Privacy Policy win1221 —
Your Data, Our Responsibility

Win1221 ("we", "Platform") values the privacy of every individual who uses our services. This Privacy Policy is drafted to ensure you clearly understand what information we collect, why we need it, and how we protect it at all times.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. Our commitment goes beyond legal compliance — we believe that player trust is the foundation of a healthy, long-term relationship between win1221 and its users.

This policy applies to all information collected through the win1221 website, official mobile app, customer support services, and any other communication channels we operate. If you use third-party services integrated with our platform, their separate privacy policies also apply.

Win1221 only collects data that is genuinely necessary for the stated purposes. The following are the categories of data we collect:

Every piece of data collected by win1221 has a clear and lawful purpose. We use your personal data for the following purposes:

• Account Management: Create, verify, and maintain your user account, including the KYC process required to meet compliance requirements.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions securely and accurately. Transaction records are retained for audit and legal compliance purposes.
• Platform Security: Detect and prevent fraud, money laundering, unauthorised access, and any activity that violates Terms and Conditions win1221.
• Customer Support: Help you resolve any technical issues, account enquiries, or complaints faster and more effectively.
• Experience Personalisation: Tailor game recommendations, promotions, and platform content based on your preferences and playing habits.
• Service Communications: Send important notices relating to your account, changes to terms, security updates, and relevant promotional information.
• Legal Compliance: Meet the legal and regulatory obligations imposed on the win1221 platform by relevant authorities.
• Platform Improvement: Analyse usage data in aggregate and anonymised form to improve the performance, design, and functionality of the win1221 platform.

Win1221 will not use your data for any other purpose not stated here without obtaining your consent first.

Win1221 processes your personal data on the basis of one or more lawful grounds under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: You provide consent voluntarily when registering an account and accepting this Privacy Policy. You may withdraw consent at any time, though this may affect your ability to use certain win1221 services.
• Contract Performance: Data processing is necessary to fulfil the service agreement between you and win1221, including account management and transaction processing.
• Legal Obligation: Some data processing is mandatory to comply with applicable legal requirements, including anti-money laundering (AML) and Know Your Customer (KYC) obligations.
• Legitimate Interest: win1221 processes certain data on the basis of legitimate interests that do not override players' fundamental rights, such as fraud detection and platform security enhancement.

Win1221 does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data is only shared in limited and lawful circumstances as follows:

• Trusted Service Providers: Third-party companies that assist us in providing services such as payment processing, server hosting, analytics, and technical support. All such providers are bound by strict confidentiality agreements and may only use your data for the specified purposes.
• Legal Authorities: Where required by law, court order, or directive from a legitimate authority, win1221 will disclose the necessary data to the relevant parties.
• Fraud Prevention: Data may be shared with fraud prevention agencies or industry security networks to protect the platform and other players from malicious activity.
• Business Transfers: In the event of a merger, acquisition, or transfer of win1221 assets, user data may be transferred to the new entity, subject to appropriate notice and safeguards.

Win1221 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting the platform's primary functionality.
• Performance Cookies: Collect anonymous data on how visitors use the platform to help us identify areas for improvement.
• Functional Cookies: Save your preferences such as language, display settings, and game choices to deliver a more personalised experience.
• Analytics Cookies: We use trusted third-party analytics tools to understand platform usage patterns in aggregate. This data cannot directly identify any individual.

You can manage your cookie settings through your internet browser at any time. However, disabling certain cookies may affect the functionality and user experience of the win1221 platform.

Your data security is win1221's top priority. We implement multiple layers of technical and organisational protection to keep your data safe at all times:

• 256-bit SSL Encryption: All communications between your device and win1221 servers are encrypted using 256-bit SSL/TLS protocols, ensuring no third party can intercept data in transit.
• Data-at-Rest Encryption: Sensitive data such as financial information and KYC documents are stored in encrypted format within secure databases protected by multi-layer firewalls.
• Strict Access Control: Only win1221 staff who require access to specific data to carry out their duties are permitted to access that information, based on the principle of least privilege.
• Continuous Monitoring: win1221's security systems monitor platform activity 24 hours a day, 7 days a week to detect and respond to any security threats swiftly.
• Periodic Security Audits: win1221 conducts regular penetration testing and security audits by independent security experts to identify and address any potential vulnerabilities.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA in their account settings for an additional layer of protection against unauthorised access.

While win1221 takes all reasonable precautions, no security system can guarantee 100% complete protection. In the event of a security breach involving your data, win1221 will notify you in a timely manner as required by applicable law.

Win1221 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. The following are our general data retention guidelines:

• Active Account Data: Retained for the duration your account remains active and in use. This data is continuously updated in line with account activity.
• Financial Transaction Data: Retained for a minimum of 7 years from the transaction date in accordance with financial compliance and anti-money laundering legal requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure or last verification, whichever is later.
• Access & Security Logs: Retained for 12 to 24 months for security investigation and dispute resolution purposes.
• Communication Data: Customer support interaction records are retained for 3 years for reference and service improvement purposes.

Once the relevant retention period has elapsed, your data will be securely deleted or anonymised so that it can no longer be linked to you personally.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data we hold:

To exercise any of the above rights, please contact the win1221 privacy team via email or live chat. We will process your request within 30 business days. Some requests may require identity verification beforehand to ensure the security of your data.

Win1221 does not target our services at individuals under the age of 18. Our platform is not designed for minors and we do not knowingly collect personal data from underage individuals.

If we discover that we have inadvertently collected personal data from individuals under the age of 18, we will take immediate steps to delete that data and close the associated account. Parents or guardians who become aware that a child under their care has registered a win1221 account are encouraged to contact us immediately.

Win1221 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. The "Updated" date at the top of this document will always reflect the latest version in effect.

For material amendments that significantly affect your privacy rights, win1221 will provide clear notice via the platform or to your registered email at least 14 days before the amendment takes effect. Continued use of the platform after the effective date constitutes your acceptance of the revised terms.

You are encouraged to review this Privacy Policy periodically to stay informed about how win1221 protects your information.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how win1221 handles your personal data, please contact us through the following channels:

• Live Chat Platform: The fastest way to get help — available 24/7 directly from the win1221 platform, answered in Bahasa Malaysia.
• Privacy Email: [email protected] — for detailed enquiries regarding data rights and access/deletion requests.
• General Support Email: [email protected] — for general enquiries regarding your account and services.
• FAQ Page: Visit FAQ page for answers to the most frequently asked privacy questions.

The win1221 privacy team will respond to all enquiries within 5 business days. For formal data rights requests, the processing period is up to 30 business days in accordance with PDPA 2010 requirements.