Official Document

Privacy Policy Winlah — Malaysia Player Data Protection

Winlah values the privacy of every member. This document explains transparently how your personal data is collected, used, protected and managed when you use the Winlah platform.

Last Updated: January 2026 Language: Malay (ms-MY)
🔒 Your data is protected with 256-bit SSL at Winlah 🛡️ Winlah complies with Personal Data Protection Act 2010 (Malaysia) 🚫 Winlah does not sell your data to any third party ✅ Right to access, correct & delete data — you're in control 📧 Contact us: support@winlah.world for any privacy enquiries 🔞 Winlah platform for users aged 21 and above only 🔒 Your data is protected with 256-bit SSL at Winlah 🛡️ Winlah complies with Personal Data Protection Act 2010 (Malaysia) 🚫 Winlah does not sell your data to any third party ✅ Right to access, correct & delete data — you're in control 📧 Contact us: support@winlah.world for any privacy enquiries 🔞 Winlah platform for users aged 21 and above only

Privacy Commitment Winlah

Six core principles that guide how we handle your data

256-bit SSL Protection

All data transmitted between your device and Winlah's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading banking institutions. Your information cannot be intercepted by any external party during transmission.

Data Not Sold to Third Parties

Winlah has never and will never sell, rent, or share your personal data with third-party advertisers or data brokers for marketing purposes without your consent. Your data belongs to you, and we take that responsibility seriously.

Malaysia PDPA 2010 Compliance

Winlah's Privacy Policy is built to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We collect only the data that is necessary, store it securely, and use it solely for the purposes clearly stated in this policy.

Full Control in Your Hands

As a Winlah member, you have the right to access, correct, request deletion of, or object to the processing of your personal data. All privacy rights requests will be handled within 14 business days by our team.

Secure Data Storage

Your personal data is stored on servers protected by strict access controls. Only Winlah staff who require access to perform their duties are permitted to view specific data — and all such access is subject to regular audits.

Data Breach Notification

In the event of any data security breach that affects your personal information, Winlah is committed to notifying you within the timeframe required by applicable Malaysian law, along with details of the remedial steps taken.

1 Introduction & Scope of Winlah's Privacy Policy

Winlah ("we", "our platform") is committed to protecting the privacy of every individual who registers for, accesses or uses the Winlah online betting platform at winlah.world. This Privacy Policy explains transparently how we collect, use, store, protect and disclose your personal data.

This document forms part of Winlah's Terms & Conditions and is deemed accepted in full upon registering an account or using the Winlah platform. If you disagree with any part of this Privacy Policy, please cease using the platform immediately and contact us to close your account.

Winlah's Privacy Policy is built to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA 2010), the primary legislation governing the processing of personal data in Malaysia. We take our responsibilities as a data controller seriously and strive to ensure that every aspect of how we handle members' personal data meets the requirements of this law.

This Privacy Policy applies to all users of the Winlah platform, including unregistered visitors, registered members, active members, and former members. This document was last updated in January 2026.

2 Types of Personal Data Collected by Winlah

Winlah collects various types of personal data from its users depending on how they interact with the platform. The following are the categories of data we collect:

Data Category Sample Information Mandatory / Optional
Identity Data Full name, MyKad number, date of birth, gender, photo (for KYC) Mandatory (for account verification)
Contact Data Email address, Malaysian phone number, residential address Mandatory
Financial Data Bank account name, account number (partial), MYR deposit and withdrawal transaction records Mandatory (for payment processing)
Platform Activity Data Betting history, preferred markets, game sessions, win and loss records Automatic (during use)
Technical Data IP address, device type, operating system, web browser, cookie information Automatic (during use)
Communications Data Live chat conversation records, emails to support@winlah.world, user feedback When you contact us

We only collect data that is genuinely necessary to operate the platform, meet legal requirements, and deliver the best possible experience to you as a Winlah member. Winlah does not collect health data, biometric data, or other sensitive data unless required by law.

