winlaju Privacy Policy for Malaysian Users

1 Introduction

This Privacy Policy governs the collection, use, storage and disclosure of personal information by winlaju in connection with the operation of the winlaju platform at winlaju.cam. References to "we", "our" or "winlaju" mean the platform operator. References to "you" or "user" mean the individual accessing winlaju services.

winlaju is an English-language online gaming information and service platform serving Malaysian users across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and the wider Malaysian market. This Policy is intended to comply with reasonable data-protection principles applicable to platform operation and to provide users with a transparent explanation of data practices.

This Privacy Policy should be read together with the winlaju Terms & Conditions. By registering, logging in or otherwise using the platform after the effective date stated above, you agree to the data practices described here.

2 Definitions

• Personal Data means any information that identifies or could reasonably identify an individual, including name, date of birth, national identification number, contact details, payment account references and device identifiers.
• Processing means any operation performed on Personal Data, including collection, storage, use, transmission, modification, restriction and deletion.
• KYC Data means documents and records submitted for identity and age verification, including identity cards, passports, proof of address and payment ownership evidence.
• Transaction Data means records relating to MYR deposits, withdrawals, bonus transactions and game-level wagering activity associated with a winlaju account.
• Technical Data means device type, browser operating system, IP address, session identifiers and similar technical information generated during platform use.
• Third-Party Processor means a service provider engaged by winlaju to perform specific functions, such as payment processing, identity verification or fraud detection, who processes data under contractual instruction.

3 Personal Data We Collect

winlaju collects Personal Data across several categories depending on how you use the platform. The main categories are described in the table below.

4 How We Use Personal Data

winlaju processes Personal Data only where there is a legitimate purpose. The primary purposes for which winlaju uses collected data are:

• Account creation and management: To register and maintain winlaju accounts, verify credentials and manage access controls.
• Age and identity verification: To confirm that a user is at least 21 years old and to verify that the account owner is who they claim to be.
• MYR payment processing: To facilitate deposits and withdrawals through DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong and other connected payment services.
• Compliance and fraud prevention: To meet applicable anti-money-laundering, responsible-gambling and regulatory obligations, and to detect and investigate suspicious activity.
• Customer support: To respond to queries, resolve disputes and manage complaint escalation related to accounts, payments or promotional eligibility.
• Platform improvement: To analyse usage patterns through aggregated or anonymised Technical Data in order to maintain and develop the winlaju platform.
• Safety and responsible gambling: To identify patterns that may indicate problematic gambling behaviour and to apply appropriate account tools in accordance with the Responsible Gambling policy.

5 Legal Basis for Processing

winlaju processes Personal Data one or more of the following lawful bases:

• Contractual necessity: Processing required to fulfil the winlaju account agreement, including account creation, payment processing and service delivery.
• Legal obligation: Processing required to comply with applicable anti-money-laundering, ageverification, record-keeping and regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible-gambling monitoring and service improvement, where these interests do not override the fundamental rights of the user.
• Consent: Where winlaju collects optional data for marketing communications or optional preference-based features, consent will be sought separately and may be withdrawn at any time through account settings or by contacting support.

6 Data Sharing and Third-Party Processors

winlaju does not sell Personal Data to unrelated third parties for commercial exploitation. Data may be shared in the following limited circumstances:

• Payment processors: Financial institutions and eWallet operators (including those supporting DuitNow, FPX and Malaysian banking channels) receive the minimum data necessary to authorise and settle transactions.
• Identity verification providers: Specialist KYC and document-verification services may receive identity documents and selfie images solely to complete verification workflows instructed by winlaju.
• Platform infrastructure providers: Hosting, database and security service providers operate under contractual data-processing obligations and may not use winlaju data for independent purposes.
• Legal and regulatory authorities: winlaju may disclose Personal Data where required by a valid legal order, regulatory request, court directive or applicable law.
• Fraud and risk networks: Aggregated or pseudonymised indicators may be shared with industry fraud-prevention services to protect users across the platform.

All Third-Party Processors engaged by winlaju are required to maintain appropriate security standards and to use Personal Data only for the purposes specified in their processor agreements.

7 Data Retention

winlaju retains Personal Data for no longer than is necessary for the purpose for which it was collected, subject to any applicable minimum retention periods required by law or regulation. In practice:

• Active account data is retained for the duration of the account relationship plus a post-closure period consistent with applicable compliance requirements.
• KYC documents and identity verification records may be retained for a defined period following account closure to satisfy anti-money-laundering and record-keeping obligations.
• Transaction Data is retained for a period consistent with applicable financial record-keeping standards.
• Technical Data in server logs may be retained for a shorter period unless it forms part of a security investigation.
• Communication Data related to resolved support interactions is retained for a reasonable period to support complaint management.

When data is no longer required and no legal obligation prevents deletion, winlaju will dispose of it securely.

8 Cookies and Technical Tracking

winlaju may use cookies, session tokens and similar technical mechanisms to maintain login state, apply security controls, record user preferences and collect aggregated usage analytics. Strictly necessary cookies are applied to maintain platform function. Analytics or preference-based cookies that are not essential to security may be adjustable through browser settings.

winlaju does not use tracking technologies to build advertising profiles for sale to third-party advertising platforms. Technical Data collected through cookies is used internally for platform security, session management and user-experience analysis.

9 User Rights

Subject to applicable law, winlaju users may exercise the following rights in relation to their Personal Data:

• Right of access: Request a copy of the Personal Data winlaju holds about you.
• Right to rectification: Request correction of inaccurate or incomplete information held in your account.
• Right to erasure: Request deletion of Personal Data where there is no overiding legal, compliance or fraud-prevention basis for continued retention.
• Right to restriction: Request that processing be limited while a correction or objection is under review.
• Right to data portability: Request commonly used account information in a machine-readable format where technically feasible.
• Right to object: Object to processing conducted on the basis of legitimate interests, including direct-marketing communications.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact winlaju at [email protected] (plain text — not a clickable link). Include sufficient account information to enable identification. winlaju will respond within a reasonable period and may request verification of identity before actioning a request.

10 Data Security

winlaju applies technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction or disclosure. Measures include encrypted data transmission, access-control policies and regular review of security practices.

No platform can guarantee absolute security. Users play an important role by maintaining strong, unique passwords, using caution on shared devices and reporting suspected unauthorised activity promptly to winlaju support. Transaction details and one-time verification codes must never be shared with any person, including individuals claiming to be winlaju support agents.

11 Children and Minors

winlaju does not knowingly collect, use or retain the Personal Data of individuals under the age of 21. If winlaju discovers that data relating to a minor has been collected, it will be deleted promptly and the associated account will be closed. Users who believe that underage registration has occurred should contact support immediately so that corrective action can be taken without delay.

12 Changes to This Privacy Policy

winlaju may update this Privacy Policy from time to time to reflect operational, legal or technical developments. The current effective date is displayed at the top of this page. Where change is material, an appropriate on-site notice may be provided. Continued use of winlaju after the updated policy takes effect constitutes acceptance of the revised terms.

Users are encouraged to review this Privacy Policy periodically. If you have concerns about a proposed or recent change, contact winlaju support before continuing to use the platform.

13 Contact Us

For privacy-related questions, data-access requests or concerns about how winlaju has handled your Personal Data, please contact the support team using the details below:

• Support email: [email protected] (displayed as plain text — not a clickable link)
• Platform: winlaju.cam
• Service language: English

When contacting winlaju about a privacy matter, include your registered account identifier and a clear description of the concern. Do not send sensitive documents, passwords or verification codes through unsecured email channels. winlaju will acknowledge the request and indicate the expected response timeframe as promptly as practicable.