winmry
Privacy Policy

winmry ("we", "us", "our"), operating the online gaming platform accessible at winmry.cam, is committed to protecting the privacy and personal data of all registered players and website visitors ("you", "the Player", "the Data Subject"). This Privacy Policy describes the categories of personal data we collect, the purposes for which we process that data, the parties with whom we may share it, and the rights available to you in relation to your personal information.

This Privacy Policy applies to all personal data collected through the winmry platform, including data submitted during account registration, during the KYC (Know Your Customer) verification process, in connection with financial transactions, and through your general use of our services. It applies equally to players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia.

By registering an account with winmry, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you must not create an account or use the winmry platform.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — any information that directly or indirectly identifies a natural person, including name, identification number, contact details, financial data, and online identifiers.
• "Data Controller" — winmry, being the entity that determines the purposes and means of processing personal data.
• "Data Processor" — any third party engaged by winmry to process personal data on its behalf and in accordance with winmry's instructions.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• "Data Subject" — the individual to whom personal data relates; in the context of winmry, this is primarily the registered Player.
• "KYC" — Know Your Customer; the process of verifying a Player's identity and eligibility to use the Platform.
• "Cookie" — a small text file placed on a user's device by a website to store session information, preferences, and analytics data.
• "AML" — Anti-Money Laundering; regulatory requirements obliging winmry to verify the source of player funds and report suspicious transactions.

winmry collects personal data across several categories depending on the nature of your interaction with the Platform:

3.1 Identity & Registration Data

• Full legal name
• Date of birth (for age verification — players must be 21 or above)
• Gender (optional)
• Nationality and country of residence
• Government-issued identification number (e.g., MyKad number, passport number)

3.2 Contact Data

• Email address
• Malaysian phone number or international mobile number
• Residential or mailing address

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method identifiers (e.g., partial Maybank2u account details, Touch 'n Go wallet ID reference, DuitNow transfer reference numbers)
• Currency (MYR, USDT, BTC) and transaction amounts
• Wagering history and account balance records

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration and login timestamps
• Pages visited and game activity logs

3.5 KYC Verification Documents

• Copies of government-issued photo ID (MyKad, passport, or driving licence)
• Proof of address documents (utility bill, bank statement dated within 3 months)
• Selfie images for liveness verification where required

3.6 Communications Data

• Records of live chat interactions with customer support
• Email correspondence submitted to [email protected]
• Responsible gambling tool requests and self-exclusion instructions

winmry collects personal data through the following methods:

• Direct submission — data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting customer support.
• Automated technical collection — data collected automatically as you navigate the Platform, including via cookies, server logs, and browser fingerprinting for fraud prevention purposes.
• Third-party verification services — data received from licensed KYC and identity verification providers engaged to confirm your identity and age eligibility.
• Payment service providers — transaction confirmation data received from payment partners including DuitNow, Touch 'n Go, Maybank, CIMB, GrabPay, Boost, FPX operators, and cryptocurrency payment processors.
• Regulatory sources — data received from government bodies, law enforcement authorities, or financial intelligence units where we are legally required to act upon such information.

winmry processes your personal data for the following specific purposes:

winmry does not process personal data for purposes beyond those stated above without obtaining additional consent or being required to do so by applicable law.

winmry processes personal data under the following legal bases:

• Contractual necessity — processing required to fulfil our obligations to you under the Terms & Conditions, including account maintenance, payment processing, and service delivery.
• Legal obligation — processing required to comply with applicable regulatory requirements, including AML obligations, KYC verification mandates, and responses to lawful government requests.
• Legitimate interests — processing for fraud prevention, platform security, responsible gambling monitoring, and product analytics, where such interests do not override your fundamental privacy rights.
• Consent — where we seek your consent for specific processing activities (such as marketing communications), we will do so explicitly. You may withdraw consent at any time by contacting our support team.

winmry may share your personal data with the following categories of recipient:

• Payment service providers — data shared with licensed payment processors including DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB Clicks, FPX operators, and cryptocurrency payment gateways, solely for the purpose of processing transactions.
• KYC and identity verification partners — data shared with licensed third-party identity verification services to conduct age and identity checks as required by our operating obligations.
• Regulatory and law enforcement authorities — data disclosed to government bodies, financial intelligence units, law enforcement agencies, or courts where we are legally required or compelled to do so.
• IT infrastructure and cloud service providers — data hosted on servers provided by reputable cloud infrastructure providers operating under contractual data processing agreements with winmry.
• Professional advisors — data shared in confidence with legal counsel, auditors, or compliance consultants for the purposes of obtaining professional advice.

All third parties with whom winmry shares data are required to process that data in accordance with applicable privacy standards and only for the specific purposes for which the data was shared.

winmry uses cookies and similar tracking technologies on the Platform for the following purposes:

8.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, security verification cookies, and shopping cart equivalents for managing your active gaming session.

8.2 Performance & Analytics Cookies

These cookies collect anonymised data about how players use the Platform — which pages are visited most frequently, where users navigate from, and how long they spend on different sections. This data helps us improve the Platform experience. No personally identifiable information is included in analytics data.

8.3 Functional Cookies

These cookies remember your preferences such as language settings, last visited game categories, and display preferences, allowing the Platform to provide a more personalised experience on return visits.

8.4 Fraud Prevention Technologies

winmry uses device fingerprinting and IP tracking technologies specifically for the prevention of fraud, multi-account abuse, and unauthorised access attempts. This is a legitimate interest processing activity that forms part of our platform security framework.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impact your ability to use core Platform features.

winmry retains personal data for the following periods:

• Account data — retained for the duration of your active Account, plus a minimum period of 5 years following Account closure, as required by applicable AML and financial record-keeping regulations.
• Transaction records — retained for a minimum of 7 years from the date of the transaction, in compliance with standard financial record-keeping requirements.
• KYC documents — retained for the duration of the Account plus 5 years post-closure, or longer where required by regulatory instruction.
• Support communications — retained for 3 years following the resolution of the relevant matter, or longer where the communication forms part of an ongoing dispute or legal proceeding.
• Technical and usage data — anonymised analytics data may be retained indefinitely for product improvement purposes. IP logs are retained for a maximum of 12 months unless retained for fraud investigation purposes.

Where data is no longer required for any lawful purpose, winmry will securely delete or anonymise it in accordance with our internal data lifecycle policies.

winmry employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, loss, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for sensitive data fields including payment details, ID document scans, and authentication credentials stored in our systems.
• Access controls — strict role-based access controls ensure that personal data is accessible only to authorised winmry personnel with a legitimate operational need.
• Two-factor authentication for all internal administrative systems, reducing the risk of unauthorised internal access.
• Regular security audits and penetration testing conducted by qualified third-party security professionals.
• Incident response procedures — a documented data breach response plan is maintained and tested regularly.

While winmry takes all reasonable precautions to protect your data, no system is entirely immune to risk. You are responsible for maintaining the security of your own Account credentials and for notifying us immediately if you suspect any unauthorised access to your Account.

As a player whose personal data is processed by winmry, you hold the following rights. You may exercise any of these rights by contacting our support team via live chat or by sending a written request to [email protected] (please note this is a plain-text email address and is not a clickable link).

winmry will acknowledge all data subject requests promptly and respond within a reasonable period. Where requests are complex or numerous, the response period may be extended. In all cases, we will communicate the expected timeframe to you upon receipt of your request.

winmry implements age verification controls at registration and during the KYC process specifically to prevent access by persons under 21 years of age. If winmry becomes aware that personal data has been collected from a person under 21, that Account will be immediately suspended, the data will be deleted as soon as practicable, and any funds deposited will be returned to the originating payment method following investigation.

If you are a parent or guardian and believe that a person under 21 in your care has accessed winmry or provided personal data to the Platform, please contact our support team immediately via live chat.

winmry operates cloud infrastructure and engages third-party service providers that may be located outside of Malaysia. Where personal data is transferred to countries that may not have equivalent data protection standards, winmry takes the following safeguards:

• Contractual data processing agreements with all third-party data processors incorporating appropriate data protection obligations.
• Selection of cloud and infrastructure providers operating under recognised international security certifications.
• Transfer impact assessments conducted for material international data flows.

By using winmry, you acknowledge that your personal data may be processed outside of Malaysia as described above, subject to these protective measures.

The winmry Platform does not contain links to third-party external websites as a matter of policy. However, this Privacy Policy governs only data collected directly by winmry. winmry accepts no responsibility for the privacy practices of any third-party payment providers, financial institutions, or other entities whose services you access independently in connection with your use of the Platform.

Payment service providers such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, DuitNow, Boost, GrabPay, and FPX operate under their own privacy policies and data protection frameworks. You are encouraged to review those policies before sharing personal data with those providers.

winmry reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform operations. The date of the most recent revision is displayed at the top of this document.

Where material changes are made to this Privacy Policy, winmry will notify registered players via the email address on file or through a prominent notice on the Platform. Your continued use of the Platform following notification of any changes constitutes acceptance of the revised Privacy Policy.

The current version of this Privacy Policy will always be accessible at winmry.cam/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the winmry Data Protection team through the following channels:

winmry will acknowledge all privacy-related requests and aim to respond within 14 calendar days. For complex data subject access requests, the response period may be extended, in which case we will communicate an updated expected timeframe.

This Privacy Policy was last reviewed and updated on 1 January 2026. winmry reserves all rights not expressly granted herein. For players aged 21 and above only.