won55 Privacy Policy

1. Introduction

won55 ("the Company", "we", "us", "our") is committed to protecting the privacy and personal data of all users ("you", "the User") who access or use the won55 platform at won55.co (the "Platform"). This Privacy Policy describes what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to your personal data.

By registering an account or using any part of the won55 Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of and should be read alongside the won55 Terms & Conditions. If you do not agree with this Privacy Policy, you must not use the Platform.

won55 handles personal data in a manner consistent with applicable data protection legislation, including obligations relevant to residents of Malaysia and other jurisdictions served by the Platform. We process personal data lawfully, fairly, and transparently, and we collect only what is necessary for the stated purposes.

2. Personal Data We Collect

won55 collects personal data in the following categories depending on how you interact with the Platform:

2.1 Registration & Account Data

• Full legal name
• Date of birth (required to verify 21+ age eligibility)
• Email address
• Mobile phone number
• Residential address
• Username and encrypted password
• Preferred currency (MYR)

2.2 Identity Verification (KYC) Data

• Government-issued photo identification (MyKad, passport, or equivalent)
• Proof of address documentation
• Proof of payment method (screenshot or statement confirming ownership)
• Selfie or live video verification where required for enhanced due diligence

2.3 Financial Transaction Data

• Deposit and withdrawal history including amounts, timestamps, and payment methods
• Payment method identifiers (Touch n Go eWallet account reference, bank account number last four digits, GrabPay ID, CIMB/Maybank FPX reference)
• USDT TRC20 wallet address where crypto transactions are used

2.4 Gaming Activity Data

• Bet history, game session logs, and wagering amounts
• Game type, provider, outcome, and session duration
• Bonus and promotion usage records

2.5 Technical & Usage Data

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser
• Session timestamps, pages visited, and features accessed
• Cookie identifiers and session tokens

2.6 Communications Data

• Records of live chat conversations with customer support
• Email correspondence with won55 support or compliance teams
• Complaint and dispute records

3. How We Use Your Personal Data

won55 uses personal data for the following purposes:

• Account creation and management — To register, authenticate, and maintain your won55 account.
• Identity verification — To verify your age (21+), identity, and residential address in compliance with applicable KYC and anti-money laundering obligations.
• Payment processing — To process deposits and withdrawals via Touch n Go eWallet, Boost, GrabPay, Maybank FPX, CIMB FPX, Public Bank FPX, and USDT TRC20.
• Gaming service delivery — To provide access to the sportsbook, live casino, and slot game library and to maintain accurate bet and transaction records.
• Customer support — To respond to enquiries, resolve complaints, and provide technical assistance.
• Fraud prevention and security — To detect, investigate, and prevent fraudulent activity, account sharing, multiple account abuse, money laundering, and other prohibited conduct.
• Responsible gaming — To operate deposit limits, loss limits, self-exclusion, and other player protection tools, and to identify patterns indicative of problem gambling behaviour.
• Legal and regulatory compliance — To meet obligations imposed by applicable law, licensing authorities, and court or regulatory orders.
• Platform improvement — To analyse aggregated and anonymised usage data to improve the Platform's performance, features, and user experience.
• Marketing communications — To send promotional offers, bonus notifications, and platform updates to opted-in users. You may opt out at any time (see Section 12).

4. Legal Basis for Processing

won55 processes personal data under the following legal bases:

• Contractual necessity — Processing required to perform the contract with you, including account management, payment processing, and gaming service delivery.
• Legal obligation — Processing required to comply with anti-money laundering laws, KYC obligations, and regulatory requirements applicable to won55's operating licence.
• Legitimate interests — Processing for fraud prevention, security monitoring, responsible gaming interventions, and platform analytics, where these interests are not overridden by your privacy rights.
• Consent — Processing for direct marketing communications where you have opted in. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing with Third Parties

won55 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances and under binding data processing agreements:

• Payment processors — Touch n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, and crypto payment infrastructure providers, solely to process your deposit and withdrawal requests.
• Game software providers — Third-party studios such as Evolution Gaming, Pragmatic Play, and PG Soft receive session identifiers and bet data necessary to deliver game rounds. These providers do not receive your full registration or identity data.
• KYC and identity verification services — Third-party identity verification providers who assist with document authentication and liveness checks as part of the KYC process.
• Responsible gaming organisations — Where self-exclusion lists are maintained by an applicable licensing body or shared industry exclusion register, won55 may transmit your self-exclusion status to relevant operators as required by applicable regulation.
• Law enforcement and regulatory authorities — Where required by a lawful court order, regulatory direction, or applicable law, won55 will disclose personal data to the relevant authority.
• Fraud prevention networks — We may share fraud signals (device fingerprints, IP reputation data) with industry fraud prevention networks to protect players and the integrity of the Platform.

6. Cookies and Tracking Technologies

won55 uses cookies and similar tracking technologies to operate and improve the Platform. The following cookie categories are used:

• Strictly Necessary Cookies — Required for Platform operation, including session authentication, login state persistence, and security token management. These cannot be disabled.
• Functional Cookies — Used to remember your preferences such as language settings, deposit method selection, and game lobby display options.
• Analytics Cookies — Used in aggregate and anonymised form to understand how players navigate the Platform, which features are most used, and where technical issues occur. Individual users are not identified through analytics processing.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality and may prevent login. won55 does not use third-party advertising or behavioural targeting cookies.

7. Data Retention

won55 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, as follows:

• Active account data — Retained for the duration of your account and for 5 years following permanent account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction records — Retained for 7 years following the date of each transaction for regulatory and audit purposes.
• KYC documents — Retained for 5 years following account closure or the completion of the relevant regulatory retention period, whichever is longer.
• Customer support records — Retained for 3 years following the close of the relevant support interaction or complaint.
• Self-exclusion records — Retained indefinitely to prevent the re-registration of self-excluded individuals.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

8. Data Security

won55 implements technical and organisational measures proportionate to the risk of processing to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform
• Encryption of sensitive data fields (passwords, payment identifiers) at rest using industry-standard algorithms
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Audit logging of all access to personal data systems
• Regular internal and external security reviews and penetration testing
• Incident response procedures for data breaches, including notification to affected users within 72 hours of confirmed breach discovery where required by applicable law

Notwithstanding these measures, no internet transmission or data storage system is unconditionally secure. You are responsible for maintaining the security of your own device and won55 account credentials.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by won55:

• Right of Access — You may request a copy of the personal data won55 holds about you.
• Right to Rectification — You may request correction of inaccurate or incomplete personal data.
• Right to Erasure — You may request deletion of personal data where it is no longer necessary for the original purpose, subject to legal retention obligations.
• Right to Restriction — You may request that won55 restrict processing of your data in certain circumstances.
• Right to Data Portability — You may request a machine-readable copy of data you have provided to won55.
• Right to Object — You may object to processing based on legitimate interests, including profiling for responsible gaming purposes.
• Right to Withdraw Consent — Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time.

To exercise any of these rights, contact won55 via live chat or at [email protected]. Requests will be processed within 30 days. We may require identity verification before fulfilling a data subject request.

10. International Data Transfers

won55's platform infrastructure and third-party service providers may be located outside Malaysia. Where personal data is transferred to jurisdictions that do not provide an equivalent level of data protection, won55 implements appropriate safeguards including standard contractual clauses, data processing agreements, and equivalent protective mechanisms to ensure your data receives adequate protection.

11. Children and Minors

The won55 platform is strictly not intended for persons under the age of 21. won55 does not knowingly collect personal data from individuals under 21 years of age. If we become aware that a minor has registered an account, we will immediately close the account, delete all associated personal data, and forfeit any balance in accordance with our Terms and Conditions. If you believe a minor has registered at won55, please contact us immediately via live chat.

12. Marketing Communications

won55 may send you promotional emails, bonus offers, and platform updates if you have opted in to marketing communications during registration or subsequently via your account settings. Each marketing communication will include an unsubscribe mechanism. You may opt out of all marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email
• Updating your communication preferences in your won55 account settings
• Contacting won55 live chat and requesting removal from the marketing list

Opting out of marketing communications does not affect transactional communications such as deposit confirmations, withdrawal notifications, KYC requests, and account security alerts — which will continue to be sent as necessary for account operation.

13. Changes to This Privacy Policy

won55 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. Material changes will be communicated to registered users via the email address on record at least 14 days before the amended Policy takes effect. The effective date of the current version is indicated at the top of this page. Your continued use of the Platform after the effective date constitutes acceptance of the updated Privacy Policy.

14. Contact & Data Subject Requests

For all privacy-related enquiries, data subject requests, or complaints regarding won55's handling of your personal data, please contact us via:

• Live Chat: Available 24/7 through the Platform
• Email: [email protected]

We aim to acknowledge all privacy enquiries within 48 hours and to resolve them within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with the applicable data protection supervisory authority in your jurisdiction.

This Privacy Policy was last updated on 1 June 2026.