Privacy Policy

Win22 ("we", "us", "our", "Company", "Platform") operates the online betting and gaming website accessible at https://win22.cam. We understand that your personal data is important, and we take our obligations as a data controller seriously. This Privacy Policy ("Policy") describes in transparent, plain terms how Win22 collects, processes, stores, shares, and protects personal data in connection with your use of the Win22 platform and its associated services.

This Policy applies to all users of the Win22 platform, including registered account holders, visitors who browse without registering, and individuals who contact our support team. It covers data collected through the website, via customer support interactions, through KYC verification processes, and through any communications we send to you.

By accessing the Win22 platform, creating an account, or interacting with any Win22 service, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent to the terms of this Policy, you must discontinue use of the Win22 platform immediately.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Win22 is the data controller responsible for the personal data collected and processed through the Win22 platform. As data controller, Win22 determines the purposes for which your personal data is processed and the means by which that processing takes place.

Win22 processes personal data in connection with the provision of online sports betting, live dealer casino, slot gaming, esports wagering, and associated services. We serve users located in Malaysia, including players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other localities, as well as eligible users in other permitted jurisdictions.

All enquiries regarding this Privacy Policy, requests to exercise data subject rights, or concerns about data processing practices should be directed to Win22's Data Privacy team via the contact details set out in Section 16 of this Policy.

Win22 collects the following categories of personal data in connection with the operation of the platform:

4.1 Account Registration Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (for age verification — minimum age 21)
• Email address and mobile phone number
• Residential address including postcode, city (e.g. Petaling Jaya, Shah Alam, Kuala Lumpur), and state
• Username and hashed/encrypted account password
• Preferred currency (MYR / USDT / BTC)

4.2 Identity Verification (KYC) Data

• Scanned copies or photographs of government-issued identity documents — MyKad, Passport, or Driver's License
• Proof of address documentation — utility bills, bank statements, or official correspondence
• Selfie photograph holding your identity document
• Source of funds documentation where required by compliance protocols

4.3 Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts, dates, and payment methods used
• Payment method details — last four digits of card number, bank account details, e-wallet identifiers (Touch 'n Go, Boost, DuitNow), or cryptocurrency wallet addresses (USDT, BTC)
• Wagering history including bet amounts, game types, odds, and outcomes
• Bonus and promotion usage records

4.4 Technical and Usage Data

• IP address and geolocation data derived from IP
• Browser type, version, and operating system
• Device type, screen resolution, and hardware identifiers
• Pages visited, session duration, click patterns, and navigation behaviour
• Login timestamps and session activity logs

4.5 Communication Data

• Support ticket content and live chat transcripts
• Email correspondence with Win22 support or compliance teams
• Responses to surveys, feedback requests, or promotional communications

Win22 collects personal data through the following channels and mechanisms:

• Direct collection: Information you provide when registering an account, completing your profile, submitting KYC documents, making deposits or withdrawal requests, or contacting customer support.
• Automated collection: Technical data collected automatically when you access the Win22 platform, including through cookies, web beacons, pixel tags, log files, and similar tracking technologies embedded in the website.
• Third-party sources: Identity verification data from KYC service providers; geolocation data from IP address intelligence services; fraud and AML screening data from compliance data partners; payment processing information from payment gateway providers such as those supporting FPX, DuitNow, Touch 'n Go eWallet, Boost, and cryptocurrency processors.
• Publicly available sources: Where relevant for compliance or fraud investigation purposes, Win22 may cross-reference data against publicly available records or databases.

Win22 processes your personal data for the following specific purposes:

Win22 processes personal data only where a valid legal basis exists under applicable data protection legislation. The primary legal bases on which Win22 relies are:

• Contractual Necessity: Processing that is necessary to perform the contract between you and Win22 — including account creation, bet settlement, and payment processing. Without this processing, Win22 cannot provide its services.
• Legal Obligation: Processing required to comply with applicable law, including KYC/AML regulatory requirements, tax reporting obligations, and responses to lawful authority requests.
• Legitimate Interests: Processing that is necessary for Win22's legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

Win22 does not sell your personal data to any third party. We may, however, share your data with the following categories of recipients where necessary and where appropriate data processing agreements or equivalent safeguards are in place:

• Payment Service Providers: Financial institutions and payment gateways that process transactions on Win22's behalf — including FPX operators, DuitNow service providers, Touch 'n Go, Boost, Maybank, CIMB, Public Bank, Hong Leong Bank, Visa/Mastercard networks, and cryptocurrency transaction processors. These parties receive only the data necessary to execute the relevant transaction.
• KYC & Identity Verification Partners: Third-party identity verification services that assist Win22 in confirming the identity, age, and address of users. These processors are bound by strict contractual data protection obligations.
• AML & Fraud Screening Services: Compliance technology providers used to screen transactions and account activity against sanctions lists, fraud databases, and money laundering risk indicators.
• Technology & Infrastructure Providers: Cloud hosting providers, content delivery networks, database operators, and platform maintenance contractors who provide the technical infrastructure on which Win22 operates. These parties process data only on Win22's instruction.
• Customer Support Platforms: Third-party tools used to manage live chat, ticketing, and email support — all subject to data processing agreements aligned with this Policy.
• Analytics Providers: Web analytics platforms used to measure platform performance and user behaviour in aggregate or pseudonymised form.
• Regulatory Authorities and Law Enforcement: Where required by applicable law, court order, or lawful authority request, Win22 may be obligated to disclose user data. Win22 will notify affected users of such disclosures where legally permitted to do so.

As an online platform serving users across Malaysia and other eligible jurisdictions, Win22 may transfer personal data to third-party service providers and infrastructure partners located in countries outside Malaysia. Such transfers may include data being processed on servers located in jurisdictions with data protection regimes that differ from those of Malaysia.

When Win22 transfers personal data internationally, it implements appropriate safeguards to ensure that the transferred data remains protected to a standard consistent with this Policy. These safeguards may include:

• Contractual data processing agreements incorporating standard contractual clauses that impose obligations on recipients equivalent to those required under applicable data protection law.
• Transfers to countries or organisations that have received an adequacy determination from a recognised data protection authority.
• Technical and organisational security measures implemented by receiving parties, verified through due diligence assessments.

By using the Win22 platform, you acknowledge and consent to the international transfer of your personal data in accordance with the safeguards described in this section.

Win22 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, to comply with AML/CTF regulatory record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years from the date of account closure or the last transaction — whichever is later — in line with anti-money laundering obligations applicable to online gaming operators.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years for accounting, tax, and regulatory compliance purposes.
• Support Communications: Customer support interactions are retained for three (3) years from the date of the last interaction, or longer where required for ongoing disputes or regulatory investigations.
• Marketing Consent Records: Records of marketing consent are retained for the duration of the marketing relationship plus two (2) years, to demonstrate compliance with consent obligations.
• Technical Logs: Server access logs and session data are retained for up to twelve (12) months for security monitoring and fraud investigation purposes.

Upon the expiry of the applicable retention period, Win22 will securely delete or irreversibly anonymise your personal data, unless a longer retention period is required by law or for the establishment, exercise, or defence of legal claims.

Win22 uses cookies and similar tracking technologies to operate and improve the platform, remember your preferences, and analyse how users interact with our services. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential to the core operation of the platform — including session management, login authentication, and security tokens. These cookies cannot be disabled without materially affecting platform functionality.
• Performance and Analytics Cookies: Used to collect aggregate information about how users navigate the platform, which pages are visited most, and where errors occur. This data is used solely to improve platform performance and is processed in pseudonymised form where possible.
• Functional Cookies: Remember your preferences and settings — such as language, preferred currency (MYR vs. USDT), and display options — to personalise your experience on return visits.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These are only activated where you have provided explicit consent.

You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality or performance of the Win22 platform. Strictly necessary cookies cannot be disabled through browser settings without preventing platform access.

Win22 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Industry-standard 256-bit SSL/TLS encryption for all data transmitted between your device and Win22 servers — verifiable through the padlock icon in your browser's address bar.
• Encrypted storage of sensitive data including passwords (stored as salted cryptographic hashes) and financial identifiers.
• Access controls limiting internal access to personal data on a strict need-to-know basis, with role-based permissions and mandatory multi-factor authentication for all staff with data access.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Real-time monitoring and alerting for anomalous access patterns, intrusion attempts, and suspicious account activity.
• Data processing agreements with all third-party processors requiring them to implement equivalent security standards.

In the event of a personal data breach that poses a risk to your rights and freedoms, Win22 will notify affected users and, where required, the relevant regulatory authority, within the time frames prescribed by applicable law.

As a data subject whose personal data is processed by Win22, you hold the following rights under applicable data protection legislation. These rights are subject to applicable legal limitations and may be exercised by contacting Win22's Data Privacy team using the contact details in Section 16.

Win22 will respond to all valid data rights requests within thirty (30) calendar days. Where requests are complex or numerous, Win22 may extend this period by a further sixty (60) days with written notification to you. Requests may be submitted by contacting Win22 support as described in Section 16.

Win22 services are strictly intended for adults aged 21 years and above. Win22 does not knowingly collect personal data from individuals under the age of 21. If Win22 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended and all personal data associated with the underage account will be promptly deleted, with any deposited funds returned to the source payment method.

Parents and guardians who believe their child may have registered or attempted to register a Win22 account should contact Win22 support immediately so that the matter can be investigated and resolved without delay.

Win22 reserves the right to amend, update, or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform functionality. The "Last Updated" date at the top of this page will be revised accordingly whenever material changes are made.

Where amendments are material — meaning they significantly affect how your personal data is processed or your rights as a data subject — Win22 will provide advance notice via the email address registered to your account and by publishing a notice on the platform prior to the changes taking effect. Minor or administrative updates may be implemented without prior notice.

Your continued use of the Win22 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to the revised Policy, you should cease using the platform and contact support to request account closure.

If you have any questions, concerns, or complaints about this Privacy Policy or the way Win22 processes your personal data, or if you wish to exercise any of your data subject rights, please contact the Win22 Data Privacy team using the details below. All contact information is provided as plain text only.

Please mark all formal privacy and data rights correspondence clearly with the subject line "Privacy Enquiry" or "Data Rights Request" to ensure your communication is routed to the appropriate team. Win22 is committed to responding to all data privacy enquiries promptly and in accordance with applicable law.