Privacy Policy — we1win99 Platform
At we1win99, your privacy is not a footnote — it is a foundational commitment. This Privacy Policy explains in plain terms what personal data we collect, why we collect it, how we use and protect it, and the rights you hold as a registered player. Please read this document carefully before using the Platform.
How we1win99 Protects Your Data
256-bit SSL Encryption
All data transmitted between your device and the we1win99 platform is protected using industry-standard TLS/SSL encryption. Your login credentials, payment details, and personal information travel over a fully encrypted channel at all times.
No Sale of Personal Data
we1win99 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is collected exclusively to operate your account, process payments, and comply with regulatory obligations.
Minimal Data Collection
We operate on a data minimisation principle — collecting only the personal data that is strictly necessary for the purposes described in this policy. We do not collect data speculatively or in excess of what is operationally required.
Player Data Controls
You retain meaningful rights over your personal data, including the right to access, correct, restrict processing of, and request deletion of your data, subject to overriding legal and regulatory obligations we are required to fulfil.
Secure Payment Processing
Financial transactions via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong are processed through secured, PCI-DSS compliant payment gateways. we1win99 does not store full card or bank account numbers.
Defined Retention Periods
Personal data is retained only as long as necessary for the purposes for which it was collected, or as required by applicable law. Account data is typically retained for a defined period following account closure to meet AML and regulatory record-keeping obligations.
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. Legal Basis for Processing
- 5. How We Use Your Data
- 6. Data Sharing & Disclosure
- 7. Cookies & Tracking
- 8. Data Retention
- 9. Data Security
- 10. User Rights
- 11. Cross-Border Transfers
- 12. Children & Minors
- 13. Third-Party Links
- 14. Policy Amendments
- 15. Contact Us
Introduction
This Privacy Policy applies to we1win99 (referred to herein as "we1win99", "the Platform", "we", "us", or "our") and governs the collection, use, storage, disclosure, and protection of personal data in connection with your use of the we1win99 online gaming platform accessible at we1win99.cam.
we1win99 is committed to processing personal data in a lawful, fair, and transparent manner in accordance with applicable international data protection standards. While Malaysia's Personal Data Protection Act 2010 (PDPA) is noted as the legislative context for Malaysian users, we1win99 additionally applies the data protection principles aligned with internationally recognised frameworks to ensure a consistently high standard of privacy practice.
By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent to these practices, you should not create an account or continue using the Platform.
Malaysian Users
Malaysian users' personal data is processed in connection with an online gaming service operating under international licensing arrangements. We encourage you to read this policy in full to understand how your information is handled when you register, deposit funds using FPX or DuitNow, and engage with platform features.
Definitions
The following terms carry the meanings set out below throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, contact details, financial information, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, transfer, erasure, or destruction. |
| "Data Controller" | we1win99, as the entity that determines the purposes and means of processing personal data submitted by Platform users. |
| "Data Subject" | The individual (Player) to whom the personal data relates — you, as the registered user of the Platform. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for one or more stated purposes. |
| "Third Party" | Any entity other than we1win99 and the Data Subject, including payment processors, regulatory bodies, and technology service providers. |
| "Sensitive Data" | A sub-category of personal data requiring additional protection, including financial information, identity document data, and health-related information. |
Data We Collect
we1win99 collects personal data through several channels in the ordinary course of operating the Platform. The categories of data we collect are described below.
3.1 Registration Data
When you create an account on we1win99, we collect: full legal name, date of birth, email address, contact phone number, and country of residence. This information is used to create and administer your account and to verify your identity and age eligibility (21+).
3.2 Identity Verification (KYC) Data
To comply with anti-money laundering (AML) obligations and verify player eligibility, we may collect copies of: government-issued photo identification (MyKad, passport), proof of residential address (utility bills, bank statements), and selfie images with identity documents. This data is classified as Sensitive Data and handled with additional protective measures.
3.3 Financial Transaction Data
We record details of all deposits and withdrawals, including transaction amounts in MYR, payment method identifiers (e.g., FPX reference numbers, DuitNow transfer IDs, registered e-wallet numbers for Touch 'n Go, Boost, and GrabPay), timestamps, and transaction statuses. We do not store complete bank account numbers or full card details — these are handled by our certified payment processor partners.
3.4 Platform Usage Data
We collect information about how you interact with the Platform, including: game sessions played, bet amounts and outcomes, login timestamps, session durations, pages visited, and features used. This data is used to operate the Platform, detect fraud, and improve user experience.
3.5 Technical & Device Data
We automatically collect technical data when you access the Platform: IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URLs. This data supports platform security, fraud prevention, and performance optimisation.
3.6 Communications Data
When you contact our support team via live chat or email, we retain records of that correspondence, including the content of messages, timestamps, and support ticket identifiers. This data is used to resolve queries and improve service quality.
Legal Basis for Processing
we1win99 processes personal data only where a lawful basis for processing exists. The principal legal bases applicable to our processing activities are as follows:
- Contractual Necessity: Processing required to perform the contract between we1win99 and the Player — including account administration, processing deposits and withdrawals, and providing gaming services.
- Legal Obligation: Processing required to comply with applicable laws and regulatory obligations, including AML requirements, KYC verification, and regulatory reporting duties.
- Legitimate Interests: Processing necessary for we1win99's legitimate business interests, including fraud prevention, platform security, responsible gambling enforcement, and service improvement — where these interests are not overridden by the Player's fundamental rights.
- Consent: Where we rely on your consent for processing activities (such as marketing communications), you may withdraw that consent at any time by contacting our support team or updating your account preferences.
How We Use Your Data
Personal data collected by we1win99 is used exclusively for the following purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, KYC documents |
| Age and identity verification (21+ enforcement) | Date of birth, government ID, selfie |
| Processing deposits and withdrawals (FPX, DuitNow, e-wallets) | Financial transaction data, payment method identifiers |
| Providing gaming services and personalised content | Platform usage data, game history |
| Fraud detection and platform security | Technical data, device identifiers, IP address |
| Responsible gambling monitoring and support | Betting patterns, deposit history, session data |
| Customer support and dispute resolution | Communications data, account history |
| Legal and regulatory compliance (AML, KYC) | KYC documents, transaction records |
| Service improvements and analytics (aggregated) | Usage data (anonymised or aggregated where possible) |
| Marketing communications (with consent) | Email address, communication preferences |
Data Sharing & Disclosure
we1win99 does not sell, rent, or trade your personal data. We may share personal data with third parties only in the limited circumstances described below, and strictly on a need-to-know basis.
6.1 Payment Service Providers
We share necessary financial data with authorised payment processors to facilitate transactions via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency networks. These providers are contractually bound to process data solely for payment purposes and maintain appropriate security standards.
6.2 KYC & Identity Verification Partners
Identity verification may be conducted with the assistance of specialist third-party KYC service providers. These providers operate under strict data processing agreements and are not permitted to retain or use your identity documents for any purpose other than the verification requested by we1win99.
6.3 Regulatory and Law Enforcement Authorities
We may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts in response to a lawful request, court order, or where required by applicable AML legislation. we1win99 will notify affected users of such disclosures where legally permissible to do so.
6.4 Technology and Infrastructure Providers
We use trusted third-party technology providers for hosting, cloud storage, security monitoring, and platform analytics. These providers act as data processors under binding agreements and may only process personal data on documented instructions from we1win99. They are not permitted to use your data for their own purposes.
Our Commitment
We will never share, sell, or disclose your personal data to advertisers, marketing networks, or data brokers. Any third-party sharing is limited strictly to what is operationally necessary and protected by contractual data processing obligations.
Cookies & Tracking Technologies
we1win99 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session security, and understand how players interact with our services.
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Session management, authentication, security tokens — required for the Platform to function. Cannot be disabled. | Session / up to 24 hrs |
| Functional | Remembering user preferences (language, game settings), persistent login state. | Up to 30 days |
| Analytics | Aggregated, anonymised data on page visits, feature usage, and platform performance — used to improve the Platform. | Up to 12 months |
| Fraud Prevention | Device fingerprinting and behavioural signals used to detect multi-accounting and fraudulent activity. | Up to 90 days |
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing Platform features that require authentication. we1win99 does not deploy third-party advertising or cross-site tracking cookies.
Data Retention
we1win99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required to comply with applicable legal, regulatory, or contractual obligations.
- Active Account Data: Retained throughout the period your account remains active and for a period following closure — typically five (5) years — to meet AML and regulatory record-keeping requirements.
- KYC & Identity Documents: Retained for the duration of the account relationship and for a minimum of five (5) years post-closure, in accordance with applicable financial services regulation.
- Transaction Records: Retained for a minimum of five (5) years from the date of the transaction to satisfy financial record-keeping obligations.
- Support Communications: Retained for three (3) years from the date of the relevant communication, or longer if related to an unresolved dispute.
- Analytics Data: Aggregated and anonymised data may be retained indefinitely; individually identifiable analytics data is deleted or anonymised within twelve (12) months.
- Marketing Preferences: Retained until you withdraw consent or request deletion, subject to overriding legal obligations.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. We conduct regular data audits to ensure retention schedules are adhered to.
Data Security
we1win99 implements a multi-layered information security framework designed to protect personal data against unauthorised access, disclosure, alteration, and destruction.
