winlah Privacy Policy

1. Who We Are

This Privacy Policy applies to the winlah online gaming platform, accessible at winlah.co (referred to throughout this document as "winlah", "we", "us", or "our"). winlah operates under international gaming authority licensing and is committed to handling personal data responsibly and in accordance with applicable data protection law.

winlah acts as the data controller in respect of the personal data it processes about registered Members and visitors to the winlah website. This means winlah determines the purposes and means of processing your personal data and is responsible for ensuring that processing is lawful, fair, and transparent.

If you have any questions or concerns about how winlah handles your personal data, you may contact our Data Protection team at [email protected]. We take all privacy enquiries seriously and aim to respond within five (5) business days.

2. Personal Data We Collect

winlah collects personal data in the following categories depending on how you interact with the platform:

winlah does not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required by law or regulatory obligation. Where such data is required for compliance purposes, it is handled with additional security and care.

3. How We Use Your Personal Data

winlah uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity and age (21+), and manage your ongoing membership on the winlah platform.
• Service delivery: To provide access to the games, sports betting markets, and all other features of the winlah platform.
• Financial transactions: To process deposits, withdrawals, and refunds in MYR via your chosen payment method (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, or other supported methods).
• Regulatory compliance: To fulfil Know Your Customer (KYC), Anti-Money Laundering (AML), and counter-terrorism financing obligations required by our licensing authority.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security threats.
• Responsible gaming: To monitor playing patterns, enforce account limits, and identify Members who may be at risk of gambling-related harm, in accordance with our responsible gaming obligations.
• Customer support: To respond to your enquiries, process complaints, and provide assistance when you contact winlah support.
• Platform improvement: To analyse usage patterns, conduct internal research, and improve the features, performance, and user experience of the winlah platform.
• Marketing communications: Where you have provided explicit consent, to send you promotional emails, SMS messages, or in-platform notifications about winlah bonuses, new games, and offers. You may withdraw this consent at any time.

4. Legal Basis for Processing

winlah processes your personal data on the following legal bases:

• Performance of a contract: Processing necessary to register your account, deliver the platform's services, and process financial transactions.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, age verification, and data retention requirements imposed by our licensing authority.
• Legitimate interests: Processing necessary for fraud prevention, security, responsible gaming monitoring, and platform improvement, where winlah's interests are not overridden by your rights and interests.
• Consent: Processing of your data for direct marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5. Cookies & Tracking Technologies

winlah uses cookies and similar tracking technologies on the winlah.co website to operate the platform, remember your preferences, maintain your session, and analyse website performance. The types of cookies used include:

• Strictly necessary cookies: Required for the platform to function correctly. These cannot be disabled without affecting platform functionality. Examples include session authentication tokens and CSRF protection cookies.
• Functional cookies: Remember your preferences such as language settings and display options to personalise your experience.
• Analytics cookies: Collect aggregated, anonymised data about how visitors use the winlah website to help us improve performance and usability.
• Marketing cookies: Used to track whether you arrived via a promotional channel and to measure the effectiveness of winlah's advertising. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the winlah platform. By continuing to use winlah.co, you consent to the use of strictly necessary and functional cookies.

6. Sharing Your Personal Data

winlah does not sell your personal data. We may share your data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment service providers: Including Touch n Go eWallet, Boost, and banking partners (Maybank, CIMB, Public Bank) to process your financial transactions securely.
• Identity verification providers: Third-party KYC and document verification services used to confirm your identity and age as required by our licensing obligations.
• Game content providers: Licensed game studios whose software is integrated into the winlah platform. These providers may receive anonymised or pseudonymised technical data necessary to deliver game functionality.
• IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity providers who support the technical operation of the winlah platform under data processing agreements that require them to protect your data.
• Regulatory and law enforcement authorities: Where winlah is required by law, court order, or regulatory instruction to disclose personal data. This includes disclosures to our licensing authority as required by our operating licence.
• Professional advisers: Lawyers, auditors, and consultants acting under confidentiality obligations where necessary for legal, compliance, or audit purposes.

All third-party processors engaged by winlah are subject to contractual data processing obligations consistent with applicable data protection law. winlah remains responsible for the handling of your personal data by these processors.

7. International Data Transfers

winlah's primary data processing operations are conducted within the jurisdiction of our licensing authority. However, some of our service providers and technology partners may be located in, or process data in, countries outside Malaysia. Where such international transfers occur, winlah ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require recipient organisations to handle your data to a standard equivalent to that required under applicable data protection law.

If you have questions about the specific safeguards applicable to any particular international transfer of your data, please contact us at [email protected].

8. Data Retention

winlah retains your personal data for as long as your account remains active and for a defined period thereafter, as required by our licensing obligations and applicable law. Specific retention periods include:

• Account and identity data: Retained for the duration of your membership plus a minimum of five (5) years following account closure, as required by AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications: Retained for three (3) years from the date of the interaction, or longer if related to an ongoing complaint or legal matter.
• Marketing consent records: Retained for as long as you remain opted-in, plus a reasonable period following opt-out to demonstrate compliance.
• Technical and log data: Typically retained for twelve (12) months for security and fraud prevention purposes, subject to any legal hold requirements.

When data is no longer required for any purpose, winlah deletes it securely or anonymises it so that it can no longer be associated with you.

9. Your Data Protection Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by winlah:

• Right of access: You may request a copy of the personal data winlah holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where winlah no longer has a lawful basis to retain it. Note that certain data must be retained to comply with legal obligations and cannot be deleted on request.
• Right to restrict processing: You may request that winlah limits how it uses your data in certain circumstances, for example while the accuracy of data you have disputed is being verified.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that winlah provides your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes. winlah will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

To exercise any of these rights, please contact winlah at [email protected] with the subject line "Data Rights Request". winlah will respond within thirty (30) days. We may need to verify your identity before processing your request.

10. Children's Privacy

winlah is a strictly 21+ platform. We do not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step in the winlah registration process, and we employ ongoing checks to prevent underage access.

If winlah becomes aware that personal data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, that data will be deleted immediately and the account closed. If you believe that a minor has registered on winlah, please contact us immediately at [email protected].

11. Security Measures

winlah implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and winlah servers.
• Encrypted storage of passwords and sensitive financial data.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular security audits and penetration testing of the winlah platform.
• Account anomaly detection to identify and respond to suspicious login activity.
• Secure data centres with physical access controls and environmental protections.

While winlah takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely immune to risk. Members are encouraged to use strong, unique passwords and to contact winlah immediately if they suspect any compromise of their account credentials.

12. Third-Party Links

The winlah website may from time to time reference or contain links to third-party resources. This Privacy Policy applies solely to the winlah.co platform. winlah is not responsible for the privacy practices of any third-party websites or services. We encourage you to review the privacy policy of any third-party site you visit.

13. Changes to This Privacy Policy

winlah reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. Material changes will be communicated to registered Members via email or an in-platform notification before they take effect. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised.

Your continued use of the winlah platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not accept the updated Policy, you should stop using the platform and may close your account in accordance with the winlah Terms & Conditions.

14. Contact Us & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or how winlah processes your personal data, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 via the winlah platform

If you are not satisfied with winlah's response to a privacy concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction or with the supervisory authority of winlah's licensing jurisdiction. winlah will cooperate fully with any such regulatory investigation.