Data Privacy & Security

Winrm8 Privacy Policy — Your Personal Data Protection

We take the privacy of every winrm8 player seriously. This document transparently explains how we collect, use, store and protect your personal data in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010.

Last updated: 1 January 2026
SSL 256-bit Data Encryption
PDPA 2010 Legal Compliance
0 Third Parties Data Not Sold
24/7 Security Monitoring

Winrm8's Commitment to Your Privacy

Six core principles that ensure your personal data is always protected

256-bit SSL Encryption

All data transmitted between your device and winrm8's servers is encrypted using SSL 256-bit technology — the highest security standard in the industry.

Your Data Controls

You have the right to access, amend, download, or request deletion of your personal data at any time through your account settings or by contacting our team.

Data Not Sold

Winrm8 does not sell, rent, or transfer your personal data to any third party for marketing purposes without your explicit consent.

Compliant with PDPA 2010

All data handling practices at winrm8 comply with Malaysia's Personal Data Protection Act (PDPA) 2010, ensuring your rights as a user are always respected.

24/7 Threat Monitoring

Winrm8's security system monitors all account activity around the clock to detect any unauthorised access attempts and responds immediately.

Easy Cookie Controls

You can easily manage your cookie preferences — accept all, reject non-essential cookies, or customize your choices according to your personal preferences.

1 Personal Information We Collect

Winrm8 collects your personal information to enable us to provide a safe, transparent, and responsible online betting service. We only collect data that is strictly necessary for platform operations.

1.1 Information You Provide Directly
  • Identity information: full name, identity card or passport number, date of birth, gender, and nationality
  • Contact information: email address, mobile phone number, and residential address
  • Financial information: bank account details, bank name, account number, and registered digital wallet information
  • Verification documents: copies of identity card, passport, or proof of address documents for the KYC process
  • Account information: username, password (stored in hashed format), and account preferences
1.2 Information Collected Automatically
  • IP address and network information
  • Device type, operating system and web browser version
  • Session data: pages visited, browsing duration, and links clicked
  • Game performance data: betting records, win and loss history
  • Geolocation information based on IP address for country verification
winrm8 does not directly collect credit or debit card information. All financial transactions are processed through third-party payment providers that comply with PCI-DSS standards, ensuring your card details never touch winrm8's servers.

2 How We Use Your Personal Data

Every piece of data collected by winrm8 is used for specific, legitimate purposes and does not exceed what is necessary for those purposes.

Purpose of Use Legal Basis Related Data
Account registration & verification Contract performance Name, email, date of birth
Deposit & withdrawal processing Contract performance Banking information, KYC
KYC verification & AML compliance Legal obligation Identity documents, address
Customer support Legitimate interest Communication history
Fraud prevention & security Legitimate interest IP address, device, activity records
Promotional offers & bonuses Consent Email, marketing preferences
Platform analytics & improvement Legitimate interest Session & usage data

Winrm8 does not use your data to make automated decisions that materially affect your rights without human review. If you receive an automatically generated account suspension notification, you have the right to request a review by our team.

3 Information Sharing & Disclosure

Winrm8 does not sell or rent your personal data to any party. Data sharing only occurs in the following limited situations:

3.1 Trusted Service Providers

Winrm8 shares necessary data with selected third-party service providers under strict confidentiality agreements, including:

  • Payment processing providers (FPX, digital wallets) to complete transactions
  • Identity verification services for the KYC process
  • Cloud infrastructure providers compliant with ISO 27001 security standards
  • Analytics services to understand platform usage patterns
3.2 Legal Obligations

Winrm8 may be required to disclose your data to relevant authorities such as Bank Negara Malaysia, the Royal Malaysia Police, or other regulatory bodies if ordered by a court or required under applicable Malaysian law.

When we share your data with third-party service providers, they are only permitted to use it for the specific agreed purposes and are bound by strict data processing agreements.
3.3 International Data Transfers

If any of your data needs to be transferred outside Malaysia, winrm8 ensures that the recipient country provides an equivalent or higher level of data protection as required under PDPA 2010. Appropriate data transfer agreements will be established beforehand.

4 Data Security & Protection Measures

Winrm8 invests seriously in cybersecurity infrastructure to ensure every player's personal data is protected at all times. The following are the technical and organisational measures we implement:

Full Data Encryption

SSL TLS 1.3 for data in transit; AES-256 encryption for data stored in the database.

Hashed Passwords

Passwords are stored using bcrypt with a unique salt value — no one, including winrm8 staff, can view your original password.

Two-Factor Authentication

2FA is available and recommended for all accounts. Logging in from a new device requires additional verification via email or an authenticator app.

24/7 Monitoring

Our SIEM system monitors all activity logs in real time and alerts the security team of any detected anomalies.

winrm8 conducts regular penetration testing and independent security audits to identify and remediate any system vulnerabilities before they can be exploited.

While we take all reasonable precautions, no security system is entirely perfect. In the event of a data breach that affects you, winrm8 will notify you within 72 hours after becoming aware of it, in line with industry best practices.

5 Cookies & Tracking Technologies

Winrm8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit the winrm8 site.

