Win way takes your privacy as a responsibility not to be taken lightly. This Privacy Policy details how we collect, store, use, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Every aspect of how we handle your personal data is built on these six core principles
Win Way only collects personal data that is strictly necessary to provide its services. We do not gather excessive or irrelevant information. Every category of data collected has a clearly defined and explicitly stated purpose.
All Win Way member data is protected with 256-bit SSL encryption in transit and AES-256 encryption at rest. Win Way's servers are secured by multi-layer firewalls and real-time intrusion detection systems.
You have the full right to access, correct, amend, or request the deletion of your personal data held by Win Way. The request process is straightforward and handled within 14 business days.
Win Way does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data belongs to you — it is not a Win Way business commodity.
Win Way's Privacy Policy is built entirely in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). We continuously monitor legislative developments and update our privacy practices to ensure ongoing compliance.
If there are any material changes to Win Way's Privacy Policy, we will notify members via their registered email and in-platform notifications at least 14 days before the changes take effect.
Win Way Entertainment Sdn. Bhd. ("Win Way", "we") operates an online betting and casino platform accessible at winway.run. We understand that your trust in Win Way depends not only on the quality of the games and services we offer, but also on your confidence that your personal data is handled responsibly and securely.
This Privacy Policy ("Policy") sets out in detail win way's personal data management practices — covering the types of data we collect, how it is used, who it may be shared with, and the security measures we take to protect it. This Policy is drafted and enforced in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA).
By registering an account or using the Win Way platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data in accordance with the terms set out herein. If you do not agree, please discontinue use of the Win Way platform.
Win way collects several categories of personal data to support platform operations and deliver the best experience to our members. Below is a summary table of the data categories we collect:
| Data Category | Specific Examples | Mandatory / Optional |
|---|---|---|
| Identity Data | Full name, identity card number (MyKad), date of birth, gender | Mandatory |
| Contact Data | Mobile phone number, email address, Malaysian residential address | Mandatory |
| Financial Data | Payment methods (DuitNow, TNG eWallet, GrabPay, FPX), deposit and withdrawal records in RM | Mandatory |
| Platform Activity Data | Sports betting records, live casino game history, login logs, session duration | Automatic |
| Technical Data | IP address, device type, operating system, web browser, cookie data | Automatic |
| Communication Data | Correspondence with win way customer support, feedback, complaints | Where applicable |
| Identity Verification Data | Selfie photo, KYC supporting documents (if requested) | When required |
Win Way does not collect sensitive personal data such as health information, religious beliefs, sexual orientation, or political affiliations, unless specifically required by applicable law or legitimate compliance obligations.
Win way collects members' personal data through several different channels:
We collect data directly from you during the win way account registration process, when you complete your profile, submit a withdrawal request, contact our support team, or participate in any win way promotion.
When you browse or use the win way platform, our systems automatically record certain technical data, including your IP address, device used, session time and duration, pages visited, and actions taken within the platform. This data is used for security, fraud detection, and win way platform improvement purposes.
In certain circumstances, win way may receive your personal data from legitimate third parties, such as identity verification service providers, financial institutions that process your payment transactions (e.g. DuitNow, Touch 'n Go eWallet, Maybank2u via FPX), and licensed fraud prevention agencies.
Win way uses the personal data collected solely for legitimate and stated purposes. Below is a full list of the purposes for which win way uses your data:
You may withdraw your consent to receive marketing communications from win way at any time by clicking the "Unsubscribe" link in any marketing email or by contacting us at support@winway.run. Withdrawing consent will not affect important account-related communications.
Win way does not sell, rent, or trade members' personal data to third parties for their own commercial purposes. However, win way may share your personal data in the following limited circumstances:
Win Way works with trusted third-party service providers to support platform operations, including payment processing providers (such as FPX, DuitNow, Touch 'n Go eWallet, GrabPay, and Boost gateways), licensed casino software providers, and cloud service providers. All such providers are bound by strict data protection agreements and are only permitted to use your data for purposes specified by Win Way.
