Summary: Won99 takes your privacy seriously. We collect only what we need, protect it with industry-standard security, share it only where legally required or operationally necessary, and give you meaningful rights over your own information. This Policy explains the details. Please read it carefully before using the won99 Platform.
1Introduction
This Privacy Policy ("Policy") describes how won99 ("won99", "we", "us", "our") collects, uses, stores, shares, and protects personal data in connection with your use of the won99 website at https://won99.asia and all associated services (the "Platform").
Won99 is committed to handling your personal data with transparency and in accordance with applicable data protection laws, including the Personal Data Protection Act 2010 (PDPA) of Malaysia and any applicable requirements under our international gaming licence. By registering a won99 account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy.
This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together govern your relationship with won99.
2Data Controller
Won99 is the data controller responsible for your personal data processed in connection with the Platform. As data controller, won99 determines the purposes and means of processing your personal data. For all privacy-related enquiries, including data subject rights requests, you may contact won99 via the details set out in Section 15 of this Policy.
3Personal Data We Collect
Won99 collects the following categories of personal data:
- Registration data: Full name, date of birth, email address, phone number, and residential address as provided at the time of account creation.
- Identity verification (KYC) data: Copy of government-issued identity document (e.g., Malaysian MyKad or passport), proof of address (utility bill or bank statement), and where required, proof of payment method ownership.
- Financial data: Details of deposits, withdrawals, and payment method information (e.g., partial card numbers, e-wallet account references, bank account details used for transactions). Full payment card numbers are never stored by won99 and are processed directly by certified payment providers.
- Gaming activity data: Records of games played, bets placed, wagering history, session durations, bonus usage, and account balance history.
- Technical data: IP address, device type, browser type and version, operating system, time zone, and session identifiers collected automatically when you access the Platform.
- Communications data: Records of correspondence with won99 support, including live chat transcripts and email exchanges.
- Responsible gaming data: Information related to self-exclusion requests, deposit limits, cooling-off periods, and any other responsible gaming tools applied to your account.
4How We Collect Your Data
Won99 collects personal data through the following means:
- Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or interact with any part of the Platform that requires input.
- Automatically: Technical data such as IP addresses, device identifiers, and session data is collected automatically via cookies, server logs, and similar technologies when you access the Platform.
- From third parties: Won99 may receive verification data from identity verification service providers and fraud prevention agencies in the course of KYC and AML (Anti-Money Laundering) compliance checks.
- From payment providers: Payment confirmation data and transaction references are received from payment processors (including Touch 'n Go eWallet, Boost, FPX, and local bank gateways) when you make deposits or withdraw funds in MYR.
5How We Use Your Personal Data
Won99 uses your personal data for the following purposes:
- To create, maintain, and administer your won99 account.
- To verify your identity and age (21+) in accordance with regulatory requirements.
- To process deposits and withdrawals in MYR and maintain accurate financial records.
- To deliver the gaming services you have requested, including live casino, slots, and sportsbook products.
- To communicate with you about your account, transactions, promotions, and Platform updates.
- To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
- To comply with legal and regulatory obligations under our international gaming licence.
- To administer responsible gaming tools applied to your account, including self-exclusion and deposit limits.
- To analyse Platform usage and improve the quality and security of our services.
- To resolve disputes and enforce our Terms & Conditions.
Won99 does not use your personal data for any purpose incompatible with those listed above without your prior consent.
6Legal Basis for Processing
Won99 processes your personal data on the following legal bases:
- Contractual necessity: Processing required to perform the contract between you and won99, including operating your account, processing transactions, and providing gaming services.
- Legal obligation: Processing necessary for compliance with regulatory requirements, including KYC, AML, age verification, and gaming licence obligations.
- Legitimate interests: Processing for fraud prevention, platform security, and improving won99 services, where our interests are not overridden by your rights.
- Consent: Where we seek your consent for specific processing activities (such as optional marketing communications), we will obtain that consent explicitly and you may withdraw it at any time.
7Sharing Your Data with Third Parties
Won99 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following circumstances and only to the extent necessary:
- Payment processors: Your transaction data is shared with certified payment service providers (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX gateway operators, Maybank2u, CIMB Clicks, and Public Bank) solely to process your deposit and withdrawal requests.
