Privacy Policy winace99 — Malaysian Member Data Protection & Privacy

Winace99 is a trusted online entertainment platform operating in Malaysia, fully committed to protecting the privacy of its members. This Privacy Policy outlines our practices regarding the collection, use, disclosure and protection of your personal data when you register and use winace99 services.

This document is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By registering a winace99 account or using any of our services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

Winace99 collects personal data through several channels — directly from you during registration and platform use, automatically via platform technology, and in certain cases from legitimate third parties such as identity verification providers.

Data you provide directly:

• Full name as per identity card.
• Identity card number (MyKad) or passport for foreign nationals.
• Date of birth for age verification.
• Email address and mobile phone number.
• Current residential address.
• Bank account or eWallet information registered for deposits and withdrawals.
• Identity document image during the KYC process.

Data collected automatically:

• IP address and approximate geographic location.
• Device type, operating system and web browser used.
• Login history including time, date and location.
• Game activity records — wagering, rounds, wins and losses.
• Cookie data and session identifiers.
• Logs of interactions with the platform including clicks and page navigation.

All data collection is carried out on a lawful basis — whether to perform a service agreement with you, fulfil legal obligations, or pursue legitimate business interests while respecting your privacy rights.

Every piece of data we collect has a specific and clear purpose. winace99 does not use your data for unrelated purposes without your prior consent. The following are the primary purposes of data use:

• Account management: Creating, verifying and maintaining your account on winace99.
• Transaction processing: Processing deposits, withdrawals and account balance management.
• Identity verification (KYC): Ensuring you meet age and identity requirements before your account is fully activated.
• Fraud prevention and security: Detecting suspicious activity, protecting accounts from unauthorized access and preventing money laundering.
• Customer support: Handling inquiries, complaints and requests for assistance accurately and effectively.
• Service communications: Sending important notices about your account, security, changes to terms or service disruptions.
• Platform improvement: Analyzing usage patterns to improve gaming experience and technical performance.
• Legal compliance: Meeting reporting obligations to relevant authorities when required by law.

Winace99 does not sell, rent or trade your personal data to any third party for marketing or commercial gain. Your data is only shared in the following situations and only to the extent necessary:

• Payment service providers: Banks, FPX providers, DuitNow and eWallet operators require certain information to securely process your financial transactions.
• Identity verification providers: Registered and approved third-party KYC companies assist us in verifying member identities in accordance with industry standards.
• Game providers: Game developers may receive session data required for game operation, but no personally identifiable information is shared.
• Legal authorities: winace99 will disclose data when required by court order, criminal investigation or valid legal compliance requirements.
• Cloud services and infrastructure: Our hosting and technical infrastructure providers have limited access to operational data necessary to run the platform.

All third parties receiving data from winace99 are bound by strict data protection agreements and are prohibited from using that information for any purpose other than what has been agreed upon.

Winace99 continually invests in security infrastructure to ensure your personal data is always protected at the highest technically achievable level. Among the security measures we implement:

• 256-bit SSL encryption for all communications between your browser and winace99 servers.
• Data-at-rest encryption for all personal and financial information stored in our databases.
• Two-factor authentication (2FA) available and recommended for all member accounts.
• 24/7 Monitoring by our security team to detect any intrusion attempts or unauthorised access.
• Regular security audits by independent third parties to identify and address system vulnerabilities.
• Strict internal access controls — only staff who require access to perform their duties are authorised to view user data.

While no security system can be guaranteed 100% safe, winace99 takes every reasonable measure to protect your data. In the event of a data breach that affects your rights, we will notify you within 72 hours of the breach being detected and confirmed.

Winace99 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small data files stored on your device by your web browser when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform operations such as login verification and session security. Cannot be disabled without affecting platform functionality.
• Preference Cookies: Storing your settings such as language preference and display theme so you don't have to reset them each visit.
• Analytics Cookies: Collecting aggregated and anonymous usage information to help us understand how the platform is used and improve it.
• Security Cookies: Helps detect fraudulent activity and protects your account from unauthorized access.

You can manage cookie settings through your web browser preferences. Please note that disabling essential cookies may affect your ability to login or use certain platform features. winace99 does not use third-party tracking cookies for advertising purposes.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by winace99:

To exercise any of the above rights, contact the winace99 support team via live chat or email. We will process your request within 30 calendar days of receipt. In complex cases, this period may be extended to 60 days with notice provided to you.

Winace99 does not provide services to individuals under the age of 18. This platform does not knowingly collect, store or process personal data of minors.

If winace99 discovers that personal data of an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the associated account.

If you believe your child has registered a winace99 account without authorisation, please contact us immediately through customer support for prompt data deletion and account closure.

In the course of platform operations, some user data may be processed or stored on servers located outside Malaysia — particularly in relation to cloud infrastructure services and international game providers.

Winace99 ensures that any cross-border data transfers are carried out with protections equivalent to or exceeding the standards required by the Malaysian PDPA. This is achieved through:

• Binding data processing agreements with all third-party overseas providers.
• Use of internationally recognized standard data protection clauses.
• Selection of partners operating in jurisdictions with strong data protection laws.

Financial and primary identity data of Malaysian members is stored on servers located within the Asia Pacific region to minimise latency and maximise security controls.

Winace99 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. The date of the most recent update is always displayed at the top of this document.

For material changes — such as new types of data being collected or significantly different purposes of use — winace99 will notify you via registered email or a prominent in-platform notice at least 14 days before the changes take effect.

Your continued use of the winace99 platform after the effective date of changes is deemed your acceptance of the updated Privacy Policy.

If you have any questions, concerns or wish to exercise your personal data rights, please contact the winace99 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 via the winace99 platform — the fastest way to get a response.
• Email: [email protected] — for written enquiries regarding privacy and data rights.

When submitting a data rights request, please clearly state the type of request, your full name and account number so we can process it faster and more accurately. All data rights requests are handled confidentially by a specially trained team.