Six commitments that govern how winmy20 collects, uses, stores, and protects the personal data of every player on the platform.
winmy20 only collects data that is necessary for the specific purposes declared in this Policy. Data collected for one purpose is not repurposed without your knowledge.
All personal data is stored on encrypted infrastructure. Transmission between your browser and winmy20's servers is protected by 256-bit SSL — the same standard used by Malaysian online banking.
You have the right to access, correct, and request deletion of your personal data. winmy20 provides a clear process for exercising these rights without obstruction.
Data is retained only as long as necessary for the stated purpose or as required by law. Inactive account data is subject to scheduled review and deletion where no legal retention obligation exists.
winmy20 does not sell your personal data to third parties for their own marketing purposes. Data sharing with third parties is limited to service delivery, regulatory obligations, and fraud prevention.
This Policy discloses every category of data collected, every processing purpose, and every third-party data processor engaged by winmy20. Nothing is hidden in fine print.
This Privacy Policy explains how winmy20 collects, uses, stores, and protects personal data. By using winmy20.org or registering an account, you confirm that you have read this Policy and consent to the data processing described herein. If you do not agree, please do not use the platform.
winmy20 ("winmy20", "we", "us", "the Platform") is committed to protecting the personal data of all individuals who access or use the services available at winmy20.org. This Privacy Policy ("Policy") sets out, in plain and accessible terms, what personal data we collect from Players and visitors, why we collect it, how we use it, and the rights available to you in respect of your data.
This Policy applies to all personal data processed in connection with your use of winmy20.org, including account registration, identity verification, deposits and withdrawals, sports betting, casino play, bonus redemption, and customer support interactions. It also applies to data collected via cookies and other tracking technologies when you visit the site.
winmy20 operates under international gaming authority licensing, which imposes specific data protection, anti-money laundering record-keeping, and responsible gaming data obligations. These obligations may in certain cases extend the scope of data processing or retention beyond what would otherwise be commercially necessary.
For the purposes of applicable data protection law, winmy20 is the data controller in respect of personal data collected through winmy20.org. The data controller is responsible for determining the purposes and means of processing personal data.
Where winmy20 engages third-party service providers to process personal data on its behalf (for example, payment processors, game studios, fraud detection services, or cloud infrastructure providers), those parties act as data processors under contractual terms that require them to process data only on winmy20's instructions and to maintain appropriate security standards.
If you have questions about this Policy or wish to exercise your data rights, contact winmy20 at the details set out in Section 15.
winmy20 collects personal data across the following categories:
winmy20 does not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or medical information) unless it arises in the specific context of a responsible gaming referral or a legal obligation, and only with your explicit consent where required.
winmy20 processes personal data for the following purposes:
winmy20 processes personal data on the following legal bases:
winmy20 uses cookies and similar tracking technologies on winmy20.org. Cookies are small text files stored on your device that enable the platform to recognise your browser, maintain your login session, remember your preferences, and analyse site usage.
The categories of cookies used by winmy20 are:
You can manage your cookie preferences via your browser settings. Disabling performance or marketing cookies will not prevent you from using the core platform features. Disabling strictly necessary cookies may prevent login and some platform functions from operating correctly.
winmy20 does not sell personal data. We may share personal data with the following categories of third parties, strictly for the purposes set out in this Policy:
All third-party processors engaged by winmy20 are required under contract to process data only as instructed, maintain appropriate technical and organisational security measures, and not retain data beyond the agreed processing period.
winmy20's platform infrastructure is operated across data centres in multiple international jurisdictions. As a result, your personal data may be transferred to and stored in countries outside Malaysia. Such transfers occur only where appropriate safeguards are in place, including contractual data protection clauses between winmy20 and the relevant service providers, and where the receiving jurisdiction maintains data protection standards consistent with winmy20's licensing requirements.
winmy20 takes reasonable steps to ensure that international transfers of personal data are conducted in a manner that preserves the rights and protections to which you are entitled under applicable data protection law.
winmy20 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and regulatory obligation. The following retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction.
winmy20 implements technical and organisational security measures appropriate to the risk profile of the personal data processed. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights, winmy20 will notify affected players and relevant regulatory authorities in accordance with applicable breach notification obligations.
Subject to applicable law and the limitations arising from winmy20's regulatory obligations (e.g., AML retention requirements), you have the following rights in respect of your personal data held by winmy20:
To exercise any of these rights, please submit a written request to [email protected]. winmy20 will respond within 30 days. We may request proof of identity before processing a data rights request.
winmy20's services are strictly restricted to individuals aged 21 and above. winmy20 does not knowingly collect personal data from individuals under the age of 21. If winmy20 becomes aware that personal data has been collected from a person under 21, the account will be closed, all data will be deleted in accordance with our data handling procedures, and any funds deposited will be returned where legally permissible.
If you believe that a minor has accessed winmy20 using falsified age information, please contact winmy20 support immediately at [email protected].
winmy20 processes responsible gaming data — including self-set limit records, cooling-off period data, self-exclusion records, and responsible gaming assessment outcomes — for the specific purpose of fulfilling its player protection obligations under its gaming licence. This data is not used for marketing or profiling purposes.
Self-exclusion records are retained beyond the exclusion period to prevent circumvention by re-registration. winmy20 may share self-exclusion data with relevant gaming authority databases where required by its licensing conditions.
For information about available responsible gaming tools, see the Responsible Gaming page.
winmy20 may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or platform features. Material changes will be communicated to registered Players via their registered email address at least 14 days before the effective date of the change.
The "Last Updated" date at the top of this page will reflect the date of the most recent revision. The current version of this Policy is always accessible at winmy20.org/privacy-policy. Continued use of the platform following notification of a material change constitutes acceptance of the updated Policy.
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact winmy20's data protection contact:
If you are not satisfied with winmy20's response to a privacy concern, you may escalate your complaint to the relevant data protection authority in your jurisdiction, or to the independent dispute resolution body designated under winmy20's gaming licence.
For responsible gaming data concerns specifically, please also refer to the Responsible Gaming page.
Your privacy is protected at every step. Sign in to your winmy20 account to manage your data preferences, review your account settings, or access responsible gaming tools. 21+ only.
21+ only. winmy20 operates under international gaming licensing. Malaysian users are responsible for verifying local legal requirements before participating.