1. Introduction
This Privacy Policy ("Policy") describes how winnow44 ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "Player") who access or use the winnow44 platform available at https://winnow44.one.
winnow44 operates as Malaysia's premier online casino and sportsbook platform, providing real-money gaming Services including sports betting, live casino, and slot games to players who have met our eligibility requirements. In providing these Services, we necessarily collect and process personal data as described in this Policy.
By registering an Account or using any winnow44 Service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with the terms of this Policy, please do not access or use the winnow44 platform.
This Policy is to be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which together govern your relationship with winnow44.
2. Personal Data We Collect
winnow44 collects personal data through several channels, including registration forms, KYC verification, platform usage, and communications with our support team. The categories of data we collect include:
2.1 Registration Data
- Full legal name as it appears on government-issued identification;
- Date of birth (for age verification — 21+ requirement);
- Email address and mobile phone number;
- Chosen username and encrypted password;
- Residential address (city, state, country — Malaysia for our primary player base).
2.2 Identity Verification (KYC) Data
- Copies of government-issued photo identification (MyKad, passport, or equivalent);
- Proof of residential address (utility bill, bank statement, or equivalent);
- Payment method verification documents where required by anti-money laundering procedures.
2.3 Financial Data
- Transaction records including deposits, withdrawals, and wager history;
- Payment method identifiers (e.g., bank account last four digits, e-wallet reference) — full payment credentials are never stored by winnow44 and are handled exclusively by our payment processors;
- MYR wallet balance history.
2.4 Technical & Usage Data
- IP address and approximate geolocation at login;
- Device type, operating system, and browser information;
- Session duration, pages visited, and features used;
- Error logs and diagnostic data for platform stability purposes.
2.5 Communications Data
- Contents of support tickets and live chat conversations;
- Records of your responses to promotional communications;
- Responsible gaming self-assessment responses and limit-setting history.
3. How We Use Your Personal Data
winnow44 uses the personal data collected for the following specific purposes:
- Account Creation & Management: To register your Account, verify your identity, maintain your wallet, and enable access to all Services;
- Service Delivery: To process bets, settle winnings, handle deposits and withdrawals, and operate the gaming platform in accordance with your instructions;
- Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML) laws, know-your-customer (KYC) requirements, and international gaming licensing conditions;
- Security & Fraud Prevention: To detect and prevent unauthorised access, fraudulent transactions, bonus abuse, and other prohibited conduct described in our Terms & Conditions;
- Responsible Gaming: To monitor gaming patterns for indicators of problem gambling, enforce self-imposed limits, and provide appropriate interventions or support resources;
- Customer Support: To respond to your enquiries, resolve disputes, and improve our support processes;
- Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications;
- Platform Improvement: To analyse usage patterns, test new features, and improve the overall winnow44 player experience.
4. Legal Basis for Processing
winnow44 processes your personal data on the following legal bases:
- Contractual Necessity: Processing required to deliver the Services under the contract established when you accept our Terms & Conditions upon registration;
- Legal Obligation: Processing required to comply with AML regulations, KYC obligations, licensing conditions, and any lawful instruction from a competent regulatory authority;
- Legitimate Interests: Processing for fraud prevention, security, platform improvement, and responsible gaming monitoring, where such processing does not override your fundamental privacy rights;
- Consent: Processing for marketing communications and optional data uses, where your explicit opt-in consent has been obtained. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
5. Data Sharing & Third Parties
winnow44 does not sell your personal data. We share personal data with third parties only in the following limited circumstances and strictly on a need-to-know basis:
- Payment Processors: Malaysian payment gateway providers (including FPX operators, Touch 'n Go eWallet, Boost, and DuitNow integration partners) receive the minimum data necessary to process your transactions. These providers operate under their own privacy policies and applicable Malaysian financial regulations;
- Game Software Providers: Certified gaming studios and RNG providers may receive anonymised session data for game certification and technical integration purposes. No personally identifiable data is shared with game providers;
- Identity Verification Services: Third-party KYC and AML screening providers may process your identity documents for verification and sanctions screening. All such providers are bound by contractual data protection obligations;
- Regulatory Authorities: We may be required by law or by our licensing authority to disclose account and transaction data to competent regulatory or law enforcement bodies. Such disclosures are made only to the extent legally required;
- Professional Advisers: Legal, audit, and compliance advisers may access personal data on a strictly confidential, need-to-know basis in the course of providing professional services to winnow44;
- Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of winnow44's assets, personal data held by winnow44 may be transferred to the acquiring entity, subject to equivalent privacy protections.
6. Cookies & Tracking Technologies
winnow44 uses cookies and similar technologies (local storage, session tokens) on the platform. The categories of cookies used are:
- Strictly Necessary Cookies: Required for authentication, session management, and core platform functionality. These cannot be disabled without impairing the Services;
- Security Cookies: Used to detect and prevent fraudulent login attempts, session hijacking, and cross-site request forgery;
- Analytics Cookies: Used to understand aggregate platform usage patterns (pages visited, session duration, feature adoption). Data collected is anonymised and used solely for platform improvement;
- Preference Cookies: Store your language, display, and notification preferences to personalise your experience across sessions.
winnow44 does not use third-party advertising network cookies. You may adjust browser settings to block non-essential cookies, though doing so may affect platform functionality.
7. Data Retention
winnow44 retains personal data only for as long as necessary for the purpose for which it was collected, subject to applicable legal and regulatory retention requirements:
- Account and transaction records are retained for a minimum of five (5) years from Account closure, in accordance with AML regulatory requirements;
- KYC identity documents are retained for the duration of the Account and for five (5) years following closure;
- Support communications are retained for two (2) years from the date of resolution;
- Technical and usage logs are retained for twelve (12) months for security and fraud prevention purposes;
- Marketing consent records are retained until withdrawal of consent and for one (1) year thereafter.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.
8. Data Security
winnow44 implements technical and organisational security measures proportionate to the risks associated with processing personal data in a real-money gaming environment. These measures include:
- 256-bit TLS/SSL encryption for all data in transit;
- Encryption of sensitive data fields at rest in our databases;
- Access controls restricting personal data access to authorised staff on a role-based, need-to-know basis;
- Multi-factor authentication for internal systems handling personal data;
- Regular third-party penetration testing and security audits;
- Automated monitoring and alerting for anomalous data access patterns.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winnow44 will notify affected players and relevant authorities in accordance with applicable notification obligations.
9. Your Data Rights
As a player whose personal data is processed by winnow44, you have the following rights, subject to applicable legal limitations:
- Right of Access: You may request a copy of the personal data winnow44 holds about you;
- Right to Rectification: You may request correction of inaccurate or incomplete personal data;
- Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations and ongoing regulatory requirements;
- Right to Restrict Processing: You may request that we limit how we process your data in certain circumstances;
- Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing;
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting prior processing.
To exercise any of these rights, please contact the winnow44 support team. We will respond to verified requests within thirty (30) days. We may require identity verification before processing data rights requests to prevent unauthorised disclosure.
10. Children and Minors
The winnow44 platform is strictly intended for individuals aged 21 years and above. winnow44 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the registration process and is enforced through our KYC procedures.
If winnow44 becomes aware that personal data has been collected from a person under 21 years of age, the Account will be immediately closed, all bets voided, and the data deleted (subject to any legal reporting obligations that may arise). Parents or guardians who believe a minor has registered an Account on winnow44 should contact our support team immediately.
11. International Data Transfers
winnow44 operates under international gaming licensing, and some of our service providers — including game studios, KYC verification platforms, and cloud infrastructure providers — may be located outside Malaysia. Where personal data is transferred outside Malaysia, winnow44 takes steps to ensure that appropriate safeguards are in place, including contractual data protection clauses that require equivalent protection standards.
By using the winnow44 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia, subject to the safeguards described in this section.
12. Changes to This Privacy Policy
winnow44 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform Services. When material changes are made, we will notify registered players via their registered email address or through a prominent notice on the platform prior to the changes taking effect.
The "Last Updated" date at the top of this Policy reflects when the most recent revision was published. Your continued use of the winnow44 platform following notification of changes constitutes your acceptance of the revised Policy.
13. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by winnow44, please contact our Data Protection team through the support portal accessible after logging in to your Account.