PRIVACY POLICY

Win28 Privacy Policy – Malaysian User Data Protection

Your privacy is our priority. This document transparently explains how win28 collects, uses, stores, and protects your personal information as a user of our platform.

Updated: 1 January 2026 SSL 256-bit Encryption Bahasa Melayu (Malaysia)
win28 Privacy Commitment

Six core pillars that ensure your personal data remains safe and protected at all times with win28.

Advanced Data Encryption

All data transmitted between your device and win28 servers is protected with 256-bit SSL encryption — the same security standard used by Malaysia's leading banking institutions.

No Sale of Data to Third Parties

Win28 has never and will never sell, rent, or transfer your personal information to any third party for marketing purposes without your explicit consent.

Full User Control

You have the full right to access, correct, download or request deletion of your personal data at any time through your account settings or by contacting our support team.

Secure Data Storage

User data is stored in data centres equipped with multi-layered physical and digital protection, with automatic backups and 24/7 security monitoring.

Malaysia PDPA Compliance

The win28 privacy policy is structured in compliance with the Personal Data Protection Act 2010 (PDPA) Malaysia, ensuring all data collection and processing practices adhere to local legislation.

Data Breach Notification

In the event of any security incident affecting your data, win28 is committed to notifying you within 72 hours and taking immediate remedial action to protect your information.

SSL 256-bit PDPA Compliant 2FA Verification Encrypted Data Trusted KYC 24/7 Monitoring

1Introduction and Scope of Privacy Policy

Welcome to win28, the online entertainment platform trusted by hundreds of thousands of users across Malaysia. We understand that privacy is more than a legal obligation — it is the foundation of trust that builds a lasting relationship between us and every user who chooses win28 as their entertainment destination.

This Privacy Policy explains in detail how win28 ("we", "the win28 platform", or "win28.wine") collects, processes, stores and protects your personal information when you use any part of our platform — including the website, mobile app, live services and all our official communication channels.

By registering an account, accessing the platform or using any win28 services, you agree to be bound by this Privacy Policy. We encourage you to read this document carefully and contact our support team if you have any questions.

This Privacy Policy is upheld in compliance with Personal Data Protection Act 2010 (PDPA) Malaysia. Any processing of your personal data is carried out lawfully, fairly and transparently.

2Personal Information We Collect

Win28 collects various types of personal information to enable us to provide you with a secure, personalised, and high-quality service. This information is collected directly from you, automatically through your use of the platform, or via trusted third parties.

A. Information You Provide Directly

Types of data you provide during registration and platform use:

Full Name Email Address Phone No. Date of Birth Full Address MyKad / Passport No. Bank Account Information e-Wallet Information

B. Information Collected Automatically

When you use the win28 platform, our systems automatically record certain technical information for security and user experience improvement purposes:

  • IP address and device information (device type, operating system, browser version)
  • Access log data including dates, times and pages visited
  • Geolocation information at city or state level (not precise coordinates)
  • Game session data including game type, duration and betting activity
  • Cookie information and device identifiers for account security purposes

C. Information from Trusted Third Parties

In certain cases, we may receive your information from service providers working with win28, including identity verification providers (for the KYC process), payment providers (to verify transactions), and licensed fraud prevention agencies.

We only collect information that is strictly necessary to provide our services. Sensitive data such as ID card numbers and financial information is encrypted before storage.

3How We Use Your Information

The personal information we collect is used solely for legitimate, clearly stated purposes. win28 will not use your data for any purpose beyond the scope described below without obtaining your consent first.

  • Account Management and Verification: Creating, managing and verifying user account identities, including the required KYC process.
  • Financial Transaction Processing: Processing deposits, withdrawals and bonus payments securely and accurately.
  • Game Service Providers: Allowing you to access all games, Live Casino, bingo, sports betting and other platform features.
  • Security and Fraud Prevention: Detecting and preventing unauthorised access, fraud, money laundering and other harmful activities.
  • Customer Support: Processing and responding to your enquiries, complaints and technical support requests.
  • Service Communications: Sending important notices regarding your account, transactions, policy changes and security.
  • Marketing (with Consent): Sending promotional offers, bonuses and updates about new games — only if you have agreed to receive them.
  • Legal Compliance: Fulfilling the legal and regulatory obligations applicable to the win28 platform.
  • Platform Enhancement: Analysing usage patterns to improve overall platform performance, interface and user experience.

4Sharing Information with Third Parties

Win28 takes your privacy very seriously. We does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, there are limited situations where data sharing is necessary for the platform to operate properly:

Trusted Service Providers

We share only the necessary information with service providers who have signed strict confidentiality agreements, including:

  • Payment processor providers (FPX, DuitNow, Touch 'n Go, GrabPay) to facilitate transactions
  • Identity verification service providers for the KYC process
  • Cloud infrastructure providers that store and process data in secure data centres
  • Licensed gaming service providers operating games within the win28 platform

Legal Requirements

Win28 may be required to disclose your information to government authorities, law enforcement bodies, or courts where there is a valid court order, binding legal requirement, or to protect the rights and safety of other users and the win28 platform.

Every third party that receives your data from win28 is bound by a strict data protection agreement and may only process that information for the agreed purposes.

5Cookies, Tracking and Related Technologies

The win28 platform uses cookies and similar tracking technologies to enhance the functionality and security of our website and app. Cookies are small text files stored on your device when you visit the win28 platform.

