win39 | Privacy Policy – How We Protect Your Personal Data

1. Introduction
2. Data Collected
3. Collection Methods
4. Purposes of Data Use
5. Data Sharing
6. Data Security
7. Cookies & Tracking Technologies
8. Your Rights
9. Retention & Deletion
10. Children's Privacy
11. Third-Party Links
12. Policy Amendments
13. Contact Us

1. Introduction & Scope of This Policy

This Privacy Policy ("Policy") is published by win39, an online entertainment platform operating through win39.my. This document describes our privacy practices — including the types of data we collect, how it is used, with whom it may be shared, and what your rights are as the owner of that data.

Win39 complies with the Malaysian Personal Data Protection Act 2010 (PDPA) and international standards relating to personal data protection. We are committed to handling your data with full integrity, transparency, and accountability.

This policy applies to all individuals who:

Registering or attempting to register a win39 account
Accessing or using the win39.my website
Using the win39 mobile app (Android APK or iOS PWA)
Communicating with the win39 customer support team
Participating in any win39 promotion or campaign

📋 Note: By using the win39 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

2. Types of Personal Data We Collect

Win39 only collects data that is genuinely necessary to operate our services safely and in accordance with the law. The following are the categories of data we collect:

2.1 Identity Data

Full name as stated on official identification documents
Malaysian identity card number (MyKad) or passport number
Date of birth and gender
Selfie photo for KYC verification purposes
Copies of identity documents (for KYC)

2.2 Contact Data

Registered email address
Mobile phone number
Residential address

2.3 Financial Data

Bank name and bank account number (for withdrawal processing)
EWallet name and account number (TNG, Boost, GrabPay)
Deposit and withdrawal transaction history
Wagering and gaming activity records

2.4 Technical & Usage Data

Your device's IP address
Type and version of web browser or app used
Device type (phone model, operating system)
Logs of access times, pages visited, and actions taken within the platform
Location data (city/state only, not precise GPS coordinates)

🔒 Minimum Principle: win39 only collects data that is strictly necessary to provide our services, ensure security, and comply with legal requirements. We do not collect sensitive information such as religious beliefs, political views, or ethnic background.

3. How We Collect Data

Your personal data is collected through the following methods:

3.1 Directly from You

This is the primary method of data collection — when you actively provide information to win39, for example during account registration, the KYC process, interactions with customer support, or submission of verification documents.

3.2 Automatically via the Platform

When you use the win39 platform, our systems automatically record technical data such as your IP address, device type, game session logs, and in-platform activity data. This is done for security, fraud detection, and user experience improvement purposes.

3.3 From Third Parties

In certain situations, win39 may receive data from trusted third parties, including:

Payment service providers (to verify transactions)
Identity verification service providers (for KYC)
Fraud prevention and anti-money laundering agencies (for AML compliance)

4. Purposes for Using Your Data

Win39 uses your personal data for the following legitimate and stated purposes:

Purpose of Use	Legal Basis
Creating and managing member accounts	Performance of contract
Identity verification & KYC	Legal obligation (AMLA 2001)
Deposit & withdrawal processing	Performance of contract
Fraud prevention & anomaly detection	Win39's legitimate interests & member safety
Customer support & complaint resolution	Performance of contract
Sending promotional & bonus notifications	Your consent (revocable)
Platform improvements & usage analytics	Win39's legitimate interests
Legal & regulatory compliance	Legal obligation

✅ Our Guarantee: win39 will not use your data for any purpose not listed above without first obtaining your renewed consent.

5. Sharing Data with Other Parties

Win39 does not sell, rent, or trade members' personal data to any party for marketing purposes. Your data may only be shared in the following limited circumstances:

5.1 Trusted Service Providers

Win39 works with carefully selected third-party service providers to help operate the platform. These include payment solution providers, KYC service providers, cloud infrastructure providers, and security audit firms. All providers are bound by strict confidentiality agreements and may only use the data for the specified purposes.

5.2 Legal Requirements & Enforcement

Win39 may disclose your data to government authorities, law enforcement agencies, or regulatory bodies when required to do so under applicable Malaysian law, including court orders or legitimate financial crime investigations.

5.3 Protection of Legitimate Interests

In cases where win39 needs to detect, prevent, or take action regarding fraud, security threats, or breaches of terms of service, relevant data may be shared with related parties for legitimate protection purposes.

⚠️ Please Note: All data sharing with third-party service providers is subject to binding data protection agreements. win39 is responsible for ensuring those providers comply with the same or higher data protection standards.

6. win39 Data Security Measures

Win39 continually invests in security infrastructure to ensure your personal and financial data is protected at all times. The security measures we implement include:

256-bit SSL/TLS encryption: All communications between your device and win39 servers are encrypted using the latest SSL/TLS protocols. This means that even if someone manages to intercept the data traffic, they will not be able to read its contents.
Strict Internal Access Controls: Only authorised win39 staff who require access to perform their duties may view members' personal data. All access is logged and audited on a regular basis.
Two-Factor Authentication (2FA): Members are encouraged to enable 2FA on their accounts. All win39 internal admin access also requires 2FA without exception.
Web Application Firewall (WAF): win39 servers are protected by a WAF that filters and blocks attempted cyberattacks such as SQL injection, XSS, and DDoS.
Daily Data Backup: Your data is automatically backed up daily to a separate, secure server location to ensure no data is lost in the event of a system failure.
Independent Security Audits: win39 undergoes independent third-party security audits on a regular annual basis to identify and patch any potential vulnerabilities.

🔐 Shared Responsibility: While win39 implements robust security measures, the security of your account also depends on your own actions. Ensure your password is strong, do not share your login credentials, and enable two-factor authentication for maximum protection.

7. Cookies & Tracking Technologies

Win39 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

7.1 Essential Cookies (Required)

These cookies are required for the win39 platform to function properly. They record your login session, language preferences, and security settings. You cannot disable these cookies without affecting core platform functionality.

7.2 Performance & Analytics Cookies

This type of cookie helps win39 understand how members use the platform — which pages are visited most often, where users encounter issues, and how overall platform performance can be improved. All data collected is in aggregate form and does not identify any individual specifically.

7.3 Functional Cookies

These cookies allow win39 to remember your personal preferences and settings, such as game preferences, display settings, and interface language. This makes every visit to the platform more comfortable and personalized.

💡 Cookie Controls: You can manage and delete cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of some parts of the win39 platform.

8. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 and international privacy principles, you have the following rights regarding the personal data held by win39:

Right of Access

You have the right to request a copy of the personal data win39 holds about you. Such requests will be processed within 21 business days.

Right to Rectification

If any of your data is inaccurate or out of date, you have the right to request that win39 correct or update it promptly.

Right to Erasure

Under certain circumstances, you may request win39 to delete your personal data — subject to applicable legal retention obligations.

Right to Opt Out of Marketing

You may withdraw your consent to receive marketing communications from win39 at any time via your account settings.

Right to Data Portability

You have the right to receive a copy of your data in a machine-readable format for transfer to another platform where applicable.

Right to Complain

If you believe your privacy rights have been violated, you may file a complaint with the Department of Personal Data Protection Malaysia.

✅ How to Exercise Your Rights: To exercise any of the above rights, contact the win39 customer support team via in-app live chat. Include your full name, account ID, and the type of request. We will respond within 5 business days.

9. Data Retention Period & Deletion

Win39 retains your personal data only for as long as necessary for the purposes stated in this Policy or to fulfil relevant legal requirements. The following are general retention period guidelines:

Active account data: Retained for as long as your account is active and for 7 years after account closure (AMLA 2001 requirement)
Financial transaction records: Retained for 7 years from the transaction date in accordance with the Anti-Money Laundering Act 2001
Customer support communication logs: Retained for 3 years for dispute resolution purposes
Analytics & usage data: Stored in aggregated form without individual identification for 2 years
Marketing data (with consent): Retained until you withdraw consent

Once the retention period expires, your data will be securely deleted or anonymized so that it can no longer be associated with you as an individual.

10. Children's Privacy

Win39 is an entertainment platform strictly restricted to individuals aged 18 years and above only. We do not knowingly collect personal data from individuals under the age of 18.

The win39 KYC process is designed to verify the age of every account applicant. If win39 determines that personal data belonging to an individual under the age of 18 has been collected, we will immediately delete that data and close the relevant account without prior notice.

⚠️ Parents & Guardians: If you believe a minor in your care has registered a win39 account without your knowledge, please contact our support team immediately to have the account closed.

11. Links to Third-Party Sites

The win39 platform may contain links or references to third-party websites or services in certain contexts. win39 is not responsible for the privacy practices of those third-party sites. This Privacy Policy applies solely to the win39 platform.

We encourage you to read and understand the privacy policy of every third-party website or service you access. win39 has no control over how those sites handle your data.

12. Amendments to This Privacy Policy

Win39 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or security enhancements we implement.

When significant amendments occur:

The "Last Updated" date at the top of this page will be revised
Registered members will be notified via email or in-app notification on win39
Amendments take effect within 14 days of the publication date

Continued use of the win39 platform after any amendments take effect will be considered acceptance of the revised privacy terms. All previous versions of the Privacy Policy are retained and may be requested through our support team.

13. Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding your data privacy at win39, our team is ready to assist. Contact us through the following channels:

💬

In-App Live Chat

The fastest way — open the win39 app and tap the customer support icon to chat directly with our team, 24/7.

✉️

Privacy Email

For data rights requests (access, correction, deletion), email: [email protected]

The typical response time for privacy enquiries is within 5 business days. For urgent matters such as reports of data breaches or unauthorized access, we prioritize a response within 24 hours.

FAQ Regarding win39 Privacy

Absolutely not. win39 does not sell, rent, or trade members' personal data to any party for marketing or advertising purposes. Your data is used solely for legitimate platform operations such as transaction processing, account security, and legal compliance. This is a commitment we will never compromise on.

Yes, you may request data deletion. However, please note that win39 is subject to the Anti-Money Laundering Act 2001, which requires us to retain financial transaction and KYC records for 7 years. Data beyond this legal requirement may be deleted upon your request. Contact customer support or email [email protected] with your request.

Should win39 undergo a business restructuring, merger, or acquisition, members' personal data may be transferred to a successor entity. In such circumstances, win39 will notify members in advance and ensure the successor entity adheres to the same or higher data protection standards. You will be given the option to request data deletion prior to the transfer if you do not consent.

win39 has a comprehensive Data Incident Response Plan. In the event of a security incident affecting members' personal data, we will: (1) Isolate and contain the threat within 4 hours, (2) Assess the scope and impact of the incident within 24 hours, (3) Notify affected members within 72 hours via email and in-app notification, and (4) Report the incident to the Malaysian Personal Data Protection Department as required by law.