Privacy Policy WinMy 9 –
Your Privacy is Our Priority

Welcome to the WinMy 9 Privacy Policy page. This document transparently explains how WinMy 9 (winmy9.biz) collects, stores, uses, and protects your personal information as a member of our platform.

WinMy 9 takes member privacy very seriously. We understand that when you register, make deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX Maybank2u, and use our range of betting services, you are entrusting us with sensitive personal information. That trust is a responsibility we hold with the utmost integrity.

This Privacy Policy was drafted in compliance with Personal Data Protection Act 2010 (PDPA) Malaysia and relevant international data protection standards. By using the WinMy 9 platform, you agree to the terms set out in this Privacy Policy.

WinMy 9 only collects data that is strictly necessary to deliver the best possible service to you. We do not collect excessive or irrelevant data. The following are the categories of data we may collect:

The personal data we collect is used responsibly and only for legitimate purposes. WinMy 9 uses your information for the following:

• Account Management: Creating, verifying, and managing your member account on the WinMy 9 platform, including processing registration and identity verification.
• Transaction Processing: Processing your deposits and withdrawals through your chosen Malaysian payment method — whether that's Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX via Maybank2u and CIMB Clicks.
• Service Provision: Ensuring you have full access to all WinMy 9 games and services — from EPL and Malaysia Super League football betting to live baccarat and premium slots.
• Security & Fraud Prevention: Monitoring suspicious activity, detecting unauthorised access attempts, and protecting both your account and the WinMy 9 platform as a whole.
• Service Communications: Sending important account notifications, transaction confirmations, security updates, and platform operational information.
• Marketing Communications (with consent): Keeping you informed about promotions, new bonuses, and exclusive offers relevant to your betting activity — only where you have given consent to receive such communications.
• Personalise Your Experience: Customises game display, promotional recommendations, and the platform interface based on your preferences and usage habits.
• Legal Compliance: Complying with reporting obligations to the relevant authorities regarding suspicious activity (AML), age verification, and KYC requirements as mandated by Malaysian law.

WinMy 9 does not sell or rent members' personal data to any third party for their own marketing purposes. However, there are limited situations where we need to share your data with other parties in order to provide our services:

• Payment Providers: Information required to process financial transactions is shared with your chosen payment service provider (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX). These providers are bound by strict data privacy and security agreements.
• Technology Service Providers: Third parties that assist us in operating the platform — such as cloud hosting providers, customer service systems, and analytics tools — may have limited access to certain data as part of their services to WinMy 9.
• Game Providers: Live casino and sports game providers operating within the WinMy 9 platform, such as Evolution, Pragmatic Play, and SA Gaming, may receive the minimum technical data required to deliver a seamless gaming experience.
• Legal Authorities: WinMy 9 will disclose data to the relevant authorities when required by Malaysian law, court order, or to comply with anti-money laundering (AML) requirements.

Member data security is a top priority for WinMy 9. We implement multiple layers of technical and organisational safeguards to keep your data secure at all times:

• Encryption in Transit: All communications between your device and WinMy 9 servers are protected by TLS 1.3 protocol with 256-bit SSL certificates, ensuring your data cannot be intercepted during transmission.
• Storage Encryption: Sensitive data such as banking information and passwords are stored in encrypted form using industry-standard hashing algorithms (bcrypt/Argon2), making them unreadable even to WinMy 9's internal staff.
• Access Controls: Only WinMy 9 staff with a legitimate business need are permitted to access member data, and all access is logged for audit purposes.
• 24/7 Monitoring: An automated security monitoring system operating around the clock detects and blocks suspicious activity or intrusion attempts in real time.
• Two-Factor Authentication (2FA): WinMy 9 provides and encourages the use of 2FA for all member accounts as an additional layer of protection beyond passwords.
• Regular Security Testing: The WinMy 9 platform undergoes regular penetration testing and security audits by independent firms to identify and address vulnerabilities before they can be exploited.

WinMy 9 uses cookies and similar tracking technologies to enhance your user experience and ensure the platform operates at its best. Below are the types of cookies we use:

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the WinMy 9 platform and your overall betting experience.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our commitment to member privacy, you have the following rights regarding your personal data at WinMy 9:

WinMy 9 services are strictly for individuals aged 18 and above only. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

Should WinMy 9 discover that personal data belonging to an individual under the age of 18 has been collected, we will take immediate steps to delete that information and close the account in question. Parents or guardians who suspect their child has registered with WinMy 9 without permission are urged to contact us immediately.

In operating the WinMy 9 platform, some personal data may be transferred to and stored on servers located outside Malaysia. This occurs when we utilise cloud services or technology providers whose infrastructure is based in other regions.

Any cross-border data transfers carried out by WinMy 9 are subject to adequate safeguards, including:

• Data processing agreements with recipients that require protection standards equivalent to Malaysia's PDPA.
• Selection of cloud service providers holding internationally recognised security certifications such as ISO 27001 and SOC 2.
• End-to-end encryption is applied to all data transferred across borders.

WinMy 9 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy or as required by Malaysian law. Our general data retention guidelines are as follows:

WinMy 9 reserves the right to amend this Privacy Policy at any time to reflect changes in our business operations, technology, or applicable legal requirements. Whenever a material change is made, we will:

• Displaying a prominent notice on the WinMy 9 platform homepage and on this page.
• Updating the "Last Updated" date at the top of this document.
• Notifying members via their registered email or in-platform notifications of any material changes.

We encourage you to review this Privacy Policy page periodically. Your continued use of the WinMy 9 platform after any amendments are published will be considered your acceptance of the updated policy.

We welcome any questions, concerns, or requests regarding this Privacy Policy or your personal data. WinMy 9's Data Privacy Officer (DPO) team is here to assist you.