Updated: 1 January 2026 Version 2.4

Winph Privacy Policy – Personal Data Protection for Malaysia Players

At winph, privacy is not just a word in a formal document – it is the foundation of the trust you place in us every time you register, make a deposit, or play on our platform. This Privacy Policy clearly sets out the types of information we collect, how it is used, who it may or may not be shared with, and your full rights as the owner of that data.

By using the winph, you agree to the terms of this Privacy Policy. We encourage you to read this document in full — it is written in plain, easy-to-understand language, not confusing legal jargon.

winph Privacy Commitment
256-bit SSL encryption on all data
No sale of data to third parties
Data access & deletion rights guaranteed
Financial data is not stored by winph
Personal Data Protection Act 2010 Compliance
Regular third-party security audits
SSL 256
Bank-Grade Encryption
0
Data Sold to Third Parties
24/7
Data Security Monitoring
PDPA
Compliance with Malaysian Act 2010
winph's Six Privacy Pillars

The principles that shape how we manage your data.

Minimum Data Collection

Winph only collects data that is strictly necessary to provide you with our services — no excess data is gathered solely for marketing purposes or third-party analytics. This "data minimisation" principle is at the core of how we operate.

End-to-End Encryption

Every bit of data travelling between your device and winph's servers is protected by 256-bit SSL encryption – the same technology used by leading Malaysian banking institutions such as Maybank and CIMB. Data stored in our databases is also encrypted with an additional layer of protection.

No Data Sales

Winph has never and will never sell, rent, or trade players' personal information to any third party for commercial purposes. Your data is used solely to provide the services you request and to meet our legal compliance obligations.

Your Full Rights Over Your Data

You have the full right to access, amend, transfer, or delete your personal data stored on winph. Requests can be made at any time through our customer support team and will be processed within 14 business days.

Financial Data Not Stored

Winph does not store your bank card information, bank account details, or eWallet credentials in our systems. All transactions are processed through secure payment gateways – Touch 'n Go, DuitNow, GrabPay, FPX, Boost, or ShopeePay – which hold your financial data separately.

Malaysia PDPA Compliance

Winph operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means all our data management practices have been designed and audited to ensure full compliance with the personal data protection laws in force in Malaysia.

This Privacy Policy explains how winph ("we", "Platform") collects, uses, stores, and protects your personal information ("Player", "you"). This document applies to all users of the winph-jit.com platform and any related services we operate.

1. Personal Data We Collect

When you register and use the platform winph, we collect information across several key categories. The following are the types of data we may retain:

Personal Identity Information:

  • Full name as stated on your MyKad
  • Malaysian Identity Card Number (MyKad)
  • Date of birth (for age verification – minimum 21 years old)
  • Current residential address in Malaysia
  • Citizenship and residency status

Contact Information:

  • An active mobile number registered in Malaysia
  • Valid email address

Account Information & Activity:

  • Username and password (stored in encrypted form)
  • Deposit and withdrawal history in Malaysian Ringgit (MYR)
  • Betting and gaming activity history
  • Bonus and promotion usage records
  • Login timestamps and activity logs

Technical Information:

IP Address Device type Browser type Country of residence Time zone Screen resolution Technical error logs

Winph does not collect your bank card details, bank account numbers, or eWallet application credentials. All financial transactions are handled by licensed and regulated third-party payment gateways in Malaysia.

2. How Data Is Collected

winph collects your personal data through several methods:

  • Directly from You: Information you provide during the account registration process, identity verification (KYC), interactions with our customer support team, or when you update your account profile.
  • Automatically: Technical data such as IP addresses, device types, and usage patterns are collected automatically when you access the winph platform via a web browser or mobile application.
  • From Payment Providers: When you make a deposit or withdrawal using Touch 'n Go, DuitNow, GrabPay, FPX, Boost, or ShopeePay, we receive confirmation of the transaction status (successful or failed) along with a unique reference number. We do not receive your full financial account details.
  • Through Cookies and Similar Technologies: Cookies are used to maintain your login session, save your language preferences and settings, and help us understand how players use the platform so we can continuously improve it.

3. How Your Data Is Used

The personal data we collect is used solely for the following purposes:

  • Account Management: Creating and managing your account winph yours, process your registration, and verify your identity.
  • Transaction Processing: Processing deposits and withdrawals in Malaysian Ringgit (MYR) securely and accurately.
  • Service Provision: Gives you access to all winph games and products – Sports Betting, Live Casino, jackpots, lottery, virtual sports, badminton, and more.
  • Security & Fraud Prevention: Identifying and preventing any fraudulent activity, money laundering, or platform abuse.
  • Legal Compliance: Meeting Malaysia's legal requirements, including PDPA 2010 and winph's operational licence compliance obligations.
  • Customer Support: Providing effective assistance when you reach out to the winph support team via live chat or email.
  • Service Communications: Sending important account-related notifications such as transaction confirmations, security alerts, and policy updates. We do not send marketing communications without your consent.
  • Platform Improvements: Analysing usage patterns in aggregate (not individually) to improve the user experience on the winph platform.

Important Note: winph will not use your data for any purpose not stated above without first obtaining your explicit consent.

4. Sharing Data with Third Parties

As a firm general rule: winph does not sell, rent, or trade your personal data to any third party. However, in certain limited situations, we may need to share some of your information:

  • Payment Service Providers: Licensed payment gateways such as Touch 'n Go, GrabPay, DuitNow, and FPX receive only the information required to process your transactions. They are subject to their own strict privacy policies and security standards.
  • Game Software Providers: Our Live Casino and virtual sports game providers receive the session information required to keep gameplay functioning properly. This data is kept to a minimum and does not include full identity information.
  • Legal Requirements: winph may disclose personal data when legally required by Malaysian authorities via a court order, warrant, or valid legal compliance request. We will notify you if permitted to do so under the law.
  • Fraud Investigation: In situations where fraud, money laundering, or serious illegal activity is suspected, winph may share relevant information with the appropriate authorities.

All third parties working with winph are required to sign data confidentiality agreements and adhere to data protection standards equal to or higher than those of winph itself.

5. Data Security

winph continuously invests in advanced data security infrastructure to protect your information. The key security measures we have implemented include:

  • 256-bit SSL Encryption: All data transmitted between your device and winph's servers is encrypted using the latest TLS protocol with 256-bit encryption strength. This means that even if someone were to intercept the data in transit, it would be unreadable.
  • Password Encryption: Your account password is never stored in plain text. It is processed through a secure one-way cryptographic hashing algorithm before being stored in our database.
  • Two-Factor Authentication (2FA): The 2FA feature is available to all player accounts and we strongly encourage you to enable it for an added layer of security during login.
  • Tiered Access Control: Access to player data within winph's internal systems is restricted to staff who genuinely require it to perform their duties, and is governed by a strict authentication system.
  • 24/7 Security Monitoring: Our automated monitoring system operates around the clock to detect and respond to security threats or unauthorised access attempts in real time.
  • Regular Security Audits: Independent security audits are conducted periodically by third-party cybersecurity firms to ensure our security standards consistently meet the latest requirements.
  • Redundant Servers: Your data is stored on redundant server infrastructure with automatic backups to prevent data loss.

Reminder: While winph takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. You also play an important role – always use a strong and unique password, never share your login credentials, and enable 2FA on your account.

6. Your Personal Data Rights

As a player winph and as a data subject under Malaysia's PDPA, you have the following rights, exercisable at any time:

Rights Description Processing Time
Right of Access Request a copy of all personal data we hold about you 14 working days
Right to Rectification Request correction of inaccurate or outdated data 7 business days
Right to Erasure Request deletion of your data when there is no longer a legitimate reason for us to retain it 30 business days
Right to Object Object to the processing of your data for specific purposes 14 working days
Data Portability Rights Receive your data in a machine-readable format 21 working days
Right to Restriction Requesting restriction of data processing in certain circumstances 14 working days

To exercise any of the above rights, contact the support team winph via live chat or email at support@winph-jit.com. Please include proof of identity to facilitate the verification process. Note: some deletion requests may not be fully fulfilled if the relevant data is required to meet legal obligations.

7. Cookies and Tracking Technologies

winph uses cookies and similar tracking technologies to enhance your experience on our platform. There are several types of cookies we use:

  • Essential Cookies: Required for core platform functions such as maintaining your login session and remembering your security preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting information about how you use the winph platform – which pages are visited most frequently, time spent, and any technical errors encountered. This data is used in aggregate form to improve the platform.
  • Functional Cookies: Saving your preferences such as language and display settings so you don't have to reconfigure them every time you log in.

You can manage or delete cookies at any time through your web browser settings. Please note, however, that disabling certain cookies may affect your experience on the winph platform.

Winph does not use third-party cookies for advertising purposes. We do not track your online activity outside of the winph platform.

8. Data Retention

winph retain your personal data for as long as your account remains active and for the required period following account closure, based on legal and operational requirements:

  • Active Account Data: Saved for as long as your account remains active on the winph platform.
  • Financial Transaction Records: Retained for 7 years after the transaction date, in line with financial record-keeping requirements under Malaysian law. This includes records of deposits and withdrawals in MYR.
  • KYC and Identity Verification Data: Retained for 5 years after account closure or the date of the last transaction, whichever is later, in line with anti-money laundering (AML) requirements.
  • Customer Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes.
  • Technical Data (Server Logs): Retained for 12 months for security purposes and technical troubleshooting.

Once the retention period expires, data will be securely deleted or anonymised. If you wish to request early deletion, please refer to the Your Rights section above, bearing in mind that data required for legal compliance cannot be deleted before the stipulated period.

9. Children's Privacy

Platform winph is STRICTLY for individuals aged 21 and above. We do not knowingly collect or process personal data from minors. If you believe we may have inadvertently collected data from a minor, please contact us immediately at support@winph-jit.com and we will take prompt action to delete that data.

Warning: Parents and guardians who discover that their underage child has accessed the winph platform should contact us immediately. Accounts registered by minors will be closed without delay and all associated data will be deleted.

10. Changes to the Privacy Policy

winph reserves the right to update this Privacy Policy from time to time in response to changes in law, technology, or how we operate our services. When significant changes are made:

  • The "Updated" date at the top of this page will be revised accordingly.
  • An in-platform notification will be displayed upon your next login.
  • A notification email will be sent to your registered address for any significant changes.

Continued use of the platform winph following any Privacy Policy update will be considered acceptance of the updated terms. If you disagree with the changes, you have the right to close your account and request deletion of your data by contacting our support team.

11. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the way winph manage your personal data, please contact us through any of the following channels:

Privacy & Data Protection Email: support@winph-jit.com
Live Chat: Available 24 hours a day, 7 days a week within the winph platform
Response Time: Privacy enquiries are responded to within 2 business days; data rights requests are resolved within the timeframes specified in the Section 6 schedule.

If you are dissatisfied with how winph has handled your privacy request, you have the right to lodge a complaint with the relevant Malaysian Personal Data Protection Department in accordance with the provisions of PDPA 2010.

Your Privacy is winph's Priority — Not Just a Formality

We all know the uneasy feeling that comes with thinking about our personal data in someone else's hands. In today's digital world, where stories of data breaches and misuse of personal information are increasingly common, that concern is completely understandable. At winph, we do not take these concerns lightly. Our players' privacy has been a priority since day one of this platform's operation.

This is why we chose to write our Privacy Policy in plain, easy-to-understand English rather than complex legal language that only lawyers can decipher. We want every Malaysian player – whether from Kuala Lumpur, Penang, Johor Bahru, Kota Kinabalu, or Kuching – to be able to read and truly understand how their data is managed on the winph.

Your Financial Data Never Passes Through Our Servers

One of the most important things to understand is how financial transactions at winph works from a privacy standpoint. When you make a deposit using Touch 'n Go eWallet, DuitNow, GrabPay, FPX via Maybank2u or CIMB Clicks, Boost, or ShopeePay — your financial account details never pass through winph's servers. The process takes place directly between you and the respective payment service provider.

All winph receives is a confirmation that the payment was successful, along with a unique reference number for our internal records. We do not know your bank account number, we do not store your eWallet PIN or password, and we have no access to your card details. This is part of our system's deliberate design to maximise your financial privacy and security.

Account Security is a Shared Responsibility

Even though winph using the latest security technology, your account security also depends on your own actions. Here are some best practices we strongly recommend:

First, use a strong and unique password for your winph account — ideally a combination of uppercase letters, lowercase letters, numbers, and symbols that you do not use on any other platform. Second, enable two-factor authentication (2FA) in your account settings — this adds a highly effective layer of security even if someone manages to obtain your password. Third, never share your login credentials with anyone, including family members or trusted friends.

If you receive an email or message asking you to provide your account password winph yours — that did not come from us. winph never requests passwords via email, WhatsApp, or any other communication channel. If you suspect any suspicious activity on your account, contact the winph support team immediately via the in-platform live chat for a prompt temporary account freeze.

