Privacy Policy

This Privacy Policy ("Policy") describes how winmy13 ("the Company", "we", "us", "our"), operator of the online gaming platform accessible at https://winmy13.cam ("the Platform"), collects, processes, stores, and protects the personal data of individuals ("you", "your", "the Player") who register an account, access the Platform, or otherwise interact with our services.

winmy13 serves players primarily located in Malaysia, including individuals in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other major cities. Our services are delivered in Malaysian Ringgit (MYR) and via locally integrated payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong.

By registering an account with winmy13, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy is incorporated by reference into our Terms & Conditions and forms part of the overall agreement governing your use of the Platform.

We may update this Policy from time to time. Any material changes will be communicated via a prominent notice on the Platform, and your continued use of the Platform following publication of such changes shall constitute your acceptance of the revised Policy.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identity number, contact details, IP address, device identifiers, financial data, and gaming activity records.
• "Processing" — any operation performed on personal data, whether by automated or manual means, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "Data Controller" — winmy13, which determines the purposes and means of processing your personal data.
• "Data Processor" — any third party that processes personal data on behalf of winmy13 under a contractual data processing agreement.
• "KYC" — Know Your Customer verification procedures required for regulatory compliance and identity authentication.
• "AML" — Anti-Money Laundering regulatory obligations applicable to online gaming platforms.
• "Consent" — freely given, specific, informed, and unambiguous agreement to the processing of personal data for a stated purpose.

winmy13 collects personal data across several categories, depending on how you interact with the Platform. The following table summarises the categories of data collected and the context in which they arise:

We do not collect full payment card numbers, CVV codes, or complete bank account numbers. Financial transaction processing is handled via our verified third-party payment partners, who maintain their own data security standards.

winmy13 processes personal data only where a valid legal basis exists. The primary legal grounds on which we rely are as follows:

winmy13 uses the personal data we collect for clearly defined purposes. We do not use your data for any purpose that has not been identified in this Policy. The primary purposes for which we process your data are:

• Account Management: Creating and maintaining your registered account, authenticating your identity upon login, and managing account settings and preferences.
• Transaction Processing: Processing deposits via Malaysian payment methods (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, and others) and executing withdrawal requests to your nominated account.
• Regulatory Compliance: Conducting KYC identity verification, performing AML transaction screening, and maintaining records as required by applicable gaming and financial regulations.
• Fraud Prevention and Security: Detecting and preventing fraudulent account activity, unauthorised access, collusion, and financial crime. Technical data (including IP address and device identifiers) is used to identify and mitigate suspicious activity in real time.
• Responsible Gambling: Monitoring gaming patterns to identify potential problem gambling behaviours, enforcing player-set limits, and facilitating self-exclusion where requested. This processing is performed as a matter of player duty of care.
• Customer Support: Responding to enquiries, resolving complaints, and maintaining records of support interactions to ensure continuity of service.
• VIP and Loyalty Programme Management: Tracking wager volumes, calculating cashback entitlements, managing tier progression, and delivering VIP-specific communications and benefits.
• Marketing Communications (where consented): Sending promotional notifications about offers, bonuses, and new features — only to Players who have opted in. You may opt out at any time by contacting support or adjusting your account notification settings.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the functionality, performance, and user experience of the Platform.

winmy13 does not sell your personal data. We do not transfer your data to third parties for their own independent marketing or commercial purposes. Your personal data may be disclosed to the following categories of recipients only where necessary and under strict data protection obligations:

• Payment Processing Partners: Malaysian payment infrastructure providers (including e-wallet operators and FPX-connected banks) receive the minimum financial data necessary to process your deposit or withdrawal transaction.
• KYC and Identity Verification Providers: Third-party identity verification platforms that assist in authenticating your identity documents as part of the KYC process. These providers are contractually prohibited from using your data for any other purpose.
• Game Studio Partners: Licensed third-party game providers may receive your session and gaming data to the extent necessary to deliver game functionality and resolve disputes. No personally identifiable information beyond a pseudonymous player ID is transmitted to game studios.
• Fraud and AML Screening Services: External compliance and fraud-screening providers that assist in transaction monitoring and suspicious activity detection as required by applicable regulations.
• Regulatory and Law Enforcement Authorities: winmy13 will disclose personal data to competent authorities where required by law, court order, or regulatory directive. We are legally obligated to report suspicious transactions under applicable AML regulations.
• Professional Advisers: Legal counsel, auditors, and accountants who are bound by professional confidentiality obligations, where disclosure is necessary in the course of their services to winmy13.

winmy13 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. The following categories of cookies are used:

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair the ability to access certain features of the Platform, including secure login and payment processing. winmy13 does not use advertising or cross-site tracking cookies.

As a data subject, you have the following rights in relation to the personal data winmy13 holds about you. To exercise any of these rights, please submit a written request to [email protected]. We will respond within 30 days of receipt of a valid request.

winmy13 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your active account relationship with winmy13 plus any applicable statutory period following account closure.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure, in compliance with AML regulatory requirements. This retention period cannot be shortened at the Player's request.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations.
• Customer Support Records: Retained for three (3) years following resolution of the relevant enquiry, for audit and quality assurance purposes.
• Marketing Preference Data: Retained until you withdraw consent or opt out of marketing communications, at which point your preference data will be updated and marketing communications will cease.
• Technical and Log Data: Typically retained for 12 months, unless a longer period is required for an ongoing fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

winmy13 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

In the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of affected individuals, winmy13 will notify affected Players without undue delay and take immediate steps to contain and remediate the breach.

The winmy13 Platform is intended exclusively for adults. Access is strictly restricted to individuals aged 21 years and above. winmy13 does not knowingly collect personal data from persons under the age of 21.

Where winmy13 becomes aware or reasonably suspects that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete all associated personal data, and reverse any associated financial transactions where technically and legally possible.

If you believe that an underage individual has created an account with winmy13, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

winmy13 operates an online platform that may involve the processing of personal data by service providers and infrastructure partners located in jurisdictions other than Malaysia. Where personal data is transferred outside of Malaysia, winmy13 ensures that such transfers are subject to appropriate safeguards, including:

• Contractual data processing agreements imposing equivalent data protection standards on the recipient;
• Transfer only to jurisdictions that provide adequate levels of data protection as recognised by applicable frameworks;
• Technical and organisational measures ensuring the data remains protected to the same standard as within Malaysia throughout the transfer and subsequent processing.

winmy13's primary data infrastructure is designed to minimise unnecessary cross-border data transfers. Where processing by game studio partners or payment infrastructure providers involves international data transfer, we ensure appropriate safeguards are contractually in place.

winmy13 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws and regulations, or the services we provide. The revised Policy will be published on this page with an updated "Last Updated" date.

For material changes — those that significantly affect your rights or how we use your data — we will provide prominent notice on the Platform and, where appropriate, direct notification to your registered email address. We recommend reviewing this page periodically to stay informed of any updates.

Continued use of the Platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms, to the extent permitted by applicable law. Where your explicit consent is required for a new processing activity, we will request such consent separately before commencing that processing.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the processing of your personal data, please contact the winmy13 Data Protection team through any of the channels below. We take all privacy enquiries seriously and will respond within 30 days of receipt.

For issues relating to responsible gambling, self-exclusion, or deposit limits, please visit our dedicated Responsible Gambling page, which contains specific guidance and contact information for player protection matters.