Privacy Policy
Winngo takes your privacy seriously. This Privacy Policy explains what personal data we collect from users of the Winngo platform, how we use and protect it, and what rights you hold over your information. Please read this document carefully before registering an account or using our services.
How Winngo Protects Your Data
Six key privacy principles that underpin everything we do with your personal information.
256-Bit SSL Encryption
All data transmitted between your device and Winngo's servers is encrypted using industry-standard 256-bit SSL technology — the same standard used by major Malaysian banks including Maybank and CIMB.
No Data Sales to Third Parties
Winngo does not sell, rent, or trade your personal data to any third-party marketers or data brokers. Your information is used exclusively to operate and improve your experience on the platform.
Minimum Data Collection
We collect only the personal data that is strictly necessary to provide our services, comply with our legal obligations, and verify your identity under KYC requirements.
Controlled Internal Access
Access to your personal data within Winngo is restricted to personnel who require it to perform their specific duties. All staff handling personal data operate under strict confidentiality obligations.
Payment Data Security
Winngo never stores full payment card numbers. Transactions processed through FPX, DuitNow, Touch 'n Go eWallet, and Boost are handled through their respective secure payment gateways.
Full User Rights Over Your Data
You have the right to access, correct, delete, and restrict the processing of your personal data at any time. Requests are handled within 30 days via our customer support channels.
1 Introduction
This Privacy Policy ("Policy") is published by Winngo ("Winngo", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://winngo.cam ("Platform"). It describes how we collect, use, store, share, and protect the personal data of individuals ("User", "Player", "you") who access or use the Platform.
This Policy applies to all personal data processed by Winngo in connection with the Platform, including data collected during account registration, payment processing, customer support interactions, and general Platform usage. It forms part of — and must be read together with — our Terms & Conditions.
By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must cease using the Platform immediately.
Last Updated: This Policy was last reviewed and updated on 1 January 2026. Winngo reserves the right to update this Policy at any time. Material changes will be communicated to registered Players via email notification or a prominent in-platform notice prior to taking effect.
2 Definitions
For the purposes of this Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, payment details, and IP address. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion. |
| "Data Controller" | Winngo, in its capacity as the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" | Any third party that processes Personal Data on behalf of Winngo under a contractual arrangement, such as payment gateway providers or identity verification services. |
| "KYC" | Know Your Customer — the identity and age verification process applied to all Players before withdrawal privileges are activated. |
| "Cookies" | Small text files stored on your device by a website that allow the site to recognise your device and remember certain information about your session or preferences. |
3 Data We Collect
Winngo collects the following categories of Personal Data from Players:
3.1 Account Registration Data
- Full legal name
- Date of birth (for age verification — 21+ requirement)
- Residential address, including city and postcode
- Email address
- Mobile phone number
- Username and encrypted password
3.2 Identity Verification (KYC) Data
- Government-issued identity document (e.g., MyKad, passport)
- Proof of address (e.g., utility bill, bank statement)
- Selfie or photograph for liveness verification, where required
3.3 Financial Data
- Bank account details linked to FPX or DuitNow transfers
- E-wallet identifiers for Touch 'n Go eWallet, Boost, and GrabPay transactions
- Cryptocurrency wallet addresses used for deposits or withdrawals
- Transaction history (deposits, withdrawals, wagers)
Payment Security Note: Winngo does not store full payment card numbers or CVV codes. All card transactions are tokenised by the relevant payment gateway. Winngo receives only masked card references for record-keeping purposes.
3.4 Technical & Usage Data
- IP address and approximate geographic location
- Device type, operating system, and browser version
- Session duration, pages visited, and features used
- Login timestamps and session activity logs
3.5 Communications Data
- Records of customer support interactions via live chat, WhatsApp, or email
- Content of messages sent to the support team
- Survey responses and feedback submissions
4 How We Collect Your Data
Winngo collects Personal Data through the following means:
- Directly from you: When you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, or respond to surveys.
- Automatically: Through cookies, tracking pixels, server logs, and analytics tools when you access and interact with the Platform.
- From third-party service providers: Including identity verification agencies, payment processors (such as FPX, PayNet, and e-wallet operators), fraud prevention services, and analytics providers — in each case, subject to those providers' own privacy terms.
5 Lawful Basis for Processing
Winngo processes your Personal Data on one or more of the following lawful bases:
| Legal Basis | Applicable Processing Activities |
|---|---|
| Contractual necessity | Processing required to operate your account, process deposits and withdrawals, settle bets, and provide customer support. |
| Legal obligation | KYC identity verification, anti-money-laundering checks, age verification, and retention of financial records as required by our licensing authority. |
| Legitimate interests | Fraud detection and prevention, platform security, product improvement, and responsible gambling monitoring — where such interests are not overridden by your privacy rights. |
| Consent | Sending marketing communications (where you have opted in) and placing non-essential cookies on your device. You may withdraw consent at any time. |
6 How We Use Your Data
Winngo uses the Personal Data collected for the following purposes:
- Account management: Creating, operating, and maintaining your Player account, including authentication and security.
- Payment processing: Facilitating deposits via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency; and processing withdrawal requests to verified Malaysian bank accounts and e-wallets.
- Identity & age verification: Confirming that you are at least 21 years of age and that the identity you have provided is genuine, in accordance with our KYC obligations.
- Fraud prevention and security: Detecting and preventing unauthorised account access, money laundering, bonus abuse, and other prohibited activities.
- Responsible gambling monitoring: Identifying patterns of play that may indicate problem gambling and enabling the application of player-requested limits and self-exclusion.
- Customer support: Responding to enquiries, resolving disputes, and improving our support service quality.
- Platform improvement: Analysing aggregated usage data to improve Platform features, betting markets, and the overall player experience.
- Marketing communications: Sending you promotional offers, bonus notifications, and Platform updates — only where you have provided your consent to receive such communications.
- Legal compliance: Fulfilling our obligations to our licensing authority and any applicable laws or regulations.
7 Data Sharing & Disclosure
Winngo does not sell, rent, or trade your Personal Data to third parties. We may share your data only in the following limited circumstances:
- Payment service providers: Your financial data is shared with our payment processing partners — including PayNet (the operator of FPX and DuitNow), Touch 'n Go Digital, Boost, and cryptocurrency processing services — solely to facilitate your deposit and withdrawal transactions.
- Identity verification services: KYC document data is shared with our accredited third-party identity verification provider for the purpose of confirming your identity and age.
- Fraud prevention and AML services: We may share transaction and account data with fraud detection and anti-money-laundering screening services as part of our compliance obligations.
- Technology infrastructure providers: Our cloud hosting and data storage providers process data on our behalf under strict contractual data processing agreements.
- Regulatory and legal authorities: We may disclose your Personal Data to our licensing authority, law enforcement agencies, or courts when required to do so by law, regulation, or valid legal process.
- Corporate transactions: In the event of a merger, acquisition, or sale of all or part of Winngo's business, your Personal Data may be transferred to the relevant acquirer, subject to equivalent privacy protections.
In all cases where we share data with third parties, we require those parties to maintain appropriate data security standards and to use the data solely for the purposes for which it was shared.
8 International Data Transfers
Winngo's Platform is operated from servers located outside Malaysia. By using the Platform, you acknowledge and agree that your Personal Data may be transferred to and processed in jurisdictions outside Malaysia, including the jurisdiction in which Winngo holds its gaming licence.
Where such transfers occur, Winngo ensures that appropriate safeguards are in place — including contractual data processing agreements based on internationally recognised standard contractual clauses — to maintain a level of protection for your data that is equivalent to the protections applicable under this Policy.
9 Data Retention
Winngo retains your Personal Data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. In general:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of the account plus 5 years following account closure, for AML compliance purposes. |
| KYC documentation | 5 years from the date of submission or the date of account closure, whichever is later. |
| Financial transaction records | 5 years from the date of the transaction, in accordance with anti-money-laundering regulations. |
| Customer support records | 3 years from the date of the last support interaction. |
| Technical and usage logs | 12 months from the date of collection, unless retained longer for fraud investigation purposes. |
| Marketing consent records | Until you withdraw consent, plus 3 years as evidence of your consent. |
After the applicable retention period expires, your Personal Data will be securely deleted or anonymised so that it can no longer be attributed to you.
10 Cookies & Tracking Technologies
Winngo uses cookies and similar tracking technologies to operate the Platform, enhance your user experience, and analyse usage patterns. We use the following categories of cookies:
- Strictly necessary cookies: Required for the Platform to function correctly — including session management, authentication, and security. These cannot be disabled.
- Functional cookies: Remember your preferences such as language settings, and personalise your experience on the Platform.
- Analytical cookies: Collect aggregated data about how Players use the Platform, enabling us to identify and fix performance issues and improve features.
- Marketing cookies: Used (where you have consented) to deliver relevant promotional content and measure the effectiveness of marketing campaigns.
You may control non-essential cookies through your browser settings or via the cookie consent tool on the Platform. Disabling certain cookies may affect the functionality of the Platform.
11 Your Data Rights
Subject to applicable law and certain limited exceptions, you hold the following rights in relation to your Personal Data processed by Winngo:
Right of Access
Request a copy of the Personal Data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your data where no legal basis for retention exists.
Right to Restriction
Request that we limit processing while a dispute is resolved.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or for direct marketing.
To exercise any of these rights, please contact our Data Protection team via live chat or email at [email protected]. We will acknowledge your request within 5 business days and respond substantively within 30 calendar days. Requests are processed free of charge unless they are manifestly unfounded or excessive.
Please note: Certain data retention obligations arising from our AML, KYC, and licensing requirements may limit our ability to fully comply with deletion or restriction requests. In such cases, we will explain the specific legal basis for any limitation on your rights.
12 Children's Privacy
The Winngo Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from any person under the age of 21. If we become aware that a user under the age of 21 has registered an account or provided Personal Data, we will immediately close the account and delete all associated data.
If you are a parent or guardian and believe that a minor has accessed our Platform or provided Personal Data without your consent, please contact us immediately via our customer support channels so that we may take appropriate action.
13 Security Measures
Winngo implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or destruction:
- Encryption in transit: All data transmitted between your browser or mobile device and Winngo's servers is protected by 256-bit SSL/TLS encryption.
- Encryption at rest: Sensitive Personal Data stored in our databases — including KYC documents and financial records — is encrypted using AES-256 encryption.
- Access controls: Staff access to Personal Data is governed by role-based access controls. Only personnel with a documented business need may access identifiable user records.
- Two-factor authentication: We offer two-factor authentication for all Player accounts and require it internally for administrative access to systems that store Personal Data.
- Regular security audits: Our platform and data infrastructure are subject to regular independent security assessments and penetration testing.
- Incident response: Winngo maintains a data breach response plan. In the event of a breach that poses a risk to your rights, we will notify affected Players without undue delay.
While we apply robust safeguards, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own Account credentials and must notify us immediately of any suspected unauthorised access.
14 Third-Party Services & Links
The Winngo Platform may integrate with or reference third-party services, including payment processors such as PayNet (FPX/DuitNow), Touch 'n Go Digital, and Boost. These providers operate under their own privacy policies, and Winngo is not responsible for their data practices.
We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of Winngo. Where we engage third-party Data Processors, we require them to process your data only on our instructions and in compliance with equivalent data protection standards.
15 Amendments to This Policy
Winngo may revise this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or our services. Material amendments — meaning changes that meaningfully alter the nature or scope of data processing, or that reduce your privacy rights — will be communicated to registered Players via email or a prominent in-platform notification at least 14 days before the change takes effect.
Non-material amendments (such as typographic corrections or restatements that do not change substantive meaning) may be made without prior notice. The "Effective Date" at the top of this Policy will be updated to reflect the date of the most recent revision. We recommend reviewing this Policy periodically to remain informed of how your Personal Data is handled.
Your continued use of the Platform after any revision becomes effective constitutes your acceptance of the revised Policy.
16 Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact Winngo's Data Protection team through the following channels:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available on the Platform 24 hours a day, 7 days a week. Average response time: 3–5 minutes.
- Languages: Enquiries are handled in English, Bahasa Melayu, and Mandarin Chinese.
We endeavour to acknowledge all privacy-related requests within 5 business days and to resolve them within 30 calendar days. Where a request is complex or voluminous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
Note: This Privacy Policy is provided for informational purposes and constitutes the complete statement of Winngo's data protection practices with respect to the Platform. It supersedes all prior privacy statements issued in connection with the same subject matter. For information about your gameplay rights and obligations, please refer to our Terms & Conditions.
Your Privacy Is Protected on Winngo
Bank-grade encryption, zero data sales, and full user rights over your information. Experience Malaysia's most privacy-conscious online betting platform.
For players aged 21 and above only. Please gamble responsibly. Visit our Responsible Gambling page for support tools.