Privacy Policy mywin28 — User Data Protection

Mywin28 values the privacy of every user on our platform. This Privacy Policy explains in detail how we collect, use, process, store, and protect your personal information when you access or use mywin28 services — whether through our official website, mobile app, or any of our other service channels.

This document applies to all registered users, website visitors, and any individual interacting with the mywin28 platform in any capacity. By using our services, you agree to the data collection and usage practices described in this policy.

This Privacy Policy is to be read together with Terms and Conditions mywin28 and forms part of the binding service agreement between you and us.

Mywin28 only collects data necessary to provide users with a safe, efficient, and reliable service. The following are the categories of data we collect:

We do not collect sensitive information such as biometric data, medical records, or religious information unless specifically required for legal compliance.

Personal data collected is used solely for legitimate purposes necessary to the operation of mywin28. We do not use your data for any other purpose without first obtaining your consent.

• Identity verification and KYC: Ensuring all users meet the applicable age eligibility and legal requirements.
• Transaction processing: Verifying deposits, processing withdrawals, and maintaining accurate financial records.
• Account security: Detecting and preventing fraud, money laundering, and unauthorized access.
• Customer support: Answering inquiries, resolving complaints, and providing technical support.
• Platform improvements: Analyzing usage patterns to improve user experience and system performance.
• Legal compliance: Fulfilling reporting obligations to the relevant regulatory authorities.
• Service communications: Sending important notifications regarding accounts, transactions, and policy changes.
• Marketing (with consent): Notifying users about the latest promotions, bonuses, and offers if you have consented to receive marketing communications.

Mywin28 does not sell or rent users' personal data to any party. However, under limited and necessary circumstances, we may share data with the following parties:

• Payment providers: Financial institutions, payment processors, and e-wallet providers to facilitate deposit and withdrawal transactions. Data sharing is limited strictly to the information required.
• Gaming software providers: Casino and sports game providers integrated with the mywin28 platform receive only the minimum session data required for technical operations.
• KYC service providers: Trusted third-party identity verification platform to assist with document verification processes.
• Legal authorities: Law enforcement agencies, regulatory bodies, or courts when required to do so under applicable Malaysian law.
• Independent auditors: Audit firms involved in compliance reviews and security certification of our platform.

All third parties with whom we share data are bound by strict confidentiality agreements and are required to protect user data to a standard equal to or higher than our own.

User data security is the top priority at mywin28. We implement multi-layered security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

• Data encryption in transit: All communications between your device and mywin28 servers are protected with TLS 1.3 and 256-bit SSL encryption.
• Data encryption at rest: Sensitive data such as financial information and KYC documents are stored in encrypted format using AES-256 standards.
• Access control: Access to user data within our internal systems is restricted to staff who genuinely require it to carry out their duties.
• 24/7 Monitoring: Automated security monitoring systems run around the clock to detect and respond to threats in real time.
• Regular security testing: mywin28 conducts regular penetration testing by independent security experts to identify and address any system vulnerabilities.
• Data backup: User data is automatically backed up daily to geographically separate locations to ensure recovery in the event of a system failure.

Data retention periods depend on operational and legal requirements. Generally, active account records are kept for the duration of the active account plus 7 years after account closure to meet statutory financial record-keeping requirements.

Mywin28 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential cookies (required): Required for core platform operations such as login session authentication, security, and basic preferences. These cookies cannot be disabled.
• Performance cookies: Collecting anonymous information on how users interact with the platform to help us improve the user experience.
• Functionality cookies: Remembering your personal preferences such as language, time zone, and display settings to provide a more personalized experience.
• Analytics cookies: Used to understand traffic patterns and platform usage through analytics services that do not share your personal data.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality of the mywin28 platform. For more information on managing cookies, refer to your browser's help guide.

As a mywin28 user, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA):

To exercise any of the above rights, contact the mywin28 privacy team via live chat or email at [email protected]. We will respond within 30 business days of receiving your request. Identity verification may be required before we can process your request.

The mywin28 platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover or are informed that we have inadvertently collected data from a person under the age of 18, we will immediately take the following steps:

• Suspending the relevant account immediately while an investigation is conducted.
• Deleting all related personal data from our systems.
• Returning any remaining fund balance to the appropriate party.

Parents or guardians who believe their child has registered on mywin28 may contact us immediately at [email protected] for follow-up action.

Mywin28 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or to provide better protection for users.

When we make significant changes to this policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a prominent change notice on the platform's home page for at least 14 days.
• Sending direct notifications to all registered users via their registered email.

Continued use of the mywin28 platform after the effective date of any amendment is considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before the amendment takes effect.

Mywin28 has appointed a privacy officer responsible for ensuring compliance with all data protection obligations. If you have any questions, concerns, or complaints regarding privacy, please contact us:

• Live Chat: Available 24 hours a day, 7 days a week — the fastest way to get immediate assistance.
• Privacy Email: [email protected] — for written enquiries and more formal user rights requests.
• FAQ: Visit the FAQ us for instant answers to common privacy questions.

If you are unsatisfied with our response to a privacy complaint, you have the right to refer the matter to the Department of Personal Data Protection Malaysia or another relevant authority.