9.1 Technical Safeguards
All data in transit is encrypted using TLS 1.2 or higher (256-bit SSL). Data at rest is encrypted using AES-256 encryption in our secure server infrastructure. Access to personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication requirements.
9.2 Operational Safeguards
We conduct regular security assessments, penetration testing, and vulnerability scanning. Our security team monitors the Platform continuously for anomalous behaviour, unauthorised access attempts, and data breach indicators. All staff with access to personal data receive regular data protection and security training.
9.3 Data Breach Response
In the event of a personal data breach that is likely to result in risk to affected individuals, we1win99 will notify impacted players without undue delay and, where required by applicable law, report the breach to the relevant regulatory authority within the prescribed timeframe. Notification will include a description of the nature of the breach, the categories of data affected, and the remediation steps taken.
Your Security Responsibilities
You are responsible for maintaining the confidentiality of your account credentials. we1win99 will never ask for your password via email, live chat, or any other channel. If you suspect unauthorised access to your account, contact our 24/7 support team immediately. Enable two-factor authentication (2FA) in your account settings for enhanced login security.
User Rights (Data Subject Rights)
As a Data Subject, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact our support team using the contact details in Section 15. We will respond to all verifiable requests within a reasonable timeframe, typically within 30 days.
Right of Access
You have the right to request confirmation of whether we process your personal data and to receive a copy of the data we hold about you, along with information about how it is used.
Right to Rectification
You may request correction of any inaccurate or incomplete personal data we hold about you. Some changes may require re-submission of KYC documentation.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to overriding legal obligations (e.g., AML retention requirements).
Right to Restrict Processing
You may request that we limit the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified following a rectification request.
Right to Data Portability
Where processing is based on your consent or contractual necessity, you may request a copy of your personal data in a structured, machine-readable format for transfer to another service.
Right to Object
You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to compelling grounds assessment.
Exercising Your Rights
To submit a data subject rights request, contact our support team via live chat at we1win99.cam or by emailing [email protected]. We may request proof of identity before processing your request to protect against unauthorised access to your data.
Cross-Border Data Transfers
As an internationally operated Platform, we1win99 may transfer personal data to countries outside Malaysia for processing by our technology partners, payment processors, and infrastructure providers. Such transfers may include data stored in secure cloud environments in multiple jurisdictions.
Where personal data is transferred outside Malaysia, we1win99 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that required under applicable data protection laws. These safeguards include contractual data processing agreements incorporating data protection clauses, and the use of providers operating under recognised international security certification frameworks.
By using the Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside your country of residence where necessary for the purposes described in this policy.
Children & Minors
The we1win99 Platform is strictly intended for users aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is enforced at registration and during KYC review.
If we become aware that personal data has been collected from an individual who does not meet the minimum age requirement, we will take immediate steps to delete that data and close the associated account. Any winnings or balances associated with such accounts will be forfeited.
21+ Strictly Enforced
we1win99 applies strict age verification controls at registration and KYC stages. If you have reason to believe a minor has created an account on this Platform, please contact our support team immediately at [email protected]. Play responsibly — for adults aged 21 and above only.
Third-Party Links
The Platform may, from time to time, contain references to or links towards third-party services (such as game studio providers or payment gateways). This Privacy Policy applies solely to personal data processed by we1win99 in connection with the Platform. We have no control over, and are not responsible for, the privacy practices of third-party websites or services that you access independently.
We encourage you to review the privacy policies of any third-party services you engage with in connection with your use of the Platform, particularly payment providers such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, and Boost, whose own privacy terms govern their handling of your financial data during payment processing.
Amendments to This Policy
we1win99 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect how we process your personal data or alter your rights — will be communicated to you via in-platform notification or email to your registered address at least seven (7) days prior to taking effect.
The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. Your continued use of the Platform following any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the changes, you should discontinue using the Platform and contact support to initiate account closure.
We recommend reviewing this policy periodically to remain informed of how we1win99 safeguards your personal information.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by we1win99, please contact us through the following channels:
Data Protection Enquiries
24/7 Live Chat: Available directly via the Platform support widget. Average response time under 5 minutes for account-related matters.
Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Subject Request" to ensure your message is routed to the correct team.
Response Time: Data subject rights requests will be acknowledged within 5 business days and substantively responded to within 30 calendar days.
Languages: English and Bahasa Malaysia.
For information about your rights as a Platform user more broadly, please review our Terms & Conditions. For responsible gambling resources and self-help tools, please visit our Responsible Gambling page.
Your Privacy Is Our Priority at we1win99
Questions about how your data is handled? Our support team is available 24/7 in English and Bahasa Malaysia to assist you.