Types of Cookies Used
Cookie Types Purpose Can Be Rejected?
Essential Cookies Login verification, session security and core platform functionality No — required for the platform to function
Preference Cookies Save your language settings, time zone and display preferences Yes
Analytics Cookies Collect anonymous usage statistics for platform improvement Yes
Marketing Cookies Display promotions and bonuses relevant to your interests Yes

You can manage or delete cookies through your web browser settings at any time. Please note that removing essential cookies may affect the login functionality and session security of your winrm8 account.

winrm8 uses anonymous tracking pixels in promotional emails to determine whether an email has been opened. If you do not wish to receive promotional emails, you may unsubscribe via the link included at the bottom of every email.

6 Your Rights Under PDPA 2010

As a winrm8 player based in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010:

Right of Access

Request a copy of all personal data winrm8 holds about you.

Right to Rectification

Request correction of your inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your data in certain situations permitted by law.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

Request your data in a machine-readable format for transfer to another platform.

Right to Restrict Processing

Request that we restrict the processing of your data while a complaint is being resolved.

To exercise any of the above rights, contact the winrm8 privacy team via support email or live chat. We will process your request within 30 days calendar days from the date of receipt. In complex cases, this period may be extended by up to 60 days with prior notice to you.

7 Data Retention Period

Winrm8 only retains your personal data for as long as it is needed for the original purpose of collection or as required by applicable law. Our data retention schedule is as follows:

  • Active account data: Retained for as long as the account is active and three years after account closure
  • Financial transaction records: Retained for seven years in accordance with Malaysian financial legal requirements
  • KYC documents: Retained for five years after the business relationship ends, in line with AML requirements
  • Support communication logs: Retained for two years from the date of last interaction
  • Anonymous analytics data: Can be stored indefinitely as it cannot be linked back to any individual

Once the retention period expires, your data will be securely deleted using methods that meet security standards or physically destroyed if held in printed form.

8 Links to Third-Party Sites

The winrm8 platform may contain links to third-party websites or services such as payment providers or gaming partners. winrm8's Privacy Policy does not apply to those third-party websites.

Winrm8 is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of every website you visit, especially before providing any personal information to them.

All payment service providers integrated with the winrm8 platform have undergone security assessments and comply with PCI-DSS standards, and maintain privacy policies aligned with industry standards.

9 Changes to This Privacy Policy

Winrm8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Each new version will be published on this page with a clear update date.

For significant changes that affect how we use your data, winrm8 will notify you via an in-platform notice or email to your registered address, at least 14 days before the changes take effect.

Continued use of the winrm8 platform after any Privacy Policy changes take effect is considered your acceptance of those changes. If you disagree with any changes, you have the right to close your account and request data deletion.

10 Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your rights regarding this Privacy Policy, you may contact the winrm8 Data Protection Officer (DPO) through the following channels:

The winrm8 privacy team will acknowledge receipt of every request within 48 hours and provide a full response within 30 calendar days.

Frequently Asked Questions About winrm8 Privacy

Answers to the most frequently asked questions from our players

No, winrm8 does not sell or rent your personal data to any third party for marketing purposes. Your data is only shared with service providers necessary for platform operations — such as payment providers and identity verification services — and all such parties are bound by strict confidentiality agreements. Data sharing with government authorities only occurs when ordered by a court or required under Malaysian law.

You can submit a data deletion request by emailing [email protected] or via our customer support Live Chat. Please include your username and registered email address with your request. We will process it within 30 days. Note that certain data such as financial transaction records may need to be retained for a specified period to comply with Malaysian legal requirements.

When you close your account, your active profile data will be deactivated immediately. However, certain records such as financial transaction history will be retained for seven years and KYC documents for five years after account closure, in line with Malaysian financial protection and anti-money laundering (AML) legal requirements. Once the mandatory retention period ends, your data will be permanently deleted.

Yes, the security of your financial information is a priority for winrm8. We do not directly store credit or debit card details on our servers. All transactions are processed through payment providers that comply with PCI-DSS (Payment Card Industry Data Security Standard). In addition, all communications between your device and the winrm8 platform are protected by SSL 256-bit encryption.

Yes, you have the right to request a copy of all personal data winrm8 holds about you under the Right of Access provided by PDPA 2010. Submit your request to [email protected] with your username and proof of identity. We will provide your data in a readable format within 30 days. The data will be sent to your registered email address with additional security measures to ensure it reaches only you.

winrm8 maintains a comprehensive Incident Response Plan. In the event of a data breach affecting your personal information, we will notify you within 72 hours of confirming the incident. The notice will describe the nature of the breach, the data affected, the steps taken, and any actions you should take to protect yourself. We will also report the incident to the relevant authorities in accordance with legal requirements.
Play with Full Confidence

Your Data Is Safe. Your Experience, Guaranteed.

Join hundreds of thousands of Malaysian players who trust winrm8 — an online betting platform that puts your safety, fairness, and privacy first at every step.

SSL 256-bit Protected Compliant with PDPA 2010 Data Not Sold 24/7 Support
Bahasa Melayu