Types of Cookies Used

  • Essential Cookies: Required for core platform functions such as login, session security and navigation. These cookies cannot be disabled.
  • Performance Cookies: Collecting anonymous data on how users use the platform to help us improve the user experience.
  • Functional Cookies: Storing your preferences such as preferred language, display theme and account settings to provide a more personalised experience.
  • Security Cookies: Used to detect suspicious activity, prevent fraud and ensure that only you can access your account.

Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some win28 platform features. For more information on managing cookies, please refer to your browser's help documentation.

win28 uses internal analytics to monitor platform performance. This analytics data is in aggregate form and does not identify individual users.

6Data Security and Protection

Protecting your personal data is a responsibility we take very seriously. win28 implements a comprehensive range of technical and organisational security measures to ensure your information is always protected against unauthorised access, disclosure, alteration or destruction.

Technical Security Measures

  • 256-bit SSL/TLS encryption for all data transmitted between users and win28 servers
  • Sensitive data encrypted at the database level using the latest encryption algorithms
  • Two-factor authentication (2FA) for all user accounts and internal access
  • Web application firewall (WAF) and intrusion detection system (IDS) active 24/7
  • Real-time account activity monitoring to detect suspicious patterns
  • Regular penetration testing by independent security experts

Organisational Security Measures

  • Access to user data is granted only to staff who require it for their duties (minimum necessity principle)
  • All staff undergo comprehensive data security training on a regular basis
  • A clear incident response procedure to ensure any security issues are addressed promptly
  • Internal and external security audits are conducted on a regular basis
While win28 takes all reasonable steps to protect your data, no system can guarantee 100% absolute security. You are also responsible for keeping your password and account login credentials confidential.

7Your Rights as a User

Under the Personal Data Protection Act 2010 (PDPA) Malaysia, you as a win28 user have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

Right of Access

Obtain a copy of all your personal data stored by win28.

Right to Rectification

Amend or correct any personal information that is inaccurate or incomplete.

Right to Erasure

Request deletion of your personal data under certain circumstances provided by law.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Portability

Request your data in a machine-readable format for transfer to another platform.

Right to Restriction

Request restriction of your data processing while an investigation or dispute is being resolved.

To exercise any of the above rights, you may submit a request through your account settings or contact our privacy team directly. We will process your request within 30 working days of the date of receipt. For complex requests, we may require additional time and will notify you accordingly.

8Data Retention Period

Win28 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations. Our core principle is that we do not retain data for longer than necessary.

  • Active Account Data: Retained for as long as your account is active and for a period of 7 years after account closure, in line with financial and tax legal requirements.
  • Transaction Records: Retained for a minimum of 7 years in accordance with financial compliance and anti-money laundering requirements.
  • Security Logs: Retained for 12 months for fraud detection and security investigation purposes.
  • KYC Records: Retained for 5 years after account closure or a longer period if required by the relevant authorities.
  • Communication Data: Support emails and conversation records are retained for 2 years for reference and service improvement purposes.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer identify you as an individual.

9Protection of Minors and Vulnerable Individuals

Win28 is an online entertainment platform exclusively dedicated to individuals aged 18 years and above. We do not intentionally collect, store or process any personal information from individuals under the age of 18.

If we discover or suspect that personal information of a minor has been collected without our knowledge, we will take immediate steps to:

  • Immediately freezing the affected account
  • Deleting all related personal information from our systems
  • Returning any related funds
  • Reporting the incident to the relevant authorities where necessary

We also encourage parents and guardians to use appropriate parental control software and to speak with their children about online safety and the dangers of underage gambling.

If you become aware that a child has registered or used the win28 platform, please contact us immediately at [email protected] so that we can take immediate action.

10Privacy Policy Amendments and Updates

Win28 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements in data security technology. Whenever we make material changes, we will take proactive steps to ensure you are informed.

Amendment Notice Process

  • Email notification to all registered users at least 14 days before the changes take effect
  • Clear in-app and on-site notifications regarding Privacy Policy updates
  • A summary of key changes will be included in every amendment notice
  • Archived versions of previous Privacy Policies will be available upon request

Your continued use of the win28 platform after the effective date of any such changes constitutes your acceptance of the amended Privacy Policy. If you do not agree with any changes, you have the right to close your account and cease using our platform.

The last amended date and version number of this Privacy Policy are always displayed at the top of this document for your reference.

11Contact Us Regarding Privacy

We greatly value your feedback and enquiries about privacy. If you have any questions, concerns or wish to exercise your rights regarding personal data, the win28 Data Protection Officer team is ready to assist you through the following channels:

  • Privacy Email: [email protected]
  • General Support Email: [email protected]
  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the corner of the website
  • Telegram: @win28support

We are committed to responding to all privacy-related enquiries within 48 working hours. For official complaints regarding data protection, you may also contact the Department of Personal Data Protection Malaysia (JPDP) directly.

By using the win28 platform, you confirm that you have read and understood this Privacy Policy. Effective date: 1 January 2026. Version: 3.0

Your Data is Secure. Your Experience is Guaranteed.

Now you know how win28 protects your privacy and personal data. Join millions of members who play with peace of mind, knowing their information is in trusted hands.

Bahasa Melayu