Win Way may be required to disclose your personal data to Malaysian government authorities or law enforcement agencies where mandated by law, court order, or other valid legal process.
Win way reserves the right to disclose data as necessary to investigate and prevent fraud, protect the safety of other members, or enforce win way's Terms & Conditions.
In some cases, your data may be processed by Win Way's service providers operating outside Malaysia. In such situations, Win Way ensures that protections equivalent to Malaysia's PDPA are applied through appropriate data protection contracts.
Protecting members' personal data is Win Way's highest technical and operational priority. We continually invest in our security infrastructure to keep your data safe at all times:
In the event of any data breach affecting the security of your personal data, Win Way will notify you within 72 hours of becoming aware of it, in line with industry best practices. We will explain the nature of the breach, the data affected, and the steps being taken to address the situation.
Win way uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse the win way platform.
You can manage your cookie settings through your internet browser. However, disabling essential cookies may affect the functionality of the win way platform.
Win Way retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by law. The following are general guidelines for Win Way's data retention periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active Account Data | Throughout active account + 7 years | Legal compliance requirements |
| Financial Transaction Records | 7 years from the transaction date | Accounting and legal requirements |
| Support Communication Logs | 3 years from the date of communication | Dispute Resolution |
| Login & Activity Log Data | Rolling 12 months | Security and fraud detection |
| KYC Data (Identity Verification) | 5 years after account closure | AML compliance requirements |
| Analytics Cookie Data | 13 months | Platform Performance Analytics |
Upon expiry of the applicable retention period, win way will securely delete or anonymise your data in accordance with established internal procedures.
As a registered Win Way member in Malaysia, you have several data protection rights under the PDPA 2010 that Win Way is committed to respecting and facilitating:
You have the right to request a copy of all personal data Win Way holds about you. Requests are processed within 14 business days.
You may request Win Way to correct any inaccurate or incomplete personal data we hold about you.
You may request the deletion of your personal data, subject to Win Way's legal obligations to retain certain records.
In certain circumstances, you may request win way to restrict the processing of your data while a dispute is being resolved.
You have the right to object to the processing of your personal data for direct marketing purposes at any time, without penalty.
You may request win way to provide your personal data in a structured, machine-readable format for transfer to another platform.
To submit any request relating to your privacy rights, please contact the win way Data Protection Officer by email at privacy@winway.run or via the request form in your account panel. All valid requests will be processed within 14 business days.
The Win Way platform is strictly for individuals aged 18 and above. Win Way does not knowingly collect personal data from anyone under the age of 18. If you believe that Win Way has inadvertently collected personal data from someone under 18, please notify us immediately at privacy@winway.run.
Once Win Way receives such notification and verifies the accuracy of the information, we will take immediate steps to delete the relevant data and close the associated account.
Win way reserves the right to amend or update this Privacy Policy from time to time in response to changes in legislation, business requirements, or improvements to our privacy practices. When any material changes occur:
We encourage you to review Win Way's Privacy Policy periodically to stay informed about how we protect your personal data.
If you have any questions, concerns, or complaints regarding Win Way's Privacy Policy or how we handle your personal data, please contact Win Way's Data Protection Officer (DPO):
You also have the right to lodge a complaint with Malaysia's Personal Data Protection Department (JPDP) if you believe Win Way has not complied with the requirements of PDPA 2010.
This win way Privacy Policy takes effect from 1 January 2026 and supersedes all previous versions. It forms part of the overall agreement between you and win way and should be read together with Terms & Conditions Win Way.
Win Way combines world-class data security with Malaysia's finest Sports Betting and live casino experience. Register for free today, deposit as little as RM20 via DuitNow, Touch 'n Go eWallet, GrabPay, or FPX, and enjoy the entertainment with complete peace of mind.
SSL 256-bit | PDPA 2010 Compliant | 18+ only | Play responsibly