Winchat Privacy Policy – Your Personal Data Protection

1Introduction

Winchat ("we", "our platform") takes personal data protection seriously. As an online entertainment platform serving hundreds of thousands of Malaysian players, we understand the importance of the trust you place in us when sharing your personal information.

This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and leading international data protection standards. It clearly outlines the types of information we collect, why we need it, how it is used, and the protective measures we implement to ensure the security of your data at all times.

We are committed to never selling, renting or disclosing your personal data to third parties for marketing purposes without your explicit consent. Your trust is central to our operations, and we never take this responsibility lightly.

2Information We Collect

We only collect information necessary to provide you with a safe, seamless and responsible service. This information falls into several key categories:

We may also collect information automatically through cookies and similar tracking technologies when you browse our platform. This information helps us understand how users interact with the platform for continuous improvement purposes.

3How We Use Your Data

Every piece of information you provide to us is used for one or more legitimate, transparent purposes. We do not use your data for any purpose unrelated to platform operations without obtaining your consent first.

• Creating and managing your account, and verifying your identity through the KYC process as required by law.
• Processing deposits and withdrawals securely while maintaining accurate financial transaction records.
• Detecting and preventing fraudulent activity, money laundering, and any security threats to your account.
• Sending important account-related notifications such as login confirmations, transaction updates, and security alerts.
• Providing effective customer support and resolving any enquiries or complaints you submit.
• Fulfilling legal and regulatory obligations, including mandatory reporting to the relevant authorities.
• Analysing platform usage patterns in aggregate and anonymised form for product improvement and user experience purposes.
• Contacting you regarding promotions and special offers — only if you have given consent to receive marketing communications.

4Information Sharing & Disclosure

Winchat does not sell, rent, or trade your personal data. However, there are limited situations where we need to share your information with certain parties to enable our platform to function properly and comply with applicable laws:

• Payment Service Providers: Required transaction information is shared with payment processors such as DuitNow, FPX, and authorised e-wallet providers to facilitate the processing of deposits and withdrawals.
• Identity Verification Providers: KYC data is shared with approved third-party verification partners to fulfil anti-money laundering legal requirements.
• Regulatory Authorities: We are required by law to disclose certain information to regulatory bodies, law enforcement agencies or courts when ordered to do so.
• Hosting & Technology Services: Our technical infrastructure providers may have limited access to your data in a strictly technical capacity, and they are bound by strict confidentiality agreements.
• Business Transfer: If winchat is involved in a merger, acquisition or asset sale, user data may be transferred as part of that process with prior notice given to users.

All third parties who receive your data are required to comply with data protection standards equal to or exceeding our own policies. We conduct regular reviews of all our third-party partners to ensure ongoing compliance.

5Data Security & Technical Protection

We continually invest in the latest security infrastructure to ensure your personal data is protected to the highest standard. The technical security measures we implement include:

• 256-bit SSL/TLS data encryption for all communications between your device and our servers.
• Encryption of sensitive data in databases using AES-256 standards.
• Two-factor authentication (2FA) is available for all user accounts as an additional layer of security.
• 24/7 security monitoring system that detects and responds to any suspicious activity in real time.
• Regular independent security audits conducted by certified third-party cybersecurity firms.
• Strict internal access controls — only staff who require access to specific data to perform their duties are granted permission.
• A comprehensive incident response plan to address any data breaches swiftly and effectively.

6Cookies & Tracking Technologies

The winchat platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse platform performance. The following are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. Please note, however, that disabling certain cookies may affect core platform functions such as the ability to log in or maintain your gaming session.

7Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 and applicable international data protection frameworks, you have the following rights regarding your personal data that we hold:

To exercise any of the above rights, please contact our privacy team via the platform's live chat. We will process your request within 30 business days. For more complex cases, this period may be extended to up to 60 days with advance notice to you.

8Data Retention & Deletion

Winchat retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations. Our retention policy is as follows:

• Active account data is retained for the duration your account remains active plus five (5) years after account closure for audit and legal compliance purposes.
• Financial transaction records are retained for seven (7) years as required by Malaysian financial legislation.
• Security logs and activity tracking data for detecting suspicious activity are retained for two (2) years.
• Customer support communications are retained for three (3) years from the date of the last interaction.
• Data collected for KYC purposes is retained for the minimum period stipulated by the relevant regulatory authority.

Once the retention period expires, your data will be securely deleted or anonymised using approved data deletion procedures, ensuring no personal information can be recovered after deletion.

9Children's Privacy

The winchat platform is strictly for individuals aged 18 and above. We do not knowingly collect or store personal data from minors or individuals below the legal gambling age in their jurisdiction.

If you are a parent or guardian and believe that your underage child has registered an account on our platform, please contact our support team immediately. We will investigate the matter and, if confirmed, will delete the account and all associated data without delay.

10Changes to This Privacy Policy

Winchat reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or changes to the services we offer. When significant changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying clear notices on our platform to inform users of any such changes.
• Sending email notifications for significant changes that affect how we process your data.
• In cases where changes require new consent, we will actively seek your consent before those changes take effect.

We encourage you to review this page regularly. Continued use of our platform after any changes are published constitutes your acceptance of the updated version of the Privacy Policy.

11Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or how we manage your personal data, our privacy team is ready to assist you at any time.

• 24/7 live chat available directly within the winchat platform — the fastest way to get a response.
• Dedicated privacy email: [email protected]
• General support email: [email protected]

We are committed to responding to all privacy-related enquiries within 72 business hours. For formal complaints under Malaysia's PDPA, you are also entitled to contact the Department of Personal Data Protection Malaysia directly.