Privacy Policy winrm –
Protection of Your Personal Data

Winrm is an online entertainment platform serving players in Malaysia. We understand that your trust begins with how we handle the information you share with us. This Privacy Policy is written clearly and honestly so you fully understand your rights and our responsibilities.

This document explains what types of personal data we collect, why we need it, how we use it, who we may share it with, and what choices you have as a winrm player. This Policy applies to all users of the winrm platform, including the official website and mobile app.

We encourage you to read this document carefully. If any section is unclear or you would like further clarification, our support team is available to help at any time.

Winrm only collects data that is genuinely necessary to provide safe, fair, and compliance-ready services. The following are the categories of data we collect:

Account Registration Data

• Full name as shown on your identity card or passport.
• Date of birth for age verification (must be 18 years or older).
• Active email address for account communications.
• Mobile phone number registered in Malaysia.
• Passwords stored in a hashed format that cannot be read.

Identity Verification Data (KYC)

• A valid copy of your MyKad or passport.
• Proof of current residential address (utility bill or bank statement not more than three months old).
• Payment method documents used for deposits and withdrawals.
• Selfie or facial image for biometric verification, if required.

Transaction & Financial Data

• Bank account or e-wallet details registered for withdrawals.
• Deposit and withdrawal history, including amounts, dates, and payment methods.
• Logs of bonus records, turnovers, and promotional activity.

Technical & Usage Data

• IP address and device information used to access the platform.
• Type and version of web browser or mobile app.
• Game session logs including login time, logout time, and in-game activity.
• Cookie and website usage data for internal analytics purposes.

Every piece of data we collect has a clear and legitimate purpose. winrm does not collect data merely to store it — everything is used for the following purposes:

• Account management: Registering, verifying, and securely managing player accounts.
• Transaction processing: Processing deposits, withdrawals, and all related financial transactions.
• Legal compliance: Meeting KYC, Anti-Money Laundering (AML), and other compliance requirements.
• Platform security: Detecting and preventing fraud, account abuse, unauthorized access, and suspicious activity.
• Service improvement: Analyzing usage patterns to improve user experience and platform performance.
• Service communications: Sending important notices related to accounts, security, promotions, and platform updates.
• Customer support: Resolving complaints, inquiries, and technical issues efficiently.
• Responsible gaming: Monitoring gameplay patterns to identify players who may need responsible gaming support.

Winrm will not use your data for purposes beyond those stated without obtaining your consent first. Any new use of your personal data will be communicated through updates to this Privacy Policy.

Winrm does not sell or rent your personal data to any party for commercial purposes. However, in the course of operating the platform, we may need to share certain data with selected third parties, subject to strict confidentiality terms.

Payment Service Providers

Transaction information is shared with approved payment providers (such as DuitNow providers, online banking, and e-wallets) solely to process your deposits and withdrawals. All our payment providers comply with PCI-DSS security standards.

Identity Verification Service Providers

For KYC purposes, identity verification documents may be processed through a third-party identity verification platform that has passed our security review. This information is used exclusively for verification purposes.

Statutory Authorities

Winrm will disclose personal data to the relevant authorities when required by law, court order, or official request from a law enforcement agency. We do not disclose more than what is necessary.

Protecting your personal data is winrm's top priority. We implement comprehensive technical and organizational security measures to prevent unauthorized access, loss, misuse, or disclosure of your data.

• Data encryption in transit: All communication between your device and winrm servers is protected by TLS 1.3 protocol and 256-bit SSL encryption.
• Data encryption at rest: Sensitive data such as financial information and identification documents are stored in encrypted format on secure servers.
• Access control: Only staff with specific authorisation may access player personal data, and every access is logged for audit purposes.
• Two-factor authentication (2FA): You can enable 2FA on your winrm account for an additional layer of security.
• Continuous monitoring: Our security systems operate 24 hours a day, 7 days a week to detect threats and abnormal activity.
• Regular penetration testing: winrm conducts regular security testing to identify and address any system vulnerabilities.

Winrm uses cookies and similar tracking technologies to enhance the user experience and analyze platform usage. The following are the types of cookies we use:

Essential Cookies

These cookies are required for core platform functions such as login session management, security, and language preferences. The platform will not function properly without them and does not require your consent.

Analytics Cookies

We use analytics cookies to understand how players use our platform — which pages are visited most, how long sessions last, and where players may encounter issues. This information helps us improve the platform's design and functionality.

User Preference Cookies

These cookies store your settings and preferences – such as display theme, preferred language, and game preferences – so you don't have to reset them each time you use the platform.

You can manage cookie settings through your web browser. Blocking certain cookies may affect the functionality of some parts of the platform. For more information on managing cookies, refer to your web browser's documentation.

As a winrm player, you have full rights over your personal data. winrm respects and supports the exercise of the following rights:

To exercise any of the above rights, contact the winrm support team via Live Chat or email at [email protected]. We will process your request within 14 business days. In some cases, we may need to verify your identity before processing the request.

Winrm retains your personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following are retention period guidelines for key data categories:

• Active account data: Retained for the duration your account is active and for a minimum of 5 years after account closure in accordance with AML compliance requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• KYC documents: Retained for 5 years after the business relationship ends or as required by the relevant authorities.
• Technical and session logs: Retained for 90 days for security and technical issue resolution purposes.
• Customer support communications: Retained for 2 years for reference and service improvement purposes.

Once the retention period expires, your data will be securely deleted or anonymized so it can no longer be linked to your identity. The deletion process follows established security procedures to ensure data is unrecoverable.

Winrm reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data practices, legal requirements, or improvements to our services. When significant changes occur, we will notify you via:

• A prominent notice on the winrm platform homepage.
• Email notifications sent to the email address registered on your account.
• An in-app notification on the winrm mobile app (where applicable).

The "Last Updated" date at the top of this page will always reflect the latest version of this policy. We encourage you to review this page periodically to stay informed about how we manage your privacy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we manage your personal data, please do not hesitate to contact us:

• Live Chat: Available 24/7 directly within the winrm platform for immediate responses from our team.
• Email: [email protected] — response time within 24 hours on business days.
• Help Center: Visit page FAQ us for answers to the most frequently asked questions.

For formal privacy-related complaints, please send full details via email with the subject "Privacy Complaints" along with your account number. All complaints will be thoroughly investigated and responded to within 7 business days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority.