winmy6 Privacy Policy

This Privacy Policy ("Policy") describes how winmy6 ("we", "us", "our", "the Platform") collects, processes, stores, and shares personal data relating to individuals ("you", "your", "Member", "User") who access or use the winmy6 website at https://winmy6.cam and any related services, features, or sub-domains operated by winmy6.

winmy6 is an online casino and sports betting platform designed for eligible adult players in Malaysia. Our services are conducted in Malaysian Ringgit (MYR) and make use of Malaysian payment infrastructure including FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, and USDT.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy. In the event of a conflict between this Policy and any other document, this Policy governs data protection matters.

The following terms have the meanings assigned below throughout this Policy:

winmy6 collects the following categories of personal data, depending on how you interact with the platform:

Identity & Contact Data

• Full legal name as shown on your Malaysian National Identification Card (MyKad) or passport.
• Date of birth (used to verify the mandatory 21+ age requirement).
• Email address and contact telephone number.
• Residential address, including city — such as Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, or Shah Alam.

Financial & Transaction Data

• Bank account details or e-wallet identifiers used for deposits and withdrawals (for example, an FPX-linked bank account or DuitNow registered number).
• Deposit and withdrawal history, transaction values in MYR, payment method, timestamps, and status records.
• Cryptocurrency wallet addresses where USDT transactions are conducted.

Account & Activity Data

• Username, encrypted password hash, and account preferences.
• Game play history, bet amounts, win and loss records, and session durations.
• Bonus claims, wagering progress records, and promotional eligibility status.
• Support interaction records, including live chat transcripts and email correspondence.

Technical & Device Data

• IP address, browser type and version, operating system, and device model.
• Session logs, page view records, and click-stream data.
• Cookie identifiers and similar tracking technology data (see Section 10).

Verification Documents

• Copies of identity documents submitted during KYC verification, such as a MyKad, passport, utility bill, or bank statement.
• Facial recognition or liveness check images where required by our compliance process.

winmy6 collects personal data through the following primary channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, depositing or withdrawing funds, contacting support, or participating in promotions.
• Automated collection: Technical and device data gathered automatically when you access the winmy6 platform, including through cookies and server logs.
• Third-party payment processors: Transaction confirmation data shared by FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, and e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay) when you initiate a payment.
• Identity verification services: Data returned from KYC or anti-money laundering screening providers engaged to verify Member identity and eligibility.
• Analytics and fraud prevention systems: Aggregated or pseudonymised behavioural data generated by platform analytics tools used to detect unusual activity or fraudulent conduct.

winmy6 processes your personal data for the following clearly defined purposes:

winmy6 relies on the following legal bases when processing personal data:

• Contractual necessity: Processing required to deliver the services you have requested, including account creation, payment processing, and game access.
• Legal obligation: Processing necessary to comply with applicable regulations, including KYC, anti-money laundering screening, and age verification.
• Legitimate interests: Processing for fraud prevention, platform security, and internal analytics, where those interests are not overridden by your fundamental rights.
• Consent: Where you have provided explicit consent — for example, for optional promotional communications. You may withdraw consent at any time by contacting our support team.

winmy6 does not sell, rent, or trade your personal data to external marketing organisations. We share personal data only where necessary for the purposes described in this Policy, or where required by law. Recipients may include:

• Payment service providers: FPX network banks, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency infrastructure partners — limited to transaction data needed to process or verify a payment.
• Identity verification partners: KYC and anti-money laundering screening providers engaged under data processing agreements with appropriate confidentiality obligations.
• Technology and infrastructure providers: Cloud hosting services, content delivery networks, and platform software vendors who process data as sub-processors under binding agreements.
• Game studio content providers: Certain game providers may receive pseudonymised session data necessary for game delivery and fairness certification. No directly identifying data is shared with studios.
• Regulatory and law enforcement authorities: Where winmy6 is required by applicable law, court order, or regulatory demand to disclose Member information.
• Professional advisers: Legal, accounting, or auditing firms bound by strict professional confidentiality obligations.

As an online platform, winmy6 may engage service providers and technology infrastructure located outside of Malaysia. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, winmy6 will implement appropriate safeguards, which may include contractual clauses, data processing agreements, or other recognised transfer mechanisms under applicable law.

