we1win99 Privacy Policy

This Privacy Policy ("Policy") describes how we1win99 ("we1win99", "we", "us", "our") collects, processes, uses, stores, and protects the personal data of individuals ("you", "your", "Member") who access or use the we1win99 website and associated services (collectively, the "Platform"). This Policy forms part of the we1win99 Terms and Conditions.

By registering an Account with we1win99 or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should discontinue use of the Platform and may request account closure by contacting customer support.

we1win99 takes the privacy obligations owed to Malaysian members seriously. Our data handling practices are designed to be consistent with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

1. Data Controller

For the purposes of this Policy, we1win99 acts as the data controller in respect of all personal data collected from Members through the Platform. As data controller, we1win99 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is conducted lawfully, fairly, and transparently. Enquiries regarding data processing may be directed to the we1win99 Data Protection contact listed in Section 14.

2. Data We Collect

2.1 Data You Provide Directly

When you register an Account with we1win99, you provide us with the following categories of personal data:

• Full legal name
• Date of birth (used for age verification — you must be 21 or older)
• Email address
• Malaysian mobile telephone number
• Residential address (including postcode and state)
• Government-issued identification number (for KYC verification)
• Payment method details (e-wallet identifiers, bank account details for withdrawal)

2.2 Data Collected Automatically

When you access the we1win99 Platform, our systems automatically record certain technical data, including:

• IP address and approximate geographic location
• Device type, operating system, and browser type
• Session timestamps, pages visited, and navigation paths
• Betting and gaming activity logs
• Transaction records (deposits, withdrawals, wager amounts, outcomes)

2.3 Data from Third Parties

we1win99 may receive personal data from third-party identity verification providers, payment processors, and fraud detection services where such data is necessary to fulfil KYC obligations, process transactions, or protect the integrity of the Platform.

3. How We Use Your Data

we1win99 processes your personal data for the following purposes:

Purpose	Description
Account Management	Creating, maintaining, and administering your we1win99 Account, including password management and account security.
Identity Verification (KYC)	Verifying your identity and age in compliance with anti-money laundering obligations and our licensing requirements.
Payment Processing	Processing deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other supported payment channels.
Service Delivery	Enabling access to sportsbook, live casino, slots, and all other products offered on the we1win99 Platform.
Fraud Prevention	Detecting, investigating, and preventing fraudulent activity, money laundering, and breaches of our Terms and Conditions.
Customer Support	Responding to enquiries, complaints, and requests submitted to the we1win99 support team.
Responsible Gaming	Monitoring account activity to identify potential problem gambling patterns and facilitating access to responsible gaming tools.
Legal Compliance	Meeting obligations under applicable Malaysian law, international regulations, and licensing authority requirements.
Marketing	Sending promotional communications to members who have opted in to receive them, subject to Section 11.

4. Legal Basis for Processing

we1win99 processes personal data on the following legal bases:

• Contractual necessity: Processing required to provide the services you have contracted for as a we1win99 member, including account creation, payment processing, and service delivery.
• Legal obligation: Processing required to comply with KYC, anti-money laundering, and other regulatory obligations applicable to we1win99 as a licensed gaming operator.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent as the legal basis — principally for marketing communications — you may withdraw consent at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.

5. Cookies & Tracking Technologies

The we1win99 Platform uses cookies and similar tracking technologies to operate core platform functionality, maintain your session state after login, and analyse aggregate usage patterns. The following categories of cookies may be present:

• Essential cookies: Required for the Platform to function. Cannot be disabled without impairing functionality (e.g., session cookies, authentication tokens).
• Analytics cookies: Used to collect aggregated, anonymised data about how visitors navigate the Platform. This data is used to improve platform performance and user experience.
• Preference cookies: Store your settings, such as preferred odds format and language, so they persist between sessions.

You may configure your browser settings to refuse or delete cookies; however, doing so may impair your ability to use certain features of the we1win99 Platform, including the ability to remain logged in across sessions.

6. Data Sharing

we1win99 does not sell or trade your personal data. We may share your data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment processors: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment service providers, to process deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML compliance service providers engaged to verify member identity and detect fraud.
• Game content providers: Licensed game studios and live casino operators who supply content to the we1win99 Platform. These providers may access anonymised session data for game integrity purposes.
• IT and hosting providers: Cloud infrastructure and hosting service providers who process data on our behalf under data processing agreements that contractually bind them to appropriate data protection standards.
• Regulatory and legal authorities: Where required by law, court order, or a request from a lawfully authorised regulatory body, we1win99 will disclose personal data to the relevant authority.

All third-party service providers engaged by we1win99 are contractually required to handle personal data in accordance with applicable data protection law and are prohibited from using your data for their own independent purposes.

7. International Data Transfers

The we1win99 Platform is primarily served from servers located within or near the Asia-Pacific region. In certain circumstances, personal data may be transferred to and processed in jurisdictions outside Malaysia — for example, where a game content provider's servers are located in a different country. Where such transfers occur, we1win99 takes appropriate steps to ensure that your data receives a level of protection consistent with Malaysian PDPA standards and this Policy, including through the use of contractual safeguards with the relevant third parties.

8. Data Retention

we1win99 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of the account relationship plus seven (7) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of seven (7) years from the date of the transaction.
• Customer support correspondence: Retained for three (3) years from the date of the last interaction.
• Marketing preference records: Retained until opt-out is confirmed, plus a period sufficient to demonstrate compliance.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Your Rights

As a data subject, you have the following rights in relation to your personal data held by we1win99:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right of erasure: You may request deletion of your personal data, subject to our legal retention obligations. Note that requests for erasure cannot be fulfilled where retention is required by law or for the establishment, exercise, or defence of legal claims.
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances.
• Right to data portability: You may request that data you have provided to us be supplied in a structured, machine-readable format where technically feasible.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, contact we1win99 customer support. We will respond to verified requests within thirty (30) days. We may need to verify your identity before fulfilling a data rights request to ensure we do not disclose data to an unauthorised party.

10. Children's Privacy

The we1win99 Platform is strictly prohibited for persons under 21 years of age. we1win99 does not knowingly collect personal data from minors. If we become aware that personal data has been submitted by a person under 21, we will immediately close the relevant Account and delete the associated personal data. If you believe a minor has registered an Account on we1win99, please notify us immediately via our support team.

11. Marketing Communications

we1win99 may send you promotional emails, notifications, and offers relating to we1win99 products and services where you have opted in to receive such communications. Marketing communications are sent only to the email address registered to your we1win99 Account.

You may opt out of marketing communications at any time by adjusting your notification preferences in your Account settings or by clicking the unsubscribe link included in each marketing email. Opting out of marketing does not affect the sending of transactional communications, such as deposit confirmations, withdrawal notifications, and security alerts, which are sent as part of the service we provide.

12. Data Security

we1win99 implements a range of technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. These measures include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, role-based access controls limiting data access to authorised personnel, regular security audits and penetration testing, and incident response procedures for data security events.

Notwithstanding these measures, no internet transmission is entirely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we1win99 will notify affected members without undue delay and take all reasonable steps to mitigate harm.

13. Changes to This Policy

we1win99 reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered members via the email address associated with their Account and/or by displaying a prominent notice on the Platform at least fourteen (14) days before the changes take effect. Your continued use of the Platform following the effective date of any update constitutes acceptance of the revised Policy.

14. Contact & Complaints

For questions, requests, or complaints relating to this Privacy Policy or the handling of your personal data by we1win99, please contact our Data Protection team via the 24/7 live chat facility on the Platform or by email at [email protected] (plain text — not a clickable link).

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia or the jurisdiction in which we1win99 holds its operating licence.