Privacy Policy winchat for User Data Protection

1. Definitions and Scope of Application

This Privacy Policy ("Policy") is published by winchat ("we", "platform", "company") and applies to all users who access or use the website under the domain winchat.one together with all its branch websites, mobile applications, application programming interfaces (APIs), and any related service channels operated by winchat.

"Personal Information" in the context of this Policy means any information that can be used to identify an individual directly or indirectly, including but not limited to full name, identification card number (MyKad), email address, mobile phone number, financial information, IP address and user activity data within the platform.

This Policy should be read together with the winchat Terms and Conditions, which constitute a legally binding agreement between the user and the platform. Should there be any conflict between the two documents regarding privacy, this Privacy Policy shall be interpreted as the more specific document.

2. Information We Collect

winchat collects information from users through various means, depending on your interaction with our platform:

2.1 Information Provided Directly

• Full name as it appears on your official identification document
• MyKad number or other valid identification document
• An active and reachable email address
• Mobile phone number for two-factor verification
• Bank account or e-wallet information for deposit and withdrawal purposes
• Date of birth to confirm the user meets the minimum age requirement of 21 years and above
• Residential address for identity verification purposes

2.2 Automatically Collected Information

• IP address and approximate location based on IP
• Web browser type, operating system and application version
• Activity history within the platform including betting, deposits and withdrawals
• Login session records including session time and duration
• Cookie data and related tracking technologies (see Section 7)
• Technical error logs and system performance reports

3. Purpose of Using Information

The information we collect is used solely for the following legitimate and reasonable purposes:

• Identity and age verification: Ensuring every user is aged 21 years and above and is a real individual, in line with the international licensing requirements we comply with.
• Financial transaction processing: Facilitating deposits via Touch 'n Go eWallet, DuitNow, FPX and cryptocurrency, and processing withdrawals securely.
• User account management: Maintaining accounts, resetting passwords, handling support queries and sending important account-related notifications.
• Fraud activity detection: Monitoring for unusual activity patterns that may indicate attempted fraud, money laundering or account misuse.
• Service improvement: Analysing anonymised aggregate data to understand usage patterns and improve the overall user experience.
• Legal compliance: Meeting the reporting and disclosure requirements mandated by licensing authorities and relevant regulatory bodies.

4. Sharing Information with Third Parties

winchat is committed to not selling, renting or transferring users' personal information to third parties without explicit consent. However, there are limited situations where information sharing may occur:

4.1 Approved Third-Party Service Providers

We share the necessary information with payment service providers, gaming platform providers and technology service providers that assist in operating our platform. All such providers are bound by strict data protection agreements and are only permitted to use the information for the purposes we specify.

4.2 Legal and Regulatory Requirements

We may be required to disclose user information to competent authorities when mandated by a valid court order, directions from regulatory authorities, or binding legal requirements in the relevant jurisdiction. In such situations, we will endeavour to notify the user concerned if permitted by law.

5. Data Security

We implement various appropriate technical and organisational measures to protect your personal information from unauthorised access, disclosure, modification or destruction:

• SSL/TLS encryption for all data transmitted between your device and our servers
• Password storage using strong cryptographic hashing algorithms — user passwords are never stored in plain text
• Two-factor authentication (2FA) as an additional security layer for account login
• Continuous security monitoring and periodic auditing of access logs
• Role-based access control (RBAC) that ensures staff can only access data within the scope of their duties
• Regular security testing including vulnerability assessments and penetration testing
• Pre-established incident response protocols in the event of a security breach

While we take comprehensive security measures, no security system can be guaranteed 100% free from all threats. Users are responsible for keeping their account passwords confidential and not sharing them with any party.

6. Data Storage and Deletion

winchat retains users' personal information for as long as the user's account is active or as long as it is needed to provide services. The following are our data retention policies:

• Active account data: Retained for as long as the user's account remains active on our platform.
• Financial transaction records: Retained for the period required by applicable regulatory and licensing requirements, typically no less than five years from the date of the transaction.
• Log and audit data: Retained for a sufficient period for security, fraud detection and legal compliance purposes.
• Closed accounts: Following account closure, personal information will be deactivated within a reasonable period, except for data that must be retained to meet legal or regulatory requirements.

Users may submit data deletion requests via our support email. Such requests will be reviewed, and we will comply with deletion requirements to the extent permitted or required by applicable law.

7. Use of Cookies

The winchat platform uses cookies and similar tracking technologies to improve the user experience and ensure proper technical functionality. Cookies are small text files stored on your device by your web browser.

Types of Cookies We Use:

• Session Cookies: Required to maintain your login session while you use the platform. These cookies are deleted automatically when you close your browser.
• Persistent Cookies: Store user preferences such as language and display settings. These cookies remain for a set period or until you delete them manually.
• Analytics Cookies: Help us understand how users interact with the platform for the purposes of technical improvement and user experience.
• Security Cookies: Used to detect and prevent fraudulent activity and unauthorised access.

You can configure your browser to reject cookies or notify you when cookies are sent. However, rejecting certain cookies may affect the functionality of our platform and your overall user experience.

8. User Rights

As a winchat user, you have the following rights regarding your personal information. All requests relating to these rights may be submitted through our customer support channels, which operate 24 hours a day, 7 days a week:

• Right of Access: You have the right to request a copy of the personal information we hold about you. This request will be processed within a reasonable period.
• Right of Rectification: If you find that your personal information is inaccurate or out of date, you have the right to request prompt correction.
• Right of Erasure: You may request the deletion of your personal information, subject to retention requirements mandated by law.
• Right to Object to Processing: You have the right to object to the processing of your personal information for specific purposes unrelated to account management or legal compliance.
• Right to Data Portability: You may request a copy of your data in a machine-readable format for the purpose of transferring it to another service.
• Right to Withdraw Consent: You may withdraw consent to certain data processing at any time, without affecting the validity of processing carried out prior to the withdrawal.

9. Children's Privacy and Age Protection

The winchat platform is strictly for individuals aged 21 and above. This is an absolute requirement that cannot be waived under any circumstances. winchat does not knowingly collect, process or store personal information from individuals under the age of 21.

As part of the account registration process, we require date of birth verification and identity verification to ensure all users meet this minimum age requirement. Any account found to have been registered by an individual who does not meet the age requirement will be suspended immediately and all account balances will be returned in accordance with established procedures.

10. Privacy Policy Amendments

winchat reserves the right to amend, update or replace this Privacy Policy at any time. Such amendments may be necessary due to changes in applicable legislation, changes in technology practices, or improvements in the way we handle user data.

In the event of material amendments that significantly change how we process users' personal information, we will take the following steps:

• Publish a clear notice of the changes on our website at least 14 days before the amendments take effect
• Send notifications by email to all registered users whose email addresses we hold
• Require users to acknowledge and accept the changes at their next login after the effective date

Continued use of the winchat platform after the effective date of the Privacy Policy amendments will be considered acceptance of the amended version of the policy. The "Last Updated" date shown at the top of this document will always reflect the latest version currently in effect.

For any questions, concerns or complaints regarding this Privacy Policy, or to submit a request regarding your rights, please contact our customer support team via live chat on this website or by email. Our team is available to assist you in Malay and English at any time.