Privacy Policy

This Privacy Policy (hereinafter referred to as "the Policy" or "this Policy") issued by winmyr57 (hereinafter referred to as "the Company", "we", "us", or "our") and governs the collection, use, storage, transfer, and disclosure of personal data in connection with the winmyr57 online gaming and sports betting platform accessible at winmyr57.cam (hereinafter referred to as "the Platform").

winmyr57 is committed to handling all personal data responsibly, transparently, and in compliance with applicable data protection principles. This Policy applies to all individuals who access or use the Platform, including registered account holders, visitors who browse without registering, and any individual whose personal data is otherwise processed by winmyr57 in connection with the Platform.

This Policy should be read alongside our Terms and Conditions and our Responsible Gambling Policy. By accessing or using the Platform, you acknowledge that you have read, understood, and agreed to the practices described in this Policy.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, residential address, date of birth, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, alteration, restriction, erasure, or destruction.
• "Data Subject" means the natural person whose Personal Data is being processed — in the context of this Policy, primarily the registered player or Platform visitor.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, winmyr57.
• "Third-Party Processor" means an external organisation that processes Personal Data on winmyr57's behalf under a data processing agreement, including payment processors, KYC providers, and fraud detection services.
• "Cookies" means small text files placed on your device by the Platform for purposes including session management, analytics, and preference storage.
• "KYC" means Know Your Customer — the identity verification process conducted to comply with anti-money-laundering obligations and confirm player eligibility.

winmyr57 collects Personal Data from you through several channels. The categories of data collected depend on how you interact with the Platform.

3.1 Data You Provide Directly

3.2 Data Collected Automatically

When you access the Platform, we automatically collect certain technical and behavioural data, including:

• IP address, geolocation data (country and city level), and device type;
• Browser type, operating system, and language preferences;
• Pages visited, session duration, bet history, and game interaction data;
• Referral source and marketing campaign identifiers;
• Cookie and session identifiers (see Section 8).

winmyr57 processes Personal Data one or more of the following lawful bases depending on the nature of the processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms and Conditions, including account management, processing deposits and withdrawals, and delivering gaming services.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including anti-money-laundering (AML) obligations, age verification, KYC requirements, and licensing conditions.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, operational analytics, responsible gambling enforcement, and service improvement — where such interests are not overridden by the Data Subject's rights.
• Consent: Processing based on your freely given, specific, and informed consent — for example, for direct marketing communications or non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

winmyr57 uses the Personal Data we collect for the following purposes:

• Account Management: Creating and maintaining your account, verifying your identity, and managing your login credentials and profile settings;
• Payment Processing: Processing MYR deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels;
• Game & Betting Services: Providing access to the full range of sports betting markets (Liga Super Malaysia, EPL, UFC, etc.), live casino games, slot titles, and other Platform content;
• Regulatory Compliance: Conducting KYC verification, filing mandatory reports as required by our licensing jurisdiction, and cooperating with lawful requests from regulatory authorities;
• Fraud Prevention & Security: Detecting and preventing fraudulent transactions, multi-accounting, bonus abuse, money laundering, and unauthorised access attempts;
• Responsible Gambling: Monitoring player behaviour to identify signs of problem gambling and applying relevant intervention measures including deposit limits, session alerts, and self-exclusion;
• Customer Support: Responding to queries, complaints, and support requests via live chat and email;
• Platform Improvement: Analysing aggregated usage data to improve platform performance, game selection, and user experience;
• Marketing Communications: Sending promotional offers and platform updates where you have given consent or where permitted under applicable law. You may opt out at any time.

winmyr57 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share Personal Data only in the following circumstances and only to the extent necessary:

6.1 Third-Party Service Providers

We engage the following categories of Third-Party Processors to assist in delivering the Platform services, all of whom are contractually bound to process data only for the purposes we specify and to implement appropriate data security measures:

• Payment Processors: FPX gateway operators, DuitNow network providers, and e-wallet platforms (Touch 'n Go, Boost, GrabPay) for transaction facilitation;
• KYC / Identity Verification Providers: Specialist providers who verify identity documents and conduct liveness checks;
• Fraud Detection & AML Services: Systems that screen transactions for financial crime indicators;
• Cloud & Infrastructure Providers: Hosting, database, and content delivery services that underpin the Platform's technical operation;
• Customer Support Tools: Live chat software providers that facilitate real-time support.

6.2 Regulatory & Legal Disclosure

winmyr57 may disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory obligation under our licensing jurisdiction. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement.

