Privacy Policy — winlagi44

Introduction

This Privacy Policy ("Policy") is issued by winlagi44 ("the Company", "we", "us", "our") and applies to all personal data collected through the winlagi44 website at https://winlagi44.cam and any associated mobile-optimised services (collectively, the "Platform").

winlagi44 is an online casino and sports betting platform serving players primarily in Malaysia. The Platform allows registered users to place wagers on sports events — including Liga Super Malaysia, English Premier League (EPL), and UFC — as well as access live dealer casino games, slot titles, and other gaming products, all transacted in Malaysian Ringgit (MYR).

This Policy should be read alongside our Terms & Conditions, which govern the overall use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on matters of data handling, this Policy shall prevail.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, identification number, location data, email address, and any other data that can be used directly or indirectly to identify an individual.
• "Processing" — Any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" — winlagi44, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Subject" — Any living individual whose personal data is processed by winlagi44 — primarily, registered users of the Platform.
• "Third Party" — Any person or entity other than the Data Subject and winlagi44, including payment processors, analytics providers, and KYC verification partners.
• "KYC" — Know Your Customer. The identity and age verification process required by winlagi44 before certain account actions, including withdrawals, may be completed.
• "Cookies" — Small text files placed on your device by the Platform to facilitate session management, analytics, and personalisation.

Data We Collect

winlagi44 collects personal data through several channels. The categories of personal data we collect are set out below.

3.1 Data You Provide Directly

When you register, verify your account, or contact support, you provide us with personal data including:

• Full legal name as it appears on your government-issued identification document
• Date of birth (used for mandatory 21+ age verification)
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Email address and mobile phone number
• Government-issued identification number (MyKad, Passport number) submitted during KYC verification
• Payment method details — including Touch 'n Go eWallet account references, Boost wallet IDs, GrabPay account identifiers, or bank account details for DuitNow/FPX transfers
• Communications you send to our support team via live chat, WhatsApp, or email

3.2 Data Collected Automatically

When you access and use the Platform, certain technical data is collected automatically, including:

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser type
• Session timestamps, duration, and pages visited
• Betting and gaming activity — game types played, wager amounts, game outcomes
• Transaction records — deposits, withdrawals, and bonus credits in MYR
• Cookie and tracking technology data (detailed in Section 9)

3.3 Data from Third Parties

We may receive limited personal data about you from third-party sources in specific circumstances, including:

• Identity verification data returned by our KYC verification partner(s) following document submission
• Transaction confirmation data from payment processors (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX) to confirm deposit or withdrawal completion
• Fraud and anti-money laundering screening data from licensed compliance service providers

Data Processing & Legal Basis

winlagi44 processes personal data only where a lawful basis exists under applicable data protection law. The primary legal bases on which we rely are set out in the table below.

How We Use Your Data

The personal data collected by winlagi44 is used for the following purposes:

5.1 Account and Service Delivery

To create and maintain your winlagi44 account; to verify your identity and confirm you meet the 21+ age requirement; to process deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or direct bank transfer; to process withdrawals to verified Malaysian bank accounts; and to ensure you can access the full range of Platform services including sports betting, live dealer games, and slot titles.

5.2 Security and Fraud Prevention

To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited activities on the Platform. This includes monitoring betting patterns, transaction histories, and device/IP consistency as part of our ongoing security protocols.

5.3 Legal and Regulatory Compliance

To meet anti-money laundering (AML) and counter-terrorism financing (CTF) obligations; to cooperate with lawful requests from law enforcement or regulatory authorities; and to maintain records required for financial audit and compliance purposes.

5.4 Customer Support

To respond to your enquiries submitted via live chat, WhatsApp, or email; to investigate and resolve account or payment disputes; and to maintain records of support interactions to improve service quality.

5.5 Platform Improvement and Analytics

To analyse Platform usage patterns, identify technical issues, optimise betting and gaming features, and develop new products based on player behaviour and feedback. All analytics data used for this purpose is aggregated or pseudonymised where possible.

5.6 Marketing Communications

Where you have provided explicit consent, we may send you promotional communications about bonuses, new game launches, sports betting offers (including Liga Super Malaysia and EPL match promotions), and loyalty programme updates. You may withdraw consent to marketing communications at any time by contacting our support team.

Data Sharing & Disclosure

winlagi44 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the limited circumstances described below.

