Privacy Policy winmyapk — Our Commitment to Protecting Your Personal Data

Winmyapk collects various types of information from users during registration, platform use, and interaction with our services. The categories of data collected are as follows:

Identity & Contact Data

• Full name as stated in official identification documents.
• National identity card number (MyKad) or passport number.
• Date of birth for age verification.
• Active email address and mobile phone number.
• Current residential address.

Financial Data

• Bank name and bank account number for fund withdrawal purposes.
• Deposit and withdrawal transaction history in your winmyapk account.
• E-wallet information (Touch 'n Go, GrabPay) where applicable.

Platform Usage Data

• Game history and bets placed.
• Login session time and duration.
• Games played and frequency of use.
• Saved account settings and personal preferences.

Technical Data

• IP address of the device used to access the platform.
• Web browser type and version, or operating system.
• Mobile device information including device ID (for the app).
• Approximate location data based on IP address (not GPS).

Winmyapk collects your information through three primary methods:

Information You Provide Directly

This includes all information you enter directly when registering an account, completing the KYC process, submitting a withdrawal request, contacting customer support, or filling in any form on the winmyapk platform.

Automatically Collected Information

When you use the winmyapk platform — whether via the website or mobile app — our systems automatically record technical data such as IP address, browser type, access time, and account activity. This data is required for security purposes, fraud detection, and service improvement.

Information from Legitimate Third Parties

In some cases, winmyapk may receive information about you from trusted third parties such as identity verification service providers, payment gateways, or regulatory authorities when required by law. All such information is handled with the same level of protection as data you provide directly.

The information we collect is used solely for the following purposes. winmyapk will not use your data for any other purpose not stated here without obtaining your consent first:

Winmyapk does not sell users' personal data. However, there are certain situations where your data may be shared with the following parties:

Required Service Providers

Winmyapk works with third-party service providers necessary for platform operations — such as payment gateways, identity verification providers, and data hosting companies. These providers are only permitted to use your data for specific purposes and are bound by strict confidentiality agreements with winmyapk.

Legal Requirements & Regulatory Authorities

Winmyapk may disclose user data to authorities such as the police, courts, or financial regulatory bodies when required by a court order, warrant, or applicable legislation. In such situations, we will notify you as soon as reasonably possible unless prohibited from doing so by law.

Business Transfer

If winmyapk is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction. You will be notified before your data is transferred and before it becomes subject to a different privacy policy.

Winmyapk invests seriously in security infrastructure to ensure your personal data remains protected at all times. The following are the technical and operational measures we implement:

Technical Security

• 256-bit SSL/TLS encryption for all data communications between clients and servers.
• Encryption of sensitive data such as passwords and financial information in the database using industry-recognised hashing algorithms.
• Firewall and Intrusion Detection System (IDS/IPS) monitored 24 hours a day.
• Regular security vulnerability scans and annual penetration testing.
• Server infrastructure hosted in internationally certified data centres with strict physical access controls.

Internal Access Controls

• "Least Privilege" Principle — staff only have access to the data necessary for their specific role.
• Mandatory two-factor authentication (2FA) for all staff access to systems containing user data.
• Comprehensive audit logs for all access to sensitive user data.
• Mandatory data security training for all winmyapk staff who handle user data.

While we take all reasonable steps to protect your data, no system can guarantee absolute security. You also play an important role by keeping your password confidential and never sharing your winmyapk account login credentials with anyone.

The winmyapk website and app use cookies and similar tracking technologies to enhance the user experience and ensure the platform operates correctly. The following are the types of cookies we use:

Essential Cookies (Required)

These cookies are required for the core functions of the winmyapk platform, such as maintaining your login session, remembering language settings, and processing transactions securely. The platform will not function properly without these cookies and they cannot be disabled.

Functional Cookies

These cookies allow the platform to remember your preferences, such as saved usernames, display settings, and favourite game selections. Information collected is anonymous and is not shared with third parties.

Analytical Cookies

We use internal analytics tools to understand how users interact with the winmyapk platform. This information helps us identify areas for improvement and enhance the overall user experience. All analytics data is aggregated and does not identify individual users.

You can manage cookie settings through your web browser settings. However, disabling certain cookies may affect specific functions of the winmyapk platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding personal data held by winmyapk:

Winmyapk retains your personal data only for as long as necessary to fulfil the purpose of collection, or as required by applicable law. The following are our data retention guidelines:

• Active account data — retained for the duration your account is active and for 5 years after account closure for legal compliance.
• Financial transaction records — retained for a minimum of 7 years in accordance with financial and anti-money laundering (AML) legal requirements.
• Access and security logs — retained for 12 months for security investigation purposes.
• Customer Support Communications — retained for 3 years for service reference and improvement.
• Marketing data — deleted immediately upon withdrawal of your marketing consent.

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer identify you as an individual. Anonymised data may continue to be used for aggregate analytics purposes.

Winmyapk is an adult entertainment platform intended solely for individuals aged 18 and above. We do not knowingly collect or process any personal data from minors under the age of 18.

If we find that a child's personal data has been collected inadvertently, we will immediately take steps to delete that data and close the relevant account. Parents or guardians who become aware that a child in their care has used the winmyapk platform are asked to contact our customer support immediately.

Winmyapk reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or technological developments. Any material amendments will be communicated to users via their registered email or in-account notification at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page indicates when this Privacy Policy was last amended. We encourage you to review this page periodically. Your continued use of the winmyapk platform after any amendments take effect constitutes your acceptance of the revised policy.

If you have any questions, concerns, or wish to exercise your data privacy rights, the winmyapk data protection team is ready to assist via customer support channels operating 24/7.