6.3 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of winmyr57's business operations, Personal Data held by the Company may be transferred to the acquiring entity as part of that transaction, subject to the same data protection obligations set out in this Policy.

winmyr57 operates under an international online gaming licence and may process or store certain Personal Data on servers or through service providers located outside of Malaysia. Where data is transferred internationally, we apply appropriate safeguards to ensure the data receives a standard of protection equivalent to that required under our licensing obligations, including:

• Contractual data processing agreements incorporating standard data protection clauses;
• Technical and organisational security measures appropriate to the nature of the data being transferred;
• Transfer only to jurisdictions or processors that provide adequate data protection guarantees.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to servers and processors outside Malaysia in accordance with the safeguards described above.

The winmyr57 Platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and support platform analytics. The following categories of cookies are in use:

You may manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies will impair your ability to access certain areas of the Platform.

winmyr57 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as general guide:

• Active Account Data: Retained for the duration of your account's active status plus minimum of five (5) years following permanent account closure;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by AML and licensing obligations;
• KYC Documentation: Retained for a minimum of five (5) years from account closure or from the date the document was submitted, whichever is later;
• Support Communications: Retained for a maximum of three (3) years from the date of the last interaction;
• Marketing Consent Records: Retained until consent is withdrawn and for a period of two (2) years thereafter as evidence of prior consent.

Upon expiry of the relevant retention period, Personal Data will be securely deleted or permanently anonymised in accordance with our data deletion procedures.

winmyr57 implements a comprehensive suite of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using industry-standard TLS/SSL protocols (256-bit encryption);
• Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted at rest using AES-256 encryption;
• Access Controls: Access to player Personal Data is restricted to authorised personnel on a strictly need-to-know basis, enforced through role-based access controls and multi-factor authentication;
• Regular Security Audits: The Platform undergoes periodic independent security assessments and penetration testing to identify and remediate vulnerabilities;
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach affecting your Personal Data, we will notify you and, where applicable, the relevant regulatory authority in accordance with our obligations.

Subject to applicable data protection law, you have the following rights in relation to the Personal Data we hold about you. To exercise any of these rights, please contact our Data Support team at [email protected]. We will respond to all verifiable requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held your Account.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our overiding legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your Personal Data in certain circumstances, for example while a rectification request is under review.
• Right to Data Portability: Where technically feasible and where processing is based on consent or contract, you may request your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your Personal Data where it is based on our legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.

The winmyr57 Platform is strictly for individuals aged21 years and above. We do not knowingly collect Personal Data from anyone under the age of 21. Our registration process includes mandatory date-of-birth verification, and all accounts are subject to identity document checks prior to withdrawal processing.

If we become aware that Personal Data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, void any associated transactions, and delete the data in question in accordance with applicable legal requirements.

If you believe a minor has registered on our platform, please notify us immediately at [email protected] and we will investigate without delay.

The Platform may contain links to or integrations with third-party services, including payment gateways and identity verification platforms. These third-party services operate under their own privacy policies, and winmyr57 is not responsible for the privacy practices of those external services.

We encourage you to review the privacy policies of any third-party service provider before submitting your Personal Data to them, even where the integration appears seamless within the winmyr57 Platform experience.

winmyr57 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — such as a new category of data collection, a change in retention periods, or a new category of third-party disclosure — we will provide reasonable notice to registered players via email to the address on their Account prior to the changes taking effect.

For non-material amendments (such as minor wording clarifications), the updated Policy will be published on this page with a revised "Last Updated" date. Your continued use of the Platform following any amendment constitutes your acceptance of the revised Policy.

We recommend reviewing this Policy periodically, particularly before making a deposit or submitting KYC documentation.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to raise a privacy-related complaint, please contact the winmyr57 Data Support team through the following channels:

• Live Chat: Available 24/7 within the Platform — select "Privacy / Data" as your query category for priority routing. Average response time: under 5 minutes.
• Email: [email protected] — please include "Privacy Request" in your subject line for fastest processing. Responses within 12 hours.

15.1 Complaints Procedure

If you are dissatisfied with our handling of your Personal Data or our response to a Data Subject rights request, you may submit a formal complaint by email. We will acknowledge formal complaints within 5 business days and provide a substantive response within 30 calendar days.

15.2 Regulatory Complaints

If you remain unsatisfied with our response to a formal complaint, you have the right to escalate the matter to the competent data protection authority in our licensing jurisdiction. Details of the relevant supervisory authority will be provided upon request.