3 How Winlah Collects Your Personal Data

Winlah collects your personal data through several different methods, depending on the nature of your interaction with the platform:

  • During account registration: You provide basic personal information such as your name, email address, Malaysian phone number and password when creating a new account on Winlah.
  • During the KYC (Know Your Customer) process: To meet anti-fraud and anti-money laundering compliance requirements, Winlah may request documents such as a copy of your MyKad or a Malaysian bank statement to verify your identity.
  • During deposits and withdrawals: When you carry out financial transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX through Maybank2u and CIMB Clicks, the information required to process those transactions is recorded.
  • During platform use: Winlah's system automatically records your activity on the platform, including betting markets browsed, bets placed, session duration and interactions with platform features.
  • Through cookies and similar technologies: When you visit the Winlah website, cookies and similar tracking technologies collect technical information about your device and browsing patterns.
  • Through communications with customer support: When you contact Winlah's support team via live chat or email, the content of that communication is recorded for the purposes of issue resolution and service improvement.

4 Purposes for Which Winlah Uses Your Personal Data

Winlah uses the personal data collected for lawful, specific and transparent purposes. The following are the primary purposes for which your data is used:

  • Account management: Creating, managing and securing your Winlah account, including identity verification and secure login processing.
  • Financial transaction processing: Processing deposits and withdrawals in MYR via Malaysian local payment methods supported by Winlah.
  • Service delivery: Provides access to all Winlah products, including Malaysia Super League football betting, BWF badminton, e-sports, Virtual Sports, Roulette, and Live Casino.
  • Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, multi-account abuse and any other unlawful activity on the platform.
  • Legal compliance: Fulfilling legal obligations under Malaysia's PDPA 2010 and other applicable regulations.
  • User experience improvements: Analysing platform usage patterns to improve the design, features and overall performance of Winlah.
  • Service communications: Sending you important notifications related to your account, transactions, changes to our terms, or relevant security information.
  • Customer support: Resolving inquiries, complaints and technical issues that you raise through Winlah's support channels.
  • Marketing (with your consent): Sending you information about Winlah promotions, bonuses and offers that may be of interest to you — only where you have consented to receiving marketing communications.

You can opt out of Winlah marketing emails at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us at support@winlah.world. This will not affect essential service communications related to your account.

5 Sharing Data with Third Parties

Winlah does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited circumstances in which Winlah may need to share your data with certain parties, and this is done only for legitimate purposes:

  • Payment processor: The transaction data required is shared with payment processors that handle Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX transactions to complete your deposits and withdrawals in MYR.
  • Technical service provider: Winlah works with trusted third-party providers for services such as server hosting, platform analytics and cybersecurity. These providers are bound by strict confidentiality agreements and are only permitted to use your data in accordance with Winlah's instructions.
  • Legal authorities: Winlah will disclose your data to Malaysian authorities such as the police, courts, or regulatory bodies when required by law, court order, or in the context of a legitimate criminal investigation.
  • Game software provider: The minimum betting data required is shared with casino and virtual sports game providers to process your bets and game results.

In all of the data sharing situations described above, Winlah ensures that only the minimum necessary data is shared and that all third parties involved are bound by adequate data protection agreements before any data is shared with them.

6 Data Security on the Winlah Platform

Winlah continually invests in robust data security infrastructure to protect the personal information of all its members. Our security measures encompass multiple layers of protection:

  • 256-bit SSL Encryption: All communications between your web browser or application and Winlah's servers are encrypted using the latest TLS protocol with 256-bit key strength.
  • Two-factor authentication (2FA): Winlah offers a 2FA option for additional account protection, making it significantly harder for unauthorised parties to gain access even if your password is compromised.
  • 24/7 security monitoring: Winlah's security system monitors suspicious activity around the clock, detecting and responding to threats in real time.
  • Strict internal access controls: Member personal data is accessible only to Winlah staff who require it to perform specific duties. All access is logged and audited on a regular basis.
  • Regular penetration testing: Winlah conducts regular security assessments carried out by independent cybersecurity specialists to identify and address any vulnerabilities before they can be exploited.
  • Financial data segregation: Winlah members' funds are held separately from the company's operational accounts, ensuring your finances are not affected by any internal operational issues.

While Winlah takes all reasonable steps to protect your data, no security system is entirely impenetrable. If you suspect that your Winlah account has been accessed without authorisation, please contact our support team via live chat immediately.

7 Cookies, Sessions & Tracking Technologies

Winlah uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance the user experience, and understand how members interact with the platform. The following are the types of cookies used:

  • Essential cookies (required): Required for core platform functions such as login session management, account security and identity verification during active sessions. These cookies cannot be disabled without affecting platform functionality.
  • Performance cookies: Collects information on how Winlah's web pages are used — such as the most frequently visited pages and error messages encountered. This information is used to improve overall platform performance.
  • Functionality cookies: Allows the platform to remember your preferences such as language, display settings and login information, providing a more personalised and seamless experience.
  • Analytics cookies: Helps Winlah understand platform usage patterns on an aggregated, anonymised basis to make better-informed product improvement decisions.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality of the Winlah platform, and you may be unable to log in or use certain features properly.

8 Cross-Border Data Transfers

Your personal data is primarily stored on servers located in regions that meet adequate data protection standards. In certain operational circumstances, data may need to be transferred to or accessed from locations outside Malaysia — for example, when engaging international technical service providers such as casino game suppliers or cloud computing infrastructure.

Whenever your personal data is transferred outside of Malaysia, Winlah ensures that:

  • The destination country or region has adequate data protection laws, or
  • Appropriate data protection agreements have been put in place between Winlah and data recipients to ensure your data is protected to a standard equivalent to that in Malaysia.

Winlah will not transfer your personal data to any country that does not provide an adequate level of data protection without first obtaining your consent or putting in place appropriate contractual safeguards.

9 Personal Data Retention Period

Winlah retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law. Our data retention guidelines are as follows:

  • Active account data: Retained for the duration that your Winlah account remains active, plus any additional period required by law following account closure.
  • Financial transaction records: Retained for a minimum of seven years from the transaction date, in accordance with Malaysian tax and accounting legal requirements.
  • KYC Documents: Retained for the period stipulated under Malaysia's anti-money laundering laws, typically no less than five years after the end of the business relationship.
  • Customer support communication records: Retained for three years for dispute resolution and service improvement purposes.
  • Cookie and session data: Session cookies are deleted when you close your web browser. Persistent cookies have a set expiry date and generally do not exceed two years.

Once the retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked back to you as an individual. Anonymised data may be retained for statistical and internal research purposes.

10 Your Personal Data Rights

Under Malaysia's Personal Data Protection Act 2010 and Winlah's own policies, you have the following rights with respect to the personal data we hold about you:

Right of Access

You have the right to request a copy of the personal data Winlah holds about you. Requests will be processed within 14 business days.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data held in your Winlah account.

Right to Erasure

You may request the deletion of your personal data under certain circumstances, subject to Winlah's legal obligations to retain specific data.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time, without providing any reason.

Data Portability Rights

You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

Right to Restriction of Processing

Under certain circumstances, you may request that Winlah restrict the way your personal data is processed while a dispute is being resolved.

To exercise any of the rights above, please contact the Winlah support team by email at support@winlah.world, stating the right you wish to exercise and providing sufficient details for us to verify your identity. Winlah will respond to all valid privacy rights requests within 14 business days.

11 Protection of Children's Data

The Winlah platform is strictly reserved for users aged 21 and above. Winlah does not knowingly collect any personal data from individuals under the age of 21. If you are below the minimum age requirement, please stop using the Winlah platform immediately.

Should winlah discover that personal data has been collected from individuals under the age of 21 without adequate verification, we will take the following steps immediately:

  • Suspending the relevant account immediately while an investigation is carried out.
  • Delete all personal data associated with the account as promptly as practicable.
  • Returning any legitimate account balance in accordance with established procedures.

If you are a parent or guardian who believes your child has registered a Winlah account, please contact us immediately at support@winlah.world and we will handle the situation as a matter of high priority.

12 Amendments to Winlah's Privacy Policy

Winlah reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new Malaysian legal requirements, or changes in how we operate the platform. Each updated version of the Privacy Policy will be published on this page with the latest revision date.

For material amendments that significantly affect how we use your personal data, Winlah will endeavour to notify you via an in-platform notification or email to the address registered to your account before the changes take effect. It remains your responsibility to review this Privacy Policy page periodically to stay informed about how we protect your privacy.

Your continued use of the Winlah platform following the publication of any amendments to this Privacy Policy constitutes your acceptance of the revised policy.

13 Contact Winlah About Privacy

If you have any questions, concerns or complaints regarding Winlah's Privacy Policy or how we handle your personal data, please do not hesitate to reach out to us through the following channels:

  • Privacy Email: support@winlah.world — for privacy-related enquiries and rights requests that require detailed explanation or supporting documents.
  • 24/7 Live Chat: Available directly within the Winlah platform — for general privacy enquiries with an average response time of under three minutes.

Winlah is committed to handling all privacy enquiries and complaints with the utmost seriousness and professionalism. We aim to resolve all privacy-related issues within 14 business days from the date your request is received. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant authority under PDPA 2010.

For data access, correction or deletion requests, please include your Winlah account number and a copy of a valid identity document for identity verification purposes. This is a security measure to ensure we disclose data only to its rightful owner.

Join Winlah Today

Your Data Is Secure — Start Your Journey at Winlah?

Winlah takes your privacy seriously. Create a free account today and enjoy a trusted betting platform with international-standard data security, fast MYR payments, and 24/7 support for Malaysian players.

SSL
256-bit Encryption
PDPA
Legally Compliant
24/7
Privacy Support
0
Data Sold

Winlah's Privacy Commitment: Winlah complies with Malaysia's Personal Data Protection Act 2010. All your personal data is protected with 256-bit SSL encryption and is not shared with third parties for marketing purposes without your consent. For privacy enquiries, contact us at support@winlah.world or read Terms & Conditions us for full details on your rights as a Winlah member.

FAQs – Winlah Privacy Policy

Answers to the most frequently asked questions about data privacy at Winlah

Winlah does not sell or share your personal data with third parties for their marketing purposes without your consent. Any data sharing that takes place is strictly limited to legitimate operational purposes — such as with payment processors Touch 'n Go, GrabPay, DuitNow or FPX to process your MYR transactions, with selected technical service providers bound by strict confidentiality agreements, and with Malaysian authorities where required by law. In all cases, only the minimum necessary data is shared, and all third parties are bound by adequate data protection obligations before any data is disclosed to them.

To exercise your privacy rights at Winlah — whether to access, amend, or delete your personal data — please email support@winlah.world, clearly stating the type of request and including your Winlah account number along with a copy of a valid identity document. Identity verification is required to ensure we only disclose data to its rightful owner. Winlah will process your request within 14 business days of receipt. Please note that the right to erasure is subject to Winlah's legal obligations to retain certain records, such as financial transaction data, in accordance with Malaysian law.

Winlah uses several types of cookies — essential cookies for core platform functions such as login session management, performance cookies to understand how the platform is used, functional cookies to remember your preferences, and analytics cookies for product improvement. You can manage or disable non-essential cookies through your web browser settings at any time. However, disabling essential cookies will affect the functionality of the Winlah platform — you may be unable to log in or use certain features properly. For the best experience on the Winlah platform, we recommend allowing at least essential and functional cookies.

Data retention periods depend on the type of data in question. Financial transaction records are retained for a minimum of seven years in accordance with Malaysian tax and accounting legal requirements — this is a statutory obligation that Winlah cannot waive. KYC documents such as MyKad copies are retained for a minimum of five years under anti-money laundering legislation. Customer support communication data is retained for three years for dispute resolution purposes. Once the applicable retention period has elapsed, your data will be securely deleted or anonymised. If you have specific questions about the retention period for a particular type of data, please contact us at support@winlah.world for further clarification.

In the event of a data security breach affecting Winlah members' personal data, we have a clear, tested incident response procedure in place. The first step is to contain the breach as quickly as possible to limit any damage. Our security team will then conduct a thorough investigation to determine the scope and cause of the incident. Winlah will notify affected members via email or in-platform notification, including details about the data that may have been exposed and steps you can take to protect yourself. We will also notify the relevant Malaysian authorities as required by law within the prescribed timeframe. Following the incident, Winlah will implement corrective measures to prevent a similar breach from occurring again.
Bahasa Melayu