Privacy Policy win1221 – Personal Data Protection for Malaysian Members

1Introduction & Scope of Privacy Policy

Win1221 values the privacy of every member who uses our platform. This Privacy Policy has been drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and is intended to give you full clarity on how win1221 manages your personal data.

This policy applies to all win1221 platform users, including individuals who register as members, individuals who browse the win1221 website without registering, and individuals who contact the win1221 support team. It covers all data collected through win1221.best, the win1221 mobile app, and all official win1221 communication channels including email and live chat.

Win1221 is the data controller for all personal information collected through this platform. This means win1221 is responsible for how your data is collected, used, and protected, in accordance with Malaysia's PDPA.

2Types of Personal Data Collected

Win1221 collects various categories of personal data depending on how you interact with the platform. Below is a summary of the data collected:

Win1221 does not collect sensitive data such as your medical information, political views, or religious beliefs. We only collect data necessary to provide platform services, ensure security, and meet legal requirements.

3How Personal Data Is Collected

Win1221 collects your personal data through several methods:

• During Account Registration: When you register as a win1221 member, you provide your name, Malaysian phone number, email address, and date of birth directly through the registration form.
• During Financial Transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u (FPX), or CIMB Clicks (FPX), win1221 receives the necessary transaction information from the respective payment provider.
• During Identity Verification (KYC): When identity verification is required, you will be asked to upload an identity document such as a Malaysian identification card or passport.
• Automatically Through Platform Use: The win1221 system automatically records technical information such as your IP address, device type, web browser, and platform usage patterns each time you access win1221.
• Through Communication with Support: When you contact the win1221 support team via live chat or email, information shared during those communications is also retained.
• Through Cookies and Tracking Technologies: win1221 uses cookies and similar web technologies to enhance the user experience and analyse platform usage. Further details are explained in Section 8.

4Purpose of Personal Data Use

Win1221 uses the personal data collected for the following legally valid purposes:

• Account Management: Creating, managing, and maintaining your member account; processing logins and identity verification; updating account information at your request.
• Financial Transaction Processing: Processing deposits and withdrawals via your chosen Malaysian payment methods; maintaining accurate transaction records for account and compliance purposes.
• Provision of Sports Betting and Casino Services: Allows you to bet on football, badminton, cricket, e-sports, and other sports; and provides access to Live Casino games and online slots on the win1221 platform.
• Fraud Detection and Security: To identify and prevent fraudulent activity, money laundering, and multiple-account abuse; and to safeguard the integrity of the platform and the interests of all win1221 members.
• Legal Compliance: Fulfilling Malaysian legal requirements including the Personal Data Protection Act 2010 and other applicable reporting obligations.
• Customer Support: Resolving enquiries, complaints, and requests submitted to the win1221 Malay-language support team via live chat, email, or other channels.
• Marketing Communications (with Consent): Sending information about the latest win1221 promotions, bonuses, and offers to members who have consented to receive such communications. You may opt out of marketing communications at any time.
• Platform Improvement: To analyse usage patterns and improve the user experience, identify technical issues, and develop better new features for win1221 Malaysia members.
• Responsible Gaming Programme: Monitoring betting patterns to identify early signs of problem gambling and provide appropriate assistance to members who need it.

Win1221 will not use your personal data for any purpose not listed above without first obtaining your fresh consent.

5Sharing Data with Third Parties

Win1221 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data is only shared in the following limited and necessary circumstances:

• Payment Processors: Transaction information required for processing is shared with payment service providers including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks (Maybank, CIMB) solely for the purpose of processing your deposits and withdrawals. Data is shared on a minimum-necessary basis only.
• Technology Service Provider: win1221 engages trusted third-party technology service providers, such as server hosting services and cybersecurity systems. These providers are only given access to the data needed to perform their functions and are bound by strict confidentiality agreements with win1221.
• Legal Requirements: win1221 may be required to disclose your personal data to Malaysian authorities such as the police, courts, or law enforcement agencies when compelled by a court order or applicable law.
• Protection of win1221's Rights: In the event of a legal dispute, suspected fraud, or a threat to platform security, win1221 may need to disclose relevant data to legal counsel or parties involved in dispute resolution.

In all instances of data sharing described above, win1221 ensures that third parties receiving your data are bound by confidentiality and data protection obligations that are equivalent to, or stricter than, those practised by win1221 itself.

6Security & Data Protection

Win1221 invests seriously in security infrastructure to protect your personal data from unauthorised access, loss, modification, or disclosure. Security measures in place include:

• 256-bit SSL Encryption: All communications between your browser or app and win1221's servers are secured with TLS/SSL protocol using 256-bit encryption keys — the same standard used by Malaysian online banking systems.
• Stored Data Encryption: Sensitive data stored in win1221's databases, including financial information and verification documents, is encrypted using AES-256 standards.
• Two-Factor Authentication (2FA): win1221 offers two-factor authentication for account login, adding an extra layer of security beyond your password.
• 24/7 Security Monitoring: win1221's systems are continuously monitored to detect and respond to suspicious activity or unauthorized access attempts at any time.
• Internal Access Controls: Only win1221 staff with specific authorisation may access member personal data, and only to the extent required to carry out their duties.
• Regular Security Audits: win1221 conducts regular security audits and penetration testing to identify and address any vulnerabilities within the system.

While win1221 takes all reasonable steps to protect your data, no security system can be guaranteed 100% secure. You are also responsible for keeping your account safe by using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to the win1221 support team.

7Data Retention Period

Win1221 retains your personal data for as long as necessary to fulfil the purposes for collection stated in this Privacy Policy, or as required by applicable Malaysian law:

• Active Account Data: For as long as your account remains active and you continue using win1221's services.
• After Account Closure: win1221 may retain certain data for up to 7 years after account closure for legal compliance, dispute resolution, and fraud prevention purposes.
• Financial Transaction Records: Deposit and withdrawal records are retained in accordance with applicable Malaysian accounting and tax legislation.
• Communication Records: Customer support chat logs are retained for 2 years for reference and service improvement purposes.

Once your personal data is no longer needed, win1221 will securely delete or anonymise it in accordance with established data disposal procedures.

8Cookies & Web Tracking Technologies

Win1221 uses cookies and similar web technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit a website. Below are the types of cookies used by win1221:

You can control or disable optional cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the win1221 platform and prevent you from logging in or completing transactions.

9Your Rights Regarding Personal Data

As a win1221 member and a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact win1221 by email at support@win1221.best by stating the right you wish to exercise, your account information, and a description of your request. win1221 is committed to processing all data rights requests within 7 working days.

10Children's Privacy Protection

The win1221 platform is strictly prohibited for individuals under 18 years of age. win1221 does not knowingly collect personal data from children or underage minors.

If win1221 discovers that personal data belonging to an individual under 18 years of age has been collected through deception or error, the account in question will be terminated immediately and all related data will be permanently deleted from our systems.

If you have concerns that a child or underage minor has registered for or is using the win1221 platform, please contact our support team immediately at support@win1221.best so that we may take the appropriate action.

11Links to Third-Party Sites

The win1221 platform may contain links to third-party websites or services such as payment processors. This Privacy Policy not applicable for those third-party websites or services.

Win1221 is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of every website you visit, especially when providing any personal information to them. win1221's reliance on third-party service providers is based on internal security assessments and does not constitute a guarantee of their privacy practices.

12Amendments to the Privacy Policy

Win1221 reserves the right to amend this Privacy Policy from time to time to reflect changes in our services, Malaysian legal requirements, or industry best practices in data protection. The "Updated" date at the top of this page indicates when the most recent amendment was made.

When material changes are made to this Privacy Policy, win1221 will notify you via an in-platform notification or by email to your registered address, at least 14 days before the changes take effect. Your continued use of the win1221 platform after the effective date of such changes will be considered your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy page periodically to stay informed about how win1221 protects your personal information.

13Contact win1221 Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how win1221 handles your personal data, please reach out to us through the following channels:

• Email: support@win1221.best
• Live Chat: Available 24/7 within the win1221 platform (after logging in)

Win1221's Bahasa Malaysia-speaking support team is ready to assist you with any privacy or data protection enquiries. We are committed to responding to all privacy-related queries within 3 business days.

If you are not satisfied with win1221's response to your privacy complaint, you have the right to refer the matter to the Malaysian Communications and Multimedia Commission (MCMC) or the relevant data protection authority in Malaysia.