🔒 Winlah Official Document

Winlah Privacy Policy – Data Protection for Malaysian Players

At winlah, privacy is more than a legal document – it is a commitment to every Malaysian player who entrusts us with their personal information. We have written this policy in plain language so you know exactly how your data is used and protected.

Last Updated: 1 January 2026 Compliant with Malaysia's PDPA 2010 256-bit SSL Encryption
Last Updated: 1 January 2026
Version: 2.4
Jurisdiction: Malaysia
Privacy Enquiries: support@winlah-jit.com

Six Data Protection Principles winlah Upholds Every Day

Before reading the full policy, here is the core of how Winlah handles the personal data of every Malaysian player who uses our platform.

256-bit SSL Encryption for All Data

All data transmitted between your device and winlah's servers is protected by 256-bit SSL encryption – the same security standard used by Malaysia's leading banking institutions. Your personal information, payment details, and activity history cannot be intercepted by any third party during transmission.

No Sale of Data to Third Parties

Winlah has never sold, rented, or transferred player personal data to any third party for marketing or any other purpose unrelated to the provision of our services — and we never will. Your data belongs to you; we use it solely for the operation of the Winlah platform.

Fully Compliant with Malaysia's PDPA 2010

Winlah operates fully within the framework of Malaysia's Personal Data Protection Act 2010 (PDPA). This means we comply with all Malaysian legal provisions on the collection, use, transfer and storage of personal data – not merely global industry best practices.

You Have the Right to Access & Correct Your Data

Every winlah player has the right to request a copy of the personal data we hold, correct any inaccurate information, and in certain circumstances, request deletion of their data. These requests can be submitted via live chat or winlah's support email and will be processed within 14 working days.

Minimum Data Collection Policy

Winlah only collects data that is strictly necessary to provide a safe and compliant betting platform service. We do not collect irrelevant or excessive information – every piece of data we request has a clear and legitimate purpose within the context of Winlah's operations.

Financial Information Kept Strictly Confidential

Your payment method details – whether DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX Maybank2u or CIMB Clicks – are stored in an isolated server environment, encrypted separately from your account profile data, with access restricted to authorised personnel only.

Important Note: This Privacy Policy applies to all users of the winlah platform at winlah-jit.com. By using our platform, you agree to the collection and use of information as described in this document. Please read it carefully.

1. Introduction & Scope of This Policy

Winlah ("we", "the platform" or "winlah") respects the privacy of every individual who uses our online betting and casino platform at winlah-jit.com. This Privacy Policy explains in detail how winlah collects, uses, stores, protects and discloses your personal information when you register, use or interact with our platform.

This document is written in clear, plain language because winlah believes every Malaysian player deserves to understand exactly what happens to their data – without having to wade through complex legal jargon. If at any point you do not understand any part of this policy, please reach out to the winlah support team and they will be happy to explain.

This Privacy Policy applies to all information collected through the Winlah website, mobile application (if any), email communications, and any other interactions between you and Winlah. It should be read together with Terms & Conditions Winlah.

Legal Compliance: winlah fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA), including all seven Data Protection Principles set out in the Act – the General Principle, Notice and Choice Principle, Disclosure Principle, Security Principle, Retention Principle, Data Integrity Principle, Access Principle and Data Transfer Principle.

2. Information We Collect

Winlah collects various types of information to ensure the platform operates securely, remains compliant with regulations, and delivers the best possible experience for Malaysian players. The following are the data categories we collect:

2.1 Information You Provide Directly

  • Registration Information: Your full name, date of birth, identity card number (MyKad), email address, Malaysian phone number, and preferred username.
  • Identity Verification (KYC) Information: Copies of your identity card, bank statements, or other verification documents requested during the account verification process or for withdrawals that exceed certain limits.
  • Payment Information: Registered payment method details – e-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) or FPX banking information (Maybank2u, CIMB Clicks) for deposit and withdrawal purposes. winlah does not directly store credit or debit card numbers.
  • Communications: The contents of any messages you send to the Winlah support team via live chat, email, or any other communication channel.

2.2 Automatically Collected Information

  • Platform Activity Data: A record of all bets placed, games played, deposits and withdrawals, bonuses claimed, and your complete transaction history within your winlah account.
  • Technical Data: IP address, device type, operating system, web browser, screen resolution and other technical data that help us optimise the platform experience for your device.
  • Usage Data: Pages visited within the winlah platform, time spent, links clicked and general navigation patterns – collected in aggregate for platform improvement purposes.
  • Cookie Data: Information stored through cookies and similar tracking technologies – described in further detail in Section 6 of this document.

Important Note: winlah will never ask for your bank account password, PIN or OTP. If anyone claims to be from winlah and requests this information, it is a scam. Contact winlah support immediately via the official live chat.

3. How We Use Your Information

Winlah uses the information collected for the following purposes, all of which are directly related to providing and improving our platform services:

Purpose of Use Types of Data Involved Legal Basis
Registration & Account Management Name, email, phone number, date of birth Agreement
Identity Verification (KYC) Identity documents, bank statements Legal Obligations
Deposit & Withdrawal Processing Payment information, transaction history Agreement
Fraud Prevention & Security IP data, account activity, transaction patterns Legitimate Interest
Customer Support Communication records, account information Agreement
Platform Improvements Aggregated usage data, feedback Legitimate Interest
Marketing Communications Email, phone number (with consent) Consent
Regulatory Compliance Transaction records, verification documents Legal Obligations

3.1 Marketing Communications

Winlah may send you information about promotions, new bonuses, VIP offers, and platform updates via email or SMS – but only after you have given your explicit consent during registration or through your account settings. You may withdraw this consent at any time by updating your notification preferences in your Winlah account or by contacting our support team.

It is important to understand that opting out of marketing communications does not affect essential operational communications related to your account activity, such as transaction confirmations, security notices, or important service updates.

4. Information Sharing & Disclosure

Winlah takes a strictly limited approach to sharing player data. Our core principle is straightforward: your data is not shared with third parties except in the specific situations outlined below, and only to the extent necessary.

4.1 Authorised Third-Party Service Providers

Winlah may share necessary information with service providers who assist us in operating the platform, subject to strict confidentiality agreements:

  • Payment Service Provider: Information required to process deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay.
  • Game Software Providers: The minimum technical data required to ensure the integrity of Live Casino games and Sports Betting.
  • Identity Verification Service Providers: KYC documents shared with licensed identity verification services to fulfil KYC/AML requirements.
  • Server Infrastructure: Cloud computing service providers that store platform data in a secure, encrypted environment.

4.2 Legal Requirements

Winlah may disclose information to Malaysian authorities or relevant regulatory bodies when required by law, a valid court order, or other legal process. This includes cooperating with investigations related to financial fraud, money laundering, or other criminal activity involving the use of our platform.

4.3 What We Do Not Do

  • Winlah does not sell player personal data to advertisers or data brokers.
  • Winlah does not share your betting activity profile with any external party without a legitimate operational need.
  • Winlah does not disclose your financial information to marketing partners.

Winlah's Commitment: Every third-party provider that receives any Winlah player data must sign a data processing agreement obligating them to uphold privacy standards equal to or exceeding Malaysia's PDPA requirements. Winlah periodically audits these providers for compliance.

5. Data Retention & Security Measures

Winlah continually invests in its data security infrastructure to ensure your personal and financial information is always protected to the highest practicable standard.

5.1 Technical Security Measures

  • 256-bit SSL Encryption: All communications between your device and winlah's servers are encrypted using 256-bit TLS/SSL protocol.
  • Secure Password Storage: Passwords are stored as irreversible hashes – even winlah staff cannot view your actual password.
  • Internal Access Controls: Access to player data within winlah's internal systems is restricted based on the principle of least privilege – only staff who require access for their specific duties are permitted.
  • Continuous Security Monitoring: Winlah's systems are monitored 24 hours a day to detect any unauthorised access attempts or suspicious activity.
  • Two-Factor Authentication: winlah offers two-factor authentication (2FA) to all members as a strongly recommended additional layer of security.

5.2 Data Retention Period

Winlah retains your personal data for as long as necessary to fulfil the purpose of collection and to meet applicable regulatory requirements:

  • Active Account Data: Retained for the duration your account remains active, plus any period required by law following account closure.
  • Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
  • Support Communication Records: Retained for three (3) years from the date of last interaction for historical reference and service quality purposes.
  • Cookie & Technical Data: Retained for the duration specified for each cookie type as outlined in Section 6.

Once the applicable retention period has elapsed, data will be securely deleted or anonymised so that it can no longer be linked to you personally.

6. Cookies & Tracking Technologies

Winlah uses cookies and similar tracking technologies to ensure the platform functions correctly, personalise your experience, and understand how Malaysian players interact with our platform.

6.1 Types of Cookies Used

  • Essential Cookies: Required for core platform functions such as maintaining your login session, saving language preferences, and ensuring session security. These cookies cannot be disabled and do not track marketing activity.
  • Functional Cookies: We save your preferences such as odds display settings, favourite markets and sports selections to deliver a more personalised experience on your next visit.
  • Analytics Cookies: We collect aggregated data on how players use the winlah platform – popular pages, common navigation paths and areas that need improvement. This data does not personally identify you.
  • Session Cookies: Temporary cookies that are automatically deleted when you close your web browser. These are used to maintain session information while you are using the platform.

6.2 Managing Your Cookie Preferences

You can control and manage cookies through your web browser settings. Most modern browsers, including Chrome, Firefox, Safari, and Edge, allow you to view, delete, and block cookies. However, disabling essential cookies may affect the functionality of the Winlah platform, including your ability to log in to your account.

Winlah does not use third-party cookies for targeted advertising purposes. We do not share your browsing behaviour data with external advertising networks.

7. Your Rights Under Malaysia's PDPA

As a winlah player based in Malaysia, you have specific rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). winlah is committed to respecting and facilitating the exercise of these rights:

Privacy Rights Every winlah Player in Malaysia Is Entitled To

Winlah makes it straightforward for you to exercise each of these rights through your account settings or by contacting our support team.

Right of Access

You have the right to request and receive a copy of all personal data Winlah holds about you, including your activity history and transaction records. Requests are processed within 14 business days.

Right to Rectification

If any personal information held about you in winlah's system is inaccurate or out of date, you have the right to request a correction and we will update it promptly.

Right to Erasure

Under certain circumstances permitted by law, you may request the deletion of your personal data. Such requests will be assessed in accordance with applicable legal obligations.

Right to Object to Processing

You may object to the processing of your data for direct marketing purposes at any time. winlah will cease processing for that purpose immediately upon receiving your objection.

Right to Data Portability

You have the right to receive the personal data you have provided to winlah in a structured, commonly used, and machine-readable format for transfer to another service provider.

Right to Withdraw Consent

Where data processing is based on your consent, you may withdraw that consent at any time through your winlah account settings without affecting the validity of any processing carried out prior to withdrawal.

To exercise any of the rights above, contact the winlah support team via live chat or email at support@winlah-jit.com, stating the right you wish to exercise and your account details. winlah will process your request within 14 working days and will inform you of any applicable costs before proceeding.

8. Protection of Children's Data

The winlah platform is intended exclusively for individuals aged 18 and above. winlah does not knowingly collect, store or process any personal data from individuals under the age of 18. Should we discover that personal data belonging to someone under 18 has been collected without proper age verification, we will take immediate steps to delete that data and close the relevant account.

If you are a parent or guardian who believes your underage child may have registered an account on winlah, please contact us immediately via live chat or email at support@winlah-jit.com. We will take prompt action and provide full cooperation in such cases.

Warning: winlah employs multiple age verification mechanisms, including identity document checks and behavioural analysis. Any attempt to circumvent age verification is a serious breach of winlah's Terms and Conditions and may result in legal action.

9. Cross-Border Data Transfers

As a digital platform, winlah's technical infrastructure may involve the storage or processing of data on servers located outside Malaysia, particularly in relation to Live Casino game software providers and international cloud computing infrastructure services.

In all cases where Malaysian player data is transferred overseas, winlah ensures that:

  • Data transfers only take place to countries or regions that provide adequate data protection, or where appropriate data transfer agreements have been put in place.
  • Recipient providers are contractually obligated to protect data to a standard equal to or exceeding Malaysia's PDPA requirements.
  • Data transferred is kept to a minimum and limited strictly to what is necessary for legitimate operational purposes.

Winlah complies with Part V of Malaysia's PDPA regarding the transfer of personal data outside Malaysia and will obtain your consent for any data transfer not covered by existing exemptions under the law.

10. Links to Third-Party Sites

The winlah platform may contain links to third-party websites or services in certain contexts, such as sports reference information or responsible gambling resources. winlah's Privacy Policy does not apply to those third-party websites, and winlah is not responsible for their privacy practices.

We encourage you to read the privacy policy of every website you visit, particularly before providing any personal information. winlah has no control over the content or privacy practices of third-party websites and cannot be held responsible for any consequences arising from their use.

11. Changes to This Privacy Policy

Winlah reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements or changes in how the platform operates. We are committed to keeping you informed of any significant changes.

For material changes that significantly affect how we use or protect your data, Winlah will send a notice to your registered email address and/or display a prominent notification within the platform at least seven (7) days before those changes take effect.

For minor changes such as language clarifications or non-material corrections, changes may take effect immediately upon publication. The last updated date at the top of this document will always reflect the latest version of winlah's Privacy Policy. Your continued use of the winlah platform after any changes constitutes acceptance of the updated Privacy Policy.

12. How to Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how winlah handles your personal data, there are several ways to get in touch with us:

  • Live Chat: The fastest way to get immediate assistance – available 24 hours a day, 7 days a week in Bahasa Melayu.
  • Email: support@winlah-jit.com – for detailed inquiries or formal requests relating to your privacy rights. Responses are provided within 48 working hours.

When contacting us about privacy matters, please clearly state: your full name, your winlah account number, the nature of your enquiry or request, and any relevant supporting information. This helps us process your request more quickly and accurately.

Winlah handles all privacy enquiries in strict confidence and will provide an informed response within the stipulated timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, the regulatory body overseeing the enforcement of PDPA 2010.

winlah's Commitment: We take every privacy inquiry seriously and are committed to providing responses that are clear, informative, and respectful of your rights. Your privacy is not merely a legal obligation to us – it is a cornerstone of the trust that underpins our long-term relationship with the winlah Malaysian player community.

Data Privacy & Security Are Part of winlah's Core Responsibilities

Winlah protects its players not only in terms of data security, but also with regard to your overall well-being and gaming experience.

Your Data, Secure at All Times

Winlah's security infrastructure is monitored around the clock. Any threats are detected and responded to promptly by our experienced security team.

Accounts Protected with 2FA

Enable two-factor authentication in your Winlah account settings for an added layer of protection, essential for preventing unauthorised access to your account.

Responsible Gaming

Beyond data privacy, Winlah also safeguards your well-being through responsible gaming tools – deposit limits, session time limits, and self-exclusion options are all available free of charge.

24/7 Privacy Support

The Winlah support team is available to assist with any privacy-related enquiries in Bahasa Malaysia – 24 hours a day, every day, via live chat.

Relationship with winlah's Terms & Conditions

This Privacy Policy forms part of the overall agreement between you and winlah, and should be read together with the Terms & Conditions our full terms. Both documents together govern the relationship between Winlah and every Malaysian player using our platform. In the event of any conflict between the two documents with respect to data privacy, this Privacy Policy shall prevail.

Register with winlah – Malaysia's Safe & Transparent Betting Platform

Your data is safe with winlah. Our platform is built with security as a priority – 256-bit SSL encryption, full compliance with Malaysia's PDPA, and 24/7 privacy support. Register for free today and claim your RM50 welcome bonus.

256-bit SSL Encryption Compliant with Malaysia's PDPA No Sale of Data to Third Parties
Bahasa Melayu