Where you access the winmy6 platform from Kuala Lumpur, Penang, Johor Bahru, Shah Alam, Petaling Jaya, or any other location in Malaysia, your data will be handled in accordance with the standards set out in this Policy regardless of where processing infrastructure is physically located.

winmy6 retains personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable regulatory and legal obligations. General retention guidelines are as follows:

• Account and transaction records: Retained for a minimum of five (5) years from the date of the last transaction or account closure, to meet anti-money laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from account closure, or longer where required by applicable law.
• Support correspondence: Retained for up to three (3) years from the date of the interaction.
• Technical and session logs: Generally retained for up to twelve (12) months, unless required for an ongoing compliance or fraud investigation.
• Marketing consent records: Retained for the duration of consent and for a reasonable period thereafter as evidence of the consent having been obtained.

Upon expiry of the relevant retention period, personal data will be securely deleted or anonymised so that it can no longer be used to identify you.

winmy6 uses cookies and similar technologies on the platform to support functionality, maintain session state, analyse usage patterns, and detect fraudulent behaviour. The main categories of cookies used are:

• Strictly necessary cookies: Required for the platform to operate correctly. These include session authentication tokens that keep you logged in as you navigate between pages. These cookies cannot be disabled without significantly disrupting platform functionality.
• Functional cookies: Used to remember your preferences, language settings, and display options to personalise your experience on return visits.
• Analytics cookies: Collect pseudonymised data about how Members interact with the platform — such as pages visited, session duration, and navigation paths — to help us understand usage patterns and improve the service.
• Security and fraud-detection cookies: Used to identify suspicious patterns, bot activity, or unusual login behaviour that may indicate account compromise or fraudulent conduct.

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from using certain platform features, including login and payment functions. winmy6 does not place third-party advertising cookies on the platform.

winmy6 applies technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the winmy6 platform.
• Hashing and salting of account passwords — winmy6 staff cannot view your password in plain text.
• Role-based access controls limiting staff access to personal data to those with a demonstrable operational need.
• Automated monitoring and alerting for unusual data access patterns or potential security incidents.
• Regular review of third-party processor security standards and contractual security obligations.
• Segregation of payment data processed through FPX, DuitNow, and e-wallet channels from other personal data where technically feasible.

Notwithstanding these measures, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. Please notify our support team immediately at [email protected] if you suspect unauthorised access to your account.

Subject to applicable law and identity verification, winmy6 Members may exercise the following rights with respect to their personal data:

• Right of Access: You may request a copy of the personal data winmy6 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held on your account.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. This right may be limited where winmy6 is required by law to retain the data (for example, for anti-money laundering record-keeping).
• Right to Restriction: You may request that winmy6 limit the processing of your data in defined circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request a copy of certain personal data in a structured, machine-readable format where technically feasible.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing communications, where applicable.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our support team via live chat or by emailing [email protected]. winmy6 will respond to verified requests within thirty (30) days. We may need to verify your identity before processing a data rights request.

If you have reason to believe that a minor has accessed the winmy6 platform or submitted personal data without authorisation, please contact our support team immediately. We take underage access seriously and will act promptly upon receiving a credible notification.

winmy6 reserves the right to update or revise this Privacy Policy at any time. Changes will be published on this page with an updated review date. Where a change is material — for example, a change to the categories of data collected or how data is shared — winmy6 will provide advance notice via a platform notification or email to the address associated with your account, with a minimum notice period of seven (7) days before the change takes effect.

Your continued use of the winmy6 platform following the effective date of any amended Policy constitutes your acceptance of the changes. If you do not agree to any revision, you must stop using the platform and contact our support team to close your account and withdraw any outstanding balance.

If you have any questions about this Privacy Policy, wish to exercise a data rights request, or need to raise a data protection concern, please contact the winmy6 support and compliance team through the following channels. All contact details are provided as plain text — please do not attempt to initiate sensitive communications via any external links.

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the winmy6 platform. Average response time: under 5 minutes.
• Languages supported: English, Bahasa Melayu, and Mandarin Chinese.

winmy6 will acknowledge formal written data rights requests within 48 hours and provide a substantive response within 30 calendar days. For information on account rules, please review our Terms & Conditions. For responsible gambling tools, visit our Responsible Gambling page.