Personal Data Protection wondawin

Definitions and Scope of the Privacy Policy

This Privacy Policy ("Policy") is published by wondawin ("we", "wondawin" or "platform") and applies to all users who access or use the wondawin website and related services, including online slots, live casino, sports betting and all online gaming activities offered.

In the context of this Policy, "personal information" refers to any data that can identify you directly or indirectly as an individual, including but not limited to your name, identity card number (MyKad), email address, mobile phone number, financial information and data related to your activity on the platform.

This Policy covers all data processing we carry out whether automatically or manually, in a digital environment, and applies to all users residing in Malaysia as well as those outside the country who access the wondawin platform.

Categories of Information We Collect

wondawin collects your personal information through various interaction points on our platform. The following are the main categories of information we collect:

• Account Registration Information: Full name, date of birth, identity card number (MyKad), email address, mobile phone number, and the username chosen during new account registration.
• Financial Information: Details related to deposits and withdrawals, including e-wallet account numbers (Touch 'n Go), DuitNow information, online banking account details (FPX), and cryptocurrency wallet information (USDT, BTC, ETH) where applicable.
• Activity Information: Gaming records, betting history, deposits and withdrawals, bonuses claimed, and any interactions you have with wondawin platform features.
• Technical Information: IP address, web browser type, operating system, login session data, activity timestamps, and device information used to access the platform.
• Communication Information: Records of correspondence between you and our customer support team, including live chat transcripts and emails.

We only collect information required for the purposes stated in this Policy. We do not collect sensitive information such as medical records except in cases that require verification related to responsible gambling programmes.

Purpose of Data Collection and Processing

Every piece of information we collect is used for a lawful and specific purpose. wondawin processes your personal data for the following purposes:

• Account Management: Creating and maintaining your user account, verifying identity, and enabling secure access to the platform.
• Transaction Processing: Processing minimum deposits of RM20 and minimum withdrawals of RM50, verifying payments, and sending transaction notifications to you.
• Regulatory Compliance: Meeting our international licensing requirements, conducting anti-money laundering (AML) checks, and complying with know your customer (KYC) requirements.
• Platform Security: Detecting and preventing fraud, unauthorised access, and platform misuse that could affect other users.
• Service Improvement: Analysing usage patterns to improve the user experience, develop new features, and enhance existing services.
• Customer Support: Providing efficient and effective 24/7 customer assistance and support in Malay and English.
• Responsible Gambling: Monitoring gaming patterns to identify signs of potential gambling problems and providing appropriate self-control tools.

Disclosure of Information to Third Parties

wondawin takes our responsibility for the confidentiality of your data seriously. We do not sell or provide your personal information to third parties for marketing purposes. However, there are certain situations where disclosure of information is necessary:

• Payment Processors: Payment service providers that help process your deposits and withdrawals, including e-wallet processors, FPX partner banks, and cryptocurrency exchanges. These processors are subject to strict confidentiality agreements.
• Technical Service Providers: Cloud computing, cybersecurity, and technical infrastructure service providers that help us operate the platform. They only access data required for their specific tasks.
• Regulatory Authorities: International licensing supervisory bodies or legal authorities where we have a legal obligation to do so, or when required by a valid court order.
• Gaming Software Partners: Game developers who need to receive minimum technical data to ensure games function correctly on our platform. This data is anonymised as much as possible.

All third parties with whom we share data are bound by contractual agreements requiring them to protect your information and use it only for agreed purposes.

Data Security Measures

wondawin invests in the latest security technology to ensure your personal data remains protected at all times. The security measures we apply include:

• SSL/TLS Encryption: All communication between your browser and our servers is encrypted using 256-bit SSL protocol, ensuring data cannot be intercepted during transmission.
• Strict Access Control: Only staff with legitimate job requirements may access users' personal data, and every access is logged and monitored.
• Two-Factor Authentication: Our system supports additional verification to protect your account from unauthorised access.
• Continuous Monitoring: Our cybersecurity team monitors our systems around the clock to detect and respond to threats promptly.
• Penetration Testing: We conduct regular security tests to identify and address vulnerabilities before they can be exploited.

Your Rights Regarding Personal Data

As a wondawin platform user, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal information we hold about you at any time.
• Right of Rectification: If your information is inaccurate or incomplete, you have the right to ask us to correct it.
• Right of Erasure: In certain circumstances, you may request that we delete your personal data. However, such requests may be subject to our data retention requirements as required by law.
• Right to Restriction of Processing: You may request that we limit how we process your data in certain situations, for example when you dispute the accuracy of the data.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes such as direct marketing.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another platform.

To submit any request relating to your data rights, contact our support team via 24/7 live chat or email at [email protected]. We will process your request within a reasonable time and keep you updated on its progress.

Use of Cookies and Tracking Technologies

wondawin uses cookies and similar tracking technologies to improve your experience on the platform and to allow certain features to function correctly.

Types of cookies we use:

• Essential Cookies: These cookies are required for basic website functions, such as maintaining your login session and processing transactions securely. Without these cookies, the platform cannot function.
• Preference Cookies: Cookies that remember your preferences such as language, display theme, and other settings for ease of use.
• Analytics Cookies: Anonymous cookies that help us understand how users interact with our platform for improvement purposes. This information does not identify you personally.

You can control or delete cookies through your web browser settings. However, disabling essential cookies may affect platform functionality.

Cross-Border International Data Transfers

As wondawin operates under an international licence, your personal data may be stored or processed in a country different from your country of residence. This includes servers located in international data hosting zones.

In all cases of cross-border data transfers, we ensure:

• Protection equivalent to the standard you enjoy under this policy is maintained at the transfer destination.
• Appropriate data transfer agreements and legally recognised protection mechanisms are used.
• Your data is only transferred to countries or entities that have an adequate level of data protection.

Personal Data Retention Period

wondawin retains your personal data only for as long as necessary to fulfil the original purpose of collection or to meet applicable legal and regulatory requirements.

• Active Account Data: For as long as your account is active and for the required period after account closure to fulfil legal obligations.
• Financial Transaction Records: Retained for the period required by financial compliance requirements and international licensing regulations.
• Communication Logs: Customer support records are retained for a reasonable period for reference and dispute resolution purposes.
• Security Data: Access logs and security information are retained for the period required to enable investigation of security incidents if they occur.

When the retention period expires or the data is no longer needed, we will securely delete or destroy that data in accordance with established procedures.

Amendments and Updates to the Privacy Policy

wondawin reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements.

When there are material amendments, we will:

• Update the "Effective date" shown at the top of this policy.
• Display a clear notice within the platform that the policy has been updated.
• Where necessary, contact you directly via email or in-account notification regarding important changes.

Your continued use of the wondawin platform after the effective date of an amendment constitutes your acceptance of the updated Privacy Policy. It is your responsibility to review this policy from time to time.

How to Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, the wondawin support team is ready to assist you.

You can reach us through the following channels: