Privacy Policy Won999 —
Data Protection Malaysia users

1Introduction and won999 Commitment

Won999 values the privacy of every user on our platform. As one of Malaysia's trusted online gaming platforms, we understand that your trust is our most valuable asset. This Privacy Policy is crafted to provide full transparency on how we manage your personal information.

This document applies to all users who access the won999.win website, use the won999 mobile app, or interact with any services we offer. By registering an account or continuing to use our platform, you agree to the terms set out in this Privacy Policy.

2Types of Personal Data We Collect

Won999 only collects information that is genuinely necessary to provide you with the best service. We do not collect excessive data or data unrelated to the operation of our platform.

Below are the categories of data we collect and their purposes:

3How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. won999 does not use your data for purposes not stated in this Privacy Policy without obtaining your consent first.

• Processing account registration and verifying your identity through industry-standard KYC procedures.
• Securely processing financial transactions including deposits, withdrawals, and bonus payments.
• Sending important account notifications such as login confirmations, security alerts, and transaction updates.
• Monitoring account activity to detect and prevent fraud, money laundering, and unauthorized access.
• Complying with legal obligations and regulations applicable to online gambling platform operations.
• Improving the user experience based on collected usage patterns and feedback.
• Sending promotional offers and bonuses to users who have consented to receive marketing communications.

4Third-Party Data Sharing

In the course of operating the platform, won999 may need to share certain data with selected third parties. All data sharing is conducted on a strictly need-to-know basis and is subject to strict confidentiality agreements.

Third parties that may receive your data include:

• Payment Processors: Licensed banks and e-wallet providers that process your financial transactions. They receive only the information necessary to complete the relevant transaction.
• Game Software Providers: Game development companies that provide integrated gaming platforms to won999. Shared data is limited to game session information only.
• Security Service Providers: Third-party identity verification and fraud detection companies that help us maintain a secure platform.
• Statutory Authorities: Law enforcement agencies or regulatory bodies when required by applicable law.

All third parties we work with are required to comply with data protection standards equal to or exceeding those of won999. We conduct regular reviews of all partners to ensure ongoing compliance.

5Data Security and Encryption

Won999 continuously invests in the latest security infrastructure to ensure your data remains protected at all times. The security layers we employ include the following:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
• Data encryption at rest using AES-256 standard for all sensitive data.
• Two-factor authentication (2FA) is available for all user accounts.
• Round-the-clock security monitoring by our IT security team.
• Penetration testing is conducted regularly by independent security experts.
• An intrusion detection system (IDS) is in place to detect and respond to real-time threats.
• Strict access control policy — only authorised staff may access user data.

6Cookie and Tracking Technology Usage

Won999 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored on your device when you visit our website.

The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login session verification and account security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us improve our services. All data is collected anonymously.
• Functional Cookies: Remembering your preferences such as language and display settings to provide a more personalized experience.
• Analytics Cookies: Helping us understand overall platform usage patterns for product improvement purposes.

You can manage your cookie settings through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some won999 platform features.

7Your Rights as a User

As a registered won999 user, you have certain rights regarding your personal data protected under Malaysia's Personal Data Protection Act 2010 (PDPA). We fully respect and uphold these rights.

• Right to Access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to Rectification: You have the right to request that we correct any inaccurate or outdated data.
• Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes.
• Right to Withdraw Consent: You may withdraw consent you have given at any time, though this does not affect any processing already carried out.
• Right to Data Portability: You have the right to receive your data in a machine-readable format for transfer to another platform.

To exercise any of the above rights, please contact our customer support team via 24/7 live chat. We will process your request within 14 business days.

8Data Retention Period

Won999 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected. Retention periods vary depending on the type of data and applicable legal requirements.

• Active account data is retained for as long as your account remains active and for an additional period after closure as required by law.
• Financial transaction records are retained for a minimum of seven years to meet financial and tax legal requirements.
• Security log data is retained for 12 months for fraud detection and security investigation purposes.
• Marketing data is retained until you withdraw consent or request deletion.
• Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered.

9Children's Privacy

The won999 platform is restricted to users aged 18 and above only. We do not knowingly collect or process personal data of minors. Should we discover that a child's data has been collected without our knowledge, immediate action will be taken to delete that data and close the associated account.

If you have reason to believe that a minor has registered on our platform, please contact our support team immediately so we can take appropriate action.

10Changes to the Privacy Policy

Won999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. All amendments will be published on this page with a new "Updated" date.

For material or significant amendments, we will notify you via email or an in-account notification at least 14 days before the changes take effect. Your continued use of the won999 platform after the effective date constitutes your acceptance of the revised policy.