Malaysia PDPA Compliance

Privacy Policy Winner Club
Malaysian Member Personal Data Protection

Winner club is committed to protecting the privacy and personal data of every member. This document clearly explains how we collect, use, store, and safeguard your information in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010.

Last Updated: 1 January 2026  ·  Effective immediately
Our Privacy Commitment

How winner club Protects Your Privacy

Member trust is Winner Club's most valuable asset. We invest seriously in best-in-class technology and procedures to ensure your data remains secure at all times.

🔐

256-Bit SSL Encryption

All data transmitted between your device and Winner Club's servers is protected by 256-bit SSL encryption — the same security technology used by Malaysia's leading banking institutions such as Maybank and CIMB. No third party can intercept your information.

🇲🇾

Malaysia PDPA 2010 Compliance

Winner club is fully compliant with Malaysia's Personal Data Protection Act (PDPA) 2010. We only collect data that is necessary, obtain your consent prior to processing, and give you full control over your personal data.

🚫

No Sale of Data to Third Parties

Winner Club has never sold, rented, or commercialised members' personal data to any third party for marketing or commercial purposes, and we never will — not without your explicit consent. Your data is not a commodity we trade.

🗄️

Secure Data Storage

Winner club members' personal data is stored on servers protected by multiple layers of physical and digital security. Access to this data is granted only to relevant personnel with a legitimate need to do so.

👁️

Full Transparency in Data Use

The Winner Club Privacy Policy is written in plain, easy-to-understand language — not confusing legal jargon. We believe you have the right to know exactly what we do with your data, and we are committed to being fully transparent about it.

⚙️

Your Data, Your Control

Winner club gives you full control over your personal data. You may request to view, update, correct, or delete your data at any time by contacting our customer support team, available 24 hours a day.

1

Introduction

Welcome to the Winner Club Privacy Policy. We, Winner Club ("We", "Platform"), deeply value the trust you place in us when sharing your personal information. This policy explains in detail how Winner Club collects, processes, uses, stores, and protects the personal data of members and visitors to winnerclub.im.

This winner club Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and its related amendments. By using the winner club platform, you acknowledge that you have read and understood this Privacy Policy and agree to the way we handle your personal data as described herein.

Important Note: This Privacy Policy forms part of the winner club Terms & Conditions and should be read together with that document. In the event of any conflict between the two, this Privacy Policy shall prevail in matters relating to personal data.
2

Personal Data Collected

Winner club collects your personal data in several ways — directly when you interact with our platform, and automatically as you browse our website. The following are the types of data we collect:

Data Category Type of Information Collection Methods
Identity Information Full name, IC number / Passport number, date of birth, gender Registration forms, KYC verification
Contact Information Mobile number, email address, residential address Account registration, profile updates
Financial Data Bank account number, eWallet account name (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay), transaction history Deposit & withdrawal process
Technical Data IP address, device type, web browser, operating system, access time Automatically collected during platform use
Activity Data Game history, betting records, winnings, and game preferences Automatically during gameplay
Communication Data Live chat conversation records, support emails, feedback Customer support interactions
Winner Club will never ask for your bank account password or full credit card details. If anyone claims to represent Winner Club and requests such information, please report it to us immediately.
3

How We Use Your Personal Data

Winner club uses collected personal data solely for legitimate and necessary purposes. The following are the primary purposes for which your data is used:

  • Account Management: Registering, verifying, and managing your winner club account, including the required KYC (Know Your Customer) process
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), and your winnings withdrawals
  • Service Provision: Providing access to all winner club games, including slots, live baccarat, football Sports Betting, cricket, and lottery
  • Customer Support: Resolving your enquiries, complaints, and requests efficiently and effectively
  • Platform Security: Detecting, investigating, and preventing fraudulent activity, duplicate account usage, or any violation of winner club terms
  • Legal Compliance: Fulfil legal obligations related to financial monitoring, reporting, and anti-money laundering
  • Direct Marketing: Sending you information about relevant Winner Club promotions, bonuses, and offers — only with your consent
  • Platform Improvements: Analysing usage patterns to improve the design, performance, and features of the Winner Club platform

We will only use your data for the purposes stated above. Should we wish to use your data for any other purpose, we will seek your consent beforehand.

4

Sharing Data with Third Parties

Winner club does not sell, rent, or disclose members' personal data to third parties for commercial purposes. However, there are limited situations in which we may share your data with certain parties:

  • Payment Service Providers: eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and FPX services to process your financial transactions — only the minimum data required for each transaction will be shared
  • Game Providers: Companies such as Pragmatic Play and PG Soft may receive technical data required to ensure games function correctly.
  • Legal Authorities: Where required by Malaysian law or a valid court order, Winner Club will disclose the necessary information to the relevant authorities
  • Technology Providers: Third-party companies providing technical infrastructure, cybersecurity, or cloud services that are bound by strict confidentiality agreements with winner club
All third parties who receive your data from Winner Club are contractually bound to handle it in accordance with data protection standards equal to or higher than those we apply ourselves.
5

Data Security

Winner club takes data security extremely seriously. We implement a range of technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or disclosure:

  • End-to-End Encryption: All data transmitted between your device and winner club's servers is encrypted using TLS 1.3 protocol with a 256-bit SSL certificate.
  • Database Protection: The Winner Club database is protected by multi-layered firewalls, intrusion detection systems, and strict access controls
  • Two-Factor Authentication: We encourage all winner club members to enable two-factor authentication (2FA) on their accounts for an added layer of security.
  • Regular Security Audits: winner club conducts regular penetration testing and security audits carried out by independent cybersecurity experts.
  • Employee Access Control: winner club staff may only access data necessary for their role, and all access is logged and monitored.
  • Secure Data Centres: Member data is stored in data centres with strict physical and environmental security controls, including temperature regulation, backup power systems, and 24-hour physical security.

While we implement best-in-class security measures, no system can guarantee 100% absolute security. We encourage you to take your own precautions, such as using a strong password and keeping your login credentials confidential.

6

Your Rights Under PDPA

As a winner club member, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act (PDPA) 2010:

👁️
Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

✏️
Right to Rectification

If your data is inaccurate or out of date, you may request that we correct or update it.

🗑️
Right to Erasure

You may request the deletion of your personal data, subject to applicable legal obligations.

🚫
Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

📦
Right to Data Portability

You may request your data in a machine-readable format for transfer to another provider.

⏸️
Right to Restrict Processing

Under certain circumstances, you may request that we restrict the way we process your data.

To exercise any of the rights above, please contact the winner club privacy team via email at support@winnerclub.im or via Live Chat within the platform. We will process your request within 14 business days.
7

Cookies Policy

Winner Club uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

Below are the types of cookies we use and your available choices:

You can manage or delete cookies at any time through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the winner club platform.

8

Financial & Transaction Data

Winner club pays particular attention to the protection of financial data given its sensitivity. The following outlines our policy regarding members' financial information:

  • Secure Payment Processing: All financial transactions on winner club — whether via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks) — are processed through fully encrypted channels
  • Card Data Retention: winner club does not directly store any credit or debit card details. This information is handled entirely by certified payment processors.
  • Fraud Monitoring: We continuously monitor all transactions to detect suspicious activity that may be related to fraud or money laundering.
  • AML/CFT Compliance: Winner Club complies with the Anti-Money Laundering (AML) and Counter Financing of Terrorism (CFT) requirements set by Bank Negara Malaysia
Records of all financial transactions are retained for a minimum of 7 years in accordance with Malaysian legal requirements, even after account closure. This is a statutory obligation that cannot be altered upon member request.
9

Data Retention Period

Winner club retains your personal data only for as long as necessary for the purposes described in this Privacy Policy, or as required by applicable law.

Data Type Retention Period Reason
Active account data Throughout the active account period Ongoing service provision
Financial transaction records 7 years after transaction Malaysian legal requirements
KYC / identity verification data 5 years after account closure AML/CFT Compliance
Support communication records 3 years Dispute resolution
Technical & access logs 12 months Security & Audit
Marketing data (with consent) Until consent is withdrawn Direct marketing

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you.

10

Child Protection

The winner club platform is intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that personal data of an underage child has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

If you know or suspect that someone under the age of 18 has registered a winner club account, please contact us immediately at support@winnerclub.im so that immediate action can be taken.
11

Privacy Policy Amendments

Winner club reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or industry developments. When we make material changes, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending notifications via registered email (for significant changes)
  • Displaying a prominent notice on the winner club platform for at least 14 days before changes take effect

We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your information. Your continued use of the Winner Club platform after any changes are posted will be considered acceptance of the revised policy.

12

Contact the winner club Privacy Officer

For any questions, concerns, or requests relating to your privacy and personal data protection at Winner Club, please contact our Data Privacy Officer through the following channels:

  • Email: support@winnerclub.im (please use "Data Privacy Enquiry" as the email subject)
  • Live Chat: 24/7 chat icon at the bottom-right corner of the winner club platform
  • Frequently Asked Questions: Visit FAQ page us for prompt responses to privacy-related enquiries

The winner club Data Privacy Officer will respond to all privacy enquiries within 14 business days. For cases requiring more in-depth investigation, we will keep you informed of the expected resolution timeline.

If you feel that Winner Club has not handled your privacy complaint satisfactorily, you have the right to lodge a report with Department of Personal Data Protection Malaysia (JPDP) under Malaysia's Ministry of Communications and Digital.

Your Data Is Safe with Winner Club

We take your privacy as seriously as you do. Register a winner club account today and enjoy a gaming experience that is safe, fair, and fully protected.

Bahasa Melayu