Won55 Privacy Policy – How We Protect Your Personal Data

This Privacy Policy applies to all players who register and use the won55 platform, including the website at won55.win and related mobile applications. By continuing to use our platform, you agree that you have read, understood, and accepted the terms set out in this document. If you do not agree with any part of this policy, we encourage you to contact our support team before proceeding.

Won55 takes data protection responsibilities seriously. We regularly review and update this policy to reflect changes in law, technology, and industry best practices. The latest effective date of this Privacy Policy is January 2026.

To provide a complete and secure service, won55 collects various types of personal information from players. This data collection is done directly through your interactions with our platform and indirectly through permitted tracking technologies.

Registration & Identity Information:

• Full name as stated in your official identification document.
• National Registration Identity Card (IC) number or passport number for foreign nationals.
• Date of birth for age verification purposes (must be 18 years or older).
• An active email address to be used as your username and communication channel.
• Mobile phone number for two-factor authentication and important notifications.
• Full residential address including postcode and state.

Financial Information:

• Bank name and account number for deposit and withdrawal purposes.
• E-wallet username (Touch 'n Go, GrabPay, Boost) registered in your name.
• History of deposit and withdrawal transactions on the won55 platform.

Technical & Usage Data:

• The IP address of the device used to access the platform.
• Web browser type, operating system, and device type.
• Gaming session data including games played, bets placed, and time spent playing.
• Account activity logs including login and logout times.

Won55 uses collected personal data solely for legitimate purposes directly related to the provision of platform services. We will not use your data for unrelated purposes without obtaining your explicit consent.

All decisions relating to your account, including withdrawal approvals and risk assessments, are based on a combination of automated checks and manual review by our trained team.

Won55 maintains a strictly limited data-sharing policy. Your personal information will only be shared in the following situations:

• Payment Service Providers: Information required to process your financial transactions is shared with licensed payment providers that comply with established security standards.
• Technology Service Providers: Companies that help us operate our platform infrastructure, including cloud services and data processing, are bound by strict confidentiality agreements.
• Identity Verification (KYC): Certified KYC service provider for identity document verification and anti-money laundering (AML) compliance.
• Statutory Authorities: We will disclose personal information when required by law, court order, or directive from the relevant regulatory authority.

All third parties working with won55 have signed data processing agreements requiring them to uphold data protection standards equal to or higher than our own.

Won55 continuously invests in the latest security infrastructure to ensure players' personal data is protected against unauthorized access, loss, misuse, or disclosure.

Technical Security Measures:

• 256-bit SSL/TLS encryption for all data in transit between your browser and won55 servers.
• Data at rest is encrypted using AES-256 standards for all stored sensitive data.
• Two-factor authentication (2FA) is available and recommended for all player accounts.
• 24/7 security monitoring with intrusion detection system (IDS) and automated incident response.
• Regular penetration testing conducted by independent security experts.
• Role-based access controls ensuring won55 staff can only access data necessary for their duties.

Organisational Security Measures:

• Mandatory data security awareness training for all won55 staff.
• Clean desk policy and screen lock on all workstations.
• Strict non-disclosure agreements (NDA) for all staff and contractors.
• Clear and tested incident response procedures to handle any data breach.

The won55 platform uses cookies and similar tracking technologies to enhance user experience and understand how our platform is used. Here is an overview of the types of cookies we use:

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect certain features on the won55 platform. We do not use third-party cookies for targeted advertising.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a won55 player have the following rights regarding your personal data:

• Right to Access: Request a copy of all personal data we hold about you.
• Right to Rectification: Update or correct any information that is inaccurate or incomplete.
• Right to Erasure: Request deletion of your personal data under certain circumstances permitted by law.
• Right to Restrict Processing: Request that we pause active processing of your data under certain circumstances while retaining the stored records.
• Right to Object: Object to the processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Withdraw consent for consent-based data processing at any time.

To submit any of the above requests, please contact our data protection team via live chat on the platform or our support email. Requests will be processed within 14 working days from the date of receipt.

Won55 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law.

• Active Account Data: Retained for the duration of your active account plus any additional period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with financial and anti-money laundering legal requirements.
• Support Communication Logs: Retained for 3 years from the date of last interaction.
• Technical Log Data: Retained for 12 months for security analysis and technical troubleshooting purposes.
• KYC Documents: Retained for the duration of the active account and at least 5 years after account closure.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered, or converted into an anonymised format that cannot be linked to any individual.

We welcome any inquiries, concerns, or complaints regarding privacy. The won55 Data Protection Officer (DPO) team is here to help you.

For any enquiries regarding this Privacy Policy or to submit a request relating to your personal data rights, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the won55 platform — the fastest way to get help.
• Email: [email protected] (response time within 2 business days)
• In-Platform: Account Settings > Privacy & Security

If you are unsatisfied with how we handle your privacy request, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body.