Your privacy is Winway's priority. This document clearly explains how we collect, use, protect and manage your personal data – so you can use the Winway platform with full confidence that your information is always in safe hands.
Winway ("we", "the platform") is committed to protecting the privacy of every member who uses our online betting platform. This Privacy Policy explains in detail how we collect, use, store, disclose, and protect your personal information when you register for and use Winway's services in Malaysia.
By registering a Winway account or continuing to use our platform, you agree to the collection and use of your personal information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Winway platform and contact us to close your account.
This Winway Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs the collection, processing, and storage of individuals' personal data in our country. We take our PDPA compliance obligations very seriously because we believe every Winway member has the right to know exactly how their data is managed.
Winway reserves the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be communicated via email or an in-account notification before they take effect. The "Updated" date at the top of this page indicates the currently active version.
Six core principles that underpin Winway's privacy protection policy for all Malaysia members
All data transmitted between your device and Winway's servers is protected with 256-bit SSL encryption — the same standard used by major Malaysian banks such as Maybank and CIMB. This means your login credentials, payment details, and personal data cannot be intercepted by third parties while in transit.
Winway has never and will never sell, rent or share members' personal data with any third party for marketing or commercial purposes. Your data belongs to you – it is not a business asset of Winway. This is an uncompromising commitment we uphold as a core value of our platform.
All Winway members' personal data is stored on servers protected by a multi-layered security system, including next-generation firewalls, real-time threat monitoring, and strict access controls. Only authorised staff with a legitimate business need are permitted to access Winway member data.
Winway only collects personal data that is strictly necessary to provide our services – nothing more. This data minimisation principle ensures we do not collect irrelevant or excessive information. Each type of data we collect has a clear and lawful purpose, stated transparently in this Privacy Policy.
Winway's Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We comply with all applicable legal requirements governing the collection, processing, storage, and deletion of users' personal data in Malaysia – providing you with robust legal protection as a Winway member.
You have the full right to access, correct, or request the deletion of your personal data held by Winway at any time. The process for exercising these rights is straightforward – simply contact the Winway support team via live chat or email and we will process your request within the timeframe stipulated by law.
The types of personal data we collect when you use the Winway platform
| Data Category | Type of Information | Collection Method | Necessity |
|---|---|---|---|
| Identity Information | Full name, date of birth, MyKad number, nationality | Registration forms, KYC verification | Mandatory |
| Contact Information | Phone number, email address, residential address | Account registration | Mandatory |
| Financial Information | E-Wallet account numbers (TnG, GrabPay, Boost), FPX banking details | Deposit / withdrawal process | Mandatory |
| Usage Data | Betting history, login records, platform activity, game preferences | Automatically upon use | Automatic |
| Technical Data | IP address, device type, web browser, operating system | Automated system logs | Automatic |
| Communication Data | Live chat records, support emails, user feedback | Customer support interactions | Where relevant |
Winway collects information you provide directly when registering a new account, completing the identity verification (KYC) process, contacting our customer support, filling in a profile update form, or interacting with any section of the Winway platform that requires your input. This includes your full name as per your MyKad, active Malaysian phone number, email address, date of birth, and payment details for deposit methods such as Touch 'n Go eWallet, GrabPay, DuitNow, or FPX via Maybank2u and CIMB Clicks.
When you use the Winway platform, our systems automatically record certain technical data required to deliver a smooth and secure service. This includes your IP address, device type, operating system version, browser type and version, Winway pages visited, session duration, in-platform navigation patterns, and technical cookie data. This information helps Winway detect suspicious activity, optimise platform performance, and deliver a better user experience.
The lawful purposes underpinning each use of your personal data by Winway
Winway uses your personal data primarily to deliver the online betting services you have signed up for — including account management, processing deposits and withdrawals via Malaysia e-Wallet, bet settlement, odds calculation, and the provision of gaming products such as EPL and Liga Super Malaysia football betting, MLBB and CS2 e-sports, live casino, and slots. Without this data, Winway cannot provide you with the platform's core services.
Your identity data is used by Winway to verify that you meet the minimum age requirement of 18 years, ensure that only one account is registered per individual, confirm that withdrawals are processed to the correct account holder, and detect and prevent fraud, money laundering, and any other unlawful activity that could compromise the security of the Winway platform and all its members.
Winway uses your email address and phone number to send important account notifications such as deposit confirmations, withdrawal confirmations, account security alerts, and updates related to our Privacy Policy or Terms & Conditions in force. We also use this contact information to respond to your customer support enquiries. Members who do not wish to receive marketing communications from Winway may opt out through their account settings.
Automatically collected usage data helps Winway's technical team understand how members use the platform — which sections are visited most frequently, which betting products attract the most interest, where members encounter navigation difficulties, and what technical issues need to be addressed. This analysis is conducted in aggregate and without directly identifying any individual, and is used solely for the continuous improvement of the Winway user experience.
Winway may send emails or notifications about promotions, new bonuses, and special events such as the EPL, MPL Malaysia, or CS2 Major to members who have agreed to receive marketing communications at the time of registration. You may stop receiving marketing communications at any time via the "unsubscribe" link in any email or through your Winway account settings. Opt-out requests will be processed within 7 business days.
Who may receive your data and under what circumstances — stated transparently
Winway shares necessary personal data with third-party service providers that help us operate the platform – including payment processors for Malaysian e-Wallets (Touch 'n Go, GrabPay, Boost, ShopeePay) and FPX banking services (Maybank2u, CIMB Clicks), game software providers, server hosting companies, and cybersecurity service providers. All third-party providers are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes.
Winway may be required to disclose member personal data to the relevant authorities where a legitimate legal obligation exists — such as a court order, an official criminal investigation, or PDPA and Malaysian anti-money laundering compliance requirements. Winway will notify the relevant member of any such disclosure to authorities where permitted to do so and where this does not contravene any applicable legal order.
The technical and operational protection layers we employ to keep your data secure
All communications between your device and the Winway platform are protected by TLS 1.3 protocol and 256-bit SSL encryption – ensuring no third party can intercept or read data transmitted during your active session.
Sensitive data stored in Winway's databases – including passwords (stored as non-decryptable hashes), payment details, and KYC information – is encrypted using the AES-256 standard.
Only Winway staff with a legitimate business need who have passed a rigorous background check are permitted to access member personal data. All access is logged and monitored by our internal security team.
Winway's security monitoring system operates 24 hours a day to detect and respond in real time to any unauthorised access attempts, cyberattacks, or suspicious anomalies.
Winway conducts regular security audits by independent third-party auditors to assess system vulnerabilities and ensure that our security practices consistently meet or exceed the latest industry standards.
While Winway takes all reasonable technical measures to protect your data, account security also depends on your own actions as a member. Winway recommends that you:
In the event of a data security breach that may affect the personal data of Winway members, we will take immediate action in accordance with established procedures. This includes: isolating and restoring affected systems, assessing the scope and impact of the breach, notifying affected members within the timeframe required under Malaysia's PDPA, and reporting the incident to the Personal Data Protection Commissioner where required. We believe transparency in such situations is both an ethical and legal obligation Winway owes to all its members.
How long Winway retains your data and how it is deleted
Winway retains members' personal data for as long as your account remains active or as long as it is needed to provide services to you. Following account closure, Winway may retain certain records for an additional period as required by Malaysian law – for example, financial transaction records may need to be kept for 7 years to comply with financial and anti-money laundering regulations. Data that is no longer required will be securely deleted or anonymised in accordance with Winway's established data retention schedule.
When your personal data is no longer needed by Winway for the purpose it was collected, we will delete it using secure, irreversible methods. This includes secure deletion from active databases, removal from backup systems within a defined timeframe, and notifying all relevant third-party service providers to delete any copies of data they hold on Winway's behalf. This process is carried out systematically in accordance with an established schedule.
The rights granted to you under Malaysia's PDPA and how to exercise them
You have the right to request a copy of all personal data Winway holds about you. Winway will provide this information in a readable format within 21 days of receiving a valid request.
If you find that the personal data Winway holds about you is inaccurate or outdated, you have the right to request a correction. This can be done directly through your account profile settings or by contacting Winway support.
You may request that Winway delete your personal data when it is no longer necessary, unless a legal obligation requires us to retain it for a specified period.
Under certain circumstances, you may request that Winway temporarily restrict the processing of your data — for example, while you are disputing the accuracy of your data or while an ongoing complaint investigation is in progress.
You have the right to object to the processing of your personal data for direct marketing purposes at any time. Winway will cease processing your data for that purpose promptly upon receiving your objection.
You may request that the personal data you have provided to Winway be delivered to you in a structured, machine-readable format for personal use or transfer to another platform.
To exercise any of the privacy rights stated above, contact Winway by email at support@winway.world with the subject line "PDPA Privacy Rights Request", or via the in-platform live chat. Please include your full name and Winway account number to help expedite processing. Winway will provide an initial response within 3 business days and resolve the request within the timeframe required under Malaysia's PDPA.
How Winway uses cookies and similar technologies to enhance your experience
You can manage or block cookies through your web browser settings at any time. Please note, however, that blocking essential cookies may affect the functionality of the Winway platform and you may not be able to use all available features. For functional and analytical cookies, you can opt out without affecting core platform functionality. Refer to your browser's help guide (Chrome, Firefox, Safari, or Edge) for step-by-step instructions on managing cookies on your device.
Winway's commitment to protecting underage users
The Winway platform is intended for individuals aged 18 and above only. Winway does not knowingly collect, process, or store any personal data from individuals under the age of 18. The Winway registration process requires date-of-birth verification, and Winway actively conducts age checks to prevent underage users from registering.
If Winway determines that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the account in question. If you believe that someone under the age of 18 has registered a Winway account, please contact us at support@winway.world immediately so that appropriate action can be taken without delay.
Parents and guardians are encouraged to monitor their children's online activities. If you suspect a minor is using your device to access Winway, please contact our support team immediately. Winway takes child protection very seriously.
How to contact Winway for any queries or complaints regarding your personal data privacy
Winway has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Privacy Policy and Malaysia's PDPA. For any specific enquiries regarding data protection, privacy rights requests, or complaints about how we handle your personal data, you may contact Winway's Data Protection Officer by email at support@winway.world with the subject line "PDPA Data Protection Complaint".
Winway is committed to responding to all privacy-related enquiries within 72 business hours. For more serious or complex complaints, we will provide a status update within the same timeframe, even if a full investigation may take longer.
This Privacy Policy takes effect from 1 January 2026 and supersedes all previous versions. Any material changes in the future will be communicated to members before they take effect. The latest version is always available on this page at winway.world/privacy-policy.
Answers to the most frequently asked questions about privacy and data protection at Winway