Official Documents · Data Protection

Privacy Policy winmy20 – Your Data, Our Responsibility

Winmy20 is fully committed to protecting your privacy and the security of your personal data. This document explains in detail how we collect, use, store, and safeguard your information as a member of our platform.

Updated: January 2026  ·  Version 3.1
256-bit SSL Encryption
Data Not Sold
Restricted & Secure Access
Malaysia PDPA Compliance

Winmy20's Privacy Commitment to Malaysian Players

Six data protection principles that underpin your trust in our platform

Enterprise-Grade Data Security

All data transmitted between your device and winmy20 servers is protected by 256-bit SSL encryption — the same standard used by the banking and financial industry.

No Sale of Personal Data

Winmy20 will not sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent.

Your Full Right to Control

You have the right to access, correct, or request the deletion of your personal data at any time through winmy20's support channels.

Malaysia PDPA Compliance

Winmy20 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring that your data is managed in accordance with local law.

Responsible Data Retention

Your data is retained only for as long as required for service and legal compliance purposes. Data that is no longer needed is securely deleted.

Data Breach Notification

In the event of any material data breach, winmy20 will notify affected users within the timeframe required by law.

To All winmy20 Members: This Privacy Policy describes our data collection and management practices. By using the winmy20 platform, you agree to the terms set out in this document. Please read it carefully and contact us if you have any questions.

1Introduction & Scope of This Policy

Winmy20 ("we", "platform", "Company") operates the website at https://winmy20.ws and all related services. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the winmy20 platform — including registering an account, making deposits via Touch 'n Go eWallet, GrabPay, DuitNow, or FPX, playing baccarat, blackjack, Live Casino, betting on Malaysia Super League or EPL football, and any other interactions with our platform.

This policy applies to all winmy20 platform users in Malaysia regardless of the device used — whether a smartphone, tablet, or personal computer. We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices for data privacy.

Important Note: This Privacy Policy should be read in conjunction with Terms & Conditions winmy20. Together, these documents form the complete agreement between you and our platform regarding the use of your personal data.

2Personal Information We Collect

Winmy20 collects various types of information depending on how you interact with our platform. The following are the categories of information we may collect:

2.1 Identity Information

  • Full name as shown on your identification document (MyKad or passport)
  • National identity card number or passport number
  • Date of birth and gender
  • Profile picture (if uploaded)
  • Selfie for identity verification purposes (where required)

2.2 Contact Information

  • Active email address
  • Registered Malaysian mobile phone number
  • Current residential address

2.3 Financial Information

  • Details of the payment method used (eWallet account name, bank account number)
  • Deposit and withdrawal transaction records
  • Betting and gaming activity history
  • Current account balance

2.4 Technical Information

  • Your device's IP address
  • Browser type and version
  • Device type and operating system
  • Approximate location data (state/district only)
  • Login timestamps and activity logs
Data Category Example Requirements
IdentityFull name, MyKad number, date of birthMandatory (KYC)
ContactEmail address, phone numberMandatory
FinancialEWallet accounts, transaction recordsMandatory (payment)
TechnicalIP address, browser typeAutomatic
OptionsGame preferences, languageOptions

3How We Collect Information

Winmy20 collects your information through several key methods:

3.1 Directly from You

Information you provide directly when:

  • New account registration process
  • Identity verification (KYC – Know Your Customer)
  • Deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX Maybank2u/CIMB Clicks
  • Withdrawal requests
  • Contacting customer support
  • Completing feedback forms or surveys

3.2 Automatically

Information collected automatically when you use the winmy20 platform:

  • Cookies and similar tracking technologies
  • Server logs recording access activity
  • Platform usage analytics (pages visited, time spent on platform)
  • Gaming session records — rounds, bets, and outcomes

3.3 From Authorised Third Parties

In certain circumstances, we may receive information from authorised third parties:

  • Third-party identity verification service providers
  • Licensed payment gateway providers in Malaysia
  • Anti-fraud and anti-money laundering agencies

4How We Use Your Personal Data

Winmy20 uses the information collected solely for the following purposes:

4.1 Account Management & Services

  • Registering and managing your winmy20 account
  • Processing and verifying your identity (KYC process)
  • Processing deposits and withdrawals you have requested
  • Provides access to all winmy20 games and services
  • Managing your VIP programme and membership rewards

4.2 Security & Compliance

  • Detecting and preventing fraud, money laundering, and other unlawful activities
  • Fulfilling our legal and regulatory compliance obligations
  • Verifying user age and eligibility
  • Investigating any complaints or security issues

4.3 Communications & Support

  • Sending important notifications related to your account
  • Responding to enquiries and complaints via customer support
  • Sending promotional information and offers (with your consent — you may unsubscribe at any time)

4.4 Platform Improvements

  • Analysing usage patterns to improve the user experience
  • Developing new features and services relevant to Malaysian players
  • Conducting technical testing and platform performance audits

Winmy20 will not use your data for any purpose other than those stated above without first obtaining your renewed consent.

5Information Sharing & Disclosure

Winmy20 takes the confidentiality of your personal information seriously. We does not sell your data to any third party. However, we may share your information in the following limited circumstances:

5.1 Trusted Service Providers

We share only the necessary information with third-party service providers who assist us in operating the platform, including:

  • Payment processing service providers (eWallet and FPX Malaysia gateways)
  • Identity verification service providers
  • Hosting and technology infrastructure service providers
  • Independent cybersecurity and audit firms

All such providers are bound by strict confidentiality agreements and may only use your data for purposes specified by winmy20.

5.2 Legal Requirements

Winmy20 may disclose your information to the relevant authorities when required under Malaysian law, including court orders or official investigations related to fraud prevention and anti-money laundering.

Winmy20 will not share your personal information with third-party marketing companies, social media platforms, or any party not listed above without first obtaining your written consent.

6Data Security Measures

Winmy20 invests heavily in security infrastructure to protect the personal and financial data of all our Malaysian players. The following are the security layers we have put in place:

6.1 Technical Security

  • 256-bit SSL Encryption for all data communications between your device and our servers
  • At-rest data encryption for all data stored in our databases
  • Two-Factor Authentication (2FA) for account login and large-value withdrawals
  • Firewall and intrusion detection systems (IDS) operating 24/7
  • Regular security audits by independent cybersecurity firms

6.2 Access Control

  • Only authorised personnel may access user data, governed by the principle of least privilege
  • All staff access to data systems is logged and audited
  • Mandatory cybersecurity training for all winmy20 staff

6.3 Incident Management

Winmy20 maintains a comprehensive incident response procedure. In the event of a material data breach affecting your information, we will notify you within the timeframe required under Malaysia's PDPA and take the appropriate remediation steps.

While we take all reasonable security measures, no digital security system is 100% foolproof. You are also responsible for keeping your winmy20 account login credentials secure.

7Cookie & Tracking Technology Policy

Winmy20 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our platform.

7.1 Managing Cookies

You can control and manage cookies through your internet browser settings. However, disabling essential cookies may affect the functionality of the winmy20 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

8Your Rights Under the PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by winmy20:

Right of Access

Request a copy of the personal data we hold about you

Right to Rectification

Correcting inaccurate or incomplete data

Right to Erasure

Requesting data deletion under certain circumstances

Right to Object

Objecting to data processing for direct marketing purposes

Right to Portability

Receiving your data in a machine-readable format

Right to Restrict

Requesting restriction of processing under certain circumstances

To exercise any of the above rights, please contact the winmy20 support team by email at support@winmy20.ws with the subject line "PRIVACY RIGHTS REQUEST", including your account number and a description of your request. We will process your request within 21 calendar days as required under Malaysia's PDPA.

9Cross-Border Data Transfers

In operating the winmy20 platform, certain data may need to be transferred or processed outside Malaysia, primarily in connection with our technology infrastructure services and live casino studios operating from various international locations.

However, winmy20 ensures that any such data transfer:

  • Only carried out with recipients that provide a level of data protection equivalent to or higher than Malaysia's
  • Protected by legally binding data transfer agreements
  • Complying with all Malaysian legal requirements relating to the transfer of personal data overseas

Our commitment: Regardless of where your data is processed, the same level of protection as set out in this Privacy Policy will always apply.

10Data Retention Period

Winmy20 retains your personal data only for as long as necessary for the purposes outlined in this policy, or as required under Malaysian law. The following are general data retention guidelines:

  • Active account data: For as long as your account remains active on the winmy20 platform
  • Financial transaction records: Minimum 7 years after the transaction, in accordance with Malaysian tax and financial legal requirements
  • Security activity logs: Minimum 2 years for fraud investigation purposes
  • Data after account closure: Up to 5 years for legal compliance purposes
  • Marketing data: Until you unsubscribe or request deletion

Once the relevant retention period has elapsed, your data will be securely deleted or anonymised in accordance with our security procedures.

11Child & Minor Protection

Winmy20 is an adult entertainment platform open only to members aged 21 and above. We do not knowingly collect, use, or disclose personal data of individuals under the age of 21.

Should we discover that we have inadvertently collected personal data from a minor, we will promptly delete that information and close the account in question.

If you believe that an individual under the age of 21 has registered on the winmy20 platform, please notify us immediately at support@winmy20.ws so that we may take appropriate action.

12Links to Other Websites

The winmy20 platform may contain links to third-party websites or services in limited contexts. This Privacy Policy applies solely to the winmy20 platform. winmy20 is not responsible for the privacy practices of any third-party website or service.

We recommend that you read the Privacy Policy of every other website or service you visit to understand how they manage your personal data.

13Amendments to This Privacy Policy

Winmy20 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or platform improvements. You will be notified of any material amendments via:

  • In-platform notifications on the winmy20 platform upon login
  • Email to your registered address
  • Prominent update notice at the top of this page

Amendments take effect 7 days after being notified. Continued use of the winmy20 platform after the effective date constitutes your acceptance of the amended policy.

Last updated date of this Privacy Policy: January 2026 (Version 3.1). You are encouraged to check this page from time to time.

14Contact Us – Data Protection Officer

If you have any questions, concerns, or complaints regarding how winmy20 handles your personal data, or wish to exercise any of your rights under Malaysia's PDPA, please contact us:

  • Privacy Email: support@winmy20.ws (subject: DATA PRIVACY ENQUIRY)
  • Live Chat: Available 24/7 on the winmy20 platform
  • Official Website: https://winmy20.ws

Winmy20 is committed to addressing all privacy-related enquiries and complaints within 14 working days. For more complex cases, we may require up to 21 calendar days as permitted under the Malaysia PDPA.

Your feedback and trust matter to us. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

Play Safe at winmy20

Your privacy and security are our top priority. Register a winmy20 account today and enjoy Malaysia's most trusted online casino experience, backed by international-standard data protection.

By registering, you agree to our Terms & Conditions and Privacy Policy winmy20. Please also read Responsible Gaming Policy us.

Bahasa Melayu