6.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf under strict contractual obligations consistent with this Policy. Categories include:

• Payment processors: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and Malaysian banking partners (Maybank, CIMB, Public Bank, Hong Leong, RHB) — for deposit and withdrawal processing
• KYC/identity verification providers: For document verification during the account verification process
• IT infrastructure and cloud service providers: For secure hosting and data storage
• Fraud and AML screening services: For compliance monitoring

6.2 Legal Requirements

We may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, regulation, or a valid legal process (such as a court order or search warrant). In such cases, we will disclose only the minimum information required by law.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a part of our business, personal data held by winlagi44 may be transferred to the successor entity. Users will be notified of any such transfer that materially affects the processing of their personal data.

Data Retention

winlagi44 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, comply with applicable legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are guided by the following principles:

• Active account data: Retained for the duration of the account's active lifetime plus a minimum post-closure period required by applicable regulations.
• Transaction records (deposits and withdrawals in MYR): Retained for a minimum of five (5) years from the date of the transaction to comply with financial record-keeping and AML obligations.
• KYC and identity verification documents: Retained for the period required by applicable anti-money laundering legislation, typically five (5) years after the end of the account relationship.
• Customer support communications: Retained for up to two (2) years after the closure of the relevant support ticket.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original personal information.

Data Security

winlagi44 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption on all data transmissions between user devices and winlagi44 servers
• Two-factor authentication (2FA) available to all registered users
• Access controls — internal access to personal data is restricted on a strict need-to-know basis, with role-based permissions enforced
• Encrypted data storage for sensitive fields including identity document references and payment method identifiers
• Regular security audits and penetration testing conducted by qualified third-party security professionals
• Incident response procedures to detect, contain, and report data security incidents within required timeframes

Notwithstanding the above measures, no internet-based service can guarantee absolute security. Users are encouraged to use strong, unique passwords for their winlagi44 account and to enable two-factor authentication to maximise personal account security.

Cookies & Tracking Technologies

winlagi44 uses cookies and similar tracking technologies to maintain session integrity, analyse Platform usage, and personalise certain aspects of the user experience. The categories of cookies we use are set out below.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to log in and use the Platform. winlagi44 does not use advertising cookies or permit third-party advertising networks to place cookies on Platform pages.

Your Rights

As a user of the winlagi44 Platform, you have the following rights in relation to your personal data. These rights may be subject to certain limitations under applicable law — for example, where retention is required for legal compliance or fraud prevention purposes.

To exercise any of the above rights, please contact our Data Protection Officer (DPO) using the details provided in Section 14. We will respond to all valid requests within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 30 days with prior written notification.

International Transfers

winlagi44 may transfer personal data to countries outside Malaysia in connection with its global infrastructure, third-party service providers, and game studio partners. Such transfers are necessary to deliver the Platform services you have subscribed to.

Where personal data is transferred internationally, winlagi44 ensures that appropriate safeguards are in place, which may include contractual protections (such as standard data protection clauses), the adequacy of the destination jurisdiction's data protection framework, or other legally recognised mechanisms.

By using the winlagi44 Platform, you acknowledge and consent to the transfer of your personal data to countries outside Malaysia where such transfers are necessary to provide the services described in these terms.

Minors & Age Verification

The winlagi44 Platform is strictly intended for individuals who are at least 21 years of age. winlagi44 does not knowingly collect personal data from persons under 21. Age verification is a mandatory step of the account registration and KYC process.

Where winlagi44 becomes aware that an account is held by a person under the age of 21, the account will be immediately suspended, any deposits returned where practicable, and all associated personal data reviewed for appropriate handling in accordance with applicable law.

Parents or guardians who believe that a minor may have created an account on the Platform are encouraged to contact our support team immediately via live chat or email at [email protected] (plain text — not a clickable link).

Policy Changes

winlagi44 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The date of the most recent revision is displayed at the top of this page.

Material changes — those that significantly affect how we collect, use, or share your personal data — will be communicated to registered users via a prominent notice on the Platform or, where practicable, by email to the registered account address at least 14 days prior to the changes taking effect.

Your continued use of the Platform following the posting of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and, where appropriate, request account closure.

Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by winlagi44, please contact our Data Protection Officer (DPO) through the following channels:

• Email: [email protected] — with subject line "Privacy / Data Request" (plain text — not a clickable link)
• Live Chat: Available 24/7 on the Platform — state "Data Request" to be routed to the appropriate team. Average response time: 3–5 minutes.
• Languages: Requests accepted in English, Bahasa Melayu, and Chinese

winlagi44 is committed to addressing all privacy-related enquiries promptly and transparently. Where your concern relates to a potential data breach or serious privacy violation, please mark your communication as urgent so that it is escalated appropriately.