Winlah Privacy Policy – Malaysian Player Data Protection

01 Introduction

Winlah ("we", "Platform") treats every player's privacy as a responsibility to be upheld with full accountability. This Privacy Policy explains in detail how we collect, use, store, and protect your personal information while you use the platform winlah.bar and all related services.

This policy applies to all Winlah users, including registered players, casual visitors, and anyone who interacts with our platform in any way. By using the Winlah platform, you agree to the data protection practices described in this document.

We take our responsibilities as a data controller seriously. If at any time you are dissatisfied with how we handle your data, you have the right to contact us and we will address your concerns promptly and transparently.

02 Types of Personal Data We Collect

Winlah collects various categories of data depending on how you interact with our platform. Below is a full summary of the data we collect:

03 How We Use Your Data

The data we collect is used for clear and lawful purposes. Winlah will not use your data for any purpose other than those stated below:

• Account Management: Creating and maintaining your player account, including the login process and identity verification.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions accurately and securely.
• Regulatory Compliance: Meeting legal requirements related to anti-money laundering (AML), KYC, and financial reporting.
• Platform Security: Detecting and preventing fraud, unauthorized access, and suspicious activity.
• Customer Support: Handling player inquiries, complaints, and support requests effectively.
• Responsible Gaming: Monitoring wagering patterns to identify players who may need assistance or protection.
• Platform Improvements: Analyzing usage patterns to improve user experience, performance, and platform features.
• Service Communications: Sending important notifications related to your account, transactions, or changes to our terms.

If Winlah intends to use your data for direct marketing or any new purposes not stated in this Policy, we will obtain your consent first.

04 Legal Basis for Data Processing

Every processing of personal data by Winlah is based on a valid legal ground under Malaysia's PDPA. These grounds are as follows:

• Consent: You provided explicit consent during account registration. You may withdraw this consent at any time, although doing so may affect our ability to provide services.
• Contract Performance: Processing is necessary to fulfill the agreement between you and winlah, including processing deposits and withdrawals.
• Legal Obligation: We are legally required to retain certain records and report suspicious activity to the relevant authorities.
• Legitimate Interest: Winlah has a legitimate interest in using data to prevent fraud, manage risk, and enhance platform security.

05 Data Sharing & Disclosure to Third Parties

Winlah does not sell, rent, or trade your personal data to third parties for marketing purposes. However, in the following limited situations, your data may be shared:

• Trusted Service Providers: Payment processing companies, cloud service providers, and technology partners that help us operate the platform — all bound by strict confidentiality agreements.
• Legal Authority: When required by a court order, law enforcement investigation, or legitimate regulatory requirement.
• Third-Party Identity Verification: Approved KYC service providers for verifying player identity and documents.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of that transaction.

06 Data Security Measures

Winlah implements various technical and organisational security measures to protect your personal data from unauthorised access, loss, or misuse:

• 256-bit SSL Encryption: All data transmitted between your device and Winlah's servers is protected by industry-standard SSL (Secure Socket Layer) encryption.
• Encrypted Storage: Sensitive data such as passwords and financial information is stored in encrypted form using strong hashing algorithms.
• Strict Access Control: Only authorized staff with legitimate business needs may access player personal data.
• Regular Security Audits: The Winlah platform undergoes regular security audits and penetration testing by independent third parties.
• 24/7 Monitoring: An automated monitoring system detects and alerts on suspicious activity in real time.
• Two-Factor Authentication (2FA): Players can enable 2FA for added account security.

While we take all reasonable steps to protect your data, no system is entirely 100% secure from cyber threats. Should any data security breach involving your data occur, we will notify you within the timeframe required by law.

07 Data Retention Period

Winlah retains your personal data for as long as it is needed for the purposes stated in this Policy, or as required by law. The following are our data retention guidelines:

• Active Account Data: Retained for as long as your account is active and for five years after the account is closed.
• Financial Transaction Records: Retained for seven years in accordance with Malaysia's financial and tax legal requirements.
• KYC Documents: Retained for five years after the business relationship ends, in line with AML requirements.
• System & Security Logs: Retained for 90 days for security incident investigation purposes.
• Customer Support Communications: Retained for three years for reference and dispute resolution.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be re-identified.

08 Cookies & Tracking Technologies

Winlah uses cookies and similar technologies to improve the user experience and analyse platform usage. Cookies are small text files stored on your device by your web browser.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. Cannot be disabled.
• Preference Cookies: Saving your preferences such as preferred language and display format for ease of use.
• Analytics Cookies: Collecting anonymized data on how players use the platform to help us improve the user experience.
• Security Cookies: Helping detect suspicious activity and protecting your account from unauthorized access.

You may manage or block cookies through your web browser settings. However, blocking essential cookies may affect the functionality of the Winlah platform. We do not use third-party cookies for advertising.

09 Your Rights Regarding Personal Data

Under Malaysia's PDPA and Winlah's Privacy Policy, you have the following rights regarding your personal data:

10 Children's Privacy

The Winlah platform is exclusively for users aged 18 years and above. We do not knowingly collect any personal data from individuals under the age of 18.

If we discover that personal data of a child has been collected without our knowledge, such data will be deleted immediately and the relevant account will be closed at once. Parents or guardians who suspect their child has registered on our platform may contact us for immediate action.

11 Cross-Border Data Transfers

In the course of its operations, Winlah may store or process your data on servers located outside Malaysia, including in the Asia Pacific region. Any such data transfers are carried out with appropriate safeguards, including:

• Use of approved standard contractual clauses for international data transfers.
• Ensuring that recipient countries have equivalent or adequate data protection laws.
• Obtaining your explicit consent for specific transfers where required.

Winlah ensures that the level of protection given to your data remains consistent regardless of where that data is physically processed or stored.

12 Amendments to This Privacy Policy

Winlah reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other legitimate reasons. Any material changes will be communicated to you via:

• Notifications within the winlah platform upon login.
• Notification email sent to the address registered in your account.
• Updates the "last updated" date at the top of this page.

Your continued use of the Winlah platform after any changes to the Policy take effect constitutes your acceptance of the revised Policy. We encourage you to review this page periodically.

13 Contact Our Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact Winlah's Data Protection Officer (DPO):

• Email: [email protected]
• Email Subject: [Privacy Inquiry] – Your Name
• Response Time: Within 5 business days
• Live Chat: Available 24/7 on the Winlah platform

We are committed to handling all privacy-related inquiries thoroughly, fairly, and within a reasonable timeframe. Your satisfaction and trust in winlah are matters we take to heart.