- Game providers: Gameplay data is processed by third-party licensed game providers (such as Pragmatic Play, PG Soft, Microgaming, and Evolution) to deliver the games you play on won99.
- KYC and fraud prevention: Identity verification data may be shared with certified KYC service providers and fraud prevention agencies for the purpose of verifying your identity and detecting prohibited activity.
- Regulatory authorities: Won99 is required to provide certain data to our gaming licensing authority and, where legally compelled, to law enforcement agencies or courts of competent jurisdiction.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.
All third parties with whom won99 shares data are required to process it in accordance with applicable data protection laws and are prohibited from using it for any other purpose.
8International Data Transfers
Won99 operates globally and some of the third-party service providers described in Section 7 may process your personal data outside of Malaysia. Where such transfers occur, won99 takes appropriate steps to ensure that your data receives an equivalent level of protection, including by using standard contractual clauses or other approved transfer mechanisms as required by applicable law.
9Data Retention
Won99 retains your personal data for as long as your account is active and for such additional period as is required by applicable law or our gaming licence obligations. Specifically:
- Account and transaction records are retained for a minimum of 5 years following account closure, in accordance with AML regulatory requirements.
- KYC documentation is retained for the period required by our gaming licence and applicable anti-money-laundering legislation.
- Gaming activity records (bet history, session logs) are retained for a minimum of 3 years.
- Support correspondence is retained for 2 years following resolution of the relevant enquiry.
Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with won99's data disposal procedures.
10Security Measures
Won99 implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These include:
- 256-bit SSL encryption on all data transmitted between your device and won99's servers.
- Encryption of sensitive data at rest, including passwords (stored as bcrypt hashes) and financial records.
- Strict access controls ensuring only authorised won99 personnel can access personal data, on a need-to-know basis.
- Continuous monitoring of systems for suspicious activity and security incidents.
- Regular security assessments and penetration testing of the Platform.
While won99 takes all reasonable precautions, no method of electronic transmission or storage is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, won99 will notify affected players and relevant authorities as required by applicable law.
11Cookies & Tracking Technologies
Won99 uses cookies and similar technologies to operate the Platform, maintain your login session, remember your preferences, and analyse Platform performance. The types of cookies used include:
- Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your login state and security tokens. These cannot be disabled without impacting your ability to use won99.
- Performance and analytics cookies: Used to understand how players interact with the Platform so that we can improve usability and identify issues. Data collected is aggregated and anonymised where possible.
- Functional cookies: Store your preferences such as language settings and responsible gaming tool configurations.
You may control cookie settings through your browser. Please note that disabling strictly necessary cookies may prevent you from logging in to won99. Won99 does not use third-party advertising cookies or serve targeted advertisements based on your browsing behaviour.
12Your Data Rights
Subject to applicable law and won99's regulatory obligations, you have the following rights regarding your personal data:
- Right of access: You may request a copy of the personal data won99 holds about you.
- Right to rectification: You may request correction of any inaccurate or incomplete personal data.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to won99's legal retention obligations.
- Right to restrict processing: You may request that won99 restricts the processing of your data in certain circumstances.
- Right to data portability: Where technically feasible and legally applicable, you may request your data in a commonly used, machine-readable format.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
- Right to object: You may object to processing based on legitimate interests where you believe your rights and freedoms override those interests.
To exercise any of these rights, please contact the won99 support team using the details in Section 15. Won99 will respond to all data rights requests within 30 days. In complex cases, this period may be extended by a further 60 days, of which you will be notified.
13Children's Privacy
The won99 Platform is strictly for adults aged 21 and above. Won99 does not knowingly collect personal data from any individual under 21 years of age. If we discover that we have inadvertently collected data from a person under the minimum age, we will delete it immediately and close the associated account. If you believe a minor has registered on won99, please contact us immediately via live chat or at the email address in Section 15.
14Changes to This Privacy Policy
Won99 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email or platform notification prior to taking effect. The current version of this Policy, including the date of last update, is always available on this page. Your continued use of the Platform following notification of any changes constitutes acceptance of the revised Policy.
15Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the won99 Data Protection team:
- Live Chat: Available 24/7 through the Platform — the fastest route for urgent matters
- Email: [email protected]
Won99 aims to respond to all privacy-related enquiries and data rights requests within 5 business days. Complex requests involving data access or deletion may take up to 30 days as described in Section 12.