Winbro88 Privacy Policy – Member Data Protection in Malaysia

Winbro88 ("we", "the Company" or "the Platform") values the privacy of every member who uses our services at winbro88.click. This Privacy Policy explains in detail how we collect, process, store, use, and protect your personal information when you register for and use the Winbro88 Sports Betting, Live Casino, slots, and lottery platform.

This Privacy Policy applies to all Winbro88 platform users, including website visitors, registered members, and any individual who interacts with us via live chat, email, or other support channels. By registering a Winbro88 account or continuing to use our platform, you fully agree to the terms of this Privacy Policy.

Winbro88 operates in accordance with applicable data protection laws and complies with the regulatory requirements set by the relevant authorities. We continuously update our privacy practices to ensure they remain aligned with the latest standards and the needs of Malaysian users.

Winbro88 only collects information that is necessary for the specific purposes stated in this Privacy Policy. We do not collect excessive or irrelevant data. The following are the categories of information we may collect from you:

Information You Provide Directly:

• Full name as stated on your Malaysian identification document (MyKad or passport)
• An active Malaysian mobile number for account verification and communications
• A valid email address for account notifications and service-related communications
• Date of birth to verify that you meet the minimum age requirement of 18 years
• Payment method details you have registered — e-wallet or bank account numbers (stored in encrypted format)
• Identity verification (KYC) documents when requested, such as a photo of your MyKad or passport
• Residential address for compliance verification purposes

Automatically Collected Information:

• Your device's IP address and general geographic location (state within Malaysia)
• Device type, operating system, and web browser version you are using
• Platform usage log data including pages visited, session duration, and in-platform actions
• Cookie data and similar tracking technologies to enhance the user experience
• Technical information relating to platform performance and security

Betting Activity Information:

• Sports betting, Live Casino, slots, and lottery history within your account
• Records of deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX
• Bonus and promotion data claimed by your account
• Betting limit settings and responsible gaming options you have configured

Winbro88 uses the personal information we collect solely for legitimate, necessary, and relevant purposes in connection with providing our platform services to Malaysian members. Below is a table of data use purposes along with the legal basis that justifies each processing activity:

Winbro88 will not use your data for any purposes beyond those listed above without first obtaining your explicit consent. You have the right to withdraw consent for processing based on consent (such as marketing communications) at any time.

Winbro88 does not sell, rent, or disclose your personal data to any third party for their own marketing or commercial purposes. However, there are limited situations where we need to share your information with certain parties in order to provide our services to you:

Payment Service Providers:

When you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks), the necessary transaction information is shared with the respective payment service provider solely to process the transaction. All payment providers we work with are bound by strict data protection agreements and comply with international payment security standards (PCI DSS).

Game Software Providers:

The Live Casino, slots, and other games on Winbro88 are developed and operated by licensed third-party software providers. Minimum account information required for game authentication may be shared with these providers; however, your full financial data is never disclosed to them.

Legal & Regulatory Compliance:

Winbro88 may be required by law or court order to disclose certain information to the relevant authorities. In such situations, we will comply with the legal requirements while making every effort to protect your privacy rights to the fullest extent permitted by law.

Winbro88 uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and better understand how Malaysian users interact with our platform. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for the core functionality of the Winbro88 platform, including login session authentication, account security, and transaction processing. Disabling these cookies will affect the overall functionality of the platform.
• Performance Cookies: Helps us understand how users navigate the platform — which pages are visited most frequently, how long sessions last, and where users may encounter difficulties. This data is used in aggregated, non-identifiable form.
• Functional Cookies: Saves your preferences such as display language, odds settings, and sport preferences so you don't have to reconfigure them each time you use the Winbro88 platform.
• Security Cookies: Used to detect and prevent fraudulent activity, cyberattacks, and unauthorised access to Winbro88 member accounts.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the Winbro88 platform and your overall user experience. Login session cookies, for example, are required to keep you signed in during a betting session.

Protecting members' personal data is a top priority for Winbro88. We continually invest in the latest security infrastructure to ensure your information remains safe at all times. The following are the key security measures we have in place:

• 256-bit SSL encryption for all data in transit between your browser and Winbro88's servers
• AES-256 encryption for sensitive data stored in our databases, including payment information
• Two-factor authentication (2FA) is available as an added layer of security for member accounts
• Round-the-clock 24/7 security monitoring by Winbro88's cybersecurity team
• Layered access controls — only specifically authorised staff may access member data
• Regular security audits by independent third parties to identify and address vulnerabilities
• Rigorous patch management for all platform systems and software
• Regular data backups and a comprehensive disaster recovery plan

While Winbro88 takes every reasonable measure to protect your data, no digital security system can be guaranteed to be completely immune from all cyber threats. We encourage you to take personal protective steps as well, such as using a strong, unique password and enabling 2FA on your Winbro88 account.

Winbro88 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required by applicable law. The following are the retention period guidelines for the various data categories:

• Active Account Data: Retained for the duration of your active account with Winbro88, plus the mandatory legal compliance period following account closure
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and anti-money laundering (AML) legal requirements
• Identity Verification Documents (KYC): Retained for 5 years following account closure or the end of the business relationship
• Customer Support Records: Retained for 3 years from the date of the last interaction for reference and dispute resolution purposes
• Security Log Data: Retained for 12 months for security monitoring and incident investigation purposes
• Cookie Data: Expiry varies by cookie type, typically ranging from the current session up to a maximum of 24 months

Once the applicable retention period has elapsed, your personal data will be securely deleted or fully anonymised so that it can no longer be linked to you. Winbro88's data deletion process follows methods that comply with international data security standards to ensure data cannot be recovered after deletion.

As a Winbro88 member and data subject, you have certain rights regarding your personal data. Winbro88 fully respects and supports the exercise of these rights:

• Right of Access: You may request a copy of all personal data we hold about you. Winbro88 will provide this information in a readable format within 30 days of your request.
• Right to Rectification: If you find that any personal data Winbro88 holds about you is inaccurate or outdated, you have the right to request a correction. You can update most profile information directly in your account settings.
• Right to Erasure: Under certain circumstances, you may request that Winbro88 delete your personal data. Please note that such requests may not be fully fulfilled if we are legally required to retain certain data (such as financial records).
• Right to Restriction of Processing: You may request that we restrict the processing of your data under certain circumstances, such as when you are disputing the accuracy of your data or objecting to its processing.
• Data Portability Rights: You have the right to receive your personal data in a structured, machine-readable format for transfer to another data controller.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time, and Winbro88 is obliged to cease such processing.

To exercise any of the rights above, please contact the Winbro88 data protection team by email at support@winbro88.click specifying the right you wish to exercise and the information needed to verify your identity. Winbro88 is committed to responding to requests within 30 calendar days.

Winbro88 is a platform for users aged 18 years and above only. We do not knowingly collect, process, or store personal data of individuals under the age of 18. Our registration process is designed to identify and prevent sign-ups by those who do not meet the minimum age requirement.

Should Winbro88 discover that personal data of an underage individual has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered with Winbro88 are encouraged to contact our support team promptly at support@winbro88.click.

Winbro88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or improvements to how we manage user data. Each version of the Privacy Policy will display the "Last Updated" date at the top of this page.

When significant changes are made to this Privacy Policy, Winbro88 will notify you through one or more of the following channels:

• An in-platform Winbro88 notification that will appear when you log in
• An email to your registered email address summarising the key changes
• A prominent notice on the Winbro88 website homepage

We encourage you to review this Privacy Policy periodically to stay informed about how Winbro88 protects your information. Continued use of the Winbro88 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding how Winbro88 handles your personal data, or wish to exercise any of your rights as a data subject, please contact us through the following channels:

• Email: support@winbro88.click — include "Privacy Enquiry" in your email subject line
• Live Chat: Available 24/7 within the Winbro88 platform — select "Privacy & Data" as your enquiry category
• Response Time: Winbro88 is committed to responding to all privacy enquiries within 5 business days and resolving requests within 30 calendar days

We take every privacy complaint seriously and will investigate each case thoroughly. If you are not satisfied with Winbro88's response to your privacy complaint, you have the right to escalate it to the relevant data protection regulatory authority in Malaysia.