🔒 Official Documents

Privacy Policy WinMY18 – Malaysia Player Data Protection

WinMY18 takes every member's privacy seriously. This Policy clearly explains how we collect, use, store and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Please read it carefully so you fully understand your rights as a WinMY18 user.

Updated: 1 January 2026  |  Bahasa Melayu (ms-MY)
🛡 Privacy Commitment

WinMY18's Six Privacy Commitments to Malaysian Players

This is not merely a written commitment — it is a daily practice upheld across every aspect of WinMY18's platform operations.

256-Bit SSL Encryption

All data transmitted between your device and WinMY18's servers is encrypted using 256-bit SSL — the same standard used by Malaysia's major banks such as Maybank and CIMB to secure online financial transactions.

Malaysia PDPA 2010 Compliance

WinMY18 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This gives you legally protected rights, including the right to access, correct, and in certain circumstances, request the deletion of your data.

No Data Sales

WinMY18 has never sold, rented, or shared your personal data with third parties for marketing or commercial purposes, and never will. Your data belongs to you — it is not a business asset for us to trade.

Secure & Protected Servers

WinMY18 member data is stored in data centres with multiple layers of physical and digital security. Access to members' personal data is restricted to authorised personnel only and is continuously monitored with a full audit log.

You're in Control

You may access, update, or request deletion of your personal data through your WinMY18 account settings or by contacting our support team. We process all data-related requests within 14 business days.

Immediate Data Breach Notification

In the event of any security incident affecting member data, WinMY18 is committed to notifying all affected members within 72 hours of detecting the incident, in line with international best practices for data breach notification.


This Privacy Policy ("Policy") describes how WinMY18 ("Platform", "we", "us") collects, processes, stores and protects the personal information you provide to us when using the platform winmy18.best and all related services. This policy forms part of the WinMY18 Terms and Conditions and should be read in conjunction with that document.

Important Note: By registering an account or using any WinMY18 services, you consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us at support@winmy18.best.

1. Introduction and Scope of This Policy

WinMY18 is an online entertainment platform serving users in Malaysia. We understand that privacy is a matter of trust — and your trust is the foundation of our relationship. This Privacy Policy is designed to give you a clear and honest picture of our data practices, not to obscure or confuse.

This policy covers all personal data collected through the WinMY18 platform, including the winmy18.best website, any mobile applications we may offer in the future, interactions with our customer support team, and all financial transactions processed through our platform via methods such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, and other Malaysian e-wallets.

WinMY18 operates as the data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). This means we are responsible for ensuring your personal data is processed in accordance with the standards set by Malaysian law. Any questions about how we handle your data can be directed to WinMY18's Privacy Officer at support@winmy18.best.

2. Personal Data We Collect

2.1 Data You Provide Directly

WinMY18 collects data that you provide directly when using our platform, including:

  • Identity Information: Full name as per MyKad, date of birth, gender, and MyKad or passport number
  • Contact Information: Active Malaysian phone number, email address, and residential address
  • Account Information: Username, password (stored as an unreadable hash), security questions and answers
  • Financial Information: Malaysian bank account details, e-wallet numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and a full record of all deposit and withdrawal transactions
  • Verification Documents: A copy of your MyKad or passport submitted during the KYC (Know Your Customer) process

2.2 Automatically Collected Data

When you use the WinMY18 platform, we automatically collect certain technical information, including:

  • IP address and general geolocation data (state/city within Malaysia, not precise coordinates)
  • Device type, smartphone model, operating system, and web browser version
  • Gaming session data: games played, time spent, total wagers and outcomes
  • Access logs: login times, logout times, and in-account activity
  • Cookie data and session identifiers (see Section 8 for full details)

2.3 Data from Third-Party Sources

In certain situations, WinMY18 may receive data about you from legitimate third-party sources, including Malaysian payment service providers (for identity verification and fraud prevention) and accredited identity verification agencies for KYC compliance purposes. We do not collect data from social media platforms or any other sources without your consent.

3. How WinMY18 Uses Your Data

WinMY18 uses your personal data only for legitimate and necessary purposes. Below is a complete list of how your data is used:

Purpose of UseLegal BasisData Involved
Member account management and verificationContractual agreementIdentity, contact, account
Deposit & withdrawal processingContractual agreementFinancial, identity
Fraud prevention & anti-money launderingLegal obligationsAll categories
Identity verification (KYC)Legal obligationsIdentity, documents
Customer support & dispute resolutionContractual agreementIdentity, session, transaction
Platform improvement & usage analyticsLegitimate interestsTechnical, session
Account-related communications & promotionsConsent / contractRelationship, account
Malaysian legal complianceLegal obligationsAll categories

WinMY18 never uses your data to make automated decisions that carry legal consequences — such as rejecting an account application or freezing an account — without a responsible human reviewing that decision.

4. Data Sharing with Third Parties

4.1 General Data Sharing Principles

WinMY18 does not sell, rent, or share your personal data with third parties for marketing purposes. Data is shared only in the specific situations outlined below, and solely to allow the WinMY18 platform to operate properly and securely for you.

4.2 Authorised Service Providers

WinMY18 works with a select group of third-party service providers to operate the platform. These providers are contractually required to protect your data and use it only for the purposes we specify. They include:

  • Malaysia's payment processing providers — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX — to handle your deposit and withdrawal transactions
  • Identity verification providers for KYC and fraud prevention purposes
  • Gaming and software providers that supply game content on the WinMY18 platform
  • Cloud and computing infrastructure providers that store and process platform data
  • Analytics tool providers to understand aggregated, anonymised platform usage patterns

4.3 Legal Requirements

WinMY18 may be required to disclose your personal data to Malaysian authorities if mandated by law, a court order, or a directive from a legitimate Malaysian law enforcement agency. In such cases, WinMY18 will notify you of the disclosure unless prohibited from doing so by the relevant authority.

4.4 Business Transfers

In the event of a business transfer, merger, or acquisition involving WinMY18, your personal data may be transferred as part of the business assets. You will be notified before your data becomes subject to a different privacy policy and will be given the option to delete your account prior to the transfer taking place.

5. Data Retention Period

WinMY18 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by Malaysian law. The following are our data retention guidelines:

Data TypeRetention PeriodReason
Active identity & account dataThroughout the active account periodPlatform operations
Financial transaction records7 years after account closureMalaysian legal requirements
KYC Documents5 years after account closureAML/KYC Compliance
Session & activity logs2 years from the session dateSecurity & audit
Customer support records3 years from last interactionDispute resolution
Cookie & tracking dataBy cookie type (see Section 8)Platform functionality

Once the retention period expires, your data will be securely deleted or anonymised in a way that can no longer be linked back to you. Anonymised data may be retained for aggregate analytics purposes indefinitely, as it no longer contains any personally identifiable information.

6. WinMY18 Data Security

6.1 Technical Measures

WinMY18 continually invests in the latest security technologies to protect your personal and financial data. The technical measures we employ include:

  • 256-bit SSL encryption for all communications between the WinMY18 platform and your device
  • Static data encryption for all sensitive data stored in our databases
  • Member passwords are stored as irreversible hashes — WinMY18 staff cannot view your password in its original form
  • Two-factor authentication (2FA) is available and strongly encouraged for all accounts
  • An intrusion detection system (IDS) monitoring all incoming traffic 24 hours a day
  • Regular penetration testing conducted by independent third parties

6.2 Organisational Measures

Beyond technical measures, WinMY18 enforces strict security policies at the organisational level. Access to members' personal data is granted only to staff who require it to perform their duties, and every access instance is recorded in an audit log that is reviewed on a regular basis. WinMY18 staff undergo periodic data security training and are bound by legally enforceable confidentiality agreements.

6.3 Security Limitations

While WinMY18 takes all reasonable steps to protect your data, no security system is completely infallible. In the unlikely event of an incident such as a sophisticated cyberattack, WinMY18 is committed to notifying all affected members within 72 hours of detection and taking all necessary remediation steps.

You also play an important role in keeping your account secure. Never share your password, avoid easy-to-guess passwords, enable 2FA, and contact WinMY18 support immediately if you suspect any unauthorised access to your account.

7. Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by WinMY18:

Right of Access

You have the right to request a copy of the personal data we hold about you. WinMY18 will provide this information within 21 business days of receiving your request. The first request per calendar year is free of charge; subsequent requests may be subject to a reasonable nominal fee.

Right to Rectification

If the personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request a correction. You can update most basic information directly in your WinMY18 account settings, or contact our support team for more complex changes.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data. Please note: this right is not absolute — we may need to retain certain data to fulfil legal obligations, such as financial transaction records that Malaysian law requires us to keep for 7 years.

Right to Object to Processing

You have the right to object to the processing of your personal data for direct marketing purposes. Once you object, WinMY18 will immediately stop processing your data for that purpose — no reason required.

Right to Restriction of Processing

Under certain circumstances, you may request that WinMY18 restrict how we process your data — for example, while you are disputing the accuracy of your data or while an appeal against a WinMY18 account decision is under consideration.

Data Portability Rights

You have the right to receive the personal data you have provided to WinMY18 in a structured, machine-readable, and commonly used format. This right applies to data processed on the basis of your consent or a contractual agreement.

To exercise any of the rights above, contact WinMY18's Privacy Officer at support@winmy18.best, stating the right you wish to exercise and your account details for identity verification. We will verify your identity before processing any data-related request.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the WinMY18 platform. They help us recognise you on return visits, remember your preferences, and ensure the platform functions correctly. WinMY18 uses several categories of cookies, each serving a different purpose:

8.2 Managing Your Cookies

You can manage or delete cookies through your web browser settings at any time. Most browsers allow you to view stored cookies, delete specific cookies, or block cookies from particular sites. Note: blocking all cookies may affect the functionality of the WinMY18 platform, including your ability to log in and save your preferences.

9. Protection of Children's Data

The WinMY18 platform is exclusively for individuals aged 21 and above. WinMY18 does not knowingly collect personal data from individuals below this age. Should we discover that personal data of an underage individual has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian who believes your child has registered a WinMY18 account without your knowledge, please contact us immediately at support@winmy18.best. We will investigate and respond within 48 hours.

Shared Responsibility: WinMY18 employs a strict identity verification system to prevent registration by underage individuals. That said, parental supervision of children's internet usage remains an important layer of protection that no technical system can fully replace.

10. Changes to This Privacy Policy

WinMY18 may update this Privacy Policy from time to time to reflect changes in our data handling practices, Malaysian legal requirements, or technological developments. Any material changes will be communicated to members via email to your registered address at least 14 days before the changes take effect.

The "Updated" date at the top of this page will always reflect when this Privacy Policy was last revised. We encourage you to check this page periodically to stay informed about how WinMY18 protects your personal data. Continued use of the WinMY18 platform after a change takes effect constitutes acceptance of the updated policy.

Previous versions of this Privacy Policy are available upon request at support@winmy18.best, should you wish to review changes made over time.

11. Contact WinMY18's Privacy Officer

For any questions, concerns, or requests relating to this Privacy Policy or WinMY18's handling of your personal data, please contact our Privacy Officer through one of the following channels:

📧
Privacy Email

For written enquiries regarding personal data, data access requests, or privacy complaints.

💬
24/7 Live Chat

For urgent enquiries regarding your account privacy and security. Response within 2 minutes.

Log in & open Live Chat

WinMY18 is committed to responding to all privacy-related enquiries within 14 working days. For matters requiring further investigation, we will provide progress updates every 7 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under PDPA 2010.


❓ Privacy FAQs

Frequently Asked Questions About WinMY18 Privacy

Unsure about how WinMY18 handles your data? Here are answers to the questions Malaysian members ask most often.

No. WinMY18 does not store your full bank card details or e-wallet account passwords. All financial transactions are processed through secure third-party payment systems — Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, and others — using high-standard security protocols. WinMY18 only receives confirmation that a payment was successful, along with the transaction reference number and amount processed. Your sensitive payment details never pass directly through WinMY18's servers.

When you close your WinMY18 account, your personal data is not deleted immediately, as we have legal obligations to retain certain records under Malaysia's PDPA and financial laws. Financial transaction records are kept for 7 years, KYC documents for 5 years, and activity logs for 2 years — all calculated from the account closure date. Once these mandatory retention periods expire, your data will be securely deleted or anonymised. Data not subject to any legal retention obligation will be deleted within 30 days of account closure.

Yes, you have this right under Malaysia's PDPA 2010. Send your data access request to support@winmy18.best with "PDPA Data Access Request" in the email subject line. We will verify your identity before processing the request. WinMY18 will provide a full report of the data we hold on you within 21 working days. The report covers identity information, transaction records, activity logs, and any communications related to your account. Your first request within each calendar year is free of charge.

WinMY18 only discloses member data to Malaysian authorities when required by law — for example, pursuant to a valid court order, search warrant, or official directive from a Malaysian law enforcement agency. We do not voluntarily share member data with government bodies without a clear legal basis. Should WinMY18 receive such a request, we will carefully verify its legitimacy before responding. Where not prohibited by law, we will notify the affected member of any disclosure made.

WinMY18 Privacy Commitment: We operate in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Your data is protected with 256-bit SSL encryption and is never sold to third parties. For any privacy-related enquiries, contact us at support@winmy18.best or check Terms & Conditions us for more information about your agreement with WinMY18.

🚀 Ready to Get Started?

Register with WinMY18 Confidently – Your Data Is Safe Here

Now you know how WinMY18 protects your privacy. Sign up free in 2 minutes, claim your Welcome Bonus of up to RM888, and enjoy a safe, trusted online gambling platform established since 2018.

For players aged 21 and above. Terms & Conditions apply. Please gamble responsibly.

Touch 'n Go GrabPay DuitNow FPX Boost ShopeePay Maybank2u CIMB Clicks
Bahasa Melayu