PDPA Compliance — Your Rights Under Malaysian Law

Malaysia has the Personal Data Protection Act 2010 (PDPA), which provides individuals with legal protection against the misuse of personal data. winph operates in full compliance with the PDPA 2010 and all regulations issued under it. This means your rights under the PDPA — including the right to access your data, the right to correct inaccurate data, and the right to object to certain data processing — are fully respected and enforceable through our platform.

Every data rights request you submit to winph will be taken seriously and handled within the stipulated timeframe. We will not obstruct or delay any legitimate request relating to your data. Should you be unsatisfied with how we handle your request, you have the right to lodge a complaint with the relevant authority in Malaysia — and we will not treat that as a negative. It is your right, and we respect it.

Play with Peace of Mind at winph

Ultimately, our goal with this transparent and comprehensive Privacy Policy is simple: we want you to be able to play on the winph with complete peace of mind, knowing that your personal data is in responsible hands. Whether you're betting on a Malaysia Super League match, enjoying baccarat at the live casino, or trying your luck with our progressive jackpots – your privacy is protected every step of the way.

Your trust is the most valuable asset of winph, and we understand that trust must be earned through consistent action, not just words. This Privacy Policy is part of our commitment to being transparent about every aspect of our operations. If you have any questions not addressed in this document, please don't hesitate to reach out to our team – we're always here to help.

Play on winph with Complete Confidence!

Your data is protected, your transactions are secure, and your privacy is respected. Register today and enjoy Malaysia's premier digital entertainment platform with complete peace of mind.

  • 256-bit SSL encryption on all transactions
  • Secure deposits via Touch 'n Go, DuitNow, GrabPay or FPX
  • Welcome bonus up to RM300 for new members
Register Free Now
Already have an account? Log In here
FAQ – winph Privacy Policy

Answers to the most frequently asked questions about privacy at winph.

No, absolutely not. winph has never and will never sell, rent, or trade players' personal data to any third party for commercial or marketing purposes. Your data is used solely to provide the services you request, process financial transactions in MYR, and fulfil Malaysia's legal compliance requirements. This is an unwavering commitment we stand by.

winph does not store any bank account details, bank card information, or eWallet credentials. When you make a deposit using Touch 'n Go, GrabPay, DuitNow, FPX, Boost, or ShopeePay, the transaction is processed directly by the respective payment gateway. winph only receives confirmation that the payment was successful. All communication between your device and winph's servers is protected by 256-bit SSL encryption throughout this process.

Yes, you have the right to request deletion of your personal data under Malaysia's PDPA. Submit your request to the winph support team via live chat or email at support@winph-jit.com. winph will process the request within 30 business days. Please note that certain data cannot be deleted before the legally prescribed retention period – particularly financial transaction records, which must be kept for 7 years in accordance with Malaysian legal requirements.

winph uses cookies for three primary purposes: maintaining your login session (essential cookies), saving your preference settings (functional cookies), and analysing aggregate platform usage patterns for improvement (performance cookies). winph does not use third-party cookies for advertising and does not track your online activity outside of the winph platform. You can manage or delete cookies through your web browser settings.

When you close your winph account, your active account data is deactivated immediately. However, certain data must be retained for a specified period in accordance with Malaysian law: financial transaction records for 7 years, KYC data for 5 years, and support communication logs for 3 years. These are legal compliance requirements that cannot be waived. Once the relevant period has elapsed, the data will be securely and permanently deleted or anonymised.

If you suspect your winph account has been accessed without authorisation, contact our support team immediately via in-platform live chat (available 24/7) or email support@winph-jit.com. We can freeze your account instantly while an investigation is carried out. After that, change your password to a stronger one and enable two-factor authentication (2FA) if you have not already done so. If you believe identity theft has occurred, report it to PDRM and inform us so we can take the appropriate follow-up action.
winph's Privacy Commitment to Malaysia Players

Winph protects all your personal information and financial data with 256-bit SSL encryption. We operate in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and never sell your data to third parties. Your rights to access, amend, and delete your data are fully guaranteed.

Read Full Terms & Conditions
A Secure Platform for Malaysian Players
Licensed & Legitimate
SSL 256-bit
PDPA Compliance
24/7 Support
No Data Selling
Regular Audits
Bahasa Melayu