winbro88 Privacy Policy

1 Introduction & Data Controller

winbro88 ("we", "us", "our") is the data controller responsible for personal data collected through the winbro88 platform and all associated services. This Privacy Policy applies to all visitors, registered members, and users of winbro88 products including the live casino, slot games, arcade section, and sportsbook.

winbro88 is committed to handling personal data in accordance with applicable data protection legislation and the data privacy requirements imposed by our international gaming authority licensing. This Policy is intended to be clear and accessible — if any part of it is unclear, please contact our Data Privacy team at the address set out in Section 13.

2 Personal Data We Collect

winbro88 collects personal data in the following categories. The specific data collected will depend on your interaction with the platform:

2.1 Registration & Identity Data

• Full legal name as it appears on a government-issued identification document
• Date of birth (for age verification — all players must be 21 or over)
• Residential address
• Email address and mobile phone number
• Username chosen at registration
• Identity verification documents: MyKad, passport, or equivalent government-issued ID
• Proof of address documents where required for enhanced KYC

2.2 Financial & Transaction Data

• Payment method details (e-wallet account identifiers for Touch n Go and Boost; bank account numbers for Maybank, CIMB, Public Bank, Hong Leong Bank FPX transactions; cryptocurrency wallet addresses)
• Deposit and withdrawal history, including amounts in MYR
• Bonus and promotional credit history
• Source of funds information where required by AML obligations

2.3 Gaming & Betting Activity Data

• Game session history, bet placement records, outcomes, and game preferences
• Sports betting slips and settlement records
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)

2.4 Technical & Usage Data

• IP address, device type, operating system, and browser information
• Session timestamps and duration
• Pages visited, features accessed, and click-stream data
• Geolocation data at the country or region level
• Cookie identifiers and tracking data as described in Section 6

2.5 Communications Data

• Records of live chat and customer support interactions
• Email correspondence
• Complaint and dispute records

3 How winbro88 Uses Your Personal Data

winbro88 uses personal data for the following purposes:

• Account management: Creating, maintaining, and securing your winbro88 account; authenticating your identity at login; providing access to platform features.
• Payment processing: Processing deposits and withdrawals in MYR via your chosen payment method; reconciling transaction records; investigating payment disputes.
• Legal and regulatory compliance: Fulfilling Know Your Customer (KYC) obligations; complying with anti-money laundering (AML) and counter-financing of terrorism (CFT) requirements; responding to lawful requests from competent authorities; maintaining records required by our gaming licence.
• Responsible gaming: Monitoring player activity for indicators of problem gambling; enforcing player-set limits and self-exclusion requests; complying with age verification requirements (21+).
• Platform improvement: Analysing aggregated usage data to improve platform performance, game selection, and user experience; resolving technical issues.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, account abuse, cheating, and multi-accounting.
• Customer support: Responding to queries, complaints, and dispute resolution requests.
• Marketing communications: Sending promotional offers and platform updates where you have provided consent. You may opt out at any time.

4 Legal Basis for Processing

winbro88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the agreement between winbro88 and the player — account creation, payment processing, game access, and customer support.
• Legal obligation: Processing required to comply with applicable law — KYC/AML obligations, gaming licence requirements, responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing necessary for winbro88's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your express consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing & Disclosure

winbro88 does not sell personal data to third parties. Data is shared only in the following circumstances:

• Licensed game providers: Game studios whose products appear in the winbro88 lobby (including Pragmatic Play, PG Soft, and others) may receive session and outcome data necessary to operate their games. These providers are bound by contractual data processing obligations.
• Payment processors: Payment service providers (e.g., FPX operators, e-wallet platforms) receive payment details necessary to process deposits and withdrawals.
• Identity verification services: Third-party KYC and identity verification providers may process identity document data for verification purposes.
• Regulatory and law enforcement authorities: winbro88 will disclose data where required by its gaming licence obligations, AML/CFT law, court order, or other lawful regulatory demand. This includes the gaming authority under which winbro88 is licensed.
• Professional advisers: Legal, audit, and compliance advisers under strict confidentiality obligations, where necessary to obtain professional services.
• Business transfers: In the event of a merger, acquisition, or sale of winbro88's business or assets, personal data may be transferred to the acquirer, subject to equivalent data protection obligations.

6 Cookies & Tracking Technologies

winbro88 uses cookies and similar tracking technologies to operate the platform and improve user experience. The categories of cookies used are:

• Strictly necessary cookies: Required for the platform to function — session authentication, security tokens, and load balancing. These cannot be disabled without rendering core features inoperable.
• Functional cookies: Remember your preferences such as language settings, lobby display preferences, and last-visited game categories.
• Analytics cookies: Collect aggregated and anonymised data about platform usage — page views, session duration, feature engagement — to help winbro88 understand how the platform is used and where improvements are needed.
• Security cookies: Support fraud detection and account security monitoring functions.

You may control cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the winbro88 platform, though some features may function with reduced personalisation.

7 Data Retention

winbro88 retains personal data for the following periods, or longer where required by applicable law or licensing obligations:

• Account and identity data: Retained for the duration of the account and for a minimum of 5 years following account closure, as required by AML legislation and gaming licence requirements.
• Transaction and financial records: Retained for a minimum of 7 years from the date of the transaction, in compliance with applicable financial record-keeping requirements.
• Customer support and complaints records: Retained for 3 years from the date of resolution, or longer where related to pending legal proceedings.
• Technical and usage data: Retained in identifiable form for up to 24 months; anonymised aggregate data may be retained indefinitely.
• Marketing consent records: Retained for the duration of the marketing relationship and for 2 years following opt-out.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with winbro88's data retention schedule.

8 Data Security

winbro88 implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the winbro88 platform
• Encryption of sensitive data at rest, including payment information and identity documents
• Access controls limiting employee access to personal data on a need-to-know basis
• Two-factor authentication for administrative access to data systems
• Regular security assessments and penetration testing conducted by independent security professionals
• Incident response procedures to detect, investigate, and notify affected individuals of any personal data breach in accordance with applicable requirements

9 Your Data Rights

Subject to applicable law and any overriding legal obligations (including winbro88's AML and licensing retention requirements), you have the following rights in respect of your personal data held by winbro88:

• Right of access: You may request a copy of the personal data winbro88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding retention obligations.
• Right to restriction: You may request that winbro88 restrict processing of your data in certain circumstances, for example while a rectification request is under review.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests and to direct marketing at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, contact the winbro88 Data Privacy team using the details in Section 13. Requests will be acknowledged within 2 business days and responded to within 30 days, or sooner where required by applicable law.

10 Children & Minors

The winbro88 platform is strictly for adults. Access is prohibited for any person under the age of 21 years. winbro88 does not knowingly collect personal data from persons under 21. Age is verified as part of the registration process and again at the point of KYC document verification.

If winbro88 becomes aware that personal data has been collected from a person under 21, that data will be deleted and the associated account permanently closed. If you believe that a minor has registered or attempted to register on the winbro88 platform, please contact support immediately using the details in Section 13.

11 International Data Transfers

winbro88 operates under international gaming authority licensing, and some data processing activities are carried out by service providers located outside Malaysia. Where personal data is transferred internationally, winbro88 ensures that appropriate safeguards are in place, including contractual data processing agreements incorporating standard data protection clauses, to ensure that transferred data receives an equivalent level of protection to that afforded within Malaysia under applicable data protection law.

Transfers for AML and regulatory compliance purposes are authorised by applicable law and our licensing obligations and do not require additional safeguarding measures beyond those legally prescribed.

12 Changes to This Privacy Policy

winbro88 reserves the right to update this Privacy Policy at any time. Where changes are material, winbro88 will provide reasonable notice by publishing the updated Policy on this page with a revised effective date, and where appropriate by direct notification to registered members via email or in-platform notification.

Your continued use of the winbro88 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. We encourage you to review this page periodically to stay informed about how winbro88 handles your personal data.

13 Contact & Data Privacy Requests

For any questions, concerns, or requests relating to this Privacy Policy or the personal data winbro88 holds about you, please contact our Data Privacy team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: 24/7 via the winbro88 platform — for general privacy enquiries and urgent data concerns

Please include "Privacy Request" in the subject line of any email correspondence and provide sufficient information to allow us to identify your account and process your request. Responses will be issued within 30 days of receipt. For complex requests, an extension of up to an additional 60 days may apply, in which case you will be notified of the extension and the reason for it within the initial 30-day period.