookies to maintain your logged-in status
• Preference cookies to save your language and display settings
• Analytics cookies to understand platform usage patterns in an aggregated, anonymised form
• Security cookies to detect unauthorised access attempts

2How We Use Your Information

Every piece of data we collect has a clear and legitimate purpose. winlaju88 does not process your personal data for purposes unrelated to platform operations without obtaining your consent first.

3Data Sharing with Third Parties

Winlaju88 limits the sharing of your personal data to third parties that are strictly necessary for platform operations. We do not sell your data to any party for commercial purposes.

• Payment Processors: DuitNow, FPX, Touch 'n Go, GrabPay, and banking partners only receive the minimum transaction information required to process your payment securely
• Game Providers: Game software providers receive the session data needed to deliver a smooth gaming experience without exposing your personal identification information
• KYC Verification Service Providers: Licensed and audited identity verification partners receive verification documents solely during the KYC process.
• Legal Authorities: Account information is disclosed to law enforcement agencies when required by court order or valid written request
• Cloud Infrastructure Provider: Data is stored on cloud servers compliant with ISO 27001 security standards with strict data processing agreements

4Security & Data Protection

Winlaju88 continuously invests in industry-grade security infrastructure to keep your personal data protected at all times. Our security systems operate 24 hours a day, 7 days a week without interruption.

• Winlaju88 servers are protected by multi-layered firewalls and an intrusion detection system (IDS)
• All passwords are stored in hashed form using the bcrypt algorithm — no winlaju88 staff can view your password in plain text.
• Independent security audits are conducted regularly by accredited third-party cybersecurity firms
• Our PCI DSS compliance program ensures all payment data is handled in accordance with international payment card industry standards.
• Mandatory security awareness training is required for all winlaju88 staff every quarter

5Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by winlaju88. We are committed to processing every request within 14 business days.

6Data Retention Period

Winlaju88 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by applicable law. The following are our data retention guidelines:

• Active account data: Stored for the duration your account is active plus 7 years after account closure for financial compliance purposes
• Financial transaction records: Stored for 7 years in accordance with the requirements of the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001
• Support communication logs: Stored for 3 years for reference and service quality improvement
• Website analytics data: Stored anonymously for 2 years for platform improvement purposes
• KYC documents: Stored for 5 years from the date of the last transaction or account closure, whichever is later
• Cookie data: Session cookies expire automatically when the browser is closed; persistent cookies expire between 30 days and 12 months depending on cookie type

Once the retention period expires, your data is securely deleted using irreversible deletion methods or permanently anonymised so it can no longer be linked to you.

7Cookie Policy

Winlaju88 uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better experience for you. We believe in transparency — here is a full breakdown of the cookies we use:

• Strictly Necessary Cookies: These cookies are required for core platform functions such as login authentication, session security, and navigation. The platform will not work without them
• Performance Cookies: Collecting information on how you use the platform — most frequently visited pages, error messages encountered — to help us improve our service
• Functional Cookies: Remembering your preferences such as language settings, username, and region to provide a more personalised experience
• Security Cookies: Used to detect and prevent fraudulent activity, bot attacks, and suspicious login attempts

You can manage cookies through your browser settings. Most modern browsers let you view, delete, and block cookies. For more information, refer to the help function of your browser.

8Minor Protection

Winlaju88 strictly does not accept registrations from individuals under the age of 18. Our platform is designed and intended exclusively for adult users aged 18 and above.

• The registration process includes strict age verification through valid government-issued identity documents.
• If winlaju88 discovers an account registered by a minor, the account will be closed immediately and all funds returned.
• Parents and guardians are encouraged to use parental control software to prevent unauthorised access by minors
• Winlaju88 does not knowingly collect personal data from children; if you believe a child's data has been collected inadvertently, please contact us immediately.

9Changes to the Privacy Policy

Winlaju88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Our commitment to transparency means you will always be kept informed.

• Material changes will be communicated to you via in-account notification and/or email at least 14 days before taking effect
• The "Last Updated" date at the top of this document will always reflect the latest version.
• Continued use of the winlaju88 platform after the effective date of any changes constitutes acceptance of the new terms
• The version history of this policy is available for members who wish to review specific changes that have been made.
• If you disagree with any changes made, you have the right to close your account before the changes take effect