Wewin55 Privacy Policy – Malaysian Player Data Protection

Introduction

This Privacy Policy describes how wewin55 ("we", "platform") collects, uses, stores and protects your personal data when you use the wewin55.xyz website and all related services.

This policy is drafted in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia and international best practices in data protection. By registering for or using the wewin55, you agree to the collection and processing of your personal data as described in this policy.

We understand that financial matters and gambling activity are deeply personal. Your trust in us is something we do not take lightly. Every decision we make regarding player data starts from the same question: "Is this ethically right, not just legally permissible?"

Personal Data We Collect

wewin55 only collects data that is strictly necessary to operate the platform safely and meet legal requirements. We do not collect irrelevant or excessive data. The following are the categories of data we collect:

2.1 Data You Provide Directly

2.2 Automatically Collected Data

While you are using the platform wewin55, our systems automatically record the following technical information:

• Device Data: Device type, model, operating system (Android/iOS), screen resolution, app version or web browser used.
• Connection Data: IP address, internet service provider (ISP) name, connection speed, and approximate geographic location based on IP (state within Malaysia).
• Platform Activity Data: Login and logout records, games played, total bets placed, wins and losses, session duration, buttons clicked, and page navigation.
• Cookie Data: Session cookie and preference cookie information stored in your browser or device. Please refer to Section 8 for more details on how we use cookies.

2.3 Identity Verification Data (KYC)

In certain situations – such as prior to the first withdrawal, or when cumulative withdrawals exceed RM 5,000, or when there is suspicious activity – wewin55 may request additional KYC documents:

• Malaysian identity card (MyKad) – front and back.
• A selfie holding your MyKad for live identity verification.
• Recent bank statement or e-wallet transaction proof (for source of funds verification).

All KYC documents received are stored in a segregated system with additional encryption and are accessible only by the compliance team wewin55 verified.

How We Use Your Data

The personal data we collect is used solely for the following purposes. We do not process data for any purpose outside this list without obtaining your consent beforehand:

We do not make fully automated decisions (without human review) that have a significant impact on you – such as withdrawal rejections or account suspensions – based solely on automated processing of your data.

Data Sharing with Third Parties

wewin55 does not sell, rent, or trade players' personal data to any third party. Full stop. That said, there are situations where we need to share certain data with specific third parties in order to operate:

4.1 Trusted Service Providers

We share only the necessary data with third-party service providers that help us operate the platform. This includes:

• Payment Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks participating in the FPX network – to process your deposits and withdrawals.
• Game Providers: Providers such as Pragmatic Play, PG Soft, Playtech, and others receive a player ID (without full name) to facilitate game sessions.
• Cloud Infrastructure Provider: Servers and databases that store your data. All such providers are bound by strict data processing agreements with wewin55.
• Identity Verification System: Registered and qualified third-party KYC providers engaged to assist in verifying player identity documents.

All such third parties are bound by confidentiality agreements and are only permitted to process shared data for the specified purposes.

4.2 Disclosure to Authorities

In very limited circumstances, wewin55 may be required by law to disclose players' personal data to the relevant authorities:

• Upon a valid Malaysian court order.
• Upon official request from Malaysian law enforcement agencies (PDRM, SPRM, BNM) in the course of a legitimate investigation.
• To comply with reporting obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).

In all such cases, wewin55 will endeavour to notify you of such disclosure in advance, to the extent permitted by law.

Data Security

Protecting your data is our technical and organisational priority. The following are the concrete security measures we have in place:

5.1 Encryption

• During transmission: All communications between your device and wewin55's servers are protected by TLS 1.3 protocol and 256-bit SSL certificates. This means your data cannot be intercepted or read by third parties while in transit.
• During storage: Personal data stored in our databases is encrypted using AES-256 encryption. Your password is never stored in plain text – it is secured using a one-way hashing algorithm with salt.
• Payment data: Your payment method details (e-wallet number, bank account number) are stored in tokenized form only – we do not store full numbers anywhere in our systems.

5.2 Access Controls

Internal access to players' personal data at wewin55 is strictly governed by the principle of least privilege – each employee has access only to the data necessary to perform their specific role. All access to core systems is monitored and logged. Any unusual access activity will automatically trigger an alert to our security team.

5.3 Regular Security Audits

Platform wewin55 undergoes regular penetration testing and vulnerability assessments conducted by independent cybersecurity firms. Any vulnerabilities identified are prioritised and remediated promptly according to severity level.

5.4 Incident Response

In the event of a data breach affecting your personal data, wewin55 committed to:

• Containing and stopping the breach as quickly as possible.
• Notifying affected players within 72 hours of us becoming aware of the breach.
• Reporting to the relevant authorities as required by law.
• Providing clear information about what happened, what data was involved, and the steps taken.

Data Storage & Deletion

6.1 Retention Period

We retain your personal data for as long as your account remains active or as long as necessary to provide our services to you. After account closure, we retain your data for the following periods based on data category:

• Transaction & Financial Records: 7 years from the transaction date – in accordance with Malaysian accounting requirements and AMLA.
• KYC Documents (MyKad, selfie): 5 years after account closure – in accordance with industry-standard compliance requirements.
• Access & Activity Logs: 2 years – for security and investigation purposes if required.
• Basic Account Information: 1 year after account closure – to assist you in reopening your account if needed.
• Cookie & Analytics Data: Maximum 2 years – depending on cookie type.

6.2 Deletion Upon Request

You may request deletion of your personal data by contacting us at support@wewin55.xyz. wewin55 will delete or anonymise your data within 30 business days of receiving the request, unless a legal obligation requires us to retain it for a longer period.

It is important to understand that requests to delete data before the legally mandated retention period has elapsed cannot be fully fulfilled. In such cases, we will anonymize your data to the greatest extent possible while remaining compliant with the applicable legal requirements.

Your Rights as a Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data on wewin55:

To exercise any of the above rights, send a written request to support@wewin55.xyz with the email subject "PRIVACY RIGHTS REQUEST" along with proof of identity. We will respond within 30 calendar days.

Cookies & Tracking Technologies

wewin55 uses cookies and similar technologies to ensure the platform functions correctly, enhance your experience, and understand how the platform is used. Below is a summary of the cookies we use:

8.1 Cookie Controls

You can manage or delete cookies from your web browser settings. Please note that disabling essential cookies may affect platform functionality wewin55 – you may be unable to log in or access games properly. Analytical and functional cookies can be disabled without affecting the platform's core functionality.

Children's Data Protection

Platform wewin55 is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child or teenager under 18 has registered or used our platform, please contact us immediately at support@wewin55.xyz.

If we become aware that we have collected personal data from a minor without appropriate parental or guardian consent verification, we will take immediate steps to delete that data and close the relevant account.

Amendments to This Privacy Policy

wewin55 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data protection practices, new legal requirements or changes in how we operate. Material amendments will be communicated to members via:

• An in-platform notification on wewin55 that will appear the next time you log in.
• Via email to your registered address, at least 14 days before the amendment takes effect.

The "Updated" date at the top of this page reflects when this Privacy Policy was last revised. We recommend reviewing this page at least once every six months to stay informed about how we handle your personal data.

Continued use of the platform wewin55 after the effective date of this Privacy Policy amendment will be considered as your acceptance of the updated version.

Contact Us – Data Protection Officer

For any enquiries, concerns, or requests relating to your privacy and data protection at wewin55, you may reach us through the following channels:

If you are not satisfied with how we have handled your privacy request, you have the right to lodge a complaint with Department of Personal Data Protection Malaysia which is the regulatory body for PDPA in Malaysia.