Privacy Policy

Introduction and Scope

This Privacy Policy applies to personal data processed by winmy20 in connection with the website at https://winmy20.cam, registered player accounts, customer support, casino games, live casino services, sports betting, promotions, payments, fraud prevention, and responsible gambling controls.

For this Policy, “personal data” means information that identifies an individual or can reasonably be associated with an identifiable individual. “Processing” includes collecting, recording, organising, storing, reviewing, using, sharing, restricting, and deleting personal data.

By using winmy20, you acknowledge the practices explained in this Policy. Where consent is required for a particular activity, winmy20 will request it separately and provide a reasonable way to withdraw that consent. Withdrawing consent does not affect processing already completed lawfully and may limit services that depend on the relevant information.

Personal Data We Collect

Depending on how you interact with winmy20, we may collect the following categories of information:

• Identity details: full name, date of birth, nationality, gender where required, and information shown on a MyKad, passport, driving licence, or another accepted identity document.
• Contact details: residential address, email address, Malaysian mobile number, and communication preferences.
• Account information: username, encrypted password data, account status, verification status, security settings, login history, and self-exclusion status.
• Financial information: deposit and withdrawal records, payment method type, transaction references, and limited account ownership details needed to verify Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency transactions.
• Gaming information: game history, stakes, wins, losses, bonus use, sportsbook selections, Liga Super Malaysia or EPL wagers, session duration, and responsible gambling limits.
• Technical information: IP address, browser type, operating system, device identifiers, language settings, approximate location, referral information, and website interaction logs.
• Support records: messages, complaint records, security reports, and other information supplied during communication with winmy20 support.

winmy20 asks players to provide accurate information and update it when circumstances change. Inaccurate records may delay KYC checks, security reviews, or withdrawal processing.

How We Collect Personal Data

winmy20 collects personal data directly when you register, complete account verification, set a responsible gambling limit, contact support, claim a promotion, place a bet, or make a deposit or withdrawal. We also collect technical and usage data automatically when your device communicates with the platform.

Some information is received from payment processors, identity verification providers, game suppliers, fraud prevention tools, banks, eWallet operators, and security partners. For example, winmy20 may receive confirmation that an FPX transaction succeeded without receiving your complete online banking credentials.

We may also generate information through analysis, such as account risk indicators, unusual transaction alerts, or safer gambling markers. Such assessments are used to protect players, investigate suspected misuse, and decide whether further verification is reasonably necessary.

Purposes and Basis of Processing

winmy20 processes personal data only for defined operational, contractual, legal, security, and legitimate business purposes. These include:

• creating and administering your account;
• confirming that you are aged 21 or above;
• providing slots, live casino, live football, lottery, poker, arcade, and sports betting services;
• processing MYR deposits, withdrawals, refunds, and account adjustments;
• conducting KYC, anti-fraud, payment ownership, and security reviews;
• detecting duplicate accounts, prohibited conduct, bonus misuse, collusion, and suspicious transactions;
• responding to questions, complaints, account access requests, and technical issues;
• operating responsible gambling measures, including deposit limits, cooling-off periods, and self-exclusion;
• maintaining reliable platform performance and improving usability for Malaysian players;
• sending service messages and, where permitted, selected promotional communications; and
• meeting record-keeping, dispute resolution, and other applicable legal obligations.

Depending on the circumstances, processing may be necessary to perform our agreement with you, comply with a legal duty, protect vital or security interests, pursue a legitimate operational interest, or act with your consent. winmy20 balances its legitimate interests against the rights and expectations of players.

Payments, KYC, and Account Verification

To protect player funds and reduce fraud, winmy20 may verify your identity, age, residential address, and ownership of a payment method. Typical documents include a valid Malaysian MyKad, driving licence, or passport; a utility bill or bank statement issued within the previous three months; and, where reasonably required, a selfie taken with the identity document.

Payment data is used to process transactions, reconcile balances, manage chargebacks, and confirm that deposits originate from an account held in the player's name. winmy20 does not require players to disclose their online banking password or complete card security credentials to customer support.

KYC documents are sensitive and should be uploaded only through the designated secure process. Players should not send identity documents through unsecured chat channels. Verification records are accessible only to authorised teams and approved providers with a defined need to process them.

Cookies and Similar Technologies

winmy20 may use cookies, local storage, pixels, and comparable technologies to keep sessions secure, remember preferences, support navigation, measure platform performance, and identify suspicious activity. Essential technologies are necessary for functions such as authentication, transaction security, and load balancing.

Analytics technologies help winmy20 understand aggregated usage patterns, such as which pages load slowly or which mobile screen sizes require improvement. Preference technologies may remember display settings and selected language options. Where required, optional technologies will be used only after an appropriate choice has been recorded.

Browser settings can usually block or delete cookies. Blocking essential cookies may prevent account login, payment confirmation, or other core functions from operating correctly.

When Personal Data May Be Shared

winmy20 does not sell personal data. Information may be shared only where reasonably necessary with carefully selected recipients, including payment processors, banks, eWallet operators, identity verification services, game suppliers, hosting providers, cybersecurity specialists, customer support systems, professional advisers, and compliance service providers.

These recipients may process data only for authorised purposes and are expected to apply suitable confidentiality and security measures. winmy20 may also disclose information where required by law, a valid legal process, or a competent authority, or where disclosure is necessary to investigate fraud, protect player safety, enforce our terms, or defend legal rights.

If winmy20 undergoes a corporate restructuring, merger, financing, acquisition, or transfer of business assets, relevant data may be disclosed under appropriate confidentiality controls as part of that transaction.

International Data Processing

Some service providers supporting winmy20 may process data outside Malaysia. Where personal data is transferred internationally, winmy20 takes reasonable steps to ensure that the recipient applies safeguards appropriate to the nature of the information and the risks involved.

Such safeguards may include contractual data protection obligations, restricted access, encryption, transfer assessments, and verification of the recipient's privacy and security practices. International processing does not reduce the confidentiality standards described in this Policy.

Security Safeguards

winmy20 applies administrative, organisational, and technical measures designed to protect personal data against accidental loss, alteration, unauthorised access, misuse, or disclosure. Measures may include encryption in transit, protected storage, access logging, role-based permissions, account monitoring, multifactor security controls, staff confidentiality duties, and incident response procedures.

No online system can guarantee absolute security. Players also have an important role: use a unique password, do not share one-time verification codes, sign out on shared devices, and notify winmy20 promptly if an account or payment method may have been compromised.

Where winmy20 identifies a personal data incident, we will investigate, contain the issue, assess the likely impact, preserve relevant evidence, and provide notifications where required by applicable obligations.

Data Retention

winmy20 retains personal data for as long as reasonably necessary to provide services, secure accounts, process disputes, maintain responsible gambling exclusions, meet financial record requirements, and comply with applicable legal obligations.

Retention periods vary according to the type of information and the reason it was collected. Transaction and KYC records may need to be held after account closure. Self-exclusion records may also be retained to ensure an excluded player is not allowed to reopen an account during the exclusion period.

When information is no longer required, winmy20 will delete it, anonymise it, or restrict further use in accordance with applicable retention procedures. Anonymised information that no longer identifies a player may be retained for statistical, security, and service improvement purposes.

Your Privacy Rights

Subject to applicable requirements and reasonable identity verification, you may ask winmy20 to address personal data associated with your account. A request may be limited where disclosure would affect another person's rights, compromise fraud prevention, conflict with a legal duty, or expose confidential security information.

To protect account holders, winmy20 may request sufficient information to verify the identity of the person making a privacy request. We aim to respond within a reasonable period and will explain if more time or information is needed.

Responsible Gambling Information

winmy20 may process account behaviour, session duration, deposit frequency, transaction patterns, limit settings, cooling-off requests, and self-exclusion information to support responsible gambling. This information helps us operate requested controls and identify activity that may require a safer gambling interaction.

Responsible gambling information is treated as confidential and used only by personnel and providers with appropriate responsibilities. Self-exclusion records may remain on file after account closure where retention is necessary to enforce the exclusion and protect the player.

Players can learn more about deposit limits, session controls, cooling-off periods, and self-exclusion on the winmy20 Responsible Gambling page.

Children and the 21+ Age Requirement

winmy20 services are intended only for individuals aged 21 and above. A person under 21 must not register, deposit, place a wager, or provide personal data through the platform.

winmy20 uses age verification procedures and may request identity documents at registration, before withdrawal, or whenever age or identity concerns arise. If we determine that personal data belongs to an underage user, the account will be restricted and the information will be handled in accordance with applicable legal, security, and refund requirements.

Changes to This Privacy Policy

winmy20 may revise this Policy to reflect changes in services, technology, security practices, payment methods, or applicable obligations. The latest version will be published on this page with an updated effective date.

If a change materially affects how personal data is used, winmy20 will provide an appropriate notice through the platform or registered contact details. Players should review this page periodically to remain informed about current privacy practices.

Contact Us

Questions, correction requests, access requests, or complaints concerning this Privacy Policy may be directed to the winmy20 support and privacy team. Please provide your registered username, a clear description of the request, and enough information for us to verify that you are the account holder.

• Email: [email protected]
• Availability: Customer support is available 24 hours a day, seven days a week.
• Typical response: winmy20 aims to acknowledge privacy enquiries within a reasonable period and may request further verification before disclosing account information.

Do not include your account password, full card security code, online banking password, or one-time verification code in a privacy request. winmy20 staff will never ask you to provide those credentials by email.