win4u Privacy Policy

1. Overview

1.1 This Privacy Policy ("Policy") describes how win4u ("we", "us", "our", "Platform") collects, uses, stores, and discloses personal data obtained from registered users and visitors ("you", "Player", "User") of the win4u.club website and associated gaming services.

1.2 By registering an account on win4u or continuing to use the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree to this Policy, you must not use the Platform.

1.3 This Policy is to be read alongside and forms part of the win4u Terms & Conditions. In the event of conflict between this Policy and the Terms & Conditions on privacy-related matters, this Policy shall prevail.

1.4 win4u is committed to the responsible handling of personal data in accordance with applicable data protection legislation. We implement data minimisation principles: we collect only the data we need, retain it only as long as necessary, and protect it to the standard expected of a licensed financial services operator.

2. Personal Data We Collect

win4u collects personal data in the following categories:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, nationality, government-issued ID number (MyKad / passport)	Registration & KYC verification
Contact Data	Email address, mobile number, residential address	Registration
Financial Data	Payment method identifiers (e-wallet IDs, bank account reference), transaction history, deposit and withdrawal amounts in MYR	Deposit / withdrawal processing
Technical Data	IP address, browser type and version, device type, operating system, session timestamps	Automatic — on Platform use
Usage Data	Games played, bet amounts, wagering history, session duration, feature interactions	Automatic — during gameplay
Communications Data	Content of live chat conversations, email correspondence with support team	When you contact us
Marketing Preferences	Promotional opt-in / opt-out status, bonus participation history	Account settings & preferences

2.1 win4u does not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless this is required as part of applicable AML/KYC regulatory obligations in specific circumstances.

3. How We Collect Your Data

win4u collects personal data through the following channels:

• Direct submission: Information you provide when registering, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated technical collection: Cookies, server logs, and similar technologies that automatically capture technical and usage data when you interact with the Platform.
• Third-party verification: Identity verification service providers and payment processors may share data with win4u as part of account verification and transaction processing workflows.
• Publicly available sources: win4u may supplement account data with information from publicly available sources (e.g., sanctions screening databases) as part of AML compliance checks.

4. How We Use Your Personal Data

win4u processes your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your win4u account; processing login and authentication;
• Identity verification (KYC): Verifying your identity and age (21+) in compliance with AML regulatory requirements;
• Transaction processing: Processing MYR deposits via Touch n Go, Boost, GrabPay, Maybank, CIMB, and other supported payment methods; processing withdrawal requests;
• Gameplay and platform delivery: Enabling you to access and play games, use the sportsbook, and interact with all Platform features;
• Customer support: Responding to enquiries, resolving disputes, and providing assistance via live chat and email;
• Responsible gaming: Monitoring account activity to identify patterns indicative of problem gambling; administering self-exclusion and limit settings;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, and other prohibited conduct;
• Legal and regulatory compliance: Meeting win4u's obligations under applicable law, including responding to lawful requests from regulatory or law enforcement authorities;
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have opted in or where a legitimate interest basis applies, and always with an opt-out mechanism;
• Platform improvement: Analysing aggregated and anonymised usage data to improve game selection, interface design, and overall Platform performance.

5. Legal Basis for Processing

win4u processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the win4u Terms & Conditions, including account management, payment processing, and gameplay;
• Legal obligation: Processing required to comply with AML legislation, KYC requirements, and other applicable regulatory obligations;
• Legitimate interests: Processing for fraud prevention, security, responsible gaming monitoring, and aggregate analytics — where these interests are not overridden by your rights and interests;
• Consent: Direct marketing communications and non-essential cookies, where your explicit opt-in consent has been obtained. You may withdraw this consent at any time.

6. Data Sharing and Disclosure

6.1 win4u does not sell, rent, or trade your personal data to third parties for their own independent commercial purposes.

6.2 win4u may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment processors: To process MYR deposits and withdrawals via Touch n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, and USDT gateways;
• Identity verification providers: To perform KYC and age verification checks in compliance with AML obligations;
• Game software providers: Game providers (including Pragmatic Play, PG Soft, NetEnt, and others) receive minimum necessary technical data to deliver gameplay and maintain game integrity;
• IT and infrastructure providers: Cloud hosting, CDN, and cybersecurity vendors who process data on win4u's behalf under data processing agreements;
• Legal and regulatory authorities: Where required by law, court order, or regulatory direction — including disclosures to AML-related financial intelligence units;
• Professional advisors: Lawyers, accountants, and auditors bound by professional confidentiality obligations.

6.3 All third-party data processors engaged by win4u are required to process personal data only as instructed by win4u, under confidentiality obligations, and with adequate security measures in place.

7. Cookies and Tracking Technologies

7.1 win4u uses cookies and similar technologies (including local storage and session tokens) to operate the Platform, remember your preferences, maintain session security, and analyse Platform performance.

7.2 The following categories of cookies are used on win4u.club:

• Strictly necessary cookies: Required for Platform operation — session authentication, security tokens, and load balancing. Cannot be disabled without impacting Platform functionality.
• Functional cookies: Remember your preferences (language, game lobby filter settings, responsible gaming configuration). Can be disabled; disabling may affect user experience.
• Analytics cookies: Aggregate, anonymised usage data to understand how players navigate the Platform. No individual identification. You may opt out via account settings.
• Marketing cookies: Used to deliver relevant promotional content based on your Platform activity. Only activated following explicit opt-in consent.

7.3 You can manage cookie preferences via your browser settings. Note that disabling strictly necessary cookies will prevent login and normal Platform use.

8. Data Retention

8.1 win4u retains personal data for as long as your account is active and for a period following account closure as required by applicable law and regulatory obligations. AML regulations typically require retention of transaction and identity records for a minimum of five (5) years from the date of the last transaction.

8.2 Usage and technical data is retained in identifiable form for up to 24 months, after which it is anonymised or deleted. Support communications are retained for 3 years from the date of the interaction.

8.3 Where data is retained solely on the basis of your consent and you withdraw that consent, win4u will delete or anonymise that data within 30 days of receiving your withdrawal request, except where retention is required by applicable law.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by win4u:

• Right of access: Request a copy of the personal data win4u holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data where there is no legitimate basis for continued processing — noting that regulatory retention obligations may limit this right;
• Right to restriction: Request that win4u restricts processing of your data in certain circumstances;
• Right to data portability: Request a machine-readable copy of data you have provided, where processing is based on consent or contract;
• Right to object: Object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Withdraw any consent you have previously given, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact win4u's support team via email at [email protected] or via 24/7 live chat. We will respond to verified requests within 30 days.

10. Data Security

10.1 win4u implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive personal and financial data, access controls limiting staff access to personal data on a need-to-know basis, real-time intrusion detection and DDoS mitigation, and regular security audits.

10.2 In the event of a personal data breach that poses a risk to your rights and freedoms, win4u will notify affected individuals and relevant regulatory authorities in accordance with applicable data breach notification obligations.

11. Children and Minors

11.1 The win4u Platform is strictly for users aged 21 and above. win4u does not knowingly collect personal data from individuals under 21 years of age. If win4u becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account closed. If you believe an underage individual has registered on the Platform, please contact us immediately at [email protected].

12. Third-Party Links

12.1 The win4u Platform does not contain links to third-party websites or services that are unrelated to Platform operation. Where game software is delivered by third-party providers, such providers operate under data processing agreements with win4u. win4u is not responsible for the privacy practices of third parties operating outside the scope of such agreements.

13. Changes to This Policy

13.1 win4u reserves the right to update this Privacy Policy at any time. Material changes will be notified to registered Players via email or in-platform notification at least 7 days before the changes take effect. The "Last updated" date at the top of this page will be revised accordingly. Continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.

14. Contact and Data Enquiries

For privacy-related enquiries, data access requests, or to report a data concern, please contact win4u via:

• Email: [email protected] (responses within 2 hours for general support; data rights requests within 30 days)
• Live Chat: Available 24/7 via the win4u Platform — agents can log a formal data request on your behalf

This Privacy Policy was last